MD5: bda47aa5d3d3bc33b6d744a3cdfe51de
SHA1: ce7d8005c928a7948cd2aff3043072c0da0a57be
SHA256: e9bea17ebe57ac5a7fe5711b5b9375a3a89f81dbcdda90224693aabd9299ad3c
SSDeep: 24576:L4ineKuN7IRwHpqK3NFFg3UkwfzK2vrLFy43SRsItd:LVFA7XtzKGj3SRsqd
Size: 1273088 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: BorlandDelphi30, UPolyXv05_v6
Company: Mindspark
Created at: 1992-06-20 01:22:17
Analyzed on: Windows7 SP1 32-bit

Summary:

Installer. An installation package.

Payload

No specific payload has been found.

Process activity

The Installer creates the following process(es):

chrome.exe:2964
chrome.exe:3428
chrome.exe:3484

The Installer injects its code into the following process(es):

%original file name%.exe:2624
chrome.exe:980
chrome.exe:1072

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:2624 makes changes in the file system.
The Installer creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\Color_Button.png (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\Loader.gif (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\sponsored.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\Quick_Specs.png (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\css\sdk-ui\images\progress-bg-corner.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\css\ie6_main.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\locale\CS.locale (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0013F6DC.log (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\D4584868677151.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8D93UTC3\bearshare[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\css\main.css (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\css\sdk-ui\images\button-bg.png (131 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\locale\EL.locale (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\Resume_Button.png (718 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\css\sdk-ui\button.css (417 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\Grey_Button.png (698 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0013F72A.log (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\D4584868677152.dat (1821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\ProgressBar.png (812 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\bootstrap_60145.html (156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\css\sdk-ui\images\progress-bg2.png (978 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\BG.jpg (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\Progress.png (104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\form.bmp.Mask (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\Color_Button_Hover.png (818 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\Pause_Button.png (577 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\text-bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\css\sdk-ui\browse.css (337 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\Close.png (207 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\Icon_Generic.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\locale\NL.locale (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\css\sdk-ui\progress-bar.css (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\21KRIZLC.txt (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\css\sdk-ui\images\progress-bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\css\sdk-ui\checkbox.css (190 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0013FC48.log (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\locale\ID.locale (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\csshover3.htc (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\Grey_Button_Hover.png (719 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\images\Close_Hover.png (207 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\locale\EN.locale (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\locale\JA.locale (5 bytes)

The Installer deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\inH130838065491\bootstrap_60145.html (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0013F72A.log (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0013FC48.log (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\0013F6DC.log (0 bytes)

The process chrome.exe:1072 makes changes in the file system.
The Installer creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000017 (280 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History-journal (11116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor (1374 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9QW895HEQCIVI2HFCYBI.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Login Data (156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000018 (33 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History (5212 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Visited Links (166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\72DF.tmp (170 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage (3286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\7360.tmp (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001c (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001b (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001a (62 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\735F.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001d (67 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\4E1F.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Current Session (4354 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\9cfa0dda3968329980b7e40c251f29bfef877f68\39899567-a7df-4e61-bae6-748369b36961\index-dir\temp-index (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000019 (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_o1jZsSY54pIQKmJ (172 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal (8937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2 (15640 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3 (7864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0 (576444 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal (10985 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\730F.tmp (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\FB3.tmp (170 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Login Data-journal (5378 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\8R07D1HEZ4YUNLGPJZ22.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal (18438 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG (495 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat (240 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal (33745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\7310.tmp (70 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_McKf4Oy3l8rzIkr (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000016 (91 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000015 (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000014 (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1 (158552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Cookies (1334 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Favicons (3240 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG (534 bytes)

The Installer deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Local State~RF150fa9.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Local State~RF1472de.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old~RF1452ff.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\9cfa0dda3968329980b7e40c251f29bfef877f68\39899567-a7df-4e61-bae6-748369b36961\index-dir\the-real-index~RF1482b6.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\280F.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG.old~RF144d35.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\9cfa0dda3968329980b7e40c251f29bfef877f68\03df6d6f-8e2a-4489-bd5a-64f29c423fdf (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF14956b.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2820.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old~RF144c1c.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State~RF14735b.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\4E1F.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity~RF14735b.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9D40.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences~RF14730d.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF150ad9.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences~RF14730d.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG.old~RF144f76.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\9cfa0dda3968329980b7e40c251f29bfef877f68\03df6d6f-8e2a-4489-bd5a-64f29c423fdf\index-dir\the-real-index (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\9cfa0dda3968329980b7e40c251f29bfef877f68\03df6d6f-8e2a-4489-bd5a-64f29c423fdf\index-dir (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Last Session (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9D41.tmp (0 bytes)

Registry activity

The process %original file name%.exe:2624 makes changes in the system registry.
The Installer creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "708992537"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Microsoft\Tracing\bda47aa5d3d3bc33b6d744a3cdfe51de_RASMANCS]
"FileTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\bda47aa5d3d3bc33b6d744a3cdfe51de_RASAPI32]
"MaxFileSize" = "1048576"

[HKLM\SOFTWARE\Microsoft\Tracing\bda47aa5d3d3bc33b6d744a3cdfe51de_RASMANCS]
"ConsoleTracingMask" = "4294901760"
"FileDirectory" = "%windir%\tracing"

[HKLM\SOFTWARE\Microsoft\Tracing\bda47aa5d3d3bc33b6d744a3cdfe51de_RASAPI32]
"FileDirectory" = "%windir%\tracing"

[HKLM\SOFTWARE\Microsoft\Tracing\bda47aa5d3d3bc33b6d744a3cdfe51de_RASMANCS]
"EnableConsoleTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\bda47aa5d3d3bc33b6d744a3cdfe51de_RASAPI32]
"ConsoleTracingMask" = "4294901760"
"EnableFileTracing" = "0"
"EnableConsoleTracing" = "0"
"FileTracingMask" = "4294901760"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3E 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Tracing\bda47aa5d3d3bc33b6d744a3cdfe51de_RASMANCS]
"MaxFileSize" = "1048576"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "%original file name%.exe"

[HKLM\SOFTWARE\Microsoft\Tracing\bda47aa5d3d3bc33b6d744a3cdfe51de_RASMANCS]
"EnableFileTracing" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Installer deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process chrome.exe:1072 makes changes in the system registry.
The Installer creates and/or sets the following values in system registry:

[HKCU\Software\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"metricsid_enableddate" = "0"

[HKLM\SOFTWARE\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\_NumSignedIn]
"S-1-5-21-732923889-1296844034-1208581001-1000" = "0"

[HKCU\Software\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"metricsid" = ""
"metricsid_installdate" = "0"

[HKLM\SOFTWARE\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\_NumAccounts]
"aggregate" = "sum()"

[HKLM\SOFTWARE\Google\Update\ClientStateMedium\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}]
"usagestats" = "0"

[HKLM\SOFTWARE\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\_NumAccounts]
"S-1-5-21-732923889-1296844034-1208581001-1000" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"lastrun" = "13149752603511432"

[HKCU\Software\Google\Chrome\BLBeacon]
"failed_count" = "0"

[HKCU\Software\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"dr" = "1"

[HKLM\SOFTWARE\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\_NumSignedIn]
"aggregate" = "sum()"

[HKCU\Software\Google\Chrome\StabilityMetrics]
"user_experience_metrics.stability.exited_cleanly" = "0"

[HKCU\Software\Google\Chrome\BLBeacon]
"State" = "2"

[HKCU\Software\Google\Update\ClientState\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}]
"dr" = "1"

[HKCU\Software\Google\Chrome]
"UsageStatsInSample" = "0"

The Installer deletes the following registry key(s):

[HKCU\Software\Google\Chrome\PreReadFieldTrial]

The Installer deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"experiment_labels"

The process chrome.exe:3484 makes changes in the system registry.
The Installer creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32]
"FXSRESM.dll,-120" = "Fax recipient"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"@sendmail.dll,-21" = "Desktop (create shortcut)"
"@zipfldr.dll,-10148" = "Compressed (zipped) folder"
"LanguageList" = "en-US, en"
"@sendmail.dll,-4" = "Mail recipient"

Dropped PE files

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name:
Product Name: Hodecolin
Product Version: 2.6.6
Legal Copyright: Program Web Installer
Legal Trademarks:
Original Filename:
Internal Name:
File Version:
File Description: Hodecolin Setup
Comments: This installation was built with Inno Setup.
Language: English (United States)

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 1
178e78e42c1abc7de7e8da47273c86ed

URLs

URL	IP
hxxp://info.downloadastrocdn.com/?v=1.03&c=cbc1606c&at=1301533066&cntr=0	52.212.198.18
hxxp://rp.downloadastrocdn.com/?v=2.0&subver=6.21&pcrc=205053755	52.214.234.71
hxxp://os.downloadastrocdn.com/DownloadAstro/?v=6.0&c=1646997996&t=1310564	52.210.43.9
hxxp://images.downloadastro.com/downloader/nl/bearshare.jpg	104.25.54.103
hxxp://filecroco.com/download-bearshare
hxxp://rp.downloadastrocdn.com/?v=2.0&subver=6.21&pcrc=1963072066	52.214.234.71
hxxp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare	108.163.213.235
hxxp://images.downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css	104.25.54.103
hxxp://images.downloadastro.com/css/A.lightbox.css.pagespeed.cf.pnBnW4MdC6.css	104.25.54.103
hxxp://bootstrapcdn.jdorfman.netdna-cdn.com/font-awesome/4.3.0/css/font-awesome.css
hxxp://n135adserv.com/js/show_ads_supp.js?pubId=3048
hxxp://bearshare.nl.downloadastro.com/img/ltr/logo.png.pagespeed.ce.2H4qwPXeta.png	108.163.213.235
hxxp://images.downloadastro.com/img/ltr/top-bg.png.pagespeed.ce.OCrPEx0q5d.png	104.25.54.103
hxxp://images.downloadastro.com/img/ltr/top-magazine-button.png.pagespeed.ce.F-tuwlsR2l.png	104.25.54.103
hxxp://images.downloadastro.com/icon/usenext_client_64_64.gif	104.25.54.103
hxxp://images.downloadastro.com/icon/fbdownloader_64_64.jpg	104.25.54.103
hxxp://images.downloadastro.com/icon/tvtrigger_64_64.jpeg.pagespeed.ce.Dv31YWSpKd.jpg	104.25.54.103
hxxp://images.downloadastro.com/icon/download_router_64_64.jpeg.pagespeed.ce.tBk10FpkuY.jpg	104.25.54.103
hxxp://images.downloadastro.com/icon/usenext_client_32_32.gif	104.25.54.103
hxxp://images.downloadastro.com/icon/fbdownloader_32_32.jpg	104.25.54.103
hxxp://images.downloadastro.com/icon/tvtrigger_32_32.jpeg	104.25.54.103
hxxp://images.downloadastro.com/icon/download_router_32_32.jpeg	104.25.54.103
hxxp://images.downloadastro.com/icon/english_spanish_64_64.jpeg.pagespeed.ce.ussfVaTF_b.jpg	104.25.54.103
hxxp://images.downloadastro.com/img/ltr/body-bg-top.png.pagespeed.ce.l_Vs0_SOtH.png	104.25.54.103
hxxp://images.downloadastro.com/img/ltr/top-lang-bg.png.pagespeed.ce.wd4zsdToMV.png	104.25.54.103
hxxp://images.downloadastro.com/img/top-search-button.png.pagespeed.ce.Qb5LCpTIIs.png	104.25.54.103
hxxp://images.downloadastro.com/img/ltr/top-search-bg.png.pagespeed.ce.8twQZ9q9Lz.png	104.25.54.103
hxxp://images.downloadastro.com/icon/searchmax_64_64.jpeg.pagespeed.ce.6D9Pi5Ivts.jpg	104.25.54.103
hxxp://images.downloadastro.com/img/ltr/top-downloads-button.png.pagespeed.ce.qKCew_fGtV.png	104.25.54.103
hxxp://images.downloadastro.com/img/ltr/body-bg.png.pagespeed.ce.ljEmyPrrnL.png	104.25.54.103
hxxp://images.downloadastro.com/icon/intelliwebsearch_64_64.jpeg	104.25.54.103
hxxp://images.downloadastro.com/icon/who_is_extractor_64_64.gif	104.25.54.103
hxxp://n135adserv.com/ads-sync.js?key=ecf5dd40ddf6f82e2ca6c8c631b328fd&tz=3&t=1505279006197&requestUrl=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare&pageId=1505279004996&plWidth=320&dW=true&plHeight=50&dH=true&scrWidth=1276&scrHeight=846
hxxp://images.downloadastro.com/img/loading6.gif.pagespeed.ce.MZGSxBFYBk.gif	104.25.54.103
hxxp://googleapis.l.google.com/ajax/libs/jquery/1.8.3/jquery.min.js
hxxp://plus.l.google.com/analytics.js
hxxp://plus.l.google.com/r/collect?v=1&_v=j61&a=428021593&t=pageview&_s=1&dl=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare&ul=en-us&de=UTF-8&dt=Bedankt voor het downloaden van BearShare&sd=24-bit&sr=1276x846&vp=917x700&je=0&fl=23.0 r0&_u=IEBAAAABI~&jid=364579730&gjid=1750192152&cid=92285100.1505279007&tid=UA-42882949-1&_gid=687379029.1505279007&_r=1&z=2092323710
hxxp://images.downloadastro.com/img/ltr/footer-astro-pic.png.pagespeed.ce.8-Jss07pMQ.png	104.25.54.103
hxxp://images.downloadastro.com/img/ltr/footer-astro-logo.png.pagespeed.ce.8c2hcLv_x8.png	104.25.54.103
hxxp://images.downloadastro.com/img/ltr/newsletter-figure.png.pagespeed.ce.ZF3CIDFUr0.png	104.25.54.103
hxxp://images.downloadastro.com/img/input-box-300.png.pagespeed.ce.ZdBR-xefNX.png	104.25.54.103
hxxp://images.downloadastro.com/img/button-blue-151.png.pagespeed.ce.1iVw_YL2Zf.png	104.25.54.103
hxxp://images.downloadastro.com/img/lang/nl/dl-button.png.pagespeed.ce.akElsy1B2a.png	104.25.54.103
hxxp://images.downloadastro.com/img/ship-top-off-15x21.png.pagespeed.ce.v1a1ZgLCHl.png	104.25.54.103
hxxp://images.downloadastro.com/img/ship-top-on-15x21a.png.pagespeed.ce.XsZELdxKhM.png	104.25.54.103
hxxp://images.downloadastro.com/img/ship-top-on-15x21.png.pagespeed.ce._nCY1lgAHT.png	104.25.54.103
hxxp://plus.l.google.com/collect?v=1&_v=j61&a=428021593&t=event&_s=2&dl=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare&ul=en-us&de=UTF-8&dt=Bedankt voor het downloaden van BearShare&sd=24-bit&sr=1276x846&vp=917x700&je=0&fl=23.0 r0&ec=ty_reached&ea=Chrome&el=54&_u=KEBAAAABI~&jid=&gjid=&cid=92285100.1505279007&tid=UA-42882949-1&_gid=687379029.1505279007&z=24857793
hxxp://googleapis.l.google.com/ajax/libs/jqueryui/1.9.2/jquery-ui.min.js
hxxp://1049256531.rsc.cdn77.org/files135/102/10976/126639/Opera_Branded_728X90_RU_Gray.jpg
hxxp://plus.l.google.com/collect?v=1&_v=j61&a=428021593&t=event&_s=3&dl=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare&ul=en-us&de=UTF-8&dt=Bedankt voor het downloaden van BearShare&sd=24-bit&sr=1276x846&vp=917x700&je=0&fl=23.0 r0&ec=ty_reached_nover&ea=Chrome&_u=KEBAAAABI~&jid=&gjid=&cid=92285100.1505279007&tid=UA-42882949-1&_gid=687379029.1505279007&z=318360721
hxxp://images.downloadastro.com/img/close.png.pagespeed.ce.2dLQsTCMtp.png	104.25.54.103
hxxp://images.downloadastro.com/img/loading.gif.pagespeed.ce.IpmtCz9jQT.gif	104.25.54.103
hxxp://images.downloadastro.com/img/prev.png.pagespeed.ce.hLdt7msnt5.png	104.25.54.103
hxxp://images.downloadastro.com/img/next.png.pagespeed.ce.MfFYdZdaq2.png	104.25.54.103
hxxp://images.downloadastro.com/js/concat.min.js	104.25.54.103
hxxp://n135adserv.com/impression.gif?b=126639&p=3048&c=10976&h=434bea7cb5de7d8e3b558257184a0316&l=UA&tz=3.0&sh=846&sw=1276&ad.trans.id=1mbbyad8zbm9&s=89f0fdddfe2c6ded7bbd372db6ddabd9&t=1505279006489
hxxp://images.downloadastro.com/css/images/ui-bg_flat_75_ffffff_40x100.png.pagespeed.ce.hpLm7934gq.png	104.25.54.103
hxxp://images.downloadastro.com/img/checkbox.png.pagespeed.ce.NlO3LWlZi-.png	104.25.54.103
hxxp://bearshare.nl.downloadastro.com/favicon.ico	108.163.213.235
hxxp://bearshare.nl.downloadastro.com/ngx_pagespeed_beacon?url=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare	108.163.213.235
hxxp://n135adserv.com/js/show_ads_supp.js?pubId=4756
hxxp://n135adserv.com/ads-async.js?key=50f37551d91ad5c09e6af0367038704f&tz=3&t=1505279010033&requestUrl=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare&pageId=1505279004996&plWidth=320&dW=true&plHeight=50&dH=true&tarId=50f37551d91ad5c09e6af0367038704f_sync&scrWidth=1276&scrHeight=846
hxxp://1049256531.rsc.cdn77.org/files135/102/10976/126641/t/60315/Opera_Branded_800X440_RU_Brown.jpg?cs=0c9ba6d92bc4ee3d9f88f27e15e292b2
hxxp://n135adserv.com/impression.gif?b=126641&p=4756&c=10976&h=72d09a274170d9d777de33bbcb0bc91a&l=UA&tz=3.0&sh=846&sw=1276&ad.trans.id=wpn1yanme0qf&s=31d6b4f0ee7cf72e2b62ccb0292150b3&t=1505279010223&rnd=1505279010586
hxxp://pic.downloadastro.com/icon/fbdownloader_32_32.jpg	104.25.53.103
hxxp://nl.downloadastro.com/img/loading6.gif.pagespeed.ce.MZGSxBFYBk.gif	104.25.54.103
hxxp://downloadastro.com/img/next.png.pagespeed.ce.MfFYdZdaq2.png	104.25.54.103
hxxp://downloadastro.com/img/lang/nl/dl-button.png.pagespeed.ce.akElsy1B2a.png	104.25.54.103
hxxp://pic.downloadastro.com/icon/download_router_32_32.jpeg	104.25.53.103
hxxp://downloadastro.com/img/ltr/footer-astro-pic.png.pagespeed.ce.8-Jss07pMQ.png	104.25.54.103
hxxp://www.google-analytics.com/collect?v=1&_v=j61&a=428021593&t=event&_s=2&dl=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare&ul=en-us&de=UTF-8&dt=Bedankt voor het downloaden van BearShare&sd=24-bit&sr=1276x846&vp=917x700&je=0&fl=23.0 r0&ec=ty_reached&ea=Chrome&el=54&_u=KEBAAAABI~&jid=&gjid=&cid=92285100.1505279007&tid=UA-42882949-1&_gid=687379029.1505279007&z=24857793	172.217.16.110
hxxp://ajax.googleapis.com/ajax/libs/jqueryui/1.9.2/jquery-ui.min.js	216.58.214.202
hxxp://irncdn.com/files135/102/10976/126641/t/60315/Opera_Branded_800X440_RU_Brown.jpg?cs=0c9ba6d92bc4ee3d9f88f27e15e292b2
hxxp://www.1-1ads.com/js/show_ads_supp.js?pubId=3048	204.155.152.21
hxxp://downloadastro.com/img/input-box-300.png.pagespeed.ce.ZdBR-xefNX.png	104.25.54.103
hxxp://downloadastro.com/img/ltr/top-downloads-button.png.pagespeed.ce.qKCew_fGtV.png	104.25.54.103
hxxp://downloadastro.com/img/ltr/top-magazine-button.png.pagespeed.ce.F-tuwlsR2l.png	104.25.54.103
hxxp://downloadastro.com/img/close.png.pagespeed.ce.2dLQsTCMtp.png	104.25.54.103
hxxp://downloadastro.com/img/button-blue-151.png.pagespeed.ce.1iVw_YL2Zf.png	104.25.54.103
hxxp://downloadastro.com/img/ltr/top-lang-bg.png.pagespeed.ce.wd4zsdToMV.png	104.25.54.103
hxxp://downloadastro.com/img/ship-top-off-15x21.png.pagespeed.ce.v1a1ZgLCHl.png	104.25.54.103
hxxp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css	104.25.54.103
hxxp://www.google-analytics.com/analytics.js	172.217.16.110
hxxp://rp.downloadastrocdn.com/?v=2.0&subver=6.21&pcrc=500285460	52.214.234.71
hxxp://www.1-1ads.com/ads-async.js?key=50f37551d91ad5c09e6af0367038704f&tz=3&t=1505279010033&requestUrl=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare&pageId=1505279004996&plWidth=320&dW=true&plHeight=50&dH=true&tarId=50f37551d91ad5c09e6af0367038704f_sync&scrWidth=1276&scrHeight=846	204.155.152.21
hxxp://netdna.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.css	94.31.29.55
hxxp://downloadastro.com/img/ship-top-on-15x21a.png.pagespeed.ce.XsZELdxKhM.png	104.25.54.103
hxxp://irncdn.com/files135/102/10976/126639/Opera_Branded_728X90_RU_Gray.jpg
hxxp://downloadastro.com/img/checkbox.png.pagespeed.ce.NlO3LWlZi-.png	104.25.54.103
hxxp://downloadastro.com/css/images/ui-bg_flat_75_ffffff_40x100.png.pagespeed.ce.hpLm7934gq.png	104.25.54.103
hxxp://www.1-1ads.com/impression.gif?b=126639&p=3048&c=10976&h=434bea7cb5de7d8e3b558257184a0316&l=UA&tz=3.0&sh=846&sw=1276&ad.trans.id=1mbbyad8zbm9&s=89f0fdddfe2c6ded7bbd372db6ddabd9&t=1505279006489	204.155.152.21
hxxp://pic.downloadastro.com/icon/tvtrigger_32_32.jpeg	104.25.53.103
hxxp://downloadastro.com/img/ltr/top-search-bg.png.pagespeed.ce.8twQZ9q9Lz.png	104.25.54.103
hxxp://www.filecroco.com/download-bearshare	192.190.86.23
hxxp://downloadastro.com/img/ltr/body-bg.png.pagespeed.ce.ljEmyPrrnL.png	104.25.54.103
hxxp://pic.downloadastro.com/icon/usenext_client_32_32.gif	104.25.53.103
hxxp://pic.downloadastro.com/icon/usenext_client_64_64.gif	104.25.53.103
hxxp://downloadastro.com/img/ltr/body-bg-top.png.pagespeed.ce.l_Vs0_SOtH.png	104.25.54.103
hxxp://pic.downloadastro.com/icon/fbdownloader_64_64.jpg	104.25.53.103
hxxp://downloadastro.com/img/ship-top-on-15x21.png.pagespeed.ce._nCY1lgAHT.png	104.25.54.103
hxxp://downloadastro.com/img/ltr/top-bg.png.pagespeed.ce.OCrPEx0q5d.png	104.25.54.103
hxxp://www.1-1ads.com/ads-sync.js?key=ecf5dd40ddf6f82e2ca6c8c631b328fd&tz=3&t=1505279006197&requestUrl=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare&pageId=1505279004996&plWidth=320&dW=true&plHeight=50&dH=true&scrWidth=1276&scrHeight=846	204.155.152.21
hxxp://www.google-analytics.com/r/collect?v=1&_v=j61&a=428021593&t=pageview&_s=1&dl=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare&ul=en-us&de=UTF-8&dt=Bedankt voor het downloaden van BearShare&sd=24-bit&sr=1276x846&vp=917x700&je=0&fl=23.0 r0&_u=IEBAAAABI~&jid=364579730&gjid=1750192152&cid=92285100.1505279007&tid=UA-42882949-1&_gid=687379029.1505279007&_r=1&z=2092323710	172.217.16.110
hxxp://downloadastro.com/img/loading.gif.pagespeed.ce.IpmtCz9jQT.gif	104.25.54.103
hxxp://pic.downloadastro.com/icon/intelliwebsearch_64_64.jpeg	104.25.53.103
hxxp://downloadastro.com/js/concat.min.js	104.25.54.103
hxxp://www.google-analytics.com/collect?v=1&_v=j61&a=428021593&t=event&_s=3&dl=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare&ul=en-us&de=UTF-8&dt=Bedankt voor het downloaden van BearShare&sd=24-bit&sr=1276x846&vp=917x700&je=0&fl=23.0 r0&ec=ty_reached_nover&ea=Chrome&_u=KEBAAAABI~&jid=&gjid=&cid=92285100.1505279007&tid=UA-42882949-1&_gid=687379029.1505279007&z=318360721	172.217.16.110
hxxp://ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js	216.58.214.202
hxxp://pic.downloadastro.com/icon/who_is_extractor_64_64.gif	104.25.53.103
hxxp://downloadastro.com/css/A.lightbox.css.pagespeed.cf.pnBnW4MdC6.css	104.25.54.103
hxxp://www.1-1ads.com/js/show_ads_supp.js?pubId=4756	204.155.152.21
hxxp://www.1-1ads.com/impression.gif?b=126641&p=4756&c=10976&h=72d09a274170d9d777de33bbcb0bc91a&l=UA&tz=3.0&sh=846&sw=1276&ad.trans.id=wpn1yanme0qf&s=31d6b4f0ee7cf72e2b62ccb0292150b3&t=1505279010223&rnd=1505279010586	204.155.152.21
hxxp://downloadastro.com/img/top-search-button.png.pagespeed.ce.Qb5LCpTIIs.png	104.25.54.103
hxxp://downloadastro.com/img/prev.png.pagespeed.ce.hLdt7msnt5.png	104.25.54.103
hxxp://downloadastro.com/img/ltr/footer-astro-logo.png.pagespeed.ce.8c2hcLv_x8.png	104.25.54.103
hxxp://downloadastro.com/img/ltr/newsletter-figure.png.pagespeed.ce.ZF3CIDFUr0.png	104.25.54.103
english_spanish.nl.downloadastro.com	108.163.213.235
th.downloadastro.com	104.25.54.103
en.downloadastro.com	104.25.54.103
tl.downloadastro.com	108.163.213.235
ro.downloadastro.com	108.163.213.235
hu.downloadastro.com	108.163.213.235
translate.googleapis.com	172.217.18.74
sv.downloadastro.com	104.25.54.103
ko.downloadastro.com	104.25.53.103
id.downloadastro.com	104.25.53.103
lt.downloadastro.com	108.163.213.235
www.google.com.ua	172.217.16.99
el.downloadastro.com	104.25.54.103
clients4.google.com	172.217.16.110
download_router.nl.downloadastro.com	108.163.213.235
ar.downloadastro.com	104.25.53.103
it.downloadastro.com	104.25.54.103
tvtrigger.nl.downloadastro.com	108.163.213.235
da.downloadastro.com	108.163.213.235
hr.downloadastro.com	108.163.213.235
bg.downloadastro.com	108.163.213.235
fbdownloader.nl.downloadastro.com	108.163.213.235
usenext_client.nl.downloadastro.com	108.163.213.235
ssl.gstatic.com	172.217.16.99
pt.downloadastro.com	104.25.54.103
ta.downloadastro.com	108.163.213.235
www.gstatic.com	172.217.16.99
sr.downloadastro.com	108.163.213.235
apis.google.com	172.217.16.110
es.downloadastro.com	104.25.54.103
fi.downloadastro.com	108.163.213.235
www.opera.com	46.137.125.148
tr.downloadastro.com	104.25.53.103
ja.downloadastro.com	104.25.53.103
zh.downloadastro.com	104.25.54.103
he.downloadastro.com	104.25.53.103
cs.downloadastro.com	104.25.54.103
vi.downloadastro.com	104.25.53.103
pl.downloadastro.com	104.25.53.103
sk.downloadastro.com	108.163.213.235
ru.downloadastro.com	104.25.53.103
fr.downloadastro.com	104.25.53.103
de.downloadastro.com	104.25.54.103

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET MALWARE Win32/InstallCore Initial Install Activity 1

Traffic

GET /analytics.js HTTP/1.1

Host: VVV.google-analytics.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: */*

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

HTTP/1.1 200 OK

Strict-Transport-Security: max-age=10886400; includeSubDomains; preload

Timing-Allow-Origin: *

Date: Wed, 13 Sep 2017 04:24:19 GMT

Expires: Wed, 13 Sep 2017 06:24:19 GMT

Last-Modified: Thu, 07 Sep 2017 21:20:25 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 13819

Cache-Control: public, max-age=7200

Age: 2347
...........}iW....w~E..p.F8.P...fQJ)-C.....%K".d..0.......d.Iz..o..VK.
.....l.z...v...Ow<y.".....Q.=..#>........I...=.T8T..E...-.f....K
.9]].....Q....T..u...z.Q.....i1n....~.G......qq h......?..*6...nu.5#o.
....w...>|<<:>.........o./y,..n..7..n.?...G....._.........
.\..........M&.....8.=..M...=/(x...V.u.d.S.0.U...>...I..HM...t&..z.
.....P......UN.}.Dx.L....:..|...\..6.G..}8.....&`..LQ:..&)..F..&..._.z
.i....|>t.v.s.6ipA...d2.qE.9...x....,..".%.k(.n......%F.v..?6...=;[
l.?.%.^3....u6....\....~[> -G|uu....P.{.Q2..~R.5..=..N.}O.....,.i..
.4..1......x..A..b..._...x.Q....b.A....../>-'a.....F...*.i.........
mU...nK.'.Z%.JjY.........$...->..Q.....".....$........q.W.../7_mlm.
dt....'}.4o.H..-..].4....F.0.%.y...GoU.y...^Gu..|...I...}[.ZQ.R-.n.F..
&".v..S6....}........8=..w.........{.7.;S80-...s.._..lmv...L0.X0y|.!.r
..j.....L.<.....2.@.h.E..WWs......E...#..U...x.L..:.mt..V)..h..e.B.
./...r_.|.y..WW...."r.........-...z.....E^=....H...P$... ......Cq..__=
l...|.. ..b~!M..-...j.....x.........=.7.$im..!..^..e$..6<.H..q..6..
a....7.9....z..x8.....R....2z..()_0..../..k..i.F.a.p.Q....C..3....X-F.
{~V......7....OD...@w{....E...._..N.3....^.#,P.1.z..P. Z..<M.`rU.j\
..........2^D._.k.?.......G.1..z.A..!wT4Z.......p.....Bp...=.b...q<
$..o.&.2..^kK.r..Q|.Eb2....<....V.b3..yEX. ;...5?.0.......ry.....3.
.].....U`......" .a[}&.2....S.....A....D|...U.K.......yw.....~........
/.....kv..Q9.........2..%..<}..T.....x ...".l(#B.]..v?..,.l.....U..
....y....&.N..?a..O.{....N...D."..F.....,...v.:C.L.D...P.........9
<<< skipped >>>

GET /r/collect?v=1&_v=j61&a=428021593&t=pageview&_s=1&dl=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare&ul=en-us&de=UTF-8&dt=Bedankt voor het downloaden van BearShare&sd=24-bit&sr=1276x846&vp=917x700&je=0&fl=23.0 r0&_u=IEBAAAABI~&jid=364579730&gjid=1750192152&cid=92285100.1505279007&tid=UA-42882949-1&_gid=687379029.1505279007&_r=1&z=2092323710 HTTP/1.1

Host: VVV.google-analytics.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Wed, 13 Sep 2017 05:03:26 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35
GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Wed, 13 Sep 2017 05:03:26 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-C
ontent-Type-Options: nosniff..Content-Type: image/gif..Server: Golfe2.
.Content-Length: 35..GIF89a.............,...........D..;....


GET /collect?v=1&_v=j61&a=428021593&t=event&_s=2&dl=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare&ul=en-us&de=UTF-8&dt=Bedankt voor het downloaden van BearShare&sd=24-bit&sr=1276x846&vp=917x700&je=0&fl=23.0 r0&ec=ty_reached&ea=Chrome&el=54&_u=KEBAAAABI~&jid=&gjid=&cid=92285100.1505279007&tid=UA-42882949-1&_gid=687379029.1505279007&z=24857793 HTTP/1.1

Host: VVV.google-analytics.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Mon, 11 Sep 2017 10:32:24 GMT

Pragma: no-cache

Expires: Mon, 01 Jan 1990 00:00:00 GMT

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

Cache-Control: no-cache, no-store, must-revalidate

Age: 153062
GIF89a.............,...........D..;....


GET /collect?v=1&_v=j61&a=428021593&t=event&_s=3&dl=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare&ul=en-us&de=UTF-8&dt=Bedankt voor het downloaden van BearShare&sd=24-bit&sr=1276x846&vp=917x700&je=0&fl=23.0 r0&ec=ty_reached_nover&ea=Chrome&_u=KEBAAAABI~&jid=&gjid=&cid=92285100.1505279007&tid=UA-42882949-1&_gid=687379029.1505279007&z=318360721 HTTP/1.1

Host: VVV.google-analytics.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Mon, 11 Sep 2017 10:32:24 GMT

Pragma: no-cache

Expires: Mon, 01 Jan 1990 00:00:00 GMT

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

Cache-Control: no-cache, no-store, must-revalidate

Age: 153062
GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Mon, 11 Sep 2017 10:32:24 GMT..Pragma: no-cache..E
xpires: Mon, 01 Jan 1990 00:00:00 GMT..Last-Modified: Sun, 17 May 1998
 03:00:00 GMT..X-Content-Type-Options: nosniff..Content-Type: image/gi
f..Server: Golfe2..Content-Length: 35..Cache-Control: no-cache, no-sto
re, must-revalidate..Age: 153062..GIF89a.............,...........D..;.
.

GET /css/A.lightbox.css.pagespeed.cf.pnBnW4MdC6.css HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: text/css,*/*;q=0.1

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:25 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=d92e624a23ca6c4b1c437ace81bcea60e1505279005; expires=Thu, 13-Sep-18 05:03:25 GMT; path=/; domain=.downloadastro.com; HttpOnly

Expires: Thu, 13 Sep 2018 05:03:25 GMT

Cache-Control: public, max-age=31536000

ETag: W/"0"

Last-Modified: Sun, 06 Aug 2017 21:00:58 GMT

X-Original-Content-Length: 2809

Vary: Accept-Encoding

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 39d88f5884528b34-KBP

Content-Encoding: gzip
366.............V.n.6......wE....D.Z.HQ.........%.d6...V.c... %..,7N.7
. ...v..P.0^..]..@.k..."2..J..V....b.cu%..*WXCdt..^Bm.D.C.._.....d\.S.
*.....JY..>........]..$ca}Jh.E.mUk........<...)......I..../L....
...2.|].U.eg..$Q3........8UP...m(...K.$I3.?...-...Z.C..i!..e..XJ.~..s.
Kx.\...*z......~Uf.?~5<....].)...EwghN...=KA 6.....<v|.6.r%K.r..
6URC......@M.s..h ....He.t.w{>...).N..0..!{..fh...r!..].M.V.....vqb
.d.....*w..{.....{....`.zYP...&.ZQ...[....N..Ml6.*.E.m)5...(z9].r...T.
......qa......0.3.i..[.!....(..nj..n..:..~y=..kv.c...W..M.u.j.A-...(..
..|.V...#.....<9....}...;9fC....f{v.".;l.Is.T.z?.8lh../.. ]...-3(..
... ]..P....!.V...{.......,.fc5])v.,.._... t...>..#....`.^.,..k....
...8..0C"...~..V.FC....3..YZ-.....y..SI.h$...C..e.\4.......@\......Y.A
....}..Gs..X97n@w.......]... C%.0c..T......y..vh.s..^....$IF../.....{.
..)..-Sp._...F.0.}.[:} z...m...vB.n.G...t...o.._.d.<......0..>....


GET /img/ltr/top-magazine-button.png.pagespeed.ce.F-tuwlsR2l.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 1226

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: pngoptimizer, origSize=1279

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Last-Modified: Thu, 12 Nov 2015 07:57:06 GMT

Link: <hXXp://downloadastro.com/img/ltr/top-magazine-button.png>; rel="canonical"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f5d54d08b34-KBP
.PNG........IHDR...o...B.......@.....IDATx...khSg...'..$..)6]el.5k.._.
0$...^....:.m..E.....`-D .....B .2;...nN.Y.}Y.C.i.jqZe.i;{ec....I.M...
.......|...9_....p...Z!A.H....$M.a$.6.Q.!4A.g....T\(.h..n...>......
5..q.".f....Q0...t.I.Do.....1......5.8.F.Y..N.\6.x.&=..t'.#nc;..T.$...
.js=.o.'.$..\U...... ANEB..h.A8H....#9.:..T.]..x.@.bh...<. .;.r.D..
..$.G..Q...Rr`I...g... #.#.$..........E3.(.SS!.b3|p.Z4m.....H..(...F. 
....%..'..~l.......\o..P."....2..1.".&...z2,..o.......t....^>6..^0.
.@...`.6..9.E!..8]9HTF#......f...K'..q........".qC.z.8.@*.....F`...S.8
.....,..vX .{\.......#....d..kfH...4..4..E..:::::::...,.Z..6.$.y..k.X.
D....u......{24.....`......."&..5.....u.w...L..../..v...Q.W3.&Y.cyMs].
[..........v [4..7>r..m..FEM........J5w*..d.(....Th..V1[.x.........
.e.[A......v.b.t9<..Z.*g.O..=....d %.]......;X.L..2X>]....;.q(..
.J...C..`56....U.....h..G9.M..5.>..i...~K..b.........X.r..}n`..."..
.....w,..G...t..l....p.7..j....?..g...o..K.W#.....R/m}.W.cQ....w.F.:J2
..|..Tnc..[.v..<.}#m.8....C..u..-..............<.....z/./[..{,l.
){4.W.%.7.........?...Uy_.el%.u..vH....n.F..;O{.*d..8^../..a....;.....
,......8....=v.....'...xO.z...........Sv*,.f 1..U0.o..X.-.%..6t?r.....
....<....z*.&.!W..=.?........$...,..K.....?...,/.C.....IEND.B`.nt>....
<<< skipped >>>

GET /img/ltr/top-downloads-button.png.pagespeed.ce.qKCew_fGtV.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 620

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: pngoptimizer, origSize=673

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Last-Modified: Wed, 11 Nov 2015 12:32:58 GMT

Link: <hXXp://downloadastro.com/img/ltr/top-downloads-button.png>; rel="canonical"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f5dd4e08b34-KBP
.PNG........IHDR...o...B.....n)x.....PLTE.............................
......................................................................
......................................................................
...................................................&.h...GtRNS........
...--00<<??EETTccffiixx{{~~....................................0
Zs=....IDATx...WRBa....A.... (..d.L.H2......X.]V1.C..j.,...<.^#.!..
.q....C3..2.;.c..q.}...NK..T.s(..).qA#...w........<.......n...p.bnP
....2s .p.r.J.!.%..,.....7/".....I....C3W..$.....8.?EA...}9...P .S0..f
.........v.~.$.K.....u...QZ.I..r.*".......Q.Y..,....1.3?...M....IEND.B
`.HTTP/1.1 200 OK..Date: Wed, 13 Sep 2017 05:03:26 GMT..Content-Type: 
image/png..Content-Length: 620..Connection: keep-alive..Cache-Control:
 public, max-age=31536000..Cf-Bgj: imgq:85..Cf-Polished: pngoptimizer,
 origSize=673..Etag: W/"0"..Expires: Thu, 13 Sep 2018 05:03:26 GMT..La
st-Modified: Wed, 11 Nov 2015 12:32:58 GMT..Link: <hXXp://downloada
stro.com/img/ltr/top-downloads-button.png>; rel="canonical"..X-Page
-Speed: 1.11.33.0-0..CF-Cache-Status: HIT..Vary: Accept-Encoding..Serv
er: cloudflare-nginx..CF-RAY: 39d88f5dd4e08b34-KBP...PNG........IHDR..
.o...B.....n)x.....PLTE...............................................
......................................................................
......................................................................
.................................&.h...GtRNS...........--00<<??E
ETTccffiixx{{~~....................................0Zs=....IDATx..
<<< skipped >>>

GET /img/ltr/newsletter-figure.png.pagespeed.ce.ZF3CIDFUr0.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 11143

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: pngoptimizer, origSize=11994

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Last-Modified: Thu, 12 Nov 2015 07:57:06 GMT

Link: <hXXp://downloadastro.com/img/ltr/newsletter-figure.png>; rel="canonical"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f6075348b34-KBP
.PNG........IHDR...q...P........... NIDATx...y.d....g.k.Z^U.z{.no....e
.r.&(...D.. ..../.H..!#..#..@3.4 .d......I&..v....m...v..~...zK.w= .&g
t;[.B.2.G...n.>}t..;..=.........O^.....O.Je..U.m..........,O..8X#..
.x0..._......0u..{>x.G...].!p.t.3}.{....q.wp.w..'e....t6y....q,...A
.9...........G?....E?a....K........$..).:..p.....T(b...1...S#.-.}.?..O
}.i-..O.......W?...?...,#.w..3.k4./_.z..k...88p]l......|..B.Sw...=.W&g
t;[[{..gJ>......7/.....[O?.m..u....8>h.\'K..hl....j...6.wX......
&O...3......[.H...Q...._...?.N..[.......4.! ....,...7.Z....'f..|....p.
..sg..7.-..t...E..SC .....G......j!]Y.K.b..8..,Q..ij._.:...uKJ..b..b..
.....4.1..(.T(..m<w.k..(...fz...~...|.D...K..6..E.3...t..N.w.....Q.
..8.M....].....&.)...&Y......x~.[...2M.{..._={...3...6c.......(.......
,I..b.B.`...^;.8..y@.....R........iR.......\..{...k/}.7.6...].........
.P..D.1.ZPfy.l)Oe.|.]]ls.....V-...k........>{..t../r.u..?.......S..
.S..Os.............h{.3..^j...Wo.^.......<.b.....\.."w....D...?....
w...z.!..}0.JL.../.U.G....Eq...k7.Rb...x...O.:A V.x..(.....".J...Z!..3
O.d.`2........Y.'...5O...".i......o..'I...F....G...}...U|3..{... ._{n.
..wr....@..dB@...`&.A...Jo.Q.Yc-..T..'...c..5..d<v.h....7..=x......
4.Nd........V".~..A..1H.O......v...Q^.1...?N..9'.a=.jZ....N..r..rts;;.
.;...........\.d...w.][;...i....b...... ..tSJ......z....1.0M.$tIjh.,z.
....._.9....%.M.....5...~....c..................E...{ks/.......(.y....
#.a..14\..;-.V..MnkW7.'..|..;.............vSi;..I.dZM...^...G...lG....
bx..z4..N.>..=...._;w.e.p.Nf:.Y/..|.q3...MG#....h5j..3..zc.....
<<< skipped >>>

GET /img/loading.gif.pagespeed.ce.IpmtCz9jQT.gif HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.lightbox.css.pagespeed.cf.pnBnW4MdC6.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/gif

Content-Length: 8476

Connection: keep-alive

Link: <hXXp://downloadastro.com/img/loading.gif>; rel="canonical"

Last-Modified: Mon, 28 Jul 2014 11:24:54 GMT

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Cache-Control: public, max-age=31536000

ETag: W/"0"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f61754b8b34-KBP
GIF89a . .............................................................
......................................................................
.................................................................!..NE
TSCAPE2.0.....!.......,.... . .@..@.pH....PdCl:].d.....Xla[.....@$.,..
T....G!.c>..#..p..0.yzk................#). ..........k..rwv&... ./$
/..._.B..}}..O\..(.O....'.O....e..N.....'..0.,....n..` #.(.#..........
&&.....tu..QH..P......-R1.. ..\,..."......@ ".. 9 .8.W..$...`L!I....H.
...f#S~h..Z"==...XP.....Z`......*.@B7...K.4Y`.NCP'..&,. @..Y.yR%!..J..
Q....!.....3.,...... ......pH..D.M$......Pqx=..l........r-gc..P.y.He.R
.Q.8/7i......!!yn.........^ ......#j^......^.....(.^*...P.Q......R(...
.%.Q.....D......C...i.B.....3...................3..."..#........".'...
.,@....{.T .P'....=8.......=...@..5.4H......#...0.....2....$..*%.tya.L
2H(8&..Bg..1.Ji.b...-`.`.....".HP.....=3.....Q.<....!.......,......
 ....@.pH..D....... .T...H..c........PmB..v..FL..Ta8......6.RD%...!w$k
.|]1.D....!.*.....!.E.I...#c../.D....M................S.....r.S....%.S
.....D.....'.R......C....b.B..""..."."..............R7" .....P....x..z
8!..B...$../...#Jp.."#..%.|.0..F..@H.0.....2h. ...3.)b..@....:.IP.T&..
G......S.F..tVA.P.6q...l...Z.....!.......,...... ....@.pH.%.......@.hT
1`......}..Rb.....Z.......O.a.oBY.D.ns.D%.....vXK|.mm..C..II..........
}.32.B ......%a....&.C.....'.D.&2.......D'.D...........*..#..._.......
.."".N.......R..............=..'.A@....B....c..0<.P.B. .8D1b ...P$.
...B."I*......%.|.!a.B.)R.l....:..%..Ya....Vd......D."U.T^.....M..
<<< skipped >>>

GET /icon/usenext_client_64_64.gif HTTP/1.1

Host: pic.downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/gif

Content-Length: 1031

Connection: keep-alive

Last-Modified: Sun, 06 Apr 2014 23:52:05 GMT

ETag: "59bc40440f0cf557b003428167d44853"

Cache-Control: public, max-age=432000

X-Cache: Hit from cloudfront

Via: 1.1 a22ee9ab15c998bce94f1f4d2a7792ee.cloudfront.net (CloudFront)

X-Amz-Cf-Id: VDtv7zDEhChMmVBqjJaQ5nzOv-d4mv0pNQ2iJB0bc_cRnLlO8SpQ2w==

CF-Cache-Status: REVALIDATED

Vary: Accept-Encoding

Expires: Mon, 18 Sep 2017 05:03:26 GMT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 39d88f5d747a8b7c-KBP
GIF89a@.@.............................................................
.....................................`...3............................
.................................................................!....
...,....@.@.....@@ .....r.l:....i$..D#R..z...5`0...D".h....|Nw.....|N.
....mw.y.................m..............................J...........L.
....L.................L.................L................L............
^ .......*.h0bD&.2j...#...=...q... '.<.d...0c.I.P.M.-o..I.....L2..J
....=..]z4(..B........X.j..A.A.`.Z.K....e.2......p7..K7...x...........
...,...."^..0..L:H.L....g/k..y.g..?{f......S.^......A..M.6..._.....o..
....$....y._.|.p...4O.......G_"..w...../>.m.L.._M..w.../.A..z......
..~&....~....l.-A........F(...E.D..~ ....Rh..$.(b.".hb...p".'.x..!....
%.hc.6..c.)....8.(d.=..D.H..a.L6i@.M....NV.%.L....\v...`..e.b.i..`2a..
l....p.)..n.I..x.)'.'......*.....(..&....2....F*...Vj...:....vj.......
..j..............:j...j.......,...... ....kl..N....6....&...g..../....
.v....n....P{..'.......:...`!@"0......Qo"c.K............;..
<<< skipped >>>

GET /icon/usenext_client_32_32.gif HTTP/1.1

Host: pic.downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/gif

Content-Length: 572

Connection: keep-alive

Last-Modified: Sun, 06 Apr 2014 23:52:04 GMT

ETag: "2e91a72a91447288bc3641a90bc68eaa"

Cache-Control: public, max-age=432000

X-Cache: Hit from cloudfront

Via: 1.1 7907ada877f3f98933a06c5aef6c574b.cloudfront.net (CloudFront)

X-Amz-Cf-Id: otRELs_sT7WN2m2vTaDWjKbPDGEpLYzC6he3ad2oNWAlF5ZwV2gmNA==

CF-Cache-Status: HIT

Vary: Accept-Encoding

Expires: Mon, 18 Sep 2017 05:03:26 GMT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 39d88f5d70558ada-KBP
GIF89a . .............................................................
.....................................`...3............................
.................................................................!....
...,.... . ......`@(.....H....."..Z...5.8,...x|u0...z.n...I.B....<.
X......}F........F........F...........F.........F.........F.........F.
........F........F........F........F......... ....F!.........F"..S..`.
~.....p`:..!".......?\..q"..FH..(.dI.%..X.q.K..].1@3#..7=.4...Z..@...i
....H.*]j....P.J.J....X.j... ...R..K....hWL`.....p.........^.......|_.
."...%...`.$..;HTTP/1.1 200 OK..Date: Wed, 13 Sep 2017 05:03:26 GMT..C
ontent-Type: image/gif..Content-Length: 572..Connection: keep-alive..L
ast-Modified: Sun, 06 Apr 2014 23:52:04 GMT..ETag: "2e91a72a91447288bc
3641a90bc68eaa"..Cache-Control: public, max-age=432000..X-Cache: Hit f
rom cloudfront..Via: 1.1 7907ada877f3f98933a06c5aef6c574b.cloudfront.n
et (CloudFront)..X-Amz-Cf-Id: otRELs_sT7WN2m2vTaDWjKbPDGEpLYzC6he3ad2o
NWAlF5ZwV2gmNA==..CF-Cache-Status: HIT..Vary: Accept-Encoding..Expires
: Mon, 18 Sep 2017 05:03:26 GMT..Accept-Ranges: bytes..Server: cloudfl
are-nginx..CF-RAY: 39d88f5d70558ada-KBP..GIF89a . ....................
......................................................................
........`...3.........................................................
....................................!.......,.... . ......`@(.....H...
.."..Z...5.8,...x|u0...z.n...I.B....<.X......}F........F........F..
.........F.........F.........F.........F.........F........F.......
<<< skipped >>>

POST /ngx_pagespeed_beacon?url=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare HTTP/1.1

Host: bearshare.nl.downloadastro.com

Connection: keep-alive

Content-Length: 2256

Origin: hXXp://bearshare.nl.downloadastro.com

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Content-Type: application/x-www-form-urlencoded

Accept: */*

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

oh=PoeqOq_X2p&n=7QJIky8GYgg&cs=#body,#body-bg-top,#breadcrumbs,#breadcrumbs a,#breadcrumbs a.active,#footer,#footer-law,#footer-menu,#footer-menu .footer-menu-col,#footer-menu .footer-menu-col a,#footer-menu .footer-menu-col h2,#language-area,#language-box,#language-box a,#language-select,#main,#main h2,#main h2 b,#main h3.blue,#main input[type="text"],#main input[type="text"].w300,#main.dl-page #content-a,#main.dl-page #content-b,#main.dl-page h2,#main.dl-page table.comp,#main.dl-page table.comp .dl-button,#main.dl-page table.comp .rating,#main.dl-page table.comp center,#main.dl-page table.comp td,#mai
HTTP/1.1 204 No Content

Server: nginx/1.13.3

Date: Wed, 13 Sep 2017 05:03:58 GMT

Connection: keep-alive

Cache-Control: max-age=0, no-cache
HTTP/1.1 204 No Content..Server: nginx/1.13.3..Date: Wed, 13 Sep 2017 
05:03:58 GMT..Connection: keep-alive..Cache-Control: max-age=0, no-cac
he..

GET /img/ltr/body-bg-top.png.pagespeed.ce.l_Vs0_SOtH.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 280446

Connection: keep-alive

Link: <hXXp://downloadastro.com/img/ltr/body-bg-top.png>; rel="canonical"

Last-Modified: Wed, 11 Nov 2015 12:32:58 GMT

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Cache-Control: public, max-age=31536000

ETag: W/"0"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f5d770c8b6a-KBP
.PNG........IHDR...r..........f.}....gAMA......a.....tEXtSoftware.Pain
t.NET v3.5.100.r...G.IDATx...Yo......XZ../..Er8<EQ^....l........A..
1...dUS~. .HTG.QU.C..I.....................x...e..{p.4*..O#....r.Q.X.Q
k2.....3.....zpl..q...........W..dS.7.o...........u_......s.|.{..5....
<.\.C...z..x....~|..}.#...g.{[.....o...^.=........q>...8&....8..
..k.Z~.....E.P(...B.P(......#..^.. .?......O-...|..U/......g./C..Z....
...9.....G._......><......A.Db.zb>...?........~.......p\....~
..........%\.s..U.zs....q..u_5...~.5N~..c}(N.u-...q.s..Z.#....t......~
.......{.....5.5b.W|...=..;......F..Z....S<....F......^.y.p7.......
{=.w...k..e...#..|zo#.:..v......r..B.P(...B.P. <B...%2.cZz....c}.._
0.x\.zQ.......|.9...>...s.s.../._hb.w}N..s...c.p............?..?...
...K.....x...M'ez.-....(..>.M"..8*v.q..S..g....c../._..."O....T.X..
..z.y.4......5....{.y....J..E...Q...v.cG......Z.:s...M.\3.t}...J..e.7.
.3..\...~.u....../...3.k8...c.......F..\.....3a..z..Z./...^.kY...\s. ~
z.......=.x.uv7l....8.]~)!.P(...B.P(....B.3.W./dpb..(......>....kT.
..{>......0.......zp.Q/rN<........t..?.g28.x.......(M.?......./N
-....?.1.........z......\?.-Bg. .....;wS....O.,.?.B..c.-....~.DY.5...|
8..w.|.@.uv..V...o?._.......7'.R.;.....7.MQ..%.E.L..{'l....u....Y:e..?
7_..|.I...}.Z>.t....%*o..H..Q.}..o~-!.P(...B.P(.....z.zDC/...%.D...
.......|....v....Lg.....;...Z..~.9~..d....g.I.........:_y'...<.....
...;g...e.;.B.*<.C..9.$.2.....8..q...e.......8.c.OuS?.^.x.....^....
=.....p.p...7.V.O....Q..>.........?.../..o.y{r.|repY..7.../...S
<<< skipped >>>

GET /img/ltr/footer-astro-pic.png.pagespeed.ce.8-Jss07pMQ.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 23428

Connection: keep-alive

Link: <hXXp://downloadastro.com/img/ltr/footer-astro-pic.png>; rel="canonical"

Last-Modified: Thu, 12 Nov 2015 07:57:06 GMT

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Cache-Control: public, max-age=31536000

ETag: W/"0"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f60775b8b6a-KBP
.PNG........IHDR.............Q.Q.....pHYs.......... .....MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#....Y....a...@....V....HU..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..]3...Z..z..y8.@...P.<......%b..0..>.3.o..~..@...z..q.@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V
<<< skipped >>>

GET /img/close.png.pagespeed.ce.2dLQsTCMtp.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.lightbox.css.pagespeed.cf.pnBnW4MdC6.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 280

Connection: keep-alive

Link: <hXXp://downloadastro.com/img/close.png>; rel="canonical"

Last-Modified: Mon, 28 Jul 2014 11:24:52 GMT

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Cache-Control: public, max-age=31536000

ETag: W/"0"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f6177718b6a-KBP
.PNG........IHDR................g...<PLTE........................KK
K...............JJJHHH.............n......tRNS.J.....K..............|.
..xIDATx^}.I.. .DQ..Q...w.....j...0T....W..~Y..........hC,....W$....r.
.$.9.......$".H"..;..  .x7{@b..(.).G.O&..H....}Q=..|.. ..H.......IEND.
B`.HTTP/1.1 200 OK..Date: Wed, 13 Sep 2017 05:03:26 GMT..Content-Type:
 image/png..Content-Length: 280..Connection: keep-alive..Link: <htt
p://downloadastro.com/img/close.png>; rel="canonical"..Last-Modifie
d: Mon, 28 Jul 2014 11:24:52 GMT..Expires: Thu, 13 Sep 2018 05:03:26 G
MT..Cache-Control: public, max-age=31536000..ETag: W/"0"..X-Page-Speed
: 1.11.33.0-0..CF-Cache-Status: HIT..Vary: Accept-Encoding..Server: cl
oudflare-nginx..CF-RAY: 39d88f6177718b6a-KBP...PNG........IHDR........
........g...<PLTE........................KKK...............JJJHHH..
...........n......tRNS.J.....K..............|...xIDATx^}.I.. .DQ..Q...
w.....j...0T....W..~Y..........hC,....W$....r..$.9.......$".H"..;..  .
x7{@b..(.).G.O&..H....}Q=..|.. ..H.......IEND.B`...

GET /icon/fbdownloader_64_64.jpg HTTP/1.1

Host: pic.downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/jpeg

Content-Length: 5221

Connection: keep-alive

Last-Modified: Sun, 28 Dec 2014 12:40:10 GMT

ETag: "41c4965a9479064cd45f92b9bc1dbcd9"

Cache-Control: public, max-age=432000

X-Cache: RefreshHit from cloudfront

Via: 1.1 6bc98065df91480a19ef89206615fc55.cloudfront.net (CloudFront)

X-Amz-Cf-Id: t6r__5Ki6_Kp8tbFbvJfNrowkXHn5X9yXQXFC-_1WV5SE7QcX9-9iw==

CF-Cache-Status: MISS

Vary: Accept-Encoding

Expires: Mon, 18 Sep 2017 05:03:26 GMT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 39d88f5d71508af8-KBP
......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80),
 quality = 100....C...................................................
.................C....................................................
...................@.@..".............................................
...............}........!1A..Qa."q.2....#B...R..$3br........%&'()*4567
89:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...................................
......................................................................
.....................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&
'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz............................
........................................................?..x.b..w.x...
5xC.O.......u..x.O....v..[Mm...[X.X.....@p..3... .{..&....|..x..s...\.
....G... ......p......W!.]. .:m. .......\.....Fp.u#.....!T|..UC3.../..
5..1...1.....^3..y>'.....u|F".|..V.Z.*...7.iJ......3._.x....a.....a
p.n$.(...3....=.Y.&.(..K..JqPN..F.EY.....O?.j..~.......G......Q..$...f
DuE._.I2D...R9.* ............&.. ><~.Zu..|Wt~..3.T..X..L.(...k-.
...*C.9#R.&..c..(e;.............c.~4.>&x.RA....~......%.zo..~.wya..
...|?..o.....r._...c.......N....F.yT......../...]l........E.N..a..N#..
X..t ..G..}.9..V4...%....'E_K'..5...L..KO..W.?.F..N.....3.......=.. ..
..........7..x'.o..:....I.m^9$..M..L..e....:......k..u.s..t......<.
..'... ..e;..H......1.TV.%i.h.......#..|k..~$x~..^.$.%....<u..n. .y
r3.b.dCix.T.mx....!.f.8#3.9q.#.9'.p.<....y...X.uD.....eK....O.V.ex.
..m. .0.H....y...D...l...../..>[*....Z*_a... >K........C..Z.
<<< skipped >>>

GET /img/top-search-button.png.pagespeed.ce.Qb5LCpTIIs.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 1408

Connection: keep-alive

Link: <hXXp://downloadastro.com/img/top-search-button.png>; rel="canonical"

Last-Modified: Thu, 12 Nov 2015 07:57:06 GMT

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Cache-Control: public, max-age=31536000

ETag: W/"0"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f5d753d83ee-KBP
.PNG........IHDR...V...&.....i.......sRGB.........gAMA......a.... cHRM
..z&..............u0...`..:....p..Q<....tEXtSoftware.Paint.NET v3.5
.100.r.....PLTE.......................................................
.................... ..%..%..%..&..&..'}.'~.'..'..(}.(~.(..(..(..(..(.
.(..)~.)~.)..)..)..)..)..)..)..)..)..*..*..*..*..*..*..*..*..*..*..*..
 .. .. .. .. .. .. .. ..,..,..,..-..-..-..-..-........................
.........../../../../../../../..0..0..0..0..0..0..1..1..1..1..1..1..1.
.1..2..2..2..2..2..2..2..2..3..3..3..3..4..4..4..4..4..4..4..5..5..5..
5..5..5..5..5..5..6..6..6..6..6..7..7..7..8..8..:..;..<..=..>..R
..S..W..b..i..j..|..............`.&.....tRNS.CDDEG..............,h....
IDATx......6.....#...hN......z.3........&...../`GJ...dC....C...y>.8
......pq.5...?.......X..J....M.O.W..!...i.R.....S;..z.~....@..`.r.....
..2...j....dC........G$.R.!.m...Z.#F....c.Vs......o]q.Wv[...s.M...[..B
.. .*4.q.=V<....6.D....c@...L:.....~7..N.x.P:.Ag".rK.5qQ.6W$.&.!O4.
 7n..p."-.]]h.....O.`.XyS...|..-z..:...P.....z&x('..V1.\.t-\.l...O...q
.J}....%...bM%tM....}.bk...........;T...B.;p..y....#M]./.)..yL......12
..........).,..`....8~7..Q~.AH.TM0u"!#t$....R!4.41.._...&...!\C;.]1.is
..Kdp..P<BR"#1j..oo?t ...).P.. ..2......a~<...$#.K..M.!P.S..3..H
.e._.P ..Z).mnL.;...D.......5.......<.C4.l....CJ.D...U........:...L
5.5....o......".......V.??...d..e..!6:.......'.....CY.z-P.{Mtl..S.....
&.<......v.....a6.FV....IEND.B`.....
<<< skipped >>>

GET /img/button-blue-151.png.pagespeed.ce.1iVw_YL2Zf.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 1482

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: pngoptimizer, origSize=2333

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Last-Modified: Wed, 11 Nov 2015 12:32:58 GMT

Link: <hXXp://downloadastro.com/img/button-blue-151.png>; rel="canonical"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f60758783ee-KBP
.PNG........IHDR..............o>M....PLTE...6..7..5..6..'}.'~.)..7.
.7..6..'..(..'}.'}.)..5..7..5..'}.)..5..(..'}.'}.'~.'..(~.(..(..(..(..
(..(..)~.)~.)..)..)..)..)..)..)..)..*..*..*..*..*..*..*..*..*.. .. .. 
.. .. .. .. .. ..,..-..-..-..-..-.................................../.
./../../..0..0..0..0..1..1..1..1..1..1..1..1..2..2..2..2..2..2..2..2..
2..3..3..3..3..3..3..4..4..4..4..4..4..4..5..5..5..5..5..5..5..5..6..6
..6..6..6..6..6..6..6..7..7..7..7.. $#8....tRNS.%%&&''(...............
.`5.....IDATx..W..$5...df.............Z...%.TH'.O@u.@.."Q.~;;....l"Y9m
u.?v.g....dAa..Nt&2RI.z...t:.O4..4.....S.....|&.....?~...r%..N...N.A.*
.0..4}.:.R'.tDf9.3...5.....~#Zo../.........Mv.^...q.....J7...^..s..,..
HYy..83.S.,O4L.R..V...)fFb.".%._.U....Y)G...i.=>k^..&.Q..g.O..R....
a.@.K.<..L....*.UG........`.r.K...=x..D$.....6Q.}YbE.H.. .A.(......
..[..T......,..S...2...z.. .#..a.........Xq.W.. . .I..y\..apN....U....
...:......0...L.....-..../.....9.g.....c.....e....o..x..,`-.......t.Cx
..K...Iv.7'.j..Fk..I.V_..M...W"...!...>P...:0.}.....T..e..<-.g..
av.l. ;.......2..!.h.C|..U.t.`...hN....0ir..fH(Z3...R..t.H%..PP.K.}..f
..........c.......9..."..v...XT.....T=y....2..e.X.32.#.g...>..R...=
....l.wP....4..S.~.d.&............,,@....Z.tp..._Y59..t....hR.L..).. .
".g.r9[gX..l?n|....!..l.z..`Re.t.y..r|Z...%X.3.$.. ...&....:...,;....X
...)P..(.D....F_...4..t.J0......K".d.#.............^.7.I!..Mg*r...]^=?
=....]..D.@.'...........F...}................n.....A7..._.Fih.<....
l:..Z..bp.... L..?2:.....IEND.B`.....
<<< skipped >>>

GET /img/prev.png.pagespeed.ce.hLdt7msnt5.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.lightbox.css.pagespeed.cf.pnBnW4MdC6.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 1107

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: origSize=1360

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Last-Modified: Mon, 28 Jul 2014 11:24:54 GMT

Link: <hXXp://downloadastro.com/img/prev.png>; rel="canonical"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f6175a383ee-KBP
.PNG........IHDR...2...-.....F..t....IDATX...Kl.U.@..cg.u...v.Vv .i.I.
...8.6E....eA.....H,....|A.$.XR6.H..]..*P.Hl..).H v .....h............
......{D.......Vdd.X......Q.6..4L.!.2...SF.%.....lA$,.....>.h...R..
..e.."d........).a9.!<.. .....E!N.....b...wn..5...wR.....@..t.[.!..
_V.=..X..I..(..&.k..oD.k{Gy.zJ.!..HZ.TD...o~.........Qa.Cb.UD.........
==N....Ab....~v.W.b...B4RE......I#....W..?6C...>\8...IK....h.G=...&
gt;....br...6$..O.=.l@......V.a..w%t..U..^.#..;.9A .8.k} .HL...s4.jH.F
.8......._..I..r.-.&...8.x(.\..$...s~..!...)...Z..4!1.5B.h..X..Np.f...
eO5..."....U.......>!\..e7.H."a%...".<..{.m.~....Rl.}Bd.q..<.
.....V.;....;5b....;.u.'..^.X].}.Y....e... .6..3....3...].pJ%<.t.pH
u9=.~..M@..}. ....T..|.d.!^.!.993k.......K...$s..J9H..7.....q.v....yuE
g.\..'`...7b^.c..-.9.}...Q..6.....M$..<...&/.&..e%.......#...N.7.)0
iv.....`d:...s../E..}.."..AF...,..H..........&...... .ad3W.c.$E3..Ct.3
..pZI...mK ......(..&.K.2.p?.(.n.~......S:....f...$..&...A.w......L...
..;;...z7>.......l].b...apf>...QN........3..g.[.q..%k...H...x9j.
..............y..%PJ-...^.....h..%[..*F.A%....E%E.."./.....O.E.=".....
&...P..8....IEND.B`...
<<< skipped >>>

GET /img/ltr/top-search-bg.png.pagespeed.ce.8twQZ9q9Lz.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 3502

Connection: keep-alive

Link: <hXXp://downloadastro.com/img/ltr/top-search-bg.png>; rel="canonical"

Last-Modified: Wed, 11 Nov 2015 12:32:58 GMT

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Cache-Control: public, max-age=31536000

ETag: W/"0"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f5d77db8448-KBP
.PNG........IHDR.......'......0.{....pHYs................OiCCPPhotosho
p ICC profile..x..SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE.........
..Q,......!.........{.k........>...........H3Q5...B..........@..$p.
...d!s.#...~<< ".....x.....M..0.....B.\.....t.8K....@z.B..@F....
&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH..
...........0Q..)..{.`.##x.....F.W<. ...*..x..<.$9E.[.-q.WW..(.I.
 .6a.a.@..y..2.4..............x.....6..._-...."bb.....p@...t~..,/...;.
.m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<..
....$.2].G......L......b...G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..&
gt;.5..j>.{.-.]c..K'.Xt.......o..(...h...w..?.G.%..fI.q..^D$.T..?..
..D..*.A....,.........`6.B$..B.B.d..r`)..B(....*`/.@.4.Qh..p...U..=p..
a...(....A...a!...b.X#......!.H...$ ...Q"K.5H1R.T UH..=r.9.\F..;..2...
.G1...Q=...C..7..F...dt1......r..=.6....h...>C.0....3.l0...B.8,..c.
."......V.....c..w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.X
H,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,  .......3...!.[.
.b@q..S.(R.jJ....4..e.2AU..R...T.5.ZB...R.Q...4u.9...IK......h.h.i..t.
....N..W...G.....w.......g(.....g.w...L......T071......oUX*.*|.....J.&
..*/T.......U.U.T..^S}.FU3S......U..P.S.Sg.;...g.oT?.~Y...Y.L.OC.Q.._.
.. .c..x,!k...u.5.&...|v*......=...9C3J3W.R..f?...q..tN..(...~....).).
.4L.1e\k....X.H.Q.G..6......E.Y...A.J'\'Gg.....S.S.....M=:....k....Dw.
n.....^..Lo..y....}/.T.m...G.X...$.....<.5qo<./...QC].@C.a.a....
..<..F.F..i.\.$.m.m..&.&!&KM.M..RM..).;L;L........5.=1.2.......
<<< skipped >>>

GET /img/lang/nl/dl-button.png.pagespeed.ce.akElsy1B2a.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 1792

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: pngoptimizer, origSize=2713

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Last-Modified: Thu, 12 Nov 2015 07:57:04 GMT

Link: <hXXp://downloadastro.com/img/lang/nl/dl-button.png>; rel="canonical"

X-Original-Content-Length: 2713

X-Page-Speed: 1.12.34.2-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f6070188448-KBP
.PNG........IHDR...k... ...... ......IDATx....SSW...w..V;:.c...j...Z..
.3.......E.E..da..@..0!....I ....."..%T=}.$7o...........{.{.........f.
.k.qRqrs.I..w..:...JH.n..=.Z...m.....r ....0P..k?.d...0...}.QI. ..<
...AN.........]O....qA>..aM.zN........AN..#.#<.>,)2E|......AR
d..U..NRd...u...B.yn..o...3C....v.....yn.........P...4.......4..L....|
.VU.^....[.v.5...Z....u.?..7.....;k....4.....}c.(=.....~xX.].E.M6..a~E
..*..z..p...h...j.M...=._.kw__.*...P.....s.h1...#%&&..n..sD.5 .f[....]
.wo...k......}.9`.~.....9.T."PY.c....V....b.|..[P..?...`0.|".i.....>
;....)f...?...o.O....!.......].Qm..8......<...p.jQ...`...^........R
M.G..U...(...U^....<...A.O.....Uf.!Z.....{.q..\....A..@.@/../.M....
S..........=...Xvr.UD..o.ju..'.5\K..'X...q...~....477.1..|..0;;C{....=
Q...V..f3..t.&....3.7...*..c&.%S......Uj..Z............F......;....\..
.#.CP...?|...#]....|......~.e.%.'9=....NA..r....qH ...$mM..(.....#..Y.
.Po*.......,..eyQ..Ww...?aBP1.....<..W...*.....h.L...>L....`...!
..nG....y..6.\%pu.2z.,.*...&P..z....e......y.%....~......h..o..6g....R
l.;....w....!.Ky.g...'...2.G.&|..G..jG4..*.V.u.h.L.........>.......
.q..L...3nGp..:,|..F..Iu&k!.!X.`.{Q........h..oeh....#.....|...~..b...
.A..P....;i.T*.nI4.....z.ju..4Ea}..a.wl.-f..2R...t.............]..g..z
.S^Q. 03.. .E..VKsp......s,.`-.cO..........{G1F...|,.9...........@....
...,/.\l...}.{.S.5(...c...P9..X.....:6..Bc......2~I5..b1......::..R.e.
....yp.&......b...<.,-/./..p.1.).O.8fm.F.....WFV.`..%.p.1.R.=./^...
.."h.;#.....u......S..W."]L.....`M.y.....@&...}......h.L..>..O/
<<< skipped >>>

GET /img/ship-top-on-15x21.png.pagespeed.ce._nCY1lgAHT.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 483

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: pngoptimizer, origSize=1446

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Last-Modified: Thu, 12 Nov 2015 07:57:05 GMT

Link: <hXXp://downloadastro.com/img/ship-top-on-15x21.png>; rel="canonical"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f61402c8448-KBP
.PNG........IHDR.....................IDATx.... DQ....(....PJIY.._..,,(
."&.....P....1..QH.=v..,%YX...4..=..;...........=..szD...I1^.......6..
'M....u.O0.^(...l<M}e.p.C...2.%rD.r...(.....#.G..z....V{.?..5A..B..
...5.E.O..:Y..........p..d.mi...q...9h#iG|..R..Z........3j.`.;....Mki.
..c..../.}N.|.#.<..ZoU._5_X.9.".....P`Q.....W..k.........f..4.0<
....J....% M..Qv.=.p...L..8.. .9.`Uo...R.jUR....@.(...1.!...B.s.t.u...
.M....C..3.......rL...<Q..B.x.&.D....1...~Ix....n..O.P..."......IEN
D.B`.....


GET /img/next.png.pagespeed.ce.MfFYdZdaq2.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.lightbox.css.pagespeed.cf.pnBnW4MdC6.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 1102

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: origSize=1350

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Last-Modified: Mon, 28 Jul 2014 11:24:54 GMT

Link: <hXXp://downloadastro.com/img/next.png>; rel="canonical"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f6180328448-KBP
.PNG........IHDR...2...-.....F..t....IDATX....O[e....iO.)P~....?..(...
p.R...:3..0t^..c........^P~h.&.x..1*.t...,.V.o..`.&..4..m:7j.s........
.....|..y...$$,X...b....7.c.Q..vl.&..$*P(...*(.....?D.(...p.H3..qSI.6,
w..!.69p.c..R.W......{(F.;c.).^v...].u....cuG...jp.j...q..`..u1.X.?y..
K.`...c....M.c7o.7Vl.."{h......Jd.. ......w?.^f.`..Z.8..G...WW....._a@
0.Z.x..l..P.[Wu.,.V...&C.d3'..y........o.=c....Q...b..2<t080.r3..].
......I..]...Ix....df..g..`.h...H vJ.......k....m..LZ.d.h.Z....]. ...-
.hLZ.d.........M.[`~.3F_z.d.lf...G.&Wn$3..}.)...f.un.l<../....&...6
.n...!Z.h.........$Z.Ml.......^..wM.\Oi.c...*.X..".....9.....l~.=K ..j
2.....*hb...O.ts....g.........H..>...3..u..i...\......0...~.O.A....
...Z.-.L.T.H.....UL.p..bZr.^..........z..(.........Qj.=..6.'&.l*.D.h`.
s.....2...NX..Z...1AH......Y.z=.'..3".*...3...._..T.FME.% ..&a.{....&l
t;1...(A......d=n?A......Yy....,.G.......W)D4=n3..yc....pz.f.;.l.a.8u.
e..<.U.fn.E...z..gz.....zi.....R....`.;....._ O..1.R.....HT..;.....
o..... .....9.7..O.l.k.5p.l.. ....C...............N.h..;..r~........ic
.......2.mf..KC......7....!.A..<..$J(......F.......1Y......IEND.B`.
..
<<< skipped >>>

GET /download-bearshare HTTP/1.1

Accept: */*

Host: VVV.filecroco.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0; ICDM 2.1)

Connection: Keep-Alive

HTTP/1.1 404 Not Found

Date: Wed, 13 Sep 2017 05:03:22 GMT

Server: Apache

X-Powered-By: PHP/5.4.45

Set-Cookie: PHPSESSID=65d0f38c0776ced4c03d51936f8804b5; path=/

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Refresh: 0; url=hXXp://VVV.filecroco.com/not-found

Content-Length: 1

Keep-Alive: timeout=3, max=100

Connection: Keep-Alive

Content-Type: text/html
 ....


GET /download-bearshare HTTP/1.1

Accept: */*

Host: VVV.filecroco.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0; ICDM 2.1)

Connection: Keep-Alive

HTTP/1.1 404 Not Found

Date: Wed, 13 Sep 2017 05:03:22 GMT

Server: Apache

X-Powered-By: PHP/5.4.45

Set-Cookie: PHPSESSID=268163d4ab6a8d653f53547eae4ee6be; path=/

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Refresh: 0; url=hXXp://VVV.filecroco.com/not-found

Content-Length: 1

Keep-Alive: timeout=3, max=99

Connection: Keep-Alive

Content-Type: text/html
 ....


GET /download-bearshare HTTP/1.1

Accept: */*

Host: VVV.filecroco.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0; ICDM 2.1)

Connection: Keep-Alive

HTTP/1.1 404 Not Found

Date: Wed, 13 Sep 2017 05:03:22 GMT

Server: Apache

X-Powered-By: PHP/5.4.45

Set-Cookie: PHPSESSID=aa8b390f05780e356e5b98fa2daf2d92; path=/

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Refresh: 0; url=hXXp://VVV.filecroco.com/not-found

Content-Length: 1

Keep-Alive: timeout=3, max=98

Connection: Keep-Alive

Content-Type: text/html
 HTTP/1.1 404 Not Found..Date: Wed, 13 Sep 2017 05:03:22 GMT..Server: 
Apache..X-Powered-By: PHP/5.4.45..Set-Cookie: PHPSESSID=aa8b390f05780e
356e5b98fa2daf2d92; path=/..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Ca
che-Control: no-store, no-cache, must-revalidate, post-check=0, pre-ch
eck=0..Pragma: no-cache..Refresh: 0; url=hXXp://VVV.filecroco.com/not-
found..Content-Length: 1..Keep-Alive: timeout=3, max=98..Connection: K
eep-Alive..Content-Type: text/html.. ..

GET /ads-sync.js?key=ecf5dd40ddf6f82e2ca6c8c631b328fd&tz=3&t=1505279006197&requestUrl=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare&pageId=1505279004996&plWidth=320&dW=true&plHeight=50&dH=true&scrWidth=1276&scrHeight=846 HTTP/1.1

Host: VVV.1-1ads.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: */*

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Access-Control-Allow-Origin: *

Cache-Control: no-cache

Pragma: no-cache

Expires: Thu, 01 Jan 1970 00:00:00 GMT

P3P: CP="CAO PSA OUR"

Set-Cookie: epomUUID=e032e450-9840-11e7-96fb-f8bc12553970; Domain=.VVV.1-1ads.com; Expires=Fri, 13-Sep-2019 05:03:26 GMT; Path=/

Content-Type: text/javascript;charset=UTF-8

Content-Length: 1011

Date: Wed, 13 Sep 2017 05:03:25 GMT

Connection: close
document.write("<script type=\"text\/javascript\">new Image().sr
c = \"http:\/\/VVV.1-1ads.com\/impression.gif?b=126639&p=3048&c=10976&
h=434bea7cb5de7d8e3b558257184a0316&l=UA&tz=3.0&sh=846&sw=1276&ad.trans
.id=1mbbyad8zbm9&s=89f0fdddfe2c6ded7bbd372db6ddabd9&t=1505279006489\";
<\/script><a href=\"http:\/\/VVV.opera.com\/?utm_medium=pb&ut
m_source=isp&utm_campaign=10976_3048&utm_id=MzA0OHwxMjY2Mzl8VUF8M3wxfH
x8MW1iYnlhZDh6Ym05fHx8\" onmousedown=\"(function(a){a&&a.href&&(a.onmo
usedown=\'\',a.href=\'http:\/\/VVV.1-1ads.com\/cr?b=126639&p=3048&c=10
976&h=434bea7cb5de7d8e3b558257184a0316&l=UA&tz=3.0&sh=846.0&sw=1276.0&
ad.trans.id=1mbbyad8zbm9&t=1505279006489&u=http://VVV.opera.com%
2F?utm_medium=pb&utm_source=isp&utm_campaign=10976_3048&
utm_id=MzA0OHwxMjY2Mzl8VUF8M3wxfHx8MW1iYnlhZDh6Ym05fHx8\')})(this);r
eturn!1;\"  target=\"_blank\"><img border=\"0\" alt=\"\" src=\"h
ttp:\/\/irncdn.com\/files135\/102\/10976\/126639\/Opera_Branded_728X90
_RU_Gray.jpg\" width=\"728\" height=\"90\"><\/a>");...

GET /impression.gif?b=126641&p=4756&c=10976&h=72d09a274170d9d777de33bbcb0bc91a&l=UA&tz=3.0&sh=846&sw=1276&ad.trans.id=wpn1yanme0qf&s=31d6b4f0ee7cf72e2b62ccb0292150b3&t=1505279010223&rnd=1505279010586 HTTP/1.1

Host: VVV.1-1ads.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: epomUUID=e032e450-9840-11e7-96fb-f8bc12553970; ucv=10976-UA-1505365406978-24--

HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Cache-Control: no-cache

Pragma: no-cache

Expires: Thu, 01 Jan 1970 00:00:00 GMT

P3P: CP="CAO PSA OUR"

Set-Cookie: ucv=10976-UA-1505365406978-24--; Domain=.VVV.1-1ads.com; Expires=Thu, 13-Sep-2018 05:03:30 GMT; Path=/

Accept-Ranges: bytes

Content-Type: image/gif

Content-L

GET /img/loading6.gif.pagespeed.ce.MZGSxBFYBk.gif HTTP/1.1

Host: nl.downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/gif

Content-Length: 1560

Connection: keep-alive

Link: <hXXp://nl.downloadastro.com/img/loading6.gif>; rel="canonical"

Last-Modified: Mon, 28 Jul 2014 11:24:54 GMT

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Cache-Control: public, max-age=31536000

ETag: W/"0"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f5e86438b82-KBP
GIF89ai....1...D........-...m....6...}..}....>..#t...."t.......?..7
.....>..#.....,s....?m..n..|....".."s..s..|.......6t........e......
.................C....................................................
.!..NETSCAPE2.0.....!.....1.,....i......@.pH,....r.l:]..tJ.Z...v...a..
xL.O_..z.>..i7.-..a_.`...Mg ..../.....R/...Q....y~.}..,.....0/.....
.....xP&..............%..%...%...............`.....".....'...'........
...'..............^..H..AT...D.P!.....X.......t......-B..I....#M.D.reI
..*.$@.@..5..x..g...@.....'..q..Ec..QTK}2E.&O....\..........K..YTf..E.
V-..g%.`.......:p.....(...<..*....>.8..F../.......5\.l9....I|.-.
4...Q.6}F....O.~.9..2.....T..;.~....*.... _.\.....K.."..!.....1.,....&
........pH,.c..i.l:...tJ...J.v...^..xL.&M.4.[j.K...dF........'|.._'...
'..uJ....."..._*.....&......._-................._./..C..DX&......!.._)
............ ..._(......#............_.$.$..........i.8...#...{..I..!.
....1.,....&........pH,.c..i.l:...tJ...J.v...^..xL.&M.4.[j.K...dF.....
...'|.._'...'..uJ....."..._*.....&......._-................._./..C..DX
&......!.._)............ ..._(......#............_.$.$..........i.8...
#...{..I..!.....1.,,...&........pH,.c..i.l:...tJ...J.v...^..xL.&M.4.[j
.K...dF........'|.._'...'..uJ....."..._*.....&......._-...............
.._./..C..DX&......!.._)............ ..._(......#............_.$.$....
......i.8...#...{..I..!.....1.,A...&........pH,.c..i.l:...tJ...J.v...^
..xL.&M.4.[j.K...dF........'|.._'...'..uJ....."..._*.....&......._-...
.............._./..C..DX&......!.._)............ ..._(......#.....
<<< skipped >>>

GET /thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare HTTP/1.1

Host: bearshare.nl.downloadastro.com

Connection: keep-alive

Upgrade-Insecure-Requests: 1

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: text/html,application/xhtml xml,application/xml;q=0.9,image/webp,*/*;q=0.8

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

HTTP/1.1 200 OK

Server: nginx/1.13.3

Date: Wed, 13 Sep 2017 05:03:56 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Vary: Accept-Encoding,User-Agent

Access-Control-Allow-Origin: *

Access-Control-Allow-Headers: origin, x-requested-with, content-type

Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS

X-Page-Speed: 1.12.34.2-0

Cache-Control: max-age=0, no-cache

Content-Encoding: gzip
69b.............V.r......@.i%........N..Nf.........$W$l...P.&.9.p^...y
.>I.....\.?........w....|u...../.I...\.v..........q..]...O.~...~.\I
...LpZ...3.8...8.......Bf............[.~.Sg.....2.9...Y..W.=.....&....
.s......"G.J..R..%.#'.R....)UZ.?..Y......Y......ug../...X..m.r......?.
..VZ....'..$..On......0&..... ....G..g.a.2k..PD.=H............R~..B.Ir
.d.>p.......s*.$h.....)........*.R...........\.....B...S.`.D..^bTb.
..A..obc...$-K.Q6M{..?.\p...uT....2.............H.......`f...u.~o{?Sc.
..l.9..z...<m......3Q..Z...>H......6....<..Oa...Oq..iZ2..w..}
.9..........U...-..GG..h8...`xt....J,.....>.3`e.X.=....*.HD[-.._\h.
..o...% ,.l....OW\.sl..Z.....gJ.2..I.--..1.....@J!w..W).x.....)...e%.n
..d.....,..>L..H....v.D...R.. .ro2\fI.!-s1.DZ...3!2CHH\u.....?.....
..q.?............Uu\0$.......;..J..Q.d.]...........`.;....AA'..K...^HS
e.q.M..p.Xr..|.....G.....O..t...V.K..A....@"..V%). ...l.E......ai..cO.
f..@..4...^.tA..3]"%..?...5O.b)E..'....7?.....ohU=M..;..qW..,.Z..". ..
w....y.......1.,..]p.*W.. ]...7.U....#..k...K|..........#........k,..]
.o..}...W...Tfu..I...vO...qX.3.............,.].sK4f.7.u....3......zB}j
..B..d.e..'.D.g".DI..9....5.z..6...Hl6n....v.....G.......V.3...$..N./Z
~{...F...........qP.S\6*...Z[o..KRP...._0......LU.].q.....=.=....FO..1
>.........q....U....?>}.u:.d?].[.....s...../.<-.}k...75=d7=8.
;.wo.o.,E\..D.x..8.....S..@....).Z106..Y[..?xrp..|.2..9FYE.V.....K..,V
E.%..J.*......|..;...c3u.pt.L.,......;..X.%.A..D...A..4z...@.g.%Xy....
....-.:(]....f..].........D>r.[swN....j[]KN..-P..Zo..gi..M..jd.
<<< skipped >>>

GET /img/ltr/logo.png.pagespeed.ce.2H4qwPXeta.png HTTP/1.1

Host: bearshare.nl.downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d92e624a23ca6c4b1c437ace81bcea60e1505279005

HTTP/1.1 200 OK

Server: nginx/1.13.3

Date: Wed, 13 Sep 2017 05:03:56 GMT

Content-Type: image/png

Content-Length: 27252

Connection: keep-alive

Link: <hXXp://bearshare.nl.downloadastro.com/img/ltr/logo.png>; rel="canonical"

Last-Modified: Thu, 12 Nov 2015 07:57:06 GMT

Expires: Thu, 13 Sep 2018 05:03:25 GMT

Cache-Control: max-age=31536000

ETag: W/"0"

X-Original-Content-Length: 27252

X-Page-Speed: 1.12.34.2-0
.PNG........IHDR.............j.{.....pHYs.......... .....MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#....Y....a...@....V....HU..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..]3...Z..z..y8.@...P.<......%b..0..>.3.o..~..@...z..q.@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V
<<< skipped >>>

GET /favicon.ico HTTP/1.1

Host: bearshare.nl.downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: */*

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Server: nginx/1.13.3

Date: Wed, 13 Sep 2017 05:03:58 GMT

Content-Type: image/vnd.microsoft.icon

Content-Length: 1406

Connection: keep-alive

Last-Modified: Wed, 18 Feb 2015 13:18:53 GMT

ETag: "57e-50f5ca9367800"

Accept-Ranges: bytes

Access-Control-Allow-Origin: *

Access-Control-Allow-Headers: origin, x-requested-with, content-type

Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS

Vary: User-Agent

Cache-Control: max-age=290304000, public, s-maxage=10
..............h.......(....... ...............................;"..L-..
K/..N/..D0$.c;!.f@%.^B0.kC*.yF'.nQ=.PPP..V5..W:.}Z=..`E.```.aaa..fB..n
A..l\.kkk.lll..uR.sss..y[..xa.~~~...m...c...t...........x...u.........
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
....................................yyyytrmbkufnyyyyyyyyojX8AQLVe_vyyy
yyq]JD4=ALLB[yyyyyYScO;17M`HGhpfbS?TlL>:3LStk]`M;\[VR06K8F>cjfku
caY[WircQQVg[sfVQaOjZfN( %IX`yyjPSdsU......>syyu^at].,@-..#)xyyyyvj
]N 29'..Nxyyyyyym<."!....vyyyyyywC.......nyyyyyyya......5tyyyyyyyj/
....&eyyyyyyyyxfE$*Tmyyy..............................................
....................
<<< skipped >>>

HEAD /download-bearshare HTTP/1.1

Accept: */*

Host: VVV.filecroco.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0; ICDM 2.1)

Content-Length: 0

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 404 Not Found

Date: Wed, 13 Sep 2017 05:03:06 GMT

Server: Apache

X-Powered-By: PHP/5.4.45

Set-Cookie: PHPSESSID=ede7100bc0b6eb3197188c46e8381796; path=/

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Refresh: 0; url=hXXp://VVV.filecroco.com/not-found

Keep-Alive: timeout=3, max=100

Connection: Keep-Alive

Content-Type: text/html
HTTP/1.1 404 Not Found..Date: Wed, 13 Sep 2017 05:03:06 GMT..Server: A
pache..X-Powered-By: PHP/5.4.45..Set-Cookie: PHPSESSID=ede7100bc0b6eb3
197188c46e8381796; path=/..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cac
he-Control: no-store, no-cache, must-revalidate, post-check=0, pre-che
ck=0..Pragma: no-cache..Refresh: 0; url=hXXp://VVV.filecroco.com/not-f
ound..Keep-Alive: timeout=3, max=100..Connection: Keep-Alive..Content-
Type: text/html......


GET /download-bearshare HTTP/1.1

Accept: */*

Host: VVV.filecroco.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0; ICDM 2.1)

Connection: Keep-Alive

HTTP/1.1 404 Not Found

Date: Wed, 13 Sep 2017 05:03:06 GMT

Server: Apache

X-Powered-By: PHP/5.4.45

Set-Cookie: PHPSESSID=81703997901f81c0174850f261b8c83b; path=/

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Refresh: 0; url=hXXp://VVV.filecroco.com/not-found

Content-Length: 1

Keep-Alive: timeout=3, max=99

Connection: Keep-Alive

Content-Type: text/html
 ....


GET /download-bearshare HTTP/1.1

Accept: */*

Host: VVV.filecroco.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0; ICDM 2.1)

Connection: Keep-Alive

HTTP/1.1 404 Not Found

Date: Wed, 13 Sep 2017 05:03:06 GMT

Server: Apache

X-Powered-By: PHP/5.4.45

Set-Cookie: PHPSESSID=b871545e8f35be4c778781bcdeb82d46; path=/

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Refresh: 0; url=hXXp://VVV.filecroco.com/not-found

Content-Length: 1

Keep-Alive: timeout=3, max=98

Connection: Keep-Alive

Content-Type: text/html
 HTTP/1.1 404 Not Found..Date: Wed, 13 Sep 2017 05:03:06 GMT..Server: 
Apache..X-Powered-By: PHP/5.4.45..Set-Cookie: PHPSESSID=b871545e8f35be
4c778781bcdeb82d46; path=/..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Ca
che-Control: no-store, no-cache, must-revalidate, post-check=0, pre-ch
eck=0..Pragma: no-cache..Refresh: 0; url=hXXp://VVV.filecroco.com/not-
found..Content-Length: 1..Keep-Alive: timeout=3, max=98..Connection: K
eep-Alive..Content-Type: text/html.. ..

GET /icon/fbdownloader_32_32.jpg HTTP/1.1

Host: pic.downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/jpeg

Content-Length: 846

Connection: keep-alive

Cache-Control: public, max-age=432000

Cf-Bgj: imgq:85

Cf-Polished: degrade=85, origSize=2300

Etag: "6fe5485eca3bd539dbb81416153df437"

Last-Modified: Sun, 28 Dec 2014 12:36:45 GMT

Via: 1.1 2695dee957c9ae60541c39f41a6943bd.cloudfront.net (CloudFront)

X-Amz-Cf-Id: V2cEVNYMd_vT_lWHKPa51xyazdDbfJSXEiRXZKUm_dQaldEKHhKr8Q==

X-Cache: Hit from cloudfront

CF-Cache-Status: HIT

Vary: Accept-Encoding

Expires: Mon, 18 Sep 2017 05:03:26 GMT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 39d88f5d72418b2e-KBP
......JFIF.............C..............................................
!........."$".$.......C...............................................
........................ . .."................................... ....
.......................!a.."1A.Q................................. ....
..................!.12.Qq.............?..[....B.%.4..v.KZ..%J%..N:.8..
..pDL.v.2,e...hC\....c.4........\...hT.d)... .BA....!.nK....Q-YR".eKKM
.......j..~;...y<b.TR...C.".;.VclB.vrizl....S.:y..9>.([c...G....
..Z%.S1(4.^LW...T%I<N. t:....X.[U.u-S..K.D...D{g.'......-.....H-...
2JA!*h.={....r...Qyq.@.......W* .... U..Sh.R...Je.,.$.II=.1...Kr...W..
.]y.T...G<%G%*N..swY..:.yw-!......rciR........?}`.#..o:#.$a.~Sk.;.Y
...[.$,....th{.Y...UaLJ.........j...nv^..Yt.........#..cS...I.y.......
..}'..Mo}%.]mRox.......P.A..9?d....=:....u.K.;..c.......\A..rq...;M#/.
.._....Qb.[..#........


GET /icon/intelliwebsearch_64_64.jpeg HTTP/1.1

Host: pic.downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/jpeg

Content-Length: 239

Connection: keep-alive

Cache-Control: public, max-age=432000

Cf-Bgj: imgq:85

Cf-Polished: origSize=241

Etag: "a79db74cd693659ae36871e0b72308ba"

Last-Modified: Sun, 06 Apr 2014 18:54:07 GMT

Via: 1.1 4f8e7db6ebfaa9bae258ab022bf71f24.cloudfront.net (CloudFront)

X-Amz-Cf-Id: YoDhlhccbqXaBcEeLVLA9byPzJEkuRWn4YLwLbxzxU-uVm8e5OlZ2Q==

X-Cache: Hit from cloudfront

CF-Cache-Status: HIT

Vary: Accept-Encoding

Expires: Mon, 18 Sep 2017 05:03:26 GMT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 39d88f5e62528b2e-KBP
GIF89a@.@............................!.......,....@.@.......k.........
|......f4..x.K.v.|p.J..i......&!.X4n..dH.l:?P....^.#.vK%y....<;....
.....k.HG...p...7..(.Fx.w.w..........X.x..i.....E.I.I::W.z*..........Y
.y.:i........;.,DL.z.W.\....Q..;HTTP/1.1 200 OK..Date: Wed, 13 Sep 201
7 05:03:26 GMT..Content-Type: image/jpeg..Content-Length: 239..Connect
ion: keep-alive..Cache-Control: public, max-age=432000..Cf-Bgj: imgq:8
5..Cf-Polished: origSize=241..Etag: "a79db74cd693659ae36871e0b72308ba"
..Last-Modified: Sun, 06 Apr 2014 18:54:07 GMT..Via: 1.1 4f8e7db6ebfaa
9bae258ab022bf71f24.cloudfront.net (CloudFront)..X-Amz-Cf-Id: YoDhlhcc
bqXaBcEeLVLA9byPzJEkuRWn4YLwLbxzxU-uVm8e5OlZ2Q==..X-Cache: Hit from cl
oudfront..CF-Cache-Status: HIT..Vary: Accept-Encoding..Expires: Mon, 1
8 Sep 2017 05:03:26 GMT..Accept-Ranges: bytes..Server: cloudflare-ngin
x..CF-RAY: 39d88f5e62528b2e-KBP..GIF89a@.@............................
!.......,....@.@.......k.........|......f4..x.K.v.|p.J..i......&!.X4n.
.dH.l:?P....^.#.vK%y....<;.........k.HG...p...7..(.Fx.w.w..........
X.x..i.....E.I.I::W.z*..........Y.y.:i........;.,DL.z.W.\....Q..;..
<<< skipped >>>

GET /css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: text/css,*/*;q=0.1

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:25 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; expires=Thu, 13-Sep-18 05:03:25 GMT; path=/; domain=.downloadastro.com; HttpOnly

Expires: Thu, 13 Sep 2018 05:03:25 GMT

Cache-Control: public, max-age=31536000

ETag: W/"0"

Last-Modified: Sat, 19 Aug 2017 12:32:48 GMT

X-Original-Content-Length: 131034

Vary: Accept-Encoding

X-Page-Speed: 1.12.34.2-0

CF-Cache-Status: MISS

Server: cloudflare-nginx

CF-RAY: 39d88f5801c6826d-KBP

Content-Encoding: gzip
4573.............}y........w..0^.7Tx...{..qb.G......."[.=.)....../."..
nRc.xo..m.............]%...9M.<)N..l.....69......]..-.o.'......P}..
n.mq.....6..yy....,..5{y..Q.*. ...I..(.W..Uu...-.<!(Zt.&5JN.r.o)MM.
.........U......-yr...}s........?...-....U.n..p..6O..M.|]....vR..!.k..
yU..m};Y%.aUTI{Z..M{;...e.^..j_f....|............,i.......|...h..6.dW.
'.d...B.$E...~~..Q.=...pj.CI.^;..m..S.U{.A.N....$'......".O.$..L7CiU'.
j....*..4/7....d........C..dL.s.W>.....&c4.r...x.d{.c]./.v;m.sRDf..
...........,.......v.....S..!?................J....4../?.l........J...
.tY....CG.'.h'...Y....I._".........*.......$....uR6..Fe{..O6..&<.D'
..d3.V..Qt&.:..g.. ....mR.N..J/.....N.......Gc........c......^.>*..
........2*gY.....tYT........J._o%....>.... ..{.Oo.....F!...I.......
8.c'...NJ.E..s.b.k..-3.J.}E....e....-.oE..n...t_u.}...r.K`.}p.2C.....)
rhF*.(S.@.....{0................f...;.x.h............>..=..&.......
.....<=........M.z.............W?..x.x.A%.S......o./]......(v...U.Z
I..|y.4...4 .t.t.... ..yx....Da..q.u.v.V..{;.$'[.Jf.!D8..p.w(Y..k.....
.VK..z.~...W...].....M...3./.K.G>.s..R..A.O.|q.0....L........^5}J..
U..*.....(.E._..?-...w..=k.|.}&l.d......V ...$Yuu. .C..w......v</."
;..A..p..9.J#.lw..F.<%.7#..H..>Y#...Y3...V/".|....q.......M..z..
.......l~..z..[...i\......al..%..N].P..]V..Qk'..M..ces%3.q.x.4U.g.....
.#9. w.C.,.sW...{.6.s..{`.....g........;IR|n.(.O7.Fy..........a...[...
.N}..w.N%G.-$...Q..P.l.|...... .5L....n.,C..... .p6..&........g...mn..
.`L...a(U.4..<H......|..........{..A.....4..*.K.=...3....|....}
<<< skipped >>>

GET /img/ltr/top-bg.png.pagespeed.ce.OCrPEx0q5d.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 91180

Connection: keep-alive

Link: <hXXp://downloadastro.com/img/ltr/top-bg.png>; rel="canonical"

Last-Modified: Thu, 12 Nov 2015 07:57:06 GMT

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Cache-Control: public, max-age=31536000

ETag: W/"0"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f5d5259826d-KBP
.PNG........IHDR..............L;.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:BDA5B4DDFE5811E19077CF30
873D4FC5" xmpMM:DocumentID="xmp.did:BDA5B4DEFE5811E19077CF30873D4FC5"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BDA5B4DBFE5811E190
77CF30873D4FC5" stRef:documentID="xmp.did:BDA5B4DCFE5811E19077CF30873D
4FC5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>Z.E...`.IDATx.....%.Q..W.2.[#%..L<3,@l`.
BA..]X.A,.@"R...._.c...R.A....Q.o....$...HQ.MPl_^w......4..3........}.
|O..NU.:......O...Y.........w.?.......[.....8~..O.w...................
.p...w./_.x...K..a..;.W..=....^.{.........t.........wW...k.k.....}...=
.?........[S{..t....y.Gw........j.#....:~.[...U{.=.....g......xz.t...g
....q...j.t~s9..........}..L.T.....M{....O.M..O.W...z...........?....o
...v..z._.w..........~j.xl...]...{...w...O..........O..x..O.q.~.K.?...
65...8_....0.<.}y..xz.t...O..x...O._=o.x(......j.t.|l...|l...5.....
{........=u/....w.......f.C>.c.1cmw.......T......A>.O./.....
<<< skipped >>>

GET /img/input-box-300.png.pagespeed.ce.ZdBR-xefNX.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 1096

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: pngoptimizer, origSize=1150

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Last-Modified: Wed, 11 Nov 2015 12:32:58 GMT

Link: <hXXp://downloadastro.com/img/input-box-300.png>; rel="canonical"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f60729f826d-KBP
.PNG........IHDR...,...@.............PLTE.............................
..............................................ccc.....................
......................................................................
......................................................................
.......0).|...QtRNS..........$$()**,-6889::CKXZZ[\]^dttuvvvxxyyyzz{{..
...............................:.l....IDATx...kS.@...A..D.......H.w..Z
..........M.q...3|..i.nN.&=O7.v...?X.Cz.BX.......... BR....y..........
.......[.CqV:<..^.8.r...v".akzX. .<..,.C;......Rc.HT`TO`...d.vA.
.Y..._......(..v3....I,....oI..Ib.....|#<.jF.."...i.........~ ....~
:.D.......Q&.....M^f".5..Hf".....$@8..H....T Y........j.J...a2..5....F
..&x}..A.y...9.^....; .BsV2 %.&#.K..H.......D...;. O2...|.......r.....
W...].C..~@..pn.`.[..'..i ..L..j..i.s.*......... =I.bPF....w]..!.....~
.....%...xs..K....~.....DF..RI..~.(.4.]........&2...U.W.@.\...}q...LtL
....C... ..`.n<......M.....Y.....W. .{-1....I.U{.......:..j..R.,...
.K..F'.Q:........v].V&.hI.dI.dI.d..H.dI.dI.d...,..,...e...D......q&...
.........p..,.Ou%...i{..fV.Zb.[.3N.[..S..&Q.4.....IEND.B`.....
<<< skipped >>>

GET /img/ship-top-off-15x21.png.pagespeed.ce.v1a1ZgLCHl.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 333

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: origSize=1286

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Last-Modified: Thu, 12 Nov 2015 07:57:05 GMT

Link: <hXXp://downloadastro.com/img/ship-top-off-15x21.png>; rel="canonical"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f6142bb826d-KBP
.PNG........IHDR.............3.|<....IDAT(....J.A....W...)DR.I..PD,
D.m..!..K .B,-<.F.WH..H "),..X..#;Y...B~.3;......P..w..f.O....3B)X.
....jzgq._{.t..3;.uz...U.#.......m....M...]N0U....]E.....TU.....X...G.
..3.&d(#v}...;..L..u ..i....h../.|.....2..C.3.......<....PPq.......
Z8%wo..^.G].%..y...H..(..0C....I(O.....g....}...E.....IEND.B`..
...


GET /js/concat.min.js HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: */*

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:27 GMT

Content-Type: application/javascript

Transfer-Encoding: chunked

Connection: keep-alive

X-Original-Content-Length: 46493

Vary: Accept-Encoding

ETag: W/"PSA-aj-_nEcxCiw0n"

Expires: Mon, 18 Sep 2017 05:03:27 GMT

Cache-Control: public, max-age=432000

CF-Cache-Status: REVALIDATED

Server: cloudflare-nginx

CF-RAY: 39d88f6182c6826d-KBP

Content-Encoding: gzip
37d4.............}.{.6.._Q...T........I.n.f...]...HH.E..I=lA.....O....
....._....`0...3x.`.....=.7.gm.fp......P..U.....D1..cO... ......0.....
...ZH....D...1..R.....\...E....Q.!.-"....R....I...-O..c.\x&.!..%.k....
.......,.<......N./....P^D$<../..l".j.Yy..5m.Z........M(Ux....N.
..#..B.c..%...lg)A9..\"G$~..B.E..Ac&'.3..Dp3. ...............4...[.Y..
Z..n...9.G.lgY.\.E...K'..mgyr..g.Vp..8..g...T=.......}..3..2.v"5..@K..
.i.<.....p.4uEQ.Y .fN..O. F.O.]E...,...(........1v#.bgN.E<X.h..~
Y...wI..}...D...AV.l.1^.q$.r.....h....I.`Od.d..Y.6[.....n....N$.lM...!
X.3.29.#..x~H..o..b.....1....DI...&..E..`.2D..m:,j..;c0..(..#).#..H.4.
(..cIp.K..K.L)$...%....{....1..b..-!.$...u 0D....K.2.75..2..lf.....KpD
j ...,.9D...d.-\..!.L..%.8\..O..$...a.`.v..@As.N.o...c.... ..P......\2
....f.d......HB.%d.......E....m..$=X.".u..w.c...5.........x,!k.F..k...
$.g.?.6.Q.E..v....S...r..."wv..??....)a.......V.uB..?......4N..f{.G$.2
Vj..*"..."7..Bj..h..MQK3......n.9....U&o.3...|......8..cG.z.4e..0.Uy..
1..._K.x.# t.X..4...).......~h...8.....?.j..B.S...`..Wo|..s.........o.
......Eq......J.Db.#...l)J....R.%|k.]x."..}. .1^r...L...N....Y4.m..x..
.Gl..-.K..M...1......t./b:.M...:......c.B.Bo.C....&X....1.....^......0
...R..\c\<../..w..b_A...>AG_...|...$*..T.{...E...-P].0.)....3..w
......*2e...oQ..yjVs...r^.....4_9cpZ..w......l...o"...T.pH.....Ns .u.{
3Mx}z.\.N..|67[..s.N.....>C..L\...9.n./Tc|.m'.\|g.O...7.O'..;.#kc..
n./9$s.I...k..p... .b.*.."........>._........B.h.....5..R.-.B.qZM..
.x6Y....m...GF...S.F...w:....h.M..Q.....bBP../..p.......|RP.Z.Z.t.
<<< skipped >>>

GET /css/images/ui-bg_flat_75_ffffff_40x100.png.pagespeed.ce.hpLm7934gq.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:27 GMT

Content-Type: image/png

Content-Length: 96

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: pngoptimizer, origSize=178

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:27 GMT

Last-Modified: Mon, 28 Jul 2014 11:24:57 GMT

Link: <hXXp://downloadastro.com/css/images/ui-bg_flat_75_ffffff_40x100.png>; rel="canonical"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f63c30b826d-KBP
.PNG........IHDR...(...d.......-....'IDATx...1.......7.Z...n....(..(..
(...9.~..B.w@.....IEND.B`.....


GET /img/checkbox.png.pagespeed.ce.NlO3LWlZi-.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:27 GMT

Content-Type: image/png

Content-Length: 807

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: pngoptimizer, origSize=1662

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:27 GMT

Last-Modified: Thu, 12 Nov 2015 07:57:06 GMT

Link: <hXXp://downloadastro.com/img/checkbox.png>; rel="canonical"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f64131b826d-KBP
.PNG........IHDR.......H.....'2.....hPLTE............^^^...EEE...kkk..
.iii...ddd...\\\...wwwyyy{{{..........................................
.................................................m..t.................
...............i..n..v..w..z....1|.'..,..9}.4..7..Q..d..i..a..q.......
......................................x..z. ..#........$.."..k..w..y..
t.................................................. ...... tRNS..*-..?
?bbddllww..................]....NIDATx....r.P.E..w..(z.iH....nT.@.....
L.%.^.>........T...j.....c..5....B .$...9.."f..............%...M..`
...."ET..-..".T..)...u.;/Tk.....w..f...D*..^ ....31.B$....I....Z.}....
OV.l\.MT.<...N2....9....O#....&........^.a...x.v..H....W)i]o}..K.'.
x.~.v%.:7>.......-.f..:.?.F...u.................A.a.~tp#y......a.n.
p.Om......u..C...C..R............A....IEND.B`.HTTP/1.1 200 OK..Date: W
ed, 13 Sep 2017 05:03:27 GMT..Content-Type: image/png..Content-Length:
 807..Connection: keep-alive..Cache-Control: public, max-age=31536000.
.Cf-Bgj: imgq:85..Cf-Polished: pngoptimizer, origSize=1662..Etag: W/"0
"..Expires: Thu, 13 Sep 2018 05:03:27 GMT..Last-Modified: Thu, 12 Nov 
2015 07:57:06 GMT..Link: <hXXp://downloadastro.com/img/checkbox.png
>; rel="canonical"..X-Page-Speed: 1.11.33.0-0..CF-Cache-Status: HIT
..Vary: Accept-Encoding..Server: cloudflare-nginx..CF-RAY: 39d88f64131
b826d-KBP...PNG........IHDR.......H.....'2.....hPLTE............^^^...
EEE...kkk...iii...ddd...\\\...wwwyyy{{{...............................
............................................................m..t..
<<< skipped >>>

GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1

Host: ajax.googleapis.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: */*

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

HTTP/1.1 200 OK

Accept-Ranges: bytes

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/javascript; charset=UTF-8

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

Content-Length: 33593

Date: Tue, 12 Sep 2017 17:29:16 GMT

Expires: Wed, 12 Sep 2018 17:29:16 GMT

Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT

X-Content-Type-Options: nosniff

Server: sffe

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000

Age: 41650
......n.....k..6.(....-..CX.[r2{v..u.;.$....3I....%H......KD.o..*\.Rl'
..C.H.w..U..\>.\............O.~....Mq.h.KQ./.l.E./.^........".T..y.
.)..t....}.....e.e]..........1.d.@.S. '...M.-....}..hIN..(.c..y(.-..p.
...j,c.6........<...-.fO...e.Mq...i...,...\~&e.]....Yf.@>.y..(..
*Yfb...,.N%.f=Y..[M.........z.u.{ ..M...1.....^..W2(..6<.e..~..uP..
l7.....9..!.\...y./J&[=ie7....]..2.....81.:..x...f....|xs.3....2!dS...
..H'0.......d..........~...Ivr.....y.L8........q.z....J.K...3....&.y..
5......]...F8b.i.0R..W..$!...%?.......d".M...F.m)c..VA....Th:.`..W.&]@
..K6RMWIo.TM.T...l......%.....M"....m....2}..x.....\.........x....M.S.
_.....|U.{....B.."..H...0.b/o..s .cq..]......,v~.\.b..........I.y.....
\l_.d.6.aq'xiz8l.8#.L..[v......7i....Y.%...%.h.n....&../.V.....-....&.
-....Ex..m.i.?.....`....K6...c..I[.W...N..*...m ...'.....a|?P..6....mp
j.Jr..F....<.....79OK.F .?K......{..6H...L5...G.T.v ..y ...H|?.aQK^
~...o........x,J...C...y!..dB.,.?..e....%....2'?!..$..Zz....}<..M.g
[.K.\...._...p...y.2.M..f..'l..L.i.8.zx .V<.....&....KM./.....)....
..w_U.jSfG....^b...{..........[......m.....)p.1....0..[....z.G....#...
..5...,..U....q.u.'..`.|?...........Pg...........h.......2..t....L..}m
P.>.......e.%S...M.....`@8.8..7U.p.m......A....C...@..j..)w........
8.....q.q@F...XV.)9...*..ODX...;4G\%.......v..U0.............O..5..=..
.....G..B..".B...........T9...Hu%`...*6.....&.i..........z.4...r.9Q./K
.)..;..{...=Q........}0.e.Hf.h.9!....A..{...Y(T.....$(W.uQny.E........
...w.V.x.E4.(R..]}.....ADtH.}&`..)30,.O`C....Z...i*..3.d...He.....
<<< skipped >>>

GET /ajax/libs/jqueryui/1.9.2/jquery-ui.min.js HTTP/1.1

Host: ajax.googleapis.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: */*

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

HTTP/1.1 200 OK

Accept-Ranges: bytes

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/javascript; charset=UTF-8

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

Content-Length: 62563

Date: Tue, 22 Aug 2017 00:27:14 GMT

Expires: Wed, 22 Aug 2018 00:27:14 GMT

Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT

X-Content-Type-Options: nosniff

Server: sffe

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000

Age: 1917372
......n........6.0....-.... .do..P..<..%..uc.f.S4.Z.Z..A..v.W.....$
...n'.w.&Un.o..................?.}1..]..8{~1.x>_<...../......cvy
.....5.m...yv.5....W.......g....tGv....7e]..w,...?....x..3\....W..[..(
Y,...x..0.nK.#%..k^n..c.y.....^.]...l..,. yQ^G.2.P....*k...`.-.1.#@...
..E..hp..........P....g.....@..6/..../CY...&g9..=..`Z.I.."...GV^3\U...
..k/.H(....C.&.e..j..../..=. ...../...r1.....J~..b[R......Z^|C..Vxw...
...].K...V.H1..d..H.!....]0H`.k.g......<..7..f_..N..a^3.....B.^....
1g..........o0.....}..H....F.%7.1Y..YZ".&..z]W.&?..%.2I6.X.7p4*..*-..Y
zI...........P..XS~.;......Ok.....Tbk..D....f..v9h-<..IM.....#..I.1
.f.."...r0....=.*......b..].......R~ .LdS. .>....@v;L....L.....A..2
t...L.n..n...K<....4..].}*~.n1.HI..i)..1..Lx..Y".x...._.;..........
W_........o_e.?...~...wo.............7...^|..|.......|...W?..../......
^|..y............^.~....l1....|.........M..?.~.&[,.&E.>..I........o
..-.........._}..[....x.....c|.....?d/^.................W.....j./..w..
......h[..lO..N.....2.&.B.`.Rn.........G(.......X.....w...B"kYa......n
..2..K...1.m..H.h!.-.d.jh..x,..........ZXmYY.?Hl......_Mf....i.sN...E.
.-.z.....&..%.4.e..*...s.V\....C..25.6..fO>.....Q..........J.......
..X..~(.c.@.f....dO....x.....5.qM9V8..[.. .-.............t.....m..p.).
.E..V..c...o.$.Z..H.S....l=.....8..!..h...g.?i..m..|.Y'.T.c.*.5.)....b
...........|...L.j.bz.S..:y........].'..M,...iR..%.*'...............-3
gY......`..{.9K..KD..^Y....u.%.x..<..i.e8......r.I.:..:.;T.h.....T.
..x4..^1.......b..6..#...Xx...q....Q.....?|.UW.a..dH.G.{..../.....
<<< skipped >>>

POST /?v=2.0&subver=6.21&pcrc=205053755 HTTP/1.1

Accept: */*

Host: rp.downloadastrocdn.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0)

Content-Length: 2432

Cache-Control: no-cache

...4.....>.K..~..}...0..5..i..M.c...{..VM....T.c|.hrM...L ."v..S..)/.HL...!Z..c.........n..].ci.n.@a.N.F..."....
KD....Q...7../..y[.XB~r4n.Ji..e..UR.B.xE.Z.c..

...N..-.{....../y.P\.{d....Up........;....T[.b....TBB...=.l.....u y

Z...#.%......}a...7(.
0R... ...$."r(?$./*........J.....d.J.>. ...^.(...4A..U.#.K..zWJ.khG......m..<.....u'...y...........I...!/..f.R.9u.(u....2./...f..b.0..TJv.T.........D..y|..S..%...z.>X[.7.O......1.fA.K.=.;]cQ....."..9`.'K!..g..hD...'[9;.D..F.P..N.. ..a...i.....:.....U.*.........2...e..r..E............]......F.W{....6!...."S~...."..D.X....]M@).....hQ.i.$jL|A..kV..PE-m......K.7..fD. f.dK......H.vVRO......v...r.;.....Dmu.t.-........h.O....W........o=..P..,..(~....v..B.. T..F.....Ys.....wr.....
.lb.o"B...............c.o...".]......x4 ...M\........|}......\.r-...v...&u.......8<...K.^2L..S.*............n......9.o..i,IZS/.........{.........m9..WC.Y...h?{R...x
29.A.
.&.3_{.....P.{..:.IL.._
.`..LFc...M ...W....:..:I.........Q......h...C.M...].T.. a-..FnS...~.."..m...9...)).s.q.A..d.O...y..:F...".M.q?-`;..B.|. </.....1.....P.....I m.....[.;.}P..!z..a..I..#.$3..3.V.4#......:%...-.......i.........F.B....*sY...........b/..!...`.!F]Y[._..d0....k[..a5 ........n......]'.5L...M....c.R.......XE|.)-7.M....?..?...A.~y.......A0..X.....Jpy...Q....~.p....F.%...0.a.
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Wed, 13 Sep 2017 05:03:03 GMT

Content-Length: 4

Connection: keep-alive
DONEHTTP/1.1 200 OK..Content-Type: text/html; charset=UTF-8..Date: Wed
, 13 Sep 2017 05:03:03 GMT..Content-Length: 4..Connection: keep-alive.
.DONE....


POST /?v=2.0&subver=6.21&pcrc=1963072066 HTTP/1.1

Accept: */*

Host: rp.downloadastrocdn.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0)

Content-Length: 3776

Cache-Control: no-cache

....V.....2$....|................-f\.....OD..\..W...f9.......,J-'r.a.-.U..k.
....\.ix0..R..-=....4..B..4..........V............d.R$K... B.i..b2>./.v.4E...t...}P...e..#.M...f..m.l...ig.......c.!4O....@t.q.T....fQ..0^|2r.p.m..PS...7.wwDZ..%..Q..|.5z.t.x.".3.....PS..yk..).....p?..&.92X.$~.Z!X.>.V_....~......p.c.><.......5k2".MQL..q0....>.o...7^..Z%.......r...*.3@u.19..8^.iue$...&.eUM:.&...W..U.,........@.....D. .....*
o.G.-.f\P.....DjW..,@...H.. ...P...@..xQd..........<.....a8.c.3M...Z.g...Q....X...;.g...G_.C.>.hX=...M.7"2..
...~.8...T.@?!.?J....I.....X.;L&. x....{R.]v.4.m.d.u..h....\.i./E.03lt..8....d..mj.*.(k.Us.s....b?.g/.k..T..f.^.I.....G
IQ...N...G5'....Tb...j.$...W........U...5....,EoE.M..s.....p.PG...r..{...[l0..3..o..dBxS4-

.6.c.....="..-Ovk7..j].P....~.....k.N.......6k...\kBi..=B.8..w..D{..
>c.{...0.n...#...I.K.B..1..;..B...c..
S.4"..*.d......;.....iu..q

........e.x..Y...B.\.@..F(...^.Z...S......M.xL.K@../]_.i

`c3..N.s.o.m.W......?........P..f8.....3.D....@.SK...%.o..a-...{.M....K.
VT.....6.o...oW...N...G..n..e-jC....#rc.....
VL...asoZ].Bpc...5...............R....\.....0.Ba..*o.SD_.mJ.v.4.,.;Tdt.SH.........}."=|^.W.%......8MO..V."(.zS.....RGn"(.l2.(..f...B.....e...%^.Ze.,ju.t@q............O.N...FO....6..Eq.Pp.7.qq..=..Qy............Y..*[.h...$OF......zTGV
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Wed, 13 Sep 2017 05:03:23 GMT

Content-Length: 4

Connection: keep-alive
DONEHTTP/1.1 200 OK..Content-Type: text/html; charset=UTF-8..Date: Wed
, 13 Sep 2017 05:03:23 GMT..Content-Length: 4..Connection: keep-alive.
.DONE..

POST /?v=2.0&subver=6.21&pcrc=500285460 HTTP/1.1

Accept: */*

Host: rp.downloadastrocdn.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0)

Content-Length: 2000

Cache-Control: no-cache

...3E.Q)_l.y...K.1>Q.9v"..0....AZ.g.....6.t=..h%(....r

.M....hxk...3g..>.....B9.f..CMS...w,)K.......J.Jb.9a%A>.q....gz....!.?.....#h....... .8..I...?.....:..G.}U5.8.... ....."....M..|Kbp...I.S. $Z..\..T*v..XrU...OH_..C.C4.H..NHo..ZS..6..5.....hc....;.].......;..Y.a.J..............o..h..:.Dj2......#......h.;.........'_.Y..O..m~.y.c.7wi...=e{......@.a.....*V..=Q..:(xO}..~m.o.b...........j=.} 7].-l.Z..r...M.).(...e'...2.8.uIG..D.Y
..^...p..o...7D.2...w.~..z?h..;..2....>x. CuVQ.R.T.......q>...m,Ym........."b.GjS...&|7....N.".....a/HYYe2.....a.a=?...ajg.j... S$...

T9.."/;c..:WPK..M7K.....K..s.t&.zGJa<.N.F...P..T.c.\.DJ.......O.t#.)T`D
HG.1..f.:....y..|.b.Mrr.^.F..T^.y.......wO.:c.j?..-..^.|..K..4.........6..`.g.Z.^..b.?P.BN.5........A...^.i.....y.._j=..!!...W...^..c2C.~>b...l..-ec..!Ex2..!<...uS.y[....T...3............Pk.....@...ZO.....V..2.....l.@...w.x[..;.`^..j2\...W.. (.%?........}.Zh.b...a...S....

.k....~....[....y-2.s...(7m..$.......1kF.6.i..d....x..BS..y.....^M..iA?..N.)k..b.@...sE...Z.,>K...kI
.P...<8...........6..@uy.....tZ...p).\..8..Z..i.O.V..6.K.j...P..".F..~,jZ4!p7..".$....Y....-...@.....05V... ?.dS...<..t........{.6.>X...|..??O......./Q...t.. ....sc..Z.

|e...'.....@.Z.w.d.Oqa.`R..i.....EZ..m.|...... ..5/....*....E.....o><._...fF....}.
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Wed, 13 Sep 2017 05:03:06 GMT

Content-Length: 4

Connection: keep-alive
DONEHTTP/1.1 200 OK..Content-Type: text/html; charset=UTF-8..Date: Wed
, 13 Sep 2017 05:03:06 GMT..Content-Length: 4..Connection: keep-alive.
.DONE..

GET /js/show_ads_supp.js?pubId=4756 HTTP/1.1

Host: VVV.1-1ads.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: */*

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: epomUUID=e032e450-9840-11e7-96fb-f8bc12553970; ucv=10976-UA-1505365406978-24--

HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Cache-Control: max-age=600

Content-Type: application/javascript;charset=utf-8

Transfer-Encoding: chunked

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Wed, 13 Sep 2017 05:03:29 GMT

Connection: close
a..............200...=is..... Dd..L......h.#.r..W$9..E...IX$@..e.....^
_..@J....V..............z..!Av3O..&...i..a......]....j{~.4.....mxo...N
.8\..$.o.I.$....w...-"..?..<Y..HJ.....W..%....EA>g..0..9....0...
...W..........(.eY...(~IV...K(8M.i4..'A..\......7'.e..b.jAQl...:....O.
.V..op..a..B...q.&..0...uL.c.k.MM...^@r.mdy..3.u..~.&..VC.......8.....
.]..d..;.....#{........f...ek..`V.@...e......9....`s.p...;.B.^,....[..
a.g....[V.].p.}..>.....6~.g."...4..m...4n...V.......x..$;..sk.9....
.....v_....0k......gYl.......y.........y..t./...S....200......&.#.....
.N...=z  ...eL#-W....K..-;..%.O..n..;.....&.^49.3.D..R.k.m...>.{.3c
..B...^1z.(....g...-.n"..A...V8.M..~..E...>.......F.J.GF.....(...e%
-...d......S#.....j....1X-...!......<...@......M...V>.Qn...a7...
./..?.u.N..!0.......s........@4..;[X;k\`..4H.4..U.....%...hU.....y>
..w...0............"$..&...<_..{.X.....H......4.$^@.ha5M.qze6.g.vh.
..q.y....@..4c.0{A..F.d.@.]L..l,..........E1........wW.'.Hi7.&.q.....t
..).....y.H.......`.\)^..,....E..4.... ..u..5$.^..........kr.'a....|.3
...i9....sZ.6Vk2..a.o.l.v&T...200....!.Cl{....s...z.t.V.;U.=.&c.k .4&.
.B4V[m)..c.x..&8..S(NFy4....$.....Nm*..9..;@.k.....-.YU...D.......wIe.
......-.w .2;....{`)~.]....kpI1..A.D1<..4Ab....A...hE.4...P%.d,.4..
..e.o!41.r?]Ol..p.......EE...`[..2f.g.#..w...C....<y....)..n....i..
............&g .E..r..:..aF..sf..tf=....h...L..`..H..th.H....}..{...%0
/........O9.4.o.....t....?.b."}.Nj.?]g.......-...H.r@Y.;Hv|......!/...
.sq..0..q.....5>im8n.R.E.................R.....}...*..P....:...
<<< skipped >>>

GET /icon/tvtrigger_64_64.jpeg.pagespeed.ce.Dv31YWSpKd.jpg HTTP/1.1

Host: images.downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/jpeg

Content-Length: 1055

Connection: keep-alive

Link: <hXXp://images2.downloadastro.com/icon/tvtrigger_64_64.jpeg>; rel="canonical"

Accept-Ranges: bytes

Last-Modified: Sun, 06 Apr 2014 23:40:23 GMT

X-Original-Content-Length: 1055

X-Content-Type-Options: nosniff

Expires: Mon, 18 Sep 2017 05:03:26 GMT

Cache-Control: public, max-age=432000

X-Page-Speed: 1.12.34.2-0

X-Cache: Miss from cloudfront

Via: 1.1 8ae90016c6518cf41b3f72b15c52da03.cloudfront.net (CloudFront)

X-Amz-Cf-Id: msoYecQyLL0PvrtVxh2rKY8ESLLoiJ1fhZtOyCTYNj-H8B0JU602FQ==

CF-Cache-Status: MISS

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f5d71518af8-KBP
.PNG........IHDR...@...@......iq.....IDATx..[O..Q...Bz#I<.z,(IBoa%Y
!YYH.)..L.B....-/.....R.Y!JV..).#$..$I6....;....3..=..;......o~.w..)h.
.I.1y...$....Nbj.;.mL...f..L....$._.......R.......I.G...,.......}.....
.=.A.u..L....._.!.'....r.y;y......dI...~..t.B.I..<B^G...!.W."...,..
.......".Ngr%..<.bA..|.z.j.%.I.......g|B...h.bdRye}.k.u?..d)A..3Y.c
.|.....$.......D&U.....W...u.......;#2.r&.{..\wj.Y...dI<.X...p.....
h....fgu=T......\......8.j..p)@1....p...$..L.=.."Q.O..@.b.W.A8.... .P.
...E^.`.b.@d...:. (..7..k..Ut....W....G...f].xkcaNy.0?...~.....F....(.
..t.N......H..f.....] .j...|.....*..p..'k.v ..L.b.7..u.a..S.....0(...7
..Q....s....}}..e!.p...=...2..'..~P5..Y.ry..2...y.._.......=..xM.>.
......,h..|....U^.C$..$...Md.....bQ$=*......?O....L.....|..n........f.
..|..f".j75O.y.u....8........<$o.....".n...-*b...1Y...i/..1..Z.7..@
.._=....ZR....... ...V....q...=.."...2y....w... K...T..(. 2.&&u..[..F.
.)g...Z..(.02...I............r.<......w.z^..Ot5...2.V...A.s.";{..V.
VyO.......jW.A....K>O..r.... K.'..*...L.9...h.7.@. ....E&...5....%.
{w...........2..7....IEND.B`...
<<< skipped >>>

GET /icon/searchmax_64_64.jpeg.pagespeed.ce.6D9Pi5Ivts.jpg HTTP/1.1

Host: images.downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/jpeg

Content-Length: 2672

Connection: keep-alive

Link: <hXXp://images2.downloadastro.com/icon/searchmax_64_64.jpeg>; rel="canonical"

Last-Modified: Sun, 06 Apr 2014 22:21:01 GMT

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Cache-Control: public, max-age=31536000

ETag: W/"0"

X-Page-Speed: 1.11.33.0-0

X-Cache: Hit from cloudfront

Via: 1.1 397695a9a209a9686865e1f0d0b05883.cloudfront.net (CloudFront)

X-Amz-Cf-Id: XYfgS66SrzS5s3cXjYkysYq4i029X4BGC3SPDbwhhlseZBFnKPc11g==

CF-Cache-Status: HIT

Vary: Accept-Encoding

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 39d88f5d72128406-KBP
GIF89a@.@.............................................................
.................................................|k.....l.ng.wt.......
......kT....J9.B*.:). (.0=.3Q..............w.te.2?.J/.7,..............
........(2...............................VJ.......................l..o
.,%.=9.......................{....uc.CD.ZL.`O......y..pr..............
.............q...L^.je....v~.Y`.R[.VZ.`e.qu............._x.;C....ps.Yd
.>O.:D.>@.::wTQsee....5i.">.MM.AL.>J.@I.BH.BF..........IU.
AK......."N.....[.=T.FC....}~....^..FX.LF.....2.KE.@B.>F.jo........
.....vj....~d..s....q[.............VV.................Wp?F..n..HG|Hx.i
}.;=.01...dd....im.xz.w..|............k.....X.ih....WY...........gfvY.
.m..8K.KL...LL....77.tz........Y\.........bfu....~vJJ....;;.z}........
.~.SQ.KL..................!...Z..fu.].*).:.c....Qk....6`..L..a...mh...
......np.,...7...o......hS*.q.c.m5,b..Xl0......d.@Y.bV...,hE.Z.....Q&9
...r.....*r.x.s4-aWE.:....`...5....Ru.c....p.[.."W..`.s..]iH.....v..]-
pW....K.[..&...%.c...v...Us.;8e.w.CI.....dRs..!..oy..^.k...F....`.8...
.p..pa.(3....<.;.yT.r.J....Jz......t.&.{.....,>...|.D.....ilc?..
.:...].c ...Df....d&;...q.T>......]...>..`.....).....~...Y.G?...
.....p.>...9...v......}.Y...4 .Mh........GMj....;..
<<< skipped >>>

GET /ads-async.js?key=50f37551d91ad5c09e6af0367038704f&tz=3&t=1505279010033&requestUrl=http://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare&pageId=1505279004996&plWidth=320&dW=true&plHeight=50&dH=true&tarId=50f37551d91ad5c09e6af0367038704f_sync&scrWidth=1276&scrHeight=846 HTTP/1.1

Host: VVV.1-1ads.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: */*

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: epomUUID=e032e450-9840-11e7-96fb-f8bc12553970; ucv=10976-UA-1505365406978-24--

HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Access-Control-Allow-Origin: *

Cache-Control: no-cache

Pragma: no-cache

Expires: Thu, 01 Jan 1970 00:00:00 GMT

P3P: CP="CAO PSA OUR"

Content-Type: text/javascript;charset=UTF-8

Transfer-Encoding: chunked

Date: Wed, 13 Sep 2017 05:03:29 GMT

Connection: close
2000..(function(){.var tid = document.getElementById("50f37551d91ad5c0
9e6af0367038704f_sync");.CustomWLAdServer.execBodyScripts(tid, "\n\n  
<script type=\"text\/javascript\">\n    window.area51 = window.a
rea51 || {};\n    window.area51.banners = window.area51.banners || {};
\n\n    window.area51.banners[\'e26d1ce0\'] = function () {\n      var
 that = this;\n      this.bumpeVersion = \'1.1.0\';\n      this.buildV
ersion = 887;\n      this.bannerId = \'126641\';\n\n      this.common 
= (function(){var e={};if(!Array.prototype.indexOf){Array.prototype.in
dexOf=function(e,t){var r;if(this==null){throw new TypeError(\'\"this\
" is null or not defined\')}var n=Object(this);var i=n.length>>&
gt;0;if(i===0){return-1}var o= t||0;if(Math.abs(o)===Infinity){o=0}if(
o>=i){return-1}r=Math.max(o>=0?o:i-Math.abs(o),0);while(r<i){
if(r in n&&n[r]===e){return r}r  }return-1}}if(!Array.prototype.includ
es){Array.prototype.includes=function(e){\"use strict\";var t=Object(t
his);var r=parseInt(t.length)||0;if(r===0){return false}var n=parseInt
(arguments[1])||0;var i;if(n>=0){i=n}else{i=r n;if(i<0){i=0}}var
 o;while(i<r){o=t[i];if(e===o||e!==e&&o!==o){return true}i  }return
 false}}if(!Array.prototype.forEach){Array.prototype.forEach=function(
e,t){var r,n;if(this==null){throw new TypeError(\" this is null or not
 defined\")}var i=Object(this);var o=i.length>>>0;exception;i
f(typeof e!==\"function\"){throw new TypeError(e \" is not a function\
")}if(arguments.length>1){r=t}n=0;while(n<o){var a;if(n in i
<<< skipped >>>

GET /icon/tvtrigger_32_32.jpeg HTTP/1.1

Host: pic.downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/jpeg

Content-Length: 627

Connection: keep-alive

Cache-Control: public, max-age=432000

Cf-Bgj: imgq:85

Cf-Polished: pngoptimizer, origSize=803

Etag: "2a99ec2e89f47ed96484a8c2f8256200"

Last-Modified: Sun, 06 Apr 2014 23:40:21 GMT

Via: 1.1 b6f0727c2e1a2c7e619a6cb047e97f75.cloudfront.net (CloudFront)

X-Amz-Cf-Id: jsguLza3bDe-4jRhxGuHftiDpt9YM7BBpdL1sFxqewFQVU5NLTDjfA==

X-Cache: Hit from cloudfront

CF-Cache-Status: HIT

Vary: Accept-Encoding

Expires: Mon, 18 Sep 2017 05:03:26 GMT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 39d88f5d72428b2e-KBP
.PNG........IHDR... ... .....szz....:IDATx...1HBA..%$"..$$$B..!".)"".A
..!."....!..p...........hhp....h.....p......|...;..;...............s.:
...`.....Eb..&..2.....>....a..Ll.P.DA...K`.d@{#..0}.'..n..H.V["m$..
.`...mpE... .&. ...'...UD. .|.....`.........Q...&.....w..Q.......F..\.
".....R>.....k..H.......!.C.y..(k..-..i%g..*i..X0..b@T.'c........B 
.. ....|.G...U....7]X0.T.U9.h.i.........v..6nNj.Q.......:.....n.Ti.S.{
.....1.0...5.:.D.\..V..t,.f..CJ..v.f..r...J.X.. -&..#....^!.6...e.....
....izA..S..%.R......(Q..o...qX.l............Z.]LS..nPo.>....u...m.
........`NJ.....0J...E.......]......T.s.....I....-V!......8..OQ.....IE
ND.B`.HTTP/1.1 200 OK..Date: Wed, 13 Sep 2017 05:03:26 GMT..Content-Ty
pe: image/jpeg..Content-Length: 627..Connection: keep-alive..Cache-Con
trol: public, max-age=432000..Cf-Bgj: imgq:85..Cf-Polished: pngoptimiz
er, origSize=803..Etag: "2a99ec2e89f47ed96484a8c2f8256200"..Last-Modif
ied: Sun, 06 Apr 2014 23:40:21 GMT..Via: 1.1 b6f0727c2e1a2c7e619a6cb04
7e97f75.cloudfront.net (CloudFront)..X-Amz-Cf-Id: jsguLza3bDe-4jRhxGuH
ftiDpt9YM7BBpdL1sFxqewFQVU5NLTDjfA==..X-Cache: Hit from cloudfront..CF
-Cache-Status: HIT..Vary: Accept-Encoding..Expires: Mon, 18 Sep 2017 0
5:03:26 GMT..Accept-Ranges: bytes..Server: cloudflare-nginx..CF-RAY: 3
9d88f5d72428b2e-KBP...PNG........IHDR... ... .....szz....:IDATx...1HBA
..%$"..$$$B..!".)"".A..!."....!..p...........hhp....h.....p......|...;
..;...............s.:...`.....Eb..&..2.....>....a..Ll.P.DA...K`.d@{
#..0}.'..n..H.V["m$...`...mpE... .&. ...'...UD. .|.....`.........Q
<<< skipped >>>

GET /icon/who_is_extractor_64_64.gif HTTP/1.1

Host: pic.downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/gif

Content-Length: 2311

Connection: keep-alive

Last-Modified: Mon, 07 Apr 2014 00:18:30 GMT

ETag: "c91a46c75577c5da369a6529dfbd9de7"

Cache-Control: public, max-age=432000

X-Cache: Hit from cloudfront

Via: 1.1 c5fdeb80069a624878ac38ddaf3ee071.cloudfront.net (CloudFront)

X-Amz-Cf-Id: VhVc8OP2OfH2vxoOpG4fbIKV7zOcyUqZqUji2Q80sXBrBD41J-qvmA==

CF-Cache-Status: HIT

Vary: Accept-Encoding

Expires: Mon, 18 Sep 2017 05:03:26 GMT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 39d88f5e72548b2e-KBP
GIF89a,.@............\..............v...........F........v....H7DA3..S
"!....c\:........[..V..n....}q..V...........^..........4(.............
................Q..~.....v.....q..o..y..}....{h...........L..].sa.....
........nX....*.........G.4.........j.A......B.P...i..y.a.........Q...
..c..;...................................|.K....................1.....
.......r...............................................|........o.....
q..i........I........z..`...........]..f.....F........Y..C..>.....7
..S..-...........K..U..$........]J.......A.......].....aJ..p....y..u..
}...4.....E.....E.....}........$..Z.....=....w........................
......................................................................
......................................................................
..............!.......,....,.@........(`......\.......H4@......(...#D.
..0.......S........$L.P.A...........

GET /img/ltr/top-lang-bg.png.pagespeed.ce.wd4zsdToMV.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 171

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: pngoptimizer, origSize=1022

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Last-Modified: Thu, 12 Nov 2015 07:57:06 GMT

Link: <hXXp://downloadastro.com/img/ltr/top-lang-bg.png>; rel="canonical"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f5d77da8448-KBP
.PNG........IHDR...^.........p.......PLTE.............................
Ts....tRNS.......a.P....8IDATx.c.. ....8-..........R.........$.o../...
 ......J.....)..V......IEND.B`.....


GET /img/ltr/body-bg.png.pagespeed.ce.ljEmyPrrnL.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 175

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: origSize=214

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Last-Modified: Mon, 28 Jul 2014 11:24:54 GMT

Link: <hXXp://downloadastro.com/img/ltr/body-bg.png>; rel="canonical"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f5df7e38448-KBP
.PNG........IHDR.............&..)....gAMA......a.....sRGB........ cHRM
..z&..............u0...`..:....p..Q<...-IDAT.Wc.0.S1..0.S7.eP6..0..
r ,Ms{Uck(G..Z................IEND.B`.HTTP/1.1 200 OK..Date: Wed, 13 S
ep 2017 05:03:26 GMT..Content-Type: image/png..Content-Length: 175..Co
nnection: keep-alive..Cache-Control: public, max-age=31536000..Cf-Bgj:
 imgq:85..Cf-Polished: origSize=214..Etag: W/"0"..Expires: Thu, 13 Sep
 2018 05:03:26 GMT..Last-Modified: Mon, 28 Jul 2014 11:24:54 GMT..Link
: <hXXp://downloadastro.com/img/ltr/body-bg.png>; rel="canonical
"..X-Page-Speed: 1.11.33.0-0..CF-Cache-Status: HIT..Vary: Accept-Encod
ing..Server: cloudflare-nginx..CF-RAY: 39d88f5df7e38448-KBP...PNG.....
...IHDR.............&..)....gAMA......a.....sRGB........ cHRM..z&.....
.........u0...`..:....p..Q<...-IDAT.Wc.0.S1..0.S7.eP6..0..r ,Ms{Uck
(G..Z................IEND.B`.....


GET /img/ltr/footer-astro-logo.png.pagespeed.ce.8c2hcLv_x8.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 1556

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: pngoptimizer, origSize=2407

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Last-Modified: Wed, 11 Nov 2015 12:32:58 GMT

Link: <hXXp://downloadastro.com/img/ltr/footer-astro-logo.png>; rel="canonical"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f6070178448-KBP
.PNG........IHDR...a...!.......5.....PLTE.............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................~tRNS............................   ))00006@@@@DGPPP
Z````aepppprtuu}......................................................
.........f.<.....IDATx....w.E......`.m5PCO.....b...l.Z5?4.V6......U
E............P.|......~vnXh.z..9.....W..x.......r....z.._=......$.1..N
.......O.<..?...8.P.....M....U.N!|..j....o]p.[...=.u<.;W..Qh:bU.
..*..~.........W..{S.cB1V.V...`/....8TQ(....#**e:^......@R.{......*..T
c2...~..M.............f@0.....tB.oAq.Z..Q.F.:!..p....F....t..X8I.2.(..
52.:)..b:!Tc3.......G...z.F..........-....T.(/. .1.$......3 ....~.....
........~L..k/.C....~....<.o...b^.........4...s........G4U.........
.o*...Z...iX..E........DkZ.hm?.|e_w.k...0>.G..!.....s-.."8.O....D..
....i...i..2*D.b..>.M..9%...2.v...Y8........s..3.........8...#.sC.}
.\..;tJ..,..hG..e.8!.....Z..T.3....@..]...l....Y..&X...n.......pbXGX..
..R..... %...Cef@...`.;@...!\;._.u.5.q.6#0....v....}....dyL.4U.....vIl
C..A.n.F.........8k'4e*..'...R....t.m.c1 m.~.z..^niP..$B.v.*'.....fMjh
....a._t.....a...H.A64|_....D(..e.&..c..&..uA...J..J..q....d.".w...}. 
..:.....$_..I.*.....6.....00l....p...s..<....&...c../.9#.d...A.
<<< skipped >>>

GET /img/ship-top-on-15x21a.png.pagespeed.ce.XsZELdxKhM.png HTTP/1.1

Host: downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://downloadastro.com/css/A.css-ltr.css lang,,_nl,,_style.css jquery-ui-1.8.21.custom.css jquery-ui.css,Mcc.3HkGy3D1iW.css.pagespeed.cf.e7vat_h5hx.css

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005; _ga=GA1.2.92285100.1505279007; _gid=GA1.2.687379029.1505279007; _gat=1

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/png

Content-Length: 427

Connection: keep-alive

Cache-Control: public, max-age=31536000

Cf-Bgj: imgq:85

Cf-Polished: pngoptimizer, origSize=1392

Etag: W/"0"

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Last-Modified: Thu, 12 Nov 2015 07:57:03 GMT

Link: <hXXp://downloadastro.com/img/ship-top-on-15x21a.png>; rel="canonical"

X-Page-Speed: 1.11.33.0-0

CF-Cache-Status: HIT

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f61402a8448-KBP
.PNG........IHDR....................rIDATx...=K.A.@WC.6...... ...7.".E
.-EQ....&.h)..Z........RDRXh..L..M...œa..wa.........}.R.D'...^hV....
?...,@....`.'.)...PYx.L/....Y8....I....WHv..3.G..,'.x\.Mhf....H..89oEV
.L.`.|.L...!\xaS.._..H.....a.).4..(..S....N.](C.fE....C....\....;<E
.K-!0Y za.Q.Y..N.[G.G|.r..p...".....=.u..r....E........:=..9{ /..=*O3_
C...)[......u....sz?......<<....\.@J......`.......K".F.R.g..5.7.
.P_i....IEND.B`.HTTP/1.1 200 OK..Date: Wed, 13 Sep 2017 05:03:26 GMT..
Content-Type: image/png..Content-Length: 427..Connection: keep-alive..
Cache-Control: public, max-age=31536000..Cf-Bgj: imgq:85..Cf-Polished:
 pngoptimizer, origSize=1392..Etag: W/"0"..Expires: Thu, 13 Sep 2018 0
5:03:26 GMT..Last-Modified: Thu, 12 Nov 2015 07:57:03 GMT..Link: <h
ttp://downloadastro.com/img/ship-top-on-15x21a.png>; rel="canonical
"..X-Page-Speed: 1.11.33.0-0..CF-Cache-Status: HIT..Vary: Accept-Encod
ing..Server: cloudflare-nginx..CF-RAY: 39d88f61402a8448-KBP...PNG.....
...IHDR....................rIDATx...=K.A.@WC.6...... ...7.".E.-EQ....&
.h)..Z........RDRXh..L..M...œa..wa.........}.R.D'...^hV....?...,@...
.`.'.)...PYx.L/....Y8....I....WHv..3.G..,'.x\.Mhf....H..89oEV.L.`.|.L.
..!\xaS.._..H.....a.).4..(..S....N.](C.fE....C....\....;<E.K-!0Y za
.Q.Y..N.[G.G|.r..p...".....=.u..r....E........:=..9{ /..=*O3_C...)[...
...u....sz?......<<....\.@J......`.......K".F.R.g..5.7..P_i....I
END.B`...
<<< skipped >>>

GET /font-awesome/4.3.0/css/font-awesome.css HTTP/1.1

Host: netdna.bootstrapcdn.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: text/css,*/*;q=0.1

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:25 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Thu, 22 Jan 2015 19:53:37 GMT

ETag: W/"3f05a51a1e5260f4179db8ca65307a6a"

Server: NetDNA-cache/2.2

Expires: Sat, 08 Sep 2018 05:03:25 GMT

Cache-Control: max-age=31104000

Vary: Accept-Encoding

Access-Control-Allow-Origin: *

X-Hello-Human: Say hello back! @getBootstrapCDN on Twitter

X-Cache: HIT

Content-Encoding: gzip
18a3.............]...Fr}.W.WX.H.{*..6....`.Z..I....KVUN...^.2...Of....
...... ...L..ddd...w...W.oW...C....v....../...u.}.=.mv(_W.j.....w.HfQ.
..x.={.......Y...j|....a..O?..... sa.[....>....oS%...w_..v......./?
.........C..MV.....Z...]...z..9...?.m...........}.x..g........./a`.|..
,.......sq...g..7v....eR7...6..7.}A[...&......_^.P..U........~y?...T..
.C...U...f.......|.n..n.~...q..V..~..b.../].T....*w.I^...Tl*0.6...j^..
.*F..w.G|..v.u.....>i......a..}..{.<:..7...u......*.u..b..cRw/gr
.6{.....#mv.<n...VYo...[.1.....g..[.;..iuy....qk.Uk!......{W.....3.
F...F*...X..Esq9...oB...8..........C3..i{xX%....M.........//.^^.....W.
...ehK.v......~.;..]....>.6L..Rh...S......,1MIe7.....c..a|.^..P.4*.
f.c/...x:`.b[P.?c.b.u.zWc..................~v.....n...&.}.....K.".....
i^.@7...............(..B.].v....k.~|g....J7t....h..JZ..#^.:C...0H..o..
.....D`..P._!XE9....2..k.!|kZ...Ae......i.-.q....62@i...E...h.........
.M...(..|......~...}.....b.........[.m.........#Ut............*d.?a...
..l?.q...uD...q.VM[o]..o...>...&.~.7W.uWo...f. ..... ./&L.4..st?OR.
.......rl...#...4._....v3..../.Z....-.\h9.......|~9.[.k.]...~k...../0.
..m.VFN./.&0.Gp....5... ......:.~i...D...>.....W.-,.......!.....J.t
s<.g.>;D.n...x........h.L.Z0.N.......we.-.8....y...6.td..[ .j..0
l...5}$......l....t.th.R....k.....L>:...h2.~.Q\../.{..^..*~hm.z...?
|..g.h.........A..)....._.~]...../....emV@.{.<....v08...MV.....!...
....rH=..._..z..i&....Y......b'K....XU8y&.,}9K.Po/.^Q.........O....&..
.Y..r/..n..wI8....LV...jt.2<.,Z.l.(.Y.....OS...,..;~.;.rrm..,..
<<< skipped >>>

GET /icon/english_spanish_64_64.jpeg.pagespeed.ce.ussfVaTF_b.jpg HTTP/1.1

Host: images.downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/jpeg

Content-Length: 3773

Connection: keep-alive

Link: <hXXp://images2.downloadastro.com/icon/english_spanish_64_64.jpeg>; rel="canonical"

Accept-Ranges: bytes

Last-Modified: Sun, 06 Apr 2014 16:46:23 GMT

X-Original-Content-Length: 3773

X-Content-Type-Options: nosniff

Expires: Mon, 18 Sep 2017 05:03:26 GMT

Cache-Control: public, max-age=432000

X-Page-Speed: 1.12.34.2-0

X-Cache: Miss from cloudfront

Via: 1.1 060151e99d8d3127c005756d71f3d6f0.cloudfront.net (CloudFront)

X-Amz-Cf-Id: tygagr0KCaJRph-hIPGLfvg2jEfCzjL5Jgg2q3OJckyWmspxHpLK9Q==

CF-Cache-Status: MISS

Vary: Accept-Encoding

Server: cloudflare-nginx

CF-RAY: 39d88f5d70568ada-KBP
......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62),
 quality = 100....C...................................................
.................C....................................................
...................@.@..".............................................
...............}........!1A..Qa."q.2....#B...R..$3br........%&'()*4567
89:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...................................
......................................................................
.....................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&
'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz............................
........................................................?...?.^.5...k.
............k..D.../-....kc...g.................?..../?............._.
.....M....._.&..yk....[.W.?...^. ......G..g...Yy......W.............m.
..~....5...._............y_....z>..?........c.....k..D.../-....h...
{......^Z....&.............g............^.{..3..=x.R.....x.........a..
...7..nx.G...[./!]...?}oq..y..h.......?i...j..K....\.G...1...7..G.....
,.}OG..}..w-..s....KK...?..R...g....'.#.i...}..K......1km..F].!...\...
..".?-?f_.$...%...]xo.........f....xgg.!:~.iy..D.&m.k.....i..'........
....lW.f.K..#..aS.W.F.x.*.5...,.Vt...%..SRV..?.Y.K.:..o..I......V.e..c
..2U).....8..7.VM=......pIx..6.h{,.n..|"..>"...& t.?.....F.@..?g...
P.G..c........m.m....7..&..t....<=..".h..........?.....).66...)....
..?......;?.........V.k.. ......q^_.K.f.~1|1...1E..a.x............."..
4..i..m/L..^.d..D....l..h..'.q......p..g.........e.n.ES.....s..W4T
<<< skipped >>>

GET /downloader/nl/bearshare.jpg HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)

Host: images.downloadastro.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:04 GMT

Content-Type: image/jpeg

Content-Length: 2287

Connection: keep-alive

Set-Cookie: __cfduid=d1c2530b03514e41c4dc0217bc21720db1505278984; expires=Thu, 13-Sep-18 05:03:04 GMT; path=/; domain=.downloadastro.com; HttpOnly

Last-Modified: Sat, 18 Jun 2016 06:45:33 GMT

ETag: "3f55b6a22538195a95ea779fd4fcbcfd"

Cache-Control: public, max-age=432000

X-Cache: RefreshHit from cloudfront

Via: 1.1 25f81f6cd2018b71aea19d5a5b16c0d0.cloudfront.net (CloudFront)

X-Amz-Cf-Id: -4V-uZmFJq2-R3Hrw3Af2VGLzNs2zuA7HQKD8nIZuJ7eXdWltH0qAQ==

CF-Cache-Status: MISS

Expires: Mon, 18 Sep 2017 05:03:04 GMT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 39d88ed245f58b34-KBP
......JFIF.....`.`.....<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80),
 quality = 100....C...................................................
.................C....................................................
................... . ..".............................................
...............}........!1A..Qa."q.2....#B...R..$3br........%&'()*4567
89:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...................................
......................................................................
.....................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&
'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz............................
........................................................?.....m..kO...
.g{..i..z......%....t..Zk."i..W.....Zh.].....,M....$.# ....?....k..:.i
..<5w..u}c.........Z...[.......ia.of...o..AYE...?.\.m...bv.<U..|
*...Y~!,.iKhZ.L....Z.....4t..6.:....Y...4..J.5.$..K.........=...>-.
e.|{......5K..^.|!....2..M...lo,o....MGC...K.Ce.iowoa...Y.. ....M.fy.\
...<!..W....S.....".....Ve.....?.....U.J.y..\4.BtU.Lq|Y.OS..).p..q.
...%...9.........Q..........._..l.....R.Rs.b.IN.9..*......-...x.N.>
:x?M.|?.........h...<.):=...xw[.-.U/.A..N.....5y...~..........r..&g
t;.k..'.......Ic5.......Q.. ..x...mY.v.h..m=....guo<..7.?.>...&g
t; ...O.>!._..F..O...|U.w.[O...|Ocgi.......n./..^xPjZ..{{c.i..:..s.
.M..h.......N......'..u.......(......;......J...;J.....=....:L[..Q...W
,.....G.9..8.....[.Q..<.#2....51<E..,E|...U*t.xJX..h....kY...<
;V..#[......r....S".,.9.L..idX,../6....V....5. ........C1u%W......
<<< skipped >>>

GET /icon/download_router_64_64.jpeg.pagespeed.ce.tBk10FpkuY.jpg HTTP/1.1

Host: images.downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/jpeg

Content-Length: 4860

Connection: keep-alive

Link: <hXXp://images2.downloadastro.com/icon/download_router_64_64.jpeg>; rel="canonical"

Last-Modified: Sun, 06 Apr 2014 16:16:19 GMT

Expires: Thu, 13 Sep 2018 05:03:26 GMT

Cache-Control: public, max-age=31536000

ETag: W/"0"

X-Page-Speed: 1.11.33.0-0

X-Cache: Hit from cloudfront

Via: 1.1 fe7cf59ae2c3ee8352e0a998e04d218b.cloudfront.net (CloudFront)

X-Amz-Cf-Id: LCw69vuYhFECcnJmsYRGc97ykwog4VWD4g9omMY7NHNt-jNa0of05w==

CF-Cache-Status: MISS

Vary: Accept-Encoding

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 39d88f5d70548ada-KBP
......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62),
 quality = 100....C...................................................
.................C....................................................
...................@.@..".............................................
...............}........!1A..Qa."q.2....#B...R..$3br........%&'()*4567
89:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...................................
......................................................................
.....................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&
'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz............................
........................................................?....9@.;7y<
;....:..?.9..._...<....Rx..z..-m.}./..f..^v...S~.F.u. .$.,.....o.aV
Y"..}......u......^.....o...f........v...l...m...~..l../..."~.x[.... .
&..../......E..W..........'D..^.....M...}.}.>].@..o.....c.X.]..0.&l
t;v........[I?{....k...<B.....F...\G.9}Ec]....y.1...S.[]<\.yY4..
..;............|.'...........aI?yw....^V....8....v.m,T............S...
.T...O.-sF.~..4......6[..>UM.g.w<....MRI#..Y7....`....f..z..m...
..m..5.o........o.j...V........w.... .6..... i<.h......n..!f?q...?.
..<7.^....S...../?....Y.r...,>].._...Jm...b.W..c.?.>.....o...
....~...M[.......m.gQ...u.'......_...y...?....y.<P.z>..H~.?.....
...[....Fu.x..>O....?I...nO3[..-{............zn..O.6.i.....y..../&l
t;..xSGe....%v......3q..v.U...'...g..gn..?..;v....9.........3...a.?...
..i..3E.7..qW/..".e.Fa..3,-..d...uK...........k.._..1..._.m.].=g.O
<<< skipped >>>

GET /impression.gif?b=126639&p=3048&c=10976&h=434bea7cb5de7d8e3b558257184a0316&l=UA&tz=3.0&sh=846&sw=1276&ad.trans.id=1mbbyad8zbm9&s=89f0fdddfe2c6ded7bbd372db6ddabd9&t=1505279006489 HTTP/1.1

Host: VVV.1-1ads.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: epomUUID=e032e450-9840-11e7-96fb-f8bc12553970

HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Cache-Control: no-cache

Pragma: no-cache

Expires: Thu, 01 Jan 1970 00:00:00 GMT

P3P: CP="CAO PSA OUR"

Set-Cookie: ucv=10976-UA-1505365406978-24--; Domain=.VVV.1-1ads.com; Expires=Thu, 13-Sep-2018 05:03:26 GMT; Path=/

Accept-Ranges: bytes

Content-Type: image/gif

Content-Length: 43

Date: Wed, 13 Sep 2017 05:03:26 GMT

Connection: close
GIF89a.............!.......,...........D..;..

GET /js/show_ads_supp.js?pubId=3048 HTTP/1.1

Host: VVV.1-1ads.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: */*

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Cache-Control: max-age=600

Content-Type: application/javascript;charset=utf-8

Transfer-Encoding: chunked

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Wed, 13 Sep 2017 05:03:25 GMT

Connection: close
a..............200...=is..... Dd..L......h.#.r..W$9..E...IX$@..e.....^
_..@J....V..............z..!Av3O..&...i..a......]....j{~.4.....mxo...N
.8\..$.o.I.$....w...-"..?..<Y..HJ.....W..%....EA>g..0..9....0...
...W..........(.eY...(~IV...K(8M.i4..'A..\......7'.e..b.jAQl...:....O.
.V..op..a..B...q.&..0...uL.c.k.MM...^@r.mdy..3.u..~.&..VC.......8.....
.]..d..;.....#{........f...ek..`V.@...e......9....`s.p...;.B.^,....[..
a.g....[V.].p.}..>.....6~.g."...4..m...4n...V.......x..$;..sk.9....
.....v_....0k......gYl.......y.........y..t./...S....200......&.#.....
.N...=z  ...eL#-W....K..-;..%.O..n..;.....&.^49.3.D..R.k.m...>.{.3c
..B...^1z.(....g...-.n"..A...V8.M..~..E...>.......F.J.GF.....(...e%
-...d......S#.....j....1X-...!......<...@......M...V>.Qn...a7...
./..?.u.N..!0.......s........@4..;[X;k\`..4H.4..U.....%...hU.....y>
..w...0............"$..&...<_..{.X.....H......4.$^@.ha5M.qze6.g.vh.
..q.y....@..4c.0{A..F.d.@.]L..l,..........E1........wW.'.Hi7.&.q.....t
..).....y.H.......`.\)^..,....E..4.... ..u..5$.^..........kr.'a....|.3
...i9....sZ.6Vk2..a.o.l.v&T...200....!.Cl{....s...z.t.V.;U.=.&c.k .4&.
.B4V[m)..c.x..&8..S(NFy4....$.....Nm*..9..;@.k.....-.YU...D.......wIe.
......-.w .2;....{`)~.]....kpI1..A.D1<..4Ab....A...hE.4...P%.d,.4..
..e.o!41.r?]Ol..p.......EE...`[..2f.g.#..w...C....<y....)..n....i..
............&g .E..r..:..aF..sf..tf=....h...L..`..H..th.H....}..{...%0
/........O9.4.o.....t....?.b."}.Nj.?]g.......-...H.r@Y.;Hv|......!/...
.sq..0..q.....5>im8n.R.E.................R.....}...*..P....:...
<<< skipped >>>

POST /DownloadAstro/?v=6.0&c=1646997996&t=1310564 HTTP/1.1

Accept: */*

Host: os.downloadastrocdn.com

User-Agent: ICAS

Content-Length: 1408

Cache-Control: no-cache

.I..~...$$......xh....).}........@89?`...(.r..Uh...v.:..

.......y..^...8.L.3m....s....H..=....c...F. s....Dx.Akkd...o.|..K..z.pW.?...... m.Y..Y.f...a
.&j}.R............S2.`....6.].......zn9...9..G...k.4.....^.....-....7xw..._.Q.,......'.j.}.T..qf.h1..=.L.}.~c.4...<.....i..4../..G
...c...~.U.s..9...[.N..T1.Z.%. .....jM.K@P.../A;u.V...).wN.^.3=v`.../}......8.-.....7..9.......n_.#Hn....9b.b{..PL.1..['Ou..0Z...5.....n8...q.|.J....._.O..i.w...q.P..x...4?.j.suh.....N.jkS..w...N...6R@5.H.<....LR)`.u.U.*y..u.S&Y...U?BM.=........\=....|-....2...D"6-#Q..-..~@.,...bT.%.S)a..b.Vl.....-;......Z*..X].{o.n..a$.....$e%1.-.....(.0..b..v..I..E7../..z.....&........m
..B.#Bm..i...F...=@....z.kd\7.<.]4.d&..yO...D2l....=`.......r~z `..O.h..l.....q...=....].H..u..,-..T.x.eC.wC7.....s;..../...q.(.L.e..q.U..pI4U...Z.;......M.$.U..i.6..6\.z.)^..F... Hs.............M....;.q.xS..N....S.nnj42.....O..I..d...........D.....C.....R{..[.......... .].R..F.X......3...G..b.._x=D.Q.w.qO...\..<R. ....5...b..)xY.g...o...4..ZV.8.>.K.....@.......% .,.= ..........\)..DKylqM..}.c...k..8.m.....[.,.?R....

.3... y;.xs..{;.@.wm0..WN6.F....m..4- lY%......,;z._..@.........C...(........V.[.~....H..?e$...V.3!..,rC..V..[.M....].hB..in.....X....t..q............s...'...|r~.#$G..........n.r..........W./N..m~...>........P<........^.....r....1.........u.~..}]...uj.X.p.h.R. 
HTTP/1.1 200 OK

Cache-Control: no-cache

Content-Type: text/plain

Date: Wed, 13 Sep 2017 05:03:04 GMT

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Server: nginx

X-ICSCT-CC: UA

X-ICSCT-GICSET: 13718icuthotfixCSAImported

X-ICSCT-IP: 194.242.96.218

X-ICSCT-ISP: Pitline Ltd

X-ICSCT-ORGANIZATION: Pitline Ltd

X-ICSCT-SERVER-NAME: ads-slave-173-production-eu-west-1-i-0c2c4a47aef0e051d

X-ICSCT-TIMESTAMP: 20170913000304082

X-ICSCT-VERSION: v1.7.3

X-ICSCT-XC: 1f3cfb072bc5ded412eb0f20eaa0b3fa349c056a

X-ICSCT-XS: 91bba9083b637bbb85f2bc525458ea3d2e0cb405

X-Powered-By: PHP/5.5.38

X-Robots-Tag: none

transfer-encoding: chunked

Connection: keep-alive
1408...%.H...H......(. ..u.S......?...>/.I...Q..J...7P.N ...'p..G..
@!...8..#.$.bokn......ln.L.I...@2.....gI..g..TH-?Z.!@...*..F.p...$...&
gt;"h}...D.:..0....N.5..oeD.a.e...6..^..Uw....f..c|......t...>..H..
/./4>F.d.N.r.L..W..d........j^u.'e.....`~..`O....Q..U.u.0.i#V.9.GJ)
...{...H...U.0oG..8 ..`..w.T.K`i,?)\5..e..r.q..3....b.l.....o..q..3..2
6%....6..2.f.p.0i.W....nEK.........W...s#.........h).m....\.Fd.W... j.
....G....Y.xN.....Ot.0. p....0.Ry....4...O"......5..^{Z..O........u...
........i3.=!.....}.^..j.C...G..J/.q...at/v..Z..SU..rql.F..u#0T..I.C..
...6{.\.S.A.._.8<S .../gq.a..y.....Mz.d.lc*).......Ky6..f.5.{..!..9
...^... ...H....8.q..0.K......*.3'.....I...*....Ws.L.....G~B.f......B.
\Q7..t...J...z.m.eK...g3m...3.H1....5]...x!.u.ong..H(.@!.........,)..j
4W..!q ./}S..Aq6.ey2..!..Fo..z..>ce.43p.x..3...f..6{.o...K.J..W.y.k
.M../_h............W.Z....^.../.....D....C...t4..B..,.....Eq...d...M..
...i.{..X.u..>'..B.......... .|:..2-..&3$.@. .oB.$...W.H...".J.....
?..P.h5z....*.].J....a...].3...K.....G....|O..N...|~#.Z....6....'.B...
N.. .dN...D.w......E..$..qrF..|.h..h...e..xbV.......*0.Eyj.. lsen.4...
K..8u..i!...3}2.]8...s...u..\...J...b...c.e..d.OWx......C...q.J.O7..y.
8K.U...mT......x..W`....`.z.Zu.........IR.....{.7..h..r...Z..)'=qL.`..
|E..Et..^vr .R.f`w.C...)V...=...w..).}...o.D@..b;[V.l......T...t..dM..
...4t..u.=b......KrJ...K...t.c.P|.F..Q...>.l.#...uW...y......`.....
..0d..5rc.J.V..........hL.C...G.....V%..Wf.X.....N.......2.y.9.Z..J...
<6.`.......u]..t..7.=Aq.lW;t.....Z....m.Ngh/....`Wn..xqb..O..\.
<<< skipped >>>

GET /files135/102/10976/126639/Opera_Branded_728X90_RU_Gray.jpg HTTP/1.1

Host: irncdn.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/jpeg

Content-Length: 32398

Connection: keep-alive

Server: CDN77-Turbo

X-Edge-IP: 185.180.12.10

X-Edge-Location: viennaAT

X-Cache: HIT

X-Age: 315832

Accept-Ranges: bytes
......Exif..MM.*.............................b...........j.(..........
.1.....$...r.2...........i....................'.......'.Adobe Photosho
p CC 2017 (Macintosh).2017:04:30 13:04:01.............................
...........Z...............................&.............(............
.........6...................H.......H..........Adobe_CM......Adobe.d.
......................................................................
......................................................................
........."................?...........................................
...............................3......!.1.AQa."q.2.....B#$.R.b34r..C.%
.S...cs5....&D.TdE..t6..U.e.....u..F'...............Vfv........7GWgw..
......................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%....
..&5..D.T..dEU6te......u..F...............Vfv........'7GWgw...........
......?....n'K._m..Y...V..^.......i..noS.5Q..h....my....1..c.{.k2ko._n
...V....C..[..nef.N.lkAg.}/......[_R.......>3\...U{l.........e.../.
Q...^...{..._..........?...o.............(.~.[9..o.,........sE.qh.....
....kk...N...?G....BL.H..U...l..y.B..?.....i9....le.&..=..6.^.........
...>......O...eeb.ON.3$....ck.5.......k..._...Z@./N.......i.....To.
=....K*cC.. ...=W?.......S.gZi.....`5.7....=.n~K......c...dz_..D..a.{)
......K..V........k....O./.....e...j..d......g........R....H9.....n..G
.....{w.IM.}a.....]\6.[.....aU........g.....N..,.6..U......ma..84..Sk.
.......:....W>..........%....Y.3..6{...D.^vu.mUd....5...........Ji3
...c............{X.{!...f..c.L. >.a..`.....FW[....\.Y..cr=Z.m..
<<< skipped >>>

GET /files135/102/10976/126641/t/60315/Opera_Branded_800X440_RU_Brown.jpg?cs=0c9ba6d92bc4ee3d9f88f27e15e292b2 HTTP/1.1

Host: irncdn.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:30 GMT

Content-Type: image/jpeg

Content-Length: 67538

Connection: keep-alive

Server: CDN77-Turbo

X-Edge-IP: 185.180.12.10

X-Edge-Location: viennaAT

X-Cache: HIT

X-Age: 315748

Accept-Ranges: bytes
.....[Exif..MM.*.............................b...........j.(..........
.1.....$...r.2...........i....................'.......'.Adobe Photosho
p CC 2017 (Macintosh).2017:04:30 13:04:00............................ 
...........................................&.............(............
.........6...................H.......H..........Adobe_CM......Adobe.d.
......................................................................
......................................................................
....X...."................?...........................................
...............................3......!.1.AQa."q.2.....B#$.R.b34r..C.%
.S...cs5....&D.TdE..t6..U.e.....u..F'...............Vfv........7GWgw..
......................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%....
..&5..D.T..dEU6te......u..F...............Vfv........'7GWgw...........
......?...I$...I$...I%)$.IJI$.R.I$...I%)$.IJI$.R.I$............u...^m.
52..`...........I...............n..........Y..l..W....[YL."&..........
....k...7.5.G........y.......K...ec.=..C0*..t.h{p......GO....'..q.....
....~.........gR.....o...R...7.n?....Z...;~....1...w...&...8..........
..@...3.....W .....9......d.......?.....f...a.Zs\y...t......gZ.k....fN
5.R.E..Rf.M6W.&5.g..........H.GN.....it..Zx....^._D....:..M...........
6................,.f.I.%I$....^...k.]..X....\g..e..V.]Q.bGo.V......wV.
...i...>=...~E.o.H.i...c.G...S./...9p.w...a.....]..qG.L"#..>8..q
L.q.....d.>W'.....'..Kf....g....U..'.t9.7n].b....g......~.v[}......
z-.YT<a.......\i.k.........o.~.....W.....7...R[..Bs..W..6...m5.
<<< skipped >>>

POST /?v=1.03&c=cbc1606c&at=1301533066&cntr=0 HTTP/1.1

Accept: */*

Host: info.downloadastrocdn.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0)

Content-Length: 172

Cache-Control: no-cache

6l7GU7LYt04pVHc/00d7Jq3echfF9QCpjdqI9kfl18yO8mMVUPo30YnwvReqCrHTbznZ7A0gHrgXebFJFugy3nqXVfoP6/qg9XdM4i15mWyOsJPiSSMvF0BLQ6L2zfRYtKtm2BUfJmbsea/nteAj56ukreIZEtJ4bNoNHHyamxw=
HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: text/plain; charset=utf-8

Date: Wed, 13 Sep 2017 05:03:03 GMT

Content-Length: 1176

Connection: keep-alive
rgT1mxKvxg9w7khkJiNed2nyWDM/Cyeks LdTtXVh0isMc5zwBF/L1ghe/rc7orIrwMsUb
v4VSDPBVxIdJK6DHx4JcIoO4tL5b02UtpnH 3a01bVELwRCcPzqleF4TJU3T0HOWCJanEN
C2MaWHJj6DlJnT XC6Za0 nt4bDN7GWw929mTEIMGZR9 6gcFUWp6pg3cR1Mfv5gfI9sMO
neW7f6n1PlY lZ6pSpF6H6DimWa9JJJ8MMmOXzTfjcU5AuK63jfsUZR95OB1vMgkDgb3OK
8hM9kwRwjhpPLd7jFo3pa/UcxjNkIVPXKfnpQrI6 hsJQ2Kh5TCqzdydcryQvnJf81CLQn
8DpJpryi9J0Whmp6wrPdh2LeabWBnm4tKYCZtJIffkWiTZtg/KaZuGRyMf032v8p wBzcG
221dl3AeR7noUfKFrgyLnN9213beuVlCBkABPnx2pJxdqwewVpSn5aIP5gIjv2JB y/YCF
oq8PSgLuVlshLDu0Fvr5HhpVtC9XYCAi/6jbzvLBNIF0s9dQM11WIVme Ushyh16sT4DOD
9b04LVaNV1NoaIF Eel4RSYX9tKNnYARJ0UCHC1ysWfmAj2 0lsBDgGk8WpET43 AYRO0r
j3YuYVSrdNlH6k7t9k4b1f/1Bn/UJkO3bNLa1p5TrYyrmmyLNIF37GWtIpum2H5edZsOUk
ElJu6OsVZGgun0XTCwASNm9lb8jTMIC04AWJwF5vuj99EDVNGQPv Wek6JGuR8MOrsmNC/
qaaA73xFJHOO/jkPZ1RbQ9UxHlS56PSQAnfGl/8y8DQKg 0d45bPlJjcXj0SmM5pwlGws 
BJ2WEH7fdYRFFr3Qkgi6iK7ULt8mMZVW5ICNuWbgAHQNraWNx6kZwadg7 Ny1qoBukZ2Lt
zmWti77rf5Iyv91LTjOtJ6GhIU6jRuoxaRVvC4kKrWmVWrREETRHAMhVJYTCr p7ceySHv
wbw817k4YSyANdGxE2K54NHcYn8XPlma7mbz/mYrONRkxzpg3Ifwa8cWoCuuqpLyM6CSvT
LBXY8LUNXorYOPG5h40aXz8 QvKZfD dTLDsYyvZCzp TTto3f2dRYa04KIcDndE/JTmJi
H63 J4GqewYhWCkHzU6VS3nDX02PouOpCguyhWr0HSWB/bgpmqwMlQ==HTTP/1.1 200 O
K..Access-Control-Allow-Origin: *..Content-Type: text/plain; charset=u
tf-8..Date: Wed, 13 Sep 2017 05:03:03 GMT..Content-Length: 1176..Conne
ction: keep-alive..rgT1mxKvxg9w7khkJiNed2nyWDM/Cyeks LdTtXVh0isMc5zwBF
/L1ghe/rc7orIrwMsUbv4VSDPBVxIdJK6DHx4JcIoO4tL5b02UtpnH 3a01bVELwRCcPzq
leF4TJU3T0HOWCJanENC2MaWHJj6DlJnT XC6Za0 nt4bDN7GWw929mTEIMGZR9 6g
<<< skipped >>>

GET /icon/download_router_32_32.jpeg HTTP/1.1

Host: pic.downloadastro.com

Connection: keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36

Accept: image/webp,image/*,*/*;q=0.8

Referer: hXXp://bearshare.nl.downloadastro.com/thank_you/?utm_source=ira&utm_medium=error&utm_campaign=bearshare

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: __cfduid=d16dfa91ad172ba9b3601db2e90e0b1db1505279005

HTTP/1.1 200 OK

Date: Wed, 13 Sep 2017 05:03:26 GMT

Content-Type: image/jpeg

Content-Length: 839

Connection: keep-alive

Cache-Control: public, max-age=432000

Cf-Bgj: imgq:85

Cf-Polished: degrade=85, origSize=2171

Etag: "09b7e97f3cd3c6c5bd0b3d3250c95588"

Last-Modified: Sun, 06 Apr 2014 16:16:17 GMT

Via: 1.1 a9a1b09b7dc5f34e32b772339e101c79.cloudfront.net (CloudFront)

X-Amz-Cf-Id: tLGiHMZK97_pyYHwc4UAonZnS5gTlTQTmDIT30Hr1rcxp-HbRnaedQ==

X-Cache: Hit from cloudfront

CF-Cache-Status: HIT

Vary: Accept-Encoding

Expires: Mon, 18 Sep 2017 05:03:26 GMT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 39d88f5d7719821f-KBP
......JFIF.............C..............................................
!........."$".$.......C...............................................
........................ . .."........................................
......................!A..."Q1..2aq..3B...............................
.%.......................AQa.!1..................?..,....I....r.$.._..
.....6.np... ..j|.'.y_.)EHN.. v.C`....%...g..R..p.R.j...~.$...J.I.t...
..R.$6..~C.........0I.Fk...yp..U[.x...YNE4.o".!.|..(*...Q........m...V
P.Iim..[uP..i>.&......a=H.U.......}W}..RyF.......Vq.&.... .q].:)*..
..`..h..$.......Ua.f..{...h~'S....[.I..m!..$..........0S)..a..........
n.q.......?3.~.h(ZO3/ w4.#.;..,..N R..e......E..M...F..-. .0R7.j..r.{.
o#..W.O....j..Z~a.S....f.....8R......>|..0.\.....J.~..L............
..`.$96.e...r.A.....|U2vZ..zP....G...;.W...m.i....X1;{4Ag/V...H.5M....
NN.....

The Installer connects to the servers at the folowing location(s):

.idata

.rdata

P.reloc

P.rsrc

kernel32.dll

.DEFAULT\Control Panel\International

File I/O error %d

lzmadecompsmall: Compressed data is corrupted (%d)

lzmadecompsmall: %s

LzmaDecode failed (%d)

shell32.dll

/PASSWORD=password

Specifies the password to use.

For more detailed information, please visit hXXp://VVV.jrsoftware.org/ishelp/index.php?topic=setupcmdline

/SL5="$%x,%d,%d,

Inno Setup Setup Data (5.5.0)

Inno Setup Messages (5.5.3)

user32.dll

oleaut32.dll

advapi32.dll

RegOpenKeyExA

RegCloseKey

GetWindowsDirectoryA

MsgWaitForMultipleObjects

ExitWindowsEx

comctl32.dll

name="JR.Inno.Setup"

version="1.0.0.0"

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

<requestedExecutionLevel level="asInvoker" uiAccess="false"/>

<windowsSettings>

<dpiAware xmlns="hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>

</windowsSettings>

<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>

<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>

<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>

<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>

!'%s' is not a valid integer value('%s' is not a valid floating point value

'%s' is not a valid date

'%s' is not a valid time!'%s' is not a valid date and time

I/O error %d

Integer overflow Invalid floating point operation

Invalid pointer operation

Invalid class typecast0Access violation at address %p. %s of address %p

Operation aborted%Exception %s in module %s at %p.

Application Error1Format '%s' invalid or incompatible with argument

No argument for format '%s'

Invalid variant operation"Variant method calls not supported

External exception %x

Program Web Installer

2.6.6

%original file name%.exe_2624_rwx_01370000_000DB000:

oün

h.DxUc

wA%u3

1~O.rqxMr

`.YO3

5%DJN

"%CnP

vCrt

gE%D]

m,.wv

MV7.Fc

25%cS

f.wL]<rG

v/%8S

:..nfu