MD5: 9102deeef46214143f9eb3e5e356d5cb
SHA1: baf063e7a7bfc2b081a25fa8deed16960622758a
SHA256: 63e4140eba6e51947041f6917e7ff3d57c67982e31f5d7979e2bc9e4deef62db
SSDeep: 49152:uWRXFCiMYZldO l5uH9DrESDVdTnzeRPEDg19O:uWRXFCiBlZWBgkVdPeuDwO
Size: 1828481 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: MicrosoftVisualC, NETexecutable, UPolyXv05_v6
Company: no certificate found
Created at: 2015-05-11 08:35:16
Analyzed on: WindowsXP SP3 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Process activity

The Trojan creates the following process(es):

%original file name%.exe:580
sdajsdaksdakhgsdasdakjsdaasdkj.exe:776
htkdg20ver.exe:948

The Trojan injects its code into the following process(es):

Global Loader ULTRA v3.8.exe:1388
iexplore.exe:232
Explorer.EXE:532

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:580 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\htkdg20ver.exe (70004 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Global Loader ULTRA v3.8.exe (137278 bytes)

The process sdajsdaksdakhgsdasdakjsdaasdkj.exe:776 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\XX--XX--XX.txt (235 bytes)
%System%\Microsoft\svchost.exe (1425 bytes)

The process Global Loader ULTRA v3.8.exe:1388 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\flash_detect[2].js (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\script2[1].php (146 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\red[1].htm (84 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\script2[1].htm (177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\red2[1].htm (86 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\red[1].html (95 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\on[1].htm (480 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\on[1].php (350 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\red2[1].html (96 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\flash_detect[1].js (1 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\red2[1].html (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\red[1].html (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\flash_detect[1].js (0 bytes)

The process htkdg20ver.exe:948 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\sdajsdaksdakhgsdasdakjsdaasdkj.exe (37172 bytes)

Registry activity

The process %original file name%.exe:580 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "8C 23 B2 26 C5 C5 8D 5D 1C 03 70 7D B0 2E 70 1F"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Local Settings\Temp]
"htkdg20ver.exe" = "Dropbox ,Inc."

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Local Settings\Temp]
"Global Loader ULTRA v3.8.exe" = "Global Loader ULTRA v3.8"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

"UNCAsIntranet" = "1"

The process sdajsdaksdakhgsdasdakjsdaasdkj.exe:776 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "19 49 6E 73 95 51 98 D6 6C E0 E3 D9 2F 67 15 E9"

[HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{58OE1144-1OWX-BLNY-061R-SM62FPK5L14O}]
"StubPath" = "%System%\microsoft\svchost.exe Restart"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run]
"Windows" = "%System%\microsoft\svchost.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Windows" = "%System%\microsoft\svchost.exe"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows" = "%System%\microsoft\svchost.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows" = "%System%\microsoft\svchost.exe"

The process Global Loader ULTRA v3.8.exe:1388 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1D 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E2 5E AA 52 8D FA 04 73 A2 D5 FF 91 C3 80 65 21"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process htkdg20ver.exe:948 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "B1 F2 BE B0 EC FA 54 93 87 33 10 6B 7F 7A 5A 69"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Local Settings\Temp]
"sdajsdaksdakhgsdasdakjsdaasdkj.exe" = "sdajsdaksdakhgsdasdakjsdaasdkj"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

Dropped PE files

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.

VersionInfo

Company Name:
Product Name: NOPJ2K12K621VSQA3FB7OUNVVU7SU52FL19GUNGS
Product Version: 1.0.0.0
Legal Copyright: Copyright (c) 2015
Legal Trademarks:
Original Filename: NOPJ2K12K621VSQA3FB7OUNVVU7SU52FL19GUNGS.exe
Internal Name: NOPJ2K12K621VSQA3FB7OUNVVU7SU52FL19GUNGS.exe
File Version: 1.0.0.0
File Description: NOPJ2K12K621VSQA3FB7OUNVVU7SU52FL19GUNGS
Comments:
Language: Chinese (Simplified, PRC)

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://videospornoadultos.net/loader/info/go.txt?nocache	192.95.16.5
hxxp://videospornoadultos.net/red.html?nocache	192.95.16.5
hxxp://videospornoadultos.net/red2.html?nocache	192.95.16.5
hxxp://videospornoadultos.net/loader/info/fapcf.txt?nocache	192.95.16.5
hxxp://videospornoadultos.net/loader/info/name.txt?nocache	192.95.16.5
hxxp://videospornoadultos.net/loader/info/title.txt?nocache	192.95.16.5
hxxp://videospornoadultos.net/loader/versaoloader.txt?nocache	192.95.16.5
hxxp://videospornoadultos.net/loader/info/status.txt?nocache	192.95.16.5
hxxp://videospornoadultos.net/loader/info/on.php?nocache	192.95.16.5
hxxp://videospornoadultos.net/loader/info/script2.php?nocache	192.95.16.5
hxxp://videospornoadultos.net/loader/info/flash_detect.js	192.95.16.5
hxxp://videospornoadultos.net/blog	192.95.16.5
hxxp://videospornoadultos.net/forum	192.95.16.5
hxxp://videospornoadultos.net/forum/	192.95.16.5
hxxp://videospornoadultos.net/forum/public/style_css/css_6/ipb_ie.css	192.95.16.5
hxxp://googleapis.l.google.com/ajax/libs/jquery/1.7.1/jquery.min.js
hxxp://videospornoadultos.net/forum/public/min/index.php?ipbv=f687db9fbe2f009e9077ef1abc25ea51&f=public/style_css/css_6/Badges.css,public/style_css/css_6/ipb_help.css,public/style_css/css_6/extra.css,public/style_css/css_6/calendar_select.css,public/style_css/css_6/ipb_common.css,public/style_css/css_6/ipb_styles.css,public/style_css/css_6/ipshoutbox.css	192.95.16.5
hxxp://videospornoadultos.net/forum/public/style_images/grand/fonts/DBM.otf	192.95.16.5
hxxp://videospornoadultos.net/forum/public/style_images/grand/js/cookie.js	192.95.16.5
hxxp://videospornoadultos.net/forum/public/style_images/grand/js/ipbforumskins.js	192.95.16.5
hxxp://videospornoadultos.net/forum/public/min/index.php?ipbv=f687db9fbe2f009e9077ef1abc25ea51&g=js	192.95.16.5
hxxp://videospornoadultos.net/forum/public/min/index.php?ipbv=f687db9fbe2f009e9077ef1abc25ea51&charset=ISO-8859-1&f=public/js/ipb.js,cache/lang_cache/3/ipb.lang.js,public/js/ips.hovercard.js,public/js/ips.quickpm.js,public/js/ips.board.js	192.95.16.5
hxxp://videospornoadultos.net/forum/random_logos/logo-1425575286.png	192.95.16.5
hxxp://videospornoadultos.net/wp-content/uploads/2014/06/bg.png	192.95.16.5
hxxp://www-google-analytics.l.google.com/analytics.js
hxxp://videospornoadultos.net/forum/public/style_images/grand/stems/tooltip_left.png	192.95.16.5
hxxp://www-google-analytics.l.google.com/r/collect?v=1&_v=j38&a=989945544&t=pageview&_s=1&dl=http://www.rlhackers.com.br/forum/&ul=en-us&de=iso-8859-1&dt=RL Hackers - Fórum&sd=32-bit&sr=1276x846&vp=1256x677&je=0&fl=11.6 r602&_u=AEAAAEAAI~&jid=412880259&cid=320727732.1439074258&tid=UA-52480385-1&_r=1&z=1360165784
hxxp://videospornoadultos.net/forum/public/style_images/grand/stems/tooltip_right.png	192.95.16.5
hxxp://videospornoadultos.net/forum/public/style_images/grand/search_icon.png	192.95.16.5
hxxp://videospornoadultos.net/forum/public/style_images/grand/advanced_search.png	192.95.16.5
hxxp://videospornoadultos.net/forum/public/style_images/grand/highlight.png	192.95.16.5
hxxp://videospornoadultos.net/forum/uploads/forumicons/3-icon-10e2d59ff8ca683bb387754cef8c6766.png	192.95.16.5
hxxp://videospornoadultos.net/forum/public/style_images/grand/f_redirect.png	192.95.16.5
hxxp://e3821.dspe1.akamaiedge.net/pt_BR/sdk.js
hxxp://static.tsviewer.com/short_expire/js/ts3viewer_loader.js	104.28.24.34
hxxp://videospornoadultos.net/forum/uploads/profile/photo-thumb-29851.png?_r=1438930686	192.95.16.5
hxxp://videospornoadultos.net/forum/public/style_images/grand/cat_minimize.png	192.95.16.5
hxxp://static.tsviewer.com/images/content/ajax-loading2.gif	104.28.24.34
hxxp://www.tsviewer.com/ts3viewer.php?ID=1068582&text=000000&text_size=12&text_family=1&js=1&text_s_weight=bold&text_s_style=normal&text_s_variant=normal&text_s_decoration=none&text_s_color_h=525284&text_s_weight_h=bold&text_s_style_h=normal&text_s_variant_h=normal&text_s_decoration_h=underline&text_i_weight=normal&text_i_style=normal&text_i_variant=normal&text_i_decoration=none&text_i_color_h=525284&text_i_weight_h=normal&text_i_style_h=normal&text_i_variant_h=normal&text_i_decoration_h=underline&text_c_weight=normal&text_c_style=normal&text_c_variant=normal&text_c_decoration=none&text_c_color_h=525284&text_c_weight_h=normal&text_c_style_h=normal&text_c_variant_h=normal&text_c_decoration_h=underline&text_u_weight=bold&text_u_style=normal&text_u_variant=normal&text_u_decoration=none&text_u_color_h=525284&text_u_weight_h=bold&text_u_style_h=normal&text_u_variant_h=normal&text_u_decoration_h=none	94.23.235.222
hxxp://static.tsviewer.com/images/ts3/viewer/server_open.png	104.28.24.34
hxxp://static.tsviewer.com/images/ts3/viewer/host.png	104.28.24.34
hxxp://static.tsviewer.com/images/ts3/viewer/channel_flag_default.png	104.28.24.34
hxxp://static.tsviewer.com/images/ts3/viewer/channel_flag_moderated.png	104.28.24.34
hxxp://static.tsviewer.com/images/ts3/viewer/channel_open.png	104.28.24.34
hxxp://videospornoadultos.net/forum/public/style_images/grand/profile/default_large.png	192.95.16.5
hxxp://static.tsviewer.com/images/ts3/viewer/tree.png	104.28.24.34
hxxp://static.tsviewer.com/images/ts3/viewer/channel_full.png	104.28.24.34
hxxp://static.tsviewer.com/images/ts3/flags/br.png	104.28.24.34
hxxp://static.tsviewer.com/images/ts3/viewer/client_idle.png	104.28.24.34
hxxp://videospornoadultos.net/forum/uploads/forumicons/4-icon-c3d3ddbe58898931d336287a51575aeb.png	192.95.16.5
hxxp://static.tsviewer.com/images/ts3/viewer/client_mic_muted.png	104.28.24.34
hxxp://static.tsviewer.com/images/ts3/viewer/client_snd_muted.png	104.28.24.34
hxxp://static.tsviewer.com/images/ts3/viewer/group_icon_100.png	104.28.24.34
hxxp://static.tsviewer.com//images/teamspeak3/default/tsv20100409.png	104.28.24.34
hxxp://videospornoadultos.net/forum/uploads/profile/photo-thumb-22620.jpg?_r=1437859510	192.95.16.5
hxxp://videospornoadultos.net/forum/uploads/forumicons/88-icon-7c856ea116692e478e47f7fc4b5230d5.png	192.95.16.5
hxxp://videospornoadultos.net/forum/uploads/forumicons/124-icon-8e646c9c3f3d393fc3f524f56265ba89.png	192.95.16.5
hxxp://videospornoadultos.net/forum/uploads/forumicons/24-icon-ee1fa91d95ca615352f926ec506c9126.png	192.95.16.5
hxxp://videospornoadultos.net/forum/uploads/profile/photo-thumb-13489.jpg?_r=1438789283	192.95.16.5
hxxp://videospornoadultos.net/forum/uploads/forumicons/5-icon-f36724a9a24e4e12a206871f6be03253.png	192.95.16.5
hxxp://videospornoadultos.net/forum/uploads/profile/photo-thumb-1.png?_r=1437405973	192.95.16.5
hxxp://videospornoadultos.net/forum/uploads/forumicons/107-icon-fc13f55e95e5a6e6736fe35ba9c93947.png	192.95.16.5
hxxp://videospornoadultos.net/forum/uploads/forumicons/7-icon-6acdc91dd9d6f265c0311278e82ede40.png	192.95.16.5
hxxp://videospornoadultos.net/forum/uploads/profile/photo-thumb-8115.png?_r=1437845673	192.95.16.5
hxxp://videospornoadultos.net/forum/uploads/forumicons/8-icon-75808db4474ba16d66598b6ed46139d8.png	192.95.16.5
hxxp://videospornoadultos.net/forum/uploads/profile/photo-thumb-21167.jpeg?_r=1437361828	192.95.16.5
hxxp://videospornoadultos.net/forum/uploads/profile/photo-thumb-578.png?_r=1439043659	192.95.16.5
hxxp://videospornoadultos.net/forum/public/style_images/grand/subforum_nonew.png	192.95.16.5
hxxp://videospornoadultos.net/forum/uploads/forumicons/9-icon-cee9943f5f52f7e70878bd35daf78cce.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum/public/style_images/grand/search_icon.png	192.95.16.5
hxxp://rlhackers.com.br/red2.html?nocache	192.95.16.5
hxxp://www.rlhackers.com.br/forum/uploads/profile/photo-thumb-29851.png?_r=1438930686	192.95.16.5
hxxp://www.rlhackers.com.br/forum/public/style_images/grand/js/cookie.js	192.95.16.5
hxxp://www.rlhackers.com.br/forum/uploads/forumicons/107-icon-fc13f55e95e5a6e6736fe35ba9c93947.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum/uploads/forumicons/9-icon-cee9943f5f52f7e70878bd35daf78cce.png	192.95.16.5
hxxp://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js	216.58.209.202
hxxp://www.rlhackers.com.br/forum/uploads/forumicons/7-icon-6acdc91dd9d6f265c0311278e82ede40.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum	192.95.16.5
hxxp://www.rlhackers.com.br/forum/uploads/forumicons/24-icon-ee1fa91d95ca615352f926ec506c9126.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum/public/style_images/grand/advanced_search.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum/public/style_images/grand/f_redirect.png	192.95.16.5
hxxp://connect.facebook.net/pt_BR/sdk.js	23.59.113.65
hxxp://www.rlhackers.com.br/forum/uploads/profile/photo-thumb-22620.jpg?_r=1437859510	192.95.16.5
hxxp://www.rlhackers.com.br/forum/uploads/profile/photo-thumb-21167.jpeg?_r=1437361828	192.95.16.5
hxxp://www.rlhackers.com.br/forum/public/style_images/grand/profile/default_large.png	192.95.16.5
hxxp://www.rlhackers.com.br/wp-content/uploads/2014/06/bg.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum/public/style_images/grand/stems/tooltip_left.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum/uploads/forumicons/4-icon-c3d3ddbe58898931d336287a51575aeb.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum/public/style_images/grand/fonts/DBM.otf	192.95.16.5
hxxp://www.rlhackers.com.br/forum/random_logos/logo-1425575286.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum/public/style_images/grand/cat_minimize.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum/	192.95.16.5
hxxp://www.rlhackers.com.br/forum/public/style_css/css_6/ipb_ie.css	192.95.16.5
hxxp://www.rlhackers.com.br/forum/uploads/profile/photo-thumb-1.png?_r=1437405973	192.95.16.5
hxxp://www.google-analytics.com/analytics.js	173.194.113.199
hxxp://www.rlhackers.com.br/forum/public/style_images/grand/highlight.png	192.95.16.5
hxxp://rlhackers.com.br/red.html?nocache	192.95.16.5
hxxp://www.rlhackers.com.br/forum/public/min/index.php?ipbv=f687db9fbe2f009e9077ef1abc25ea51&f=public/style_css/css_6/Badges.css,public/style_css/css_6/ipb_help.css,public/style_css/css_6/extra.css,public/style_css/css_6/calendar_select.css,public/style_css/css_6/ipb_common.css,public/style_css/css_6/ipb_styles.css,public/style_css/css_6/ipshoutbox.css	192.95.16.5
hxxp://www.rlhackers.com.br/forum/uploads/forumicons/8-icon-75808db4474ba16d66598b6ed46139d8.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum/uploads/profile/photo-thumb-578.png?_r=1439043659	192.95.16.5
hxxp://www.rlhackers.com.br/forum/public/min/index.php?ipbv=f687db9fbe2f009e9077ef1abc25ea51&g=js	192.95.16.5
hxxp://www.rlhackers.com.br/forum/uploads/forumicons/88-icon-7c856ea116692e478e47f7fc4b5230d5.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum/uploads/forumicons/5-icon-f36724a9a24e4e12a206871f6be03253.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum/uploads/profile/photo-thumb-13489.jpg?_r=1438789283	192.95.16.5
hxxp://www.rlhackers.com.br/forum/uploads/forumicons/124-icon-8e646c9c3f3d393fc3f524f56265ba89.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum/public/style_images/grand/stems/tooltip_right.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum/public/style_images/grand/js/ipbforumskins.js	192.95.16.5
hxxp://www.rlhackers.com.br/forum/uploads/forumicons/3-icon-10e2d59ff8ca683bb387754cef8c6766.png	192.95.16.5
hxxp://www.rlhackers.com.br/forum/uploads/profile/photo-thumb-8115.png?_r=1437845673	192.95.16.5
hxxp://www.rlhackers.com.br/forum/public/min/index.php?ipbv=f687db9fbe2f009e9077ef1abc25ea51&charset=ISO-8859-1&f=public/js/ipb.js,cache/lang_cache/3/ipb.lang.js,public/js/ips.hovercard.js,public/js/ips.quickpm.js,public/js/ips.board.js	192.95.16.5
hxxp://www.rlhackers.com.br/forum/public/style_images/grand/subforum_nonew.png	192.95.16.5
hxxp://www.google-analytics.com/r/collect?v=1&_v=j38&a=989945544&t=pageview&_s=1&dl=http://www.rlhackers.com.br/forum/&ul=en-us&de=iso-8859-1&dt=RL Hackers - Fórum&sd=32-bit&sr=1276x846&vp=1256x677&je=0&fl=11.6 r602&_u=AEAAAEAAI~&jid=412880259&cid=320727732.1439074258&tid=UA-52480385-1&_r=1&z=1360165784	173.194.113.199
stats.g.doubleclick.net	74.125.205.154
gabriell20.ddns.net	177.195.101.3
widgets.amung.us	173.192.200.70
cdn1.iconfinder.com	205.234.175.175
ads66900.hotwords.com	184.173.97.68

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /red.html?nocache HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: rlhackers.com.br

Connection: Keep-Alive

HTTP/1.1 200 OK

Last-Modified: Wed, 01 Jul 2015 19:38:51 GMT

Accept-Ranges: bytes

Cache-Control: max-age=1

Content-Type: text/html

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:35 GMT

Connection: keep-alive

X-Full-URL: rlhackers.com.br/red.html?nocache

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
[email protected]..(o....mJ.....\H.D......[.M...`e%Vo..4..G
.s.. M../@N...X....#.......T.....HTTP/1.1 200 OK..Last-Modified: Wed, 
01 Jul 2015 19:38:51 GMT..Accept-Ranges: bytes..Cache-Control: max-age
=1..Content-Type: text/html..Server: X2 Network HT wS..Content-Encodin
g: gzip..Transfer-Encoding: chunked..Date: Sat, 08 Aug 2015 22:50:35 G
MT..Connection: keep-alive..X-Full-URL: rlhackers.com.br/red.html?noca
che..X-Served-By: VVV.x2n.com.br..X-Optimization: High Traffic (HT)..X
-Cache: [email protected]..(o....mJ.....\H.D......[.M
...`e%Vo..4..G.s.. M../@N...X....#.......T.....0..0..

GET /forum/public/style_images/grand/f_redirect.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Sun, 22 Feb 2015 21:19:00 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:32 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/style_images/grand/f_redirect.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00826...PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageRe
adyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W
5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x
:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00        
"> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-n
s#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.co
m/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef=
"hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adob
e Photoshop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:E08B765CF2A
F11E3944FB5A1E8F26A6F" xmpMM:DocumentID="xmp.did:E08B765DF2AF11E3944FB
5A1E8F26A6F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E08B7
65AF2AF11E3944FB5A1E8F26A6F" stRef:documentID="xmp.did:E08B765BF2AF11E
3944FB5A1E8F26A6F"/> </rdf:Description> </rdf:RDF> <
/x:xmpmeta> <?xpacket end="r"?>.P.P....IDATx..WKHcW.>.....
Mb.c5S.R..X.......t....#t/.".....Jkq.e).......j.JA[..b..h.Q[.Q[.Q.G...
.p'.....M.|.{n.9.w..wN4.x..d.......8.^z.....[[[..h....#.V{W..d -...N._
$.yvxx..>E..OMM)....,.....t....f...z.^.D..4.u......7{{{O...........
...........%%%....C..,..*...b:..3633.\^^.*..=..............9.N...3...A
%.8q<.r.J....^ZI.X?*//.....s5..A..!N..F....X..........RFK....7.zi..
a........{.\...r.O...".I...#..#....B..$.7"|zz...."......;....8.%{.Y...
.....{..v~~.vww..@ <[email protected][email protected].
iZ...............@"x.....C..VTT...8.R.q__...l.I...c.U.222.........
<<< skipped >>>

GET /forum/public/style_images/grand/cat_minimize.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Sun, 08 Feb 2015 16:07:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:33 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/style_images/grand/cat_minimize.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00167...PNG........IHDR... ..........Y.D....tEXtSoftware.Adobe ImageRe
adyq.e<....IDATx...M..0..3m....q..W.Bz......@..^E\.....7...'..TD\."
....i...e...@h.;.X.p..t%.....$.$..iQ.c$j.d.L.....q..{C.........*-.^B..
(.r..2..t4..Y...>.#[email protected]..<..w/..V...^$]..../Gk@~.8...;
..(Z.g.>9Y..[.?i..r......b....3L..K...0..7.P...%..}f1..d..!..... (.
-...M....)R.c.U.....IEND.B`...HTTP/1.1 200 OK..Last-Modified: Sun, 08 
Feb 2015 16:07:28 GMT..Accept-Ranges: bytes..Cache-Control: max-age=60
4800..Content-Type: image/png..Server: X2 Network HT wS..Transfer-Enco
ding: chunked..Date: Sat, 08 Aug 2015 22:51:33 GMT..Connection: keep-a
live..X-Full-URL: VVV.rlhackers.com.br/forum/public/style_images/grand
/cat_minimize.png..X-Served-By: VVV.x2n.com.br..X-Optimization: High T
raffic (HT)..X-Cache: MISS..00167...PNG........IHDR... ..........Y.D..
..tEXtSoftware.Adobe ImageReadyq.e<....IDATx...M..0..3m....q..W.Bz.
.....@..^E\.....7...'..TD\."....i...e...@h.;.X.p..t%.....$.$..iQ.c$j.d
.L.....q..{C.........*-.^B..(.r..2..t4..Y...>.#[email protected]..<
..w/..V...^$]..../Gk@~.8...;..(Z.g.>9Y..[.?i..r......b....3L..K...0
..7.P...%..}f1..d..!..... (.-...M....)R.c.U.....IEND.B`...0....
..
<<< skipped >>>

GET /forum/public/style_images/grand/profile/default_large.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Sun, 08 Feb 2015 16:07:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:33 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/style_images/grand/profile/default_large.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
007b4...PNG........IHDR..............c......tEXtSoftware.Adobe ImageRe
adyq.e<...VIDATx...]O.]....li.V.XA.UlZ....._.&.._HED.|...Q....y.W..
af.]..iR.....{.33......I&.....$.....$...JB(...JB(...JB(..$.OV.'...t:.V
.^.7..............499...nY......r.....j.........7o.(....j.J..?..Y.}..e
qqQ..W....r.b...$.....~.....~....P( [.......F.3.!\I>[email protected]...
.7w...>..W.J..o...C.PheeeiiIQ..l.F.;88.gq....{{{(..?.~.....Vh.0..y.
.2..-..M4.U"..P.......t...D.yUQ.../.N{....$.....) 5f.rww..~.......]...
A....||....J...-#(.#[email protected]!.F..Q.G.?.L.?....
atvv.F.a$.T....E..dx..(..3..u.B....e.....R.PYA8...S!t.F..6....!t ..B.(
xc..B.!./!.T.@@..V...t:Bh.n..B..A..l.....B....JB(...z!..9........Z(...
JB(...JB(=.../..U.... ........V...#......../_.m....Z.f.Y.|..kkk ..}...
jW...J'/<...~..0...................1#D-d....b..R5....E...![..C.....
.^Q..}&...pxt..|_.W.^.a.\J.H.........s..>....u4.A.O....b..'.H$Bx...
....2a.A....3#B.....*_..,.N.Lz....wT......x.s.x...:...i'..!.6..../....
.....|(./B.{.p1......Gr[...R#...$......G.#..C.%\T3.!.C.....9.3G...r...
..........NE<....k,..?K..!.1.H.35.e.......P@A..{q..>fa$B.......^
~....)......tss....5X...o..\."...H..m{y..A.........| ..D.b..:S...r.z.6
.3........a$B.OqR../y....Z-.R.*..gd.....r..t...|.0............X..H$...
....V..............d..._3...... .m;........1...k.B....M./BX.f...00..U.
^.ggg...b.......3...`0..#`...J.z.N2.....B....c*.V..N...z....\jgY`C..T*
..................4.#..#.e.f...S..j||. ....n....V.........hll..ggg.}..
...N............&,.yuaa!.........\^^..bXvq.........^.~............
<<< skipped >>>

GET /forum/uploads/profile/photo-thumb-22620.jpg?_r=1437859510 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Sat, 25 Jul 2015 21:25:11 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/jpeg

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:34 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/profile/photo-thumb-22620.jpg?_r=1437859510

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00a13..............y4.......c.nD...d........K.e-.X2d..P.I.....l%k..-k.
]...,.$..=w...q..>.>[email protected].#<.D.H..hw..n.
...? ....rruDj.h"u...H_E..,......;..A*..h....c`.2@`P(.............y..K
._.. ?...; ....E $..d......$T0..?..W@.>.bdddaf.ee.E.#.Q.sh......v`.
.@.... ..@............!.P.#..q.......t.`....x.|.....Nay...C.....*4..&.
..=...M....a.L'yx..O.KHJI ....UT5....Z.:.&WM..-,.v.....H^.>.~.....&
lt;....I.Ox..........._PH}Q........MS...........C.#.c._f......WV..o...
..s......A...t..]t..`z.o....w.N...g...Bm<N..Ba\.qY..3..7......tRL..
.....e..,......o.8....?.......w...p6s.....s...[2.{.. ...gW.....2-...&.
.#>....z..........Emj..%8g.4.\......z..7......t.u]..(9.U.....z..m..
..a/:.`..........&Gt......D.l.4/.(...g.7E{..k....8Xu...HPg.,*(..!...h.
ez..F.C>J...u^u.`....P.Y.3..OZ.Q..../~M5.T%....k..J0....M.)a ..W.l.
:\.c.....#,.........[.r..Ee.!..............6.w(.....Y)..;}.W........).
K2.x.......La^..&.9M..{.....L..av.p4..<..r.W.,..W/...i./..=.{.I...U
.bY..l%?..o.....{..&...y.;.......F......(.. H3..R...%.u7}Ku.}s/..5.$.0
.U....Xer.. ....Q.S...e.....4...^.i.W...2...\...zX.........g...&.3-...
.dGh"7D...QY........\....V.YB./........VbH.I )......<V.......B....3
..-..;.......Q*-.O."..w..`.,...H...T ).T=..6.a.]..Y.;....y.....].%....
!>....4.w$B.V.o....P.....@~....*......4....k.;[email protected].?.>Y...
Iuto_.}-..>...xOUk..d...2.br. m..ok!..:..l.`..}0.M.1..uv...9....G..
,....v5..'|....`l.~.......w...k.u... 8..` .."......L.J.3.PX..N....5.9i
......V..sW..p.H....m....EK#q......$..:E.7N...YC..V......Z.z..}.j.
<<< skipped >>>

GET /forum/uploads/forumicons/124-icon-8e646c9c3f3d393fc3f524f56265ba89.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Fri, 19 Jun 2015 14:47:25 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:34 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/forumicons/124-icon-8e646c9c3f3d393fc3f524f56265ba89.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00bdc...PNG........IHDR...#...#........Y....IDATX.uXkpU.y]k.}.....#...
.-H...15......N..i:.db7...h..q..04.[..&.vR..M.v\...zR..1.*..`p(M......
..!KBH..{.^.q.\4.....{.......f....... .9...:H.e.G.^Z......Ng<.Oww..
_.V^w..8.-.>... .Cl..c..O......J.a 5.........."....^.z..>....P.t
ww..S.P\s.|.j.@XF.;.^..-`...D........x../.|>N...$...|0.f[gK..O>7
[email protected]}....$...P...B.<. .0..(...^<v.....WV...C..N.... ..G....5
..u.rk.@...$....l.p..\:.../.5....X ..hb..).s....:...hr% ..V.*.5F..$.@H
 .D..g.:..I.:..e... ..}.H.)......jb..$.e..E..c........3...h.x.k...u.gk
.8g.. ..p..O.8.B'X.Hr.W.......6....G....] .........;...[...Mm..T...].k
...n..'..8.7.[.zo........P.R_4$^[email protected]..,i.M........B(..d.
..s.~f..Lw....@P*IAz...{...G<..'......}.......c.._.v...c.V/.8 ....^
[email protected]%..a.T..'....I..R..72.%Aj.n|...% .....:........
....{~e..e.j}[email protected]$ .8a..{W.7~..^..\Ia$B.....[.y..B.q*..&l
t;.q.M-.%._....oh...$....~.!.cvq.B..d....^...;[email protected]..}..
_.;v.....B.c....#...5B.@%M. .....|..I....o..A...(E..>.r-...=s.x..g.
$.r$ .qB$".[..$x...Q....g..1.[)o.fJ..$,W...@0>[email protected]......._}}.*
.{W.../..>WW..h0..-V......!....jB...y..ck?..l..i. Z.."...x.......F.
O ...sn...-3s..p........V'bX..Ex...0..._)...n..b.......h...$1D^.1'@.C.
[email protected]`|...M.x."w.............a....#P.RP.@"....g.a\R..q(...<..
!rH...........p.|....... ...b....z.H<.............N@ ..).[ ........
O...7 RX.q...9..g"_.8.od....&y...h.......b..-.D........._.w..x.x.a\...
..{b...m-..g.zQe...$.........OG...u$.wA.......UN..P&p__.y.M.......
<<< skipped >>>

GET /forum/uploads/profile/photo-thumb-13489.jpg?_r=1438789283 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Wed, 05 Aug 2015 15:41:23 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/jpeg

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:34 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/profile/photo-thumb-13489.jpg?_r=1438789283

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
0010fa..............WT........iR....T..7Q.....U... ...i....%(..PC.J...
.....{'......}...<..9.wf.'/....k.i..@.........{&Z...L.!.../^:9C.e.n
CD.|\...=}...#-...<........./...Q..r9.......SS...`ZZ. .l..tt..,.Ll.
\.|.\<<.a).........-..20.._DIM..*%.....HKKKOG....:T.G.....7.3...
.H...P0.)...]..?H*......)(AT.`.. t...W..@JJ..%..........1S...hR..?..z.
A.S>....ng7..-,.......k.9.n....%...WPTR.w_K[GWO............sg...>
;.~............q.i...3?de........~...C.c...::..{z.....a..OLNM....%"iye
ugwo..........@.......?............g..D% C..i.~..*...a......VH.d..... 
..0....h....`[email protected]<Jf........x.o3...iy..Y4Y.cy.3...YkK.(.
j..t......k,O...gN.7.3..i.h.....E.=P3......6..l.2.6..&.]X.ZN.P..cpT.E.
..m.`xv:[email protected].....\K..NP..G..R....TE~...(0.{w..Y
.0...N......:.........{.....y.ja\..cD.h....k.B).........1E.*x.*#..u<
;..Np.W.m..m,...N......?O.X..)..5...\.._..J=N{d'{....O..0.....f6...G.Y
o....q ..r. .,.l.N)5...5...R}&.@....}.sF.w..W.........C..5S....XHN.g.X
..9..`v..,WX.i&.........E...s_.......].JxL6.....'9.......Jhc......}H.P
.t.W&.9...V....Q.f..qY.]E.-..5......In~..D=......'...K.....DWo.%....@.
J..!.gw.......j.x.<..|a.W.>....KV..|=.:.sv....#?n_......v...BR.]
E@.]!..G....w.IC...Z...k..BH..V\.......D....... Z......Q.........'.M..
.Jc.}..xIn..ky...}...Q.r..n.9y...l............S1.o:#..6F6..?..xI...)..
..7...=..J..81.)...V.[..6..Jas.........F.2..#1.%..{.m...~..].FX.k..>
;._QO\.W..h.....7...$|.zmi.}..o.D....W.......]..K..sk...2.$..j...P..$v
.1.$.c..S......J-7.h...j..S......l... .V..t.jDa...-.5%.........h..
<<< skipped >>>

GET /forum/uploads/forumicons/5-icon-f36724a9a24e4e12a206871f6be03253.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Mon, 08 Jun 2015 22:31:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:34 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/forumicons/5-icon-f36724a9a24e4e12a206871f6be03253.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00899...PNG........IHDR... ... .....szz....`IDATX...{.\U............nK
...n...J..H..-.....$.?4>PP.QQ....DLH..C.."....h...K[......c......m.
.....<.c..m.Vo2..7...w..=.S....Z...t....>.s.C.Ed3p..~.0 "Y..%...
....vx....;7......z.......S..mZ..<..h.......O...`.{...(.Z.....;...Z
.. p....}Om.M..#......{1........4..../.a*}..J}J.Z....Y......Yd.......g
...>..M)[email protected]^[email protected].....}..W.....H.KK..l....
[email protected].}..T._..K..z..k7o...C#..q.3/.J.<~V..t....E..z
H..Z.0](2Q.2[...-O....R...o.......?....V..??=...[.0.r!8........0..E...
.$........)v...R..f.....j....p.8...........lp......G......J.k-q..hM...
R]l..b..~.Q..........[....j 0r..h....n.eE.....K...-K..0..:......KX....
..=.$...n..^..|........D........#....W1..]......c..RV.zHE...`.....:s..
.g....W.[..W",....BR]. ...'[email protected]..[pT.".p
..%|hh.=.iT.....1g...u.$.{.(.....QX.c...X..p.n.v..5h.2....}9.u.H.Kow..
..Z.8..f....1.JE.....!c. ....L.}...at..........V.....B..a..d..*....]E.
P.Z.HRJ.[..! .i...'...S..(...sX?2....V.C ..I..J...W*.*.."......u.Z2Q..
cf''.5.M..u.. @...{O.\.X,aLBWW.}.1.(..U.a...R.km.L*E.....j.g-:.H*...\&
.TO.....7r.!...E....jLMM..!uc..S.....,......{...I.R....".j....E...d...
..l&3...$!."J%...5.jU.0.......{...X9..o..I....O&.!.....r.....P3=..\.#"
..L.k5fk.i.0..V......d...uf.....X.P*@D...\.........9....Q........x.'4.
.5..=.........$A)E.P.T*u..F......Q.".*i.Xk..P.6.2.!.{^..!...A.GD.jQ.C.
.....mo....4....&...'.....s8gAT...{....M.\...Y%Q..b...s..G.p."A`P.C...
.......9|b..M.....6..6.;.....b#...J..... .jG.w.c........).....(Dd\
<<< skipped >>>

GET /forum/uploads/forumicons/107-icon-fc13f55e95e5a6e6736fe35ba9c93947.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Mon, 08 Jun 2015 22:31:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:35 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/forumicons/107-icon-fc13f55e95e5a6e6736fe35ba9c93947.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
003a6...PNG........IHDR.............?.~....mIDATH....JkG...3..mN4.$&~.
""r...>L|..Q|..#.?.. ~R8..x.".R5^.).L.{...g..h.......Yk.....=..`...
.&..`....?M..g..X...a....~..{...*MI...O..........c.............E.g...N
.\.q.9;Wl,.}...)%BJ........./.....Y...M.Lua.!......-7.WT.5..y*......k0
.b.........?;M...]}...2.(.$.....H.D..Fi...{>.'....$..I....4..:.._k.
.c..R....4MQJe.$IH...u..B..~&A....C...{~..C...Q.QxW .....2....<....
R.y.....c..Z.1h.3QJ=...DQ...i......i..e..................][email protected]
.8c....B<.k-..,c.....5.....Y__.C...j0..:<........^.....9...!h.Z.
..rzzJ.E............|.!....lmmqxxH...!899agg.V.5.." @...\.suu.Qwvv....
.......9...\\\d._^^R.......j ....E.....R....<.N'cbnn...........qC..
.......<...I|.w".....8...(z...#..?...&.}.....KQ...^.o..o.i.......;.
..M_.bR./.Zk.T*h..V..F...(.X[[..VVVPJ......j5..T*..Ad.A...T*=.S..=....
.........:..4.qc....t..Z.(....DQ.....\.0...0k...R...$!I.....^.^.G..u.b
...O.nj.....*......4.....O........Vc..B'....IEND.B`...HTTP/1.1 200 OK.
.Last-Modified: Mon, 08 Jun 2015 22:31:28 GMT..Accept-Ranges: bytes..C
ache-Control: max-age=604800..Content-Type: image/png..Server: X2 Netw
ork HT wS..Transfer-Encoding: chunked..Date: Sat, 08 Aug 2015 22:51:35
 GMT..Connection: keep-alive..X-Full-URL: VVV.rlhackers.com.br/forum/u
ploads/forumicons/107-icon-fc13f55e95e5a6e6736fe35ba9c93947.png..X-Ser
ved-By: VVV.x2n.com.br..X-Optimization: High Traffic (HT)..X-Cache: MI
SS..003a6...PNG........IHDR.............?.~....mIDATH....JkG...3..mN4.
$&~.""r...>L|..Q|..#.?.. ~R8..x.".R5^.).L.{...g..h.......Yk....
<<< skipped >>>

GET /forum/uploads/forumicons/8-icon-75808db4474ba16d66598b6ed46139d8.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Mon, 08 Jun 2015 22:31:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:35 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/forumicons/8-icon-75808db4474ba16d66598b6ed46139d8.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00a16...PNG........IHDR... ... .....szz.....IDATX...[l.....3svfm.... .
...6..\B..I$.q!M..4$4"...Z.(.%R...4...D...@.&..X....16"u.;.5.......x..
zw......Þ..>..h..........x.!.e6.meii...f..g.Z.L&...z"..M...9o..u.
n..........X._....X.h...|......Y.yy.I"..s/.A.e.f3........?....u...#v..
s`.........K/..... .....8.....1:0@"[email protected]?...:.CC...._>
y..n.....{d....[.~...[.>..F.c..r...T.. ..../:.......((..<.i...Y.
...c....cww...V...HKK[..k.... ...9q.s..c.z..R..I.....D,..S.I..a...H..G
.}.yGG.o..d<%..d2-..m[. [..}......(.......S........0....:..NZ.....K
Y.v.....|..q..<[email protected])I$HO.Oy..)).....5..BG.....b..y]]
].>..m...raaa.$.Q]]...w.}...S\....D..`y.\....P.Z$.S(D...<...rNNN
eGGG..f{^[email protected].~...233.G............<.....QI"&I.%..$.7t.5.......
a...,..=...Wy<.c.H...{k.......%.....e#...4....E..GMME.e.!..f4..UQ0)
.VYF..$.fc..-Y.w.n.z.....U.<...vs......K$)^O.4.i...{.5........4$IB.
e....q.^.P.....P.v....n.........5E.gg...1.......5.T.... $.E.Pd.!..,...
....W.Y.y3o..:B.G..wuu.v.Y.j.........ey[[.....v.>.V iii.......7.*B.
...{..a....V.~dp].9z.(YV ....G.........3.....i...J...$...GUU...q8.....
........:::....X,.t_.(..d.$..........[.$...`........%.........<..(.
......`..8{.,n...[....>.../.....L.......b.*..2.H...B.V ...."%%T1A
OO..p......%IB.u.. .....@.!........p.BFGGI$...~....$.%.~...L\...A,.!..
3.L...T....!t]O8].N.>...;4...U......((...k..uvR.."t.[...54 ........
...........UU.4.....S....$cb......$...............E"\..3.......u.UUq:.
De..h..x...fQZ^...D.$....1...b.!...L&n..........[.h..............[
<<< skipped >>>

GET /forum/uploads/profile/photo-thumb-578.png?_r=1439043659 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Sat, 08 Aug 2015 14:21:01 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:35 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/profile/photo-thumb-578.png?_r=1439043659

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
[email protected].. .IDATx...w.
eWu..[a..*w..nuKj......`.A.ac.l0.~..{mlc....1.:s......I~.0&.........j.
.]]]....Zk.?...N..x....U.'....s~....[..5mQ...R...*r.i...L.m....V.X7.Z.
..c.F....... ....7......n...4......6(c........?...8zl....X..$e.gl..L.!
ZcT...(2.;....%.5;0..V93k....Pf..8.......i....b....o.5y..,..).B...z.A.
*p>..sZ.]T .@..) ...V..aI.<.....Q...x..!...JB\|..o..(@DP.A.....)
*Q..Ak.Qx.y.. .1X.A.......-....4Y C.2.Vq..B.Qq.Q.@t<.A...J)..6..9~.
[email protected]@(..#....xO..cLn:;n...&N.X...(U........th.&x.......Y;...(0.
.t\..F.0&....F.r.1..([email protected].*3..2(....Z....P...FA%.~ .....K..B./..9J)..8
@k...6...*...0h........h.NX.....0...... ..E.....F..L.........E.....q.V
(..Vg.t...{.!(...0X..r..h..n..Z$...ct'r..  .C..9."[email protected]...
....C....(...V.........>[email protected]..^.._K ....E..M
.....Czi.........W....n.t....E...*BUR-.0...Z^A*[email protected]...'..(.|b'..
....BEU.....Z..s.a.. .tP...E...*.......r.:..q.......U..B.!7....U.L.5h.
.Jat\. `5..H..*n.VP...D)..R.CB@.. ..q.#....`5d...G....z.E..QZ!U..A....
...\...1..B...............e...3.k........_...=.....I....w0..x..N.z (&l
t;RV....u...B.B....%P.5......$.}............VQU..0..e..%...e....=...B&
lt;.A...A...JP.l..:.....x~. 6-.($..\[email protected]..>-.N.N.x...X.(.....*.f..
.....B...G.,...=v.m....Gl.1...R&...w.!..E. ....I..X..D..T!n..H.PY...3.
...|< "..........|../.%ZK...Q...a...x...%J..J....C....kJ..h.....v..
.....Ji...D..c4Jkt...,....fHz.$.......".....@(=J.."2D.....6.M.q~W..t..
.6.u..5^0,KZc.p.!....W..-...62..hO.....>[email protected] .G.P..E
<<< skipped >>>

GET /forum/uploads/forumicons/9-icon-cee9943f5f52f7e70878bd35daf78cce.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Mon, 08 Jun 2015 22:31:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:36 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/forumicons/9-icon-cee9943f5f52f7e70878bd35daf78cce.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00a16...PNG........IHDR... ... .....szz.....IDATX...[l.....3svfm.... .
...6..\B..I$.q!M..4$4"...Z.(.%R...4...D...@.&..X....16"u.;.5.......x..
zw......Þ..>..h..........x.!.e6.meii...f..g.Z.L&...z"..M...9o..u.
n..........X._....X.h...|......Y.yy.I"..s/.A.e.f3........?....u...#v..
s`.........K/..... .....8.....1:0@"[email protected]?...:.CC...._>
y..n.....{d....[.~...[.>..F.c..r...T.. ..../:.......((..<.i...Y.
...c....cww...V...HKK[..k.... ...9q.s..c.z..R..I.....D,..S.I..a...H..G
.}.yGG.o..d<%..d2-..m[. [..}......(.......S........0....:..NZ.....K
Y.v.....|..q..<[email protected])I$HO.Oy..)).....5..BG.....b..y]]
].>..m...raaa.$.Q]]...w.}...S\....D..`y.\....P.Z$.S(D...<...rNNN
eGGG..f{^[email protected].~...233.G............<.....QI"&I.%..$.7t.5.......
a...,..=...Wy<.c.H...{k.......%.....e#...4....E..GMME.e.!..f4..UQ0)
.VYF..$.fc..-Y.w.n.z.....U.<...vs......K$)^O.4.i...{.5........4$IB.
e....q.^.P.....P.v....n.........5E.gg...1.......5.T.... $.E.Pd.!..,...
....W.Y.y3o..:B.G..wuu.v.Y.j.........ey[[.....v.>.V iii.......7.*B.
...{..a....V.~dp].9z.(YV ....G.........3.....i...J...$...GUU...q8.....
........:::....X,.t_.(..d.$..........[.$...`........%.........<..(.
......`..8{.,n...[....>.../.....L.......b.*..2.H...B.V ...."%%T1A
OO..p......%IB.u.. .....@.!........p.BFGGI$...~....$.%.~...L\...A,.!..
3.L...T....!t]O8].N.>...;4...U......((...k..uvR.."t.[...54 ........
...........UU.4.....S....$cb......$...............E"\..3.......u.UUq:.
De..h..x...fQZ^...D.$....1...b.!...L&n..........[.h..............[
<<< skipped >>>

GET /ts3viewer.php?ID=1068582&text=000000&text_size=12&text_family=1&js=1&text_s_weight=bold&text_s_style=normal&text_s_variant=normal&text_s_decoration=none&text_s_color_h=525284&text_s_weight_h=bold&text_s_style_h=normal&text_s_variant_h=normal&text_s_decoration_h=underline&text_i_weight=normal&text_i_style=normal&text_i_variant=normal&text_i_decoration=none&text_i_color_h=525284&text_i_weight_h=normal&text_i_style_h=normal&text_i_variant_h=normal&text_i_decoration_h=underline&text_c_weight=normal&text_c_style=normal&text_c_variant=normal&text_c_decoration=none&text_c_color_h=525284&text_c_weight_h=normal&text_c_style_h=normal&text_c_variant_h=normal&text_c_decoration_h=underline&text_u_weight=bold&text_u_style=normal&text_u_variant=normal&text_u_decoration=none&text_u_color_h=525284&text_u_weight_h=bold&text_u_style_h=normal&text_u_variant_h=normal&text_u_decoration_h=none HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.tsviewer.com

Connection: Keep-Alive

Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:32 GMT

Server: Apache

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 2706

Keep-Alive: timeout=2, max=200

Connection: Keep-Alive

Content-Type: text/html; charset=UTF-8
...........\[[email protected]<..8i.$c...4.h`..0....$..?../.......
..H.F......H.q$.b....X. vvv.|h.9...k!..=...v..KZ.'.....ncF.IX..]#..KD.
.o.Z.-[....W..!..Q.w. ...z..z......8[3"a........M..l7#.......;8..~.#-^
Gjp....D.V.^...@{..v.Q.:@ns.....cN..G=J.$T..)...$Q.....r.Z...W.......!
..S..._'Z.B0.....cJ....W....0&.A.].(.ZU4.T*.~.B.W....&.....#..W.;g..W.
@g..^.~...*.A...=.[l........6...._...3..F.D...h.#.Z...~........~8..B.q
0...4/<._..t.B........h......zf.. :.ic..7.cN[.u...%|..K.r.../..Zp..
z.(!..a...Lyk..t.KB.. ..d.0O.{ax..z"...0......... ..<4...|v....I.J.
..CB..z..I1...}|.hU.n..M.<$dY...C.y8..,......9.:>8y......a..r...
.W0.4..wP.z.............C.E.(L....p...\f.L.[O...k....%.....gJc..x.....
.Bxk....qG.~9........>.o...4C..G...uu..T.....;I.O...i.T....|....!.m
.VM...>.J.3....E"...:N.<.[,...WH|[email protected]....| :W{..\.....
....=.m..h.?[o. r..|....[..4`....9.....K...h...Svr....K91m..c9L....RL.
f.b.HLw...t.$...{.Kk..<.Z../..s..Cv.V5..2..4[.2NFk..V.m...h."h.x..|
x..?....|[email protected].........'...SY.r`.T!.X...Z..>....
Y.o......h..F.......z..9.3d..r..j[YdNb...D...-..7..P..%.......I..KC..M
 ..g`...j.. NkFe.:...a..u..Z>L....I...m.6*Kf .].....Z..E.o...w....0
... .. E.%..._/`.Z.>..D..El!.2.m..sl!.Wl!~a..o...".....v..ql ..q...
...'.s2......W.{.O%...G.....Y..).x< ...k.W....=.._2.5jV../..C.2f...
...d.c...~...>E.e..c.....X]..q...M..Y..st.vVy..4....DL...-m!...&Z..
Q..#..Q?k.....vH.x.zk."{. 2#...z...|is.2......TEm:7....4..f...&.....u.
&...SU.........>.6.y,*...^...|..".`u;./.......y........p..B..Jw
<<< skipped >>>

GET /pt_BR/sdk.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: connect.facebook.net

Connection: Keep-Alive

HTTP/1.1 200 OK

ETag: "cb4bcb0de875efd632492c99a24e7010"

Content-Type: application/x-javascript; charset=utf-8

Timing-Allow-Origin: *

Vary: Accept-Encoding

Content-Encoding: gzip

Content-MD5: KYnF4bu7Dkb2pH9C 6bbMg==

X-FB-Debug: ayGFwnLaDAz5B6Yvk6vC/9z3OHV/Ych1aBH3q4a6ex5GlvzgU3iwZDsjKe5lsKd6PIhr6XqYcubX/z3fy/eDzQ==

Content-Length: 54163

Cache-Control: public, max-age=1200

Expires: Sat, 08 Aug 2015 23:11:31 GMT

Date: Sat, 08 Aug 2015 22:51:31 GMT

Connection: keep-alive
............{_.H./.....03.j.1PW.T..6.N.e..........|..l......7"3..e..{.
w...B.kddddDdd..O{O.^V...V.x........d:...Q<....^<.....7.6.|.i...
k..........'Q.;-}.Za3....Q.BY..%j..$l.f.v8)M.a.h......J..'.uQ..TQ.;..k
.......KV.Igw ..._.............d^Z\G.v|]....\......].d.....`RJ..E./I.W
j...0.MMRE...8...F.._...v.*.I8=..a<.j.i...G.pr..2.t.....d..;U....I.
..F....7.T........t.Ac...'.7..I0J......Z.Y;L.j...F.4....~4....I0......
t.O.bw..._.yM..F^.]D...hkk..N..l2*.f...O...=......m..c.....2..*.[).D.Q
@..~.......V....,.$..>=....ne.&.r..F..........^e.L.a....*.p..v...W.
....1]8.....2..)~........ }...Cg.Om...j...s..FCp .8..=.II..........m~.
...K.og....G...d...$.MZ.0..N).....U..o.Q...J..Z..~...S..o.{..Q0.Sl.].2
p.....An.y...._b....'..ur....h..5PSA.OM...$8.3..zz..b.t...sW...z......
o.wcXi...q.....2...A... . .".......x0......|]......2...{.UYlXk.h2...YX
K.o.3k......$...y.[q;.%A'.g..k...][email protected]`.XX....3..GSh.....
..;......H{.R(O....uan]1.Ix9.&..h..){.d.4.?[....:.A.....T......Q.J.~.n
..K..>..q<.&.y].Ha.....V..$..G_&1.o:/..f........,(....V>.N...
(....L.I...`..m....P"B(5.pT2.W..x;~...u....q.E.q...f...bY...u.....j}.*
.....Er.M[[email protected]....!..........d.5.)C}.e........a.I>!
$...i=^.e..x\..~e<K.e...;...pP..5(53i....b..`...... ...w.....F.....
V..C.C........M..a.jm._.V0%..T.......q..wu.......K.-O.Q...].|....d....
.1`..N..t.xM...=..fn.[[.......D.;t:......n..MI......).'...:.Q.A.....G4
.{..oo.\...>.C......`#..D.D.2~5..:@.v....... .Q.C....S...?8..=..^.2
............]_..6C..~......*...?.....^...!.....96.g6B}..=.c.....G.
<<< skipped >>>

GET /loader/info/on.php?nocache HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: videospornoadultos.net

Connection: Keep-Alive

HTTP/1.1 200 OK

Cache-Control: max-age=1

Content-Type: text/html

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:39 GMT

Connection: keep-alive

X-Full-URL: videospornoadultos.net/loader/info/on.php?nocache

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
0015e............=P.J.@.|.W.....F[.`.`[email protected].,.k...{1....Mj......a..
x...m.....l...e........8.......'kh..`.T..q.u...Fd8}....).J.T!...-.hC#.
..s<l...t...Pq.ZQT...`....U3|..H.......xw......h.(X.?:.......`...q&
gt;....v.j..{( R.....c6;>.nF......x...k......c.e...Q...I......:....
SM.%4.,.......e\..J..........uu...[9?.$[...0..Ag...i[^.(/Jf.>..c;..
........L............HTTP/1.1 200 OK..Cache-Control: max-age=1..Conten
t-Type: text/html..Server: X2 Network HT wS..Content-Encoding: gzip..T
ransfer-Encoding: chunked..Date: Sat, 08 Aug 2015 22:50:39 GMT..Connec
tion: keep-alive..X-Full-URL: videospornoadultos.net/loader/info/on.ph
p?nocache..X-Served-By: VVV.x2n.com.br..X-Optimization: High Traffic (
HT)..X-Cache: MISS..0015e............=P.J.@.|.W.....F[.`.`[email protected].,.k
...{1....Mj......a..x...m.....l...e........8.......'kh..`.T..q.u...Fd8
}....).J.T!...-.hC#...s<l...t...Pq.ZQT...`....U3|..H.......xw......
h.(X.?:.......`...q>....v.j..{( R.....c6;>.nF......x...k......c.
e...Q...I......:....SM.%4.,.......e\..J..........uu...[9?.$[...0..Ag..
.i[^.(/Jf.>..c;..........L............0..0..

GET /loader/info/script2.php?nocache HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: videospornoadultos.net

Connection: Keep-Alive

HTTP/1.1 200 OK

Cache-Control: max-age=1

Content-Type: text/html

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:39 GMT

Connection: keep-alive

X-Full-URL: videospornoadultos.net/loader/info/script2.php?nocache

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
0092............].1..0..{..t..$..q......pdB.; ..w.F.l.3Z.a.."...8&..C 
!/..hMW.U...}...V.&wu.E..J.....]].3.K.B.P...r.Y.[.B.q...>Q...T.?Kc_
.......I..j......HTTP/1.1 200 OK..Cache-Control: max-age=1..Content-Ty
pe: text/html..Server: X2 Network HT wS..Content-Encoding: gzip..Trans
fer-Encoding: chunked..Date: Sat, 08 Aug 2015 22:50:39 GMT..Connection
: keep-alive..X-Full-URL: videospornoadultos.net/loader/info/script2.p
hp?nocache..X-Served-By: VVV.x2n.com.br..X-Optimization: High Traffic 
(HT)..X-Cache: MISS..0092............].1..0..{..t..$..q......pdB.; ..w
.F.l.3Z.a.."...8&..C !/..hMW.U...}...V.&wu.E..J.....]].3.K.B.P...r.Y.[
.B.q...>Q...T.?Kc_.......I..j......0......


GET /loader/info/flash_detect.js HTTP/1.1

Accept: */*

Referer: hXXp://videospornoadultos.net/loader/info/script2.php?nocache

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: videospornoadultos.net

Connection: Keep-Alive

HTTP/1.1 200 OK

Last-Modified: Tue, 03 Feb 2015 02:04:01 GMT

Content-Type: application/javascript

Cache-Control: max-age=86400

Server: X2 Network HT wS

Content-Encoding: gzip

Content-Length: 1702

Accept-Ranges: bytes

Date: Sat, 08 Aug 2015 22:50:39 GMT

Connection: keep-alive

X-Full-URL: videospornoadultos.net/loader/info/flash_detect.js

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: HIT
...........Ymo.6..._..Ck'.lwC..sQ.M...R.A.-3.F.m...R..,.....FRRlw]./..
......r...=.....KIZ^.._.{.......L\........>Q21.,fb.f...1.s..1..$.1A
...g...u.= K).A...l.9.2...g....U7.u..<z.D..`@.n.....{.....i.|.$.$..
.m.<.<........R1..0,.<..N.py.K........3mL...:.....B...}....N.
..}m..H..G.)..f...y..,..K5.........s..d.z.7t.........Z..@gP .^}h.....A
....q.U........k..O.>.Rg..L.!}..u...aEN...260..y....<.%{,F...o.M
\cJM[L..L. .Jo.bB.o.M.gf....-.._.t.{|.....k.. Wq....`.s......n...>.
.. r{~..rdK.@t..*..j.P|*o"F .x....E.UV.{@.C.....&....V.V)VZr.a.=.....r
~.....gH.3..X/.......gk...,dI....$......=dM#.)p[%.....~?.?&Q.y..y.0...
l.0;_E>.....0.U".b.......r..k.'jP..YAN9qG.S.=....].iWdS.<f.....P
.......z.C s...NS..R....yEb.=.......M..-#..l:u....31...)0......!....&l
t;5;.8'[email protected]>....y,...I.p.....t %.].".z,..`.vmG...au...X{.
Z.3P...dK...7.'%N..?..~.m.@......@6i=.S..w..|...D. !.T....-...^>c.:
]1._H.f.)..?.&..." [email protected]...*..d..B.......*.5...q:.:,.}....ZM!.,.
.~....~W.^.8.........$..}./..b'Y....^...bE...o....z*..j.R...i.R.y.....
.............|.l>F..y. d.WO~.,.<.. .3X..).>A..kE&..V..ma.Q...
U...|J..#...t...g40. .hc.....,?.*.i..'.].........}...A...QS..HA.o..=..
..z.CSL.7:....P..........e.u..S.....aa.........R..Z.u.F"...<-..I...
.1.;5.T......%J.J...,..C.X$ ...G;.a.o.QoH..0.?''....5..|.dT....G9(..&g
t;.#...Cw.K........)T0?f.JY....F....[.,h.....!.....n.'.Xa...J.W..~WV..
......[..YW.k.Y...Y.(......cQ.....g..i.H>".h..9x4.....8.......aEo.W
..t....E..&W).....8....5n.;................t.......Ze.4....y.W.V]M
<<< skipped >>>

GET /forum/public/style_images/grand/stems/tooltip_left.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126

HTTP/1.1 200 OK

Last-Modified: Sun, 08 Feb 2015 16:07:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:50 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/style_images/grand/stems/tooltip_left.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00a1...PNG........IHDR.............V.T.....tEXtSoftware.Adobe ImageRea
dyq.e<....PLTE333...#(......tRNS....0J...#IDATx.b`......!. $..d....
6B..^0..`..R.)e.Z.....IEND.B`...0......


GET /forum/public/style_images/grand/stems/tooltip_right.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126

HTTP/1.1 200 OK

Last-Modified: Sun, 08 Feb 2015 16:07:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:51 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/style_images/grand/stems/tooltip_right.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00a2...PNG........IHDR.............V.T.....tEXtSoftware.Adobe ImageRea
dyq.e<....PLTE333...#(......tRNS....0J...$IDATx.b`.......&.........
*.U.U.3. ...z.)........IEND.B`...HTTP/1.1 200 OK..Last-Modified: Sun, 
08 Feb 2015 16:07:28 GMT..Accept-Ranges: bytes..Cache-Control: max-age
=604800..Content-Type: image/png..Server: X2 Network HT wS..Transfer-E
ncoding: chunked..Date: Sat, 08 Aug 2015 22:50:51 GMT..Connection: kee
p-alive..X-Full-URL: VVV.rlhackers.com.br/forum/public/style_images/gr
and/stems/tooltip_right.png..X-Served-By: VVV.x2n.com.br..X-Optimizati
on: High Traffic (HT)..X-Cache: MISS..00a2...PNG........IHDR..........
...V.T.....tEXtSoftware.Adobe ImageReadyq.e<....PLTE333...#(......t
RNS....0J...$IDATx.b`.......&.........*.U.U.3. ...z.)........IEND.B`..
.0......


GET /forum/public/style_images/grand/search_icon.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126

HTTP/1.1 200 OK

Last-Modified: Sun, 08 Feb 2015 16:07:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:51 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/style_images/grand/search_icon.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
001b2...PNG........IHDR.....................tEXtSoftware.Adobe ImageRe
adyq.e<...TIDATx.b`.......q5..... .........._........./.|..........
=.b][email protected].._.>....:P..E.....}.........y|.v...2..
..&..2...E....W.....M.'.a;A.g....dbdd.....O.... ..;.....D_.x.1....W..=
[email protected]'......@..@......=s..,l.................H.Ll.9
..&999g....nnnI@...... i.f..x.X..9.|.S.N.C...@$..E<H..o..3..4A.vvv.
` ......`......[@e....IEND.B`...HTTP/1.1 200 OK..Last-Modified: Sun, 0
8 Feb 2015 16:07:28 GMT..Accept-Ranges: bytes..Cache-Control: max-age=
604800..Content-Type: image/png..Server: X2 Network HT wS..Transfer-En
coding: chunked..Date: Sat, 08 Aug 2015 22:50:51 GMT..Connection: keep
-alive..X-Full-URL: VVV.rlhackers.com.br/forum/public/style_images/gra
nd/search_icon.png..X-Served-By: VVV.x2n.com.br..X-Optimization: High 
Traffic (HT)..X-Cache: MISS..001b2...PNG........IHDR..................
...tEXtSoftware.Adobe ImageReadyq.e<...TIDATx.b`.......q5..... ....
......_........./.|..........=.b][email protected].._.>....:
P..E.....}.........y|.v...2....&..2...E....W.....M.'.a;A.g....dbdd....
.O.... ..;[email protected]'......@..@......
=s..,l.................H.Ll.9..&999g....nnnI@...... i.f..x.X..9.|.S.N.
C...@$..E<H..o..3..4A.vvv.` ......`......[@e....IEND.B`...0..>....
<<< skipped >>>

GET /forum/public/style_images/grand/advanced_search.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126

HTTP/1.1 200 OK

Last-Modified: Sun, 08 Feb 2015 16:07:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:52 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/style_images/grand/advanced_search.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00125...PNG........IHDR...............7.....pHYs.................IDAT(
...!KCq.......cI...".d`.lK:Y7....X.V....@..`.\.a4h.........\..M.9.....
.......... xtbb...p..G..*J..z...\ Z3..O`W69v...).....`]^......s..2..,.
4.aE...Y.5A..r)..7..-..l...5..k..............3.d.7.5p1.d..e...Uc.x....
[email protected]`...HTTP/1.1 200 OK..Last-Modified: Sun, 08 Feb 2015
 16:07:28 GMT..Accept-Ranges: bytes..Cache-Control: max-age=604800..Co
ntent-Type: image/png..Server: X2 Network HT wS..Transfer-Encoding: ch
unked..Date: Sat, 08 Aug 2015 22:50:52 GMT..Connection: keep-alive..X-
Full-URL: VVV.rlhackers.com.br/forum/public/style_images/grand/advance
d_search.png..X-Served-By: VVV.x2n.com.br..X-Optimization: High Traffi
c (HT)..X-Cache: MISS..00125...PNG........IHDR...............7.....pHY
s.................IDAT(...!KCq.......cI...".d`.lK:Y7....X.V....@..`.\.
a4h.........\..M.9............... xtbb...p..G..*J..z...\ Z3..O`W69v...
).....`]^......s..2..,.4.aE...Y.5A..r)..7..-..l...5..k..............3.
[email protected]`...0..0..

GET /loader/versaoloader.txt?nocache HTTP/1.1

Host: videospornoadultos.net

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Last-Modified: Sat, 01 Aug 2015 16:51:29 GMT

Accept-Ranges: bytes

Cache-Control: max-age=1

Content-Type: text/plain

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:37 GMT

Connection: keep-alive

X-Full-URL: videospornoadultos.net/loader/versaoloader.txt?nocache

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
003..4.0..HTTP/1.1 200 OK..Last-Modified: Sat, 01 Aug 2015 16:51:29 GM
T..Accept-Ranges: bytes..Cache-Control: max-age=1..Content-Type: text/
plain..Server: X2 Network HT wS..Transfer-Encoding: chunked..Date: Sat
, 08 Aug 2015 22:50:37 GMT..Connection: keep-alive..X-Full-URL: videos
pornoadultos.net/loader/versaoloader.txt?nocache..X-Served-By: VVV.x2n
.com.br..X-Optimization: High Traffic (HT)..X-Cache: MISS..003..4.0..0
..0..

GET /analytics.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 21:31:38 GMT

Expires: Sat, 08 Aug 2015 23:31:38 GMT

Last-Modified: Thu, 06 Aug 2015 18:26:56 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 11090

Age: 4751

Cache-Control: public, max-age=7200
...........}iW....w~E\'.U..e...6.^.L$.I.l.,.$......!....~...28.......j
k...,ux2..i.4.......&.rz*N...P........6..........N[...7*."..33.e.{2>
;..I..W..y....:..v.........3.O.T.!...x....e.....t."..2....`*.....$..s.
.$...A .TP..4....;.2..`........).<..>M....uH#8.6%.>.oU.df<
...O..9........rN...dj.}N....i............:.Mh.O.`0R....y.....F.F4..m.
....M6..lzEH.....J.$fy....(.. .....RS.}.Fg}[email protected]&4.]J..F.&...*t
..Q...x..S.~:.R..J...}.mF.fFN...9.......J..!...i.._&..........nLm.)...
.R.e..JJ;.d...@&..H.z .r.....Z..W.]].eg...FT%.=.....o..........mI.....
`....g._..}.zo.....wG.?|....W.*Z..i....|8...&...................=.....
.!....G-..;/.a.D....s...N....W..W@....(5G..].........j*....H.....-T|..
.{..p.p........L....s*.a$..FmI.cE.I;..............(rK.R.Oow ... j.I...
.X..7.!F.T.....I..::...li..(.a...v....U8.o......cg..Z(.7.?.5t.b.....D.
..5.B.....<St.....)..m0.|o-.k......)..,.G.e.....o..../Y.Vo...ZOP_. 
...bu.`......Nch..%N}...)S8NN2.H..t.f.|....B...P.{}...*`.....x.z.W....
......%4....Z.R.g.D".......}...bE.JEGM..N.:......0..P.......MtM.x....R
..?....E.De..4.I.&...5......P..\...".&F[J.E.D..`.1..c.;.7yr.^......w..
...2...:[email protected]..<........0........7Ypyy...
m...p..9.WK7ML..d..Z...7...<...j..Xb.:..mC."..J][.......}.$...!..P3
I=.TU..H.5..1...~.g........s.{..6......p6.T(].t`.<5......."....v<
;....O.RK..Hyx.....-C..:Z......Gg.......z.6K..*I..........&..a6.%$e.B.
[email protected]^%[email protected]`.\#Zl
tI...s9^h..;9G..:n.No.O..t..V...&......09......N..W.....Hv........
<<< skipped >>>

GET /r/collect?v=1&_v=j38&a=989945544&t=pageview&_s=1&dl=http://VVV.rlhackers.com.br/forum/&ul=en-us&de=iso-8859-1&dt=RL Hackers - Fórum&sd=32-bit&sr=1276x846&vp=1256x677&je=0&fl=11.6 r602&_u=AEAAAEAAI~&jid=412880259&cid=320727732.1439074258&tid=UA-52480385-1&_r=1&z=1360165784 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive

HTTP/1.1 302 Found

Location: hXXps://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-52480385-1&cid=320727732.1439074258&jid=412880259&_v=j38&z=1360165784

Access-Control-Allow-Origin: *

Date: Sat, 08 Aug 2015 22:50:49 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

Content-Type: text/html; charset=UTF-8

Server: Golfe2

Content-Length: 367
<HTML><HEAD><meta http-equiv="content-type" content="te
xt/html;charset=utf-8">.<TITLE>302 Moved</TITLE></HE
AD><BODY>.<H1>302 Moved</H1>.The document has mov
ed.<A HREF="hXXps://stats.g.doubleclick.net/r/collect?v=1&aip=1
&t=dc&_r=3&tid=UA-52480385-1&cid=320727732.1439074258&
amp;jid=412880259&_v=j38&z=1360165784">here</A>...<
;/BODY></HTML>....

GET /loader/info/status.txt?nocache HTTP/1.1

Host: videospornoadultos.net

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Last-Modified: Fri, 07 Aug 2015 01:02:14 GMT

Accept-Ranges: bytes

Cache-Control: max-age=1

Content-Type: text/plain

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:38 GMT

Connection: keep-alive

X-Full-URL: videospornoadultos.net/loader/info/status.txt?nocache

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
006e..//status.1.0.1.1.1.1.1.....//ordem.CrossFire.Point Blank.Combat 
Arms.WarFace.Grand Chase.Elsword.Sudden Attack..HTTP/1.1 200 OK..Last-
Modified: Fri, 07 Aug 2015 01:02:14 GMT..Accept-Ranges: bytes..Cache-C
ontrol: max-age=1..Content-Type: text/plain..Server: X2 Network HT wS.
.Transfer-Encoding: chunked..Date: Sat, 08 Aug 2015 22:50:38 GMT..Conn
ection: keep-alive..X-Full-URL: videospornoadultos.net/loader/info/sta
tus.txt?nocache..X-Served-By: VVV.x2n.com.br..X-Optimization: High Tra
ffic (HT)..X-Cache: MISS..006e..//status.1.0.1.1.1.1.1.....//ordem.Cro
ssFire.Point Blank.Combat Arms.WarFace.Grand Chase.Elsword.Sudden Atta
ck..0..0..

GET /images/ts3/viewer/host.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.tsviewer.com

Connection: Keep-Alive

Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:32 GMT

Content-Type: image/png

Content-Length: 1067

Connection: keep-alive

Last-Modified: Tue, 18 May 2010 06:27:58 GMT

ETag: "4bf2336e-42b"

Expires: Sun, 09 Aug 2015 00:51:32 GMT

Cache-Control: public, max-age=7200

Access-Control-Allow-Origin: *

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 212ec958ab1b2690-FRA
.PNG........IHDR................a....sBIT....|.d.....pHYs...........~.
....tEXtSoftware.Macromedia Fireworks 8.h.x....tEXtCreation Time.07/15
/068..Y....IDAT8.u.}L.w..........V..dL..8....[6...A...%.L.fl,n..e.6...
..q.......j..K3.it]...!}C..B,....R....z.......$.'.o.<.l....*&..M2..
.H$"..H...q.TL.j...s_y..a.... .....8....;.'..[.L..6jN.=.Y.}..i....U5?_
.8.y.p.c...v........-..w/.>..>V...Th."\`....2I.~RVQ........x....
......TB.yD..........dag(...(...c...X..)../w..O..Xl..H.e.s.,....P.RA.}
.....l&.....[6...-.z.a.4..N%?.{.......i.K...\..J....G.U.J].t.....E..A&
........qv..pi..........M.W.=..).o.T.g..k...l...|R..rmN....0X[g!.[..P.
...x.!D!......a....}1.q>. m.Y2ljLAi...S..V.B.....,.<_.qH.bR..F.C
..4....:.....b.Y..4.MF.(i3\.vI.A).".'0P.H.....Y.i.*........Zo..o...3$.
$Z...6...E....b..][email protected].:.....([email protected]
.......A.........,*.J7.'.>\J.P"\SY...ea.......ce...........)...[h!0
......-U.gn6i`[email protected]..=u..l&.0....jB........vg.....8.%...KC.
a.a..8......J. 7.. ....z....S.{M_.....'.t...(...u.:..w.E.S.U.[mu.DbO&l
t;..1.]...... \...us.TX.......IEND.B`.....


GET /images/ts3/viewer/channel_flag_moderated.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.tsviewer.com

Connection: Keep-Alive

Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:32 GMT

Content-Type: image/png

Content-Length: 945

Connection: keep-alive

Last-Modified: Tue, 18 May 2010 06:27:56 GMT

ETag: "4bf2336c-3b1"

Expires: Sun, 09 Aug 2015 00:51:32 GMT

Cache-Control: public, max-age=7200

Access-Control-Allow-Origin: *

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 212ec9590b1d2690-FRA
.PNG........IHDR................a....gAMA....aLA.... cHRM...........M.
..>..Y.......<......."2...-iCCPPhotoshop ICC profile..(.c``2ptqr
e.``.. ).rwR...R`?..............> v^~^*.*`d`.v.D20\[email protected].(*.....
(%.8.h....]^R..g..d.$e...@... g ......a_... .' [email protected]
..ep./.,.L.(Q0...TpL.OJU..,.I.-V..K./*./J,[email protected] 
8|... .. ......L....3.H00./e``...3.e`X....?.!.f.. ....o....O..&.)....p
HYs...........~.....tEXtSoftware.Paint.NET v3.5.1N.8.....IDAT8O...KBQ.
.5.Z..i..BH..ZBh.%..l..R....!A.....j..(...ID...5..T.........K..-.u....
.s....5....=.......B<.Gl%....`0.D".d2.T*.Lf.O..b........r..R.?...9.
[E.....L.(..rq.......Au1=<..|..\...c4.MX.}..........CC.|.F...58....
..YT.....R......,.........V..L*....B*.Ls..(........8g.....b.U...d.5...
.4....2......U@ w:..A...........{&f....6.P,.T..E.....Ajr../[email protected]....
..G4........o.V.:.=.n.z..m6......ojoo_....J...Xg......$I..0......`....
...?....S..P.b@....] I:5....?.R^...B.F....IEND.B`.....


GET /images/ts3/viewer/tree.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.tsviewer.com

Connection: Keep-Alive

Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:32 GMT

Content-Type: image/png

Content-Length: 1052

Connection: keep-alive

Last-Modified: Thu, 09 Oct 2014 03:52:59 GMT

ETag: "5436069b-41c"

Expires: Sun, 09 Aug 2015 00:51:32 GMT

Cache-Control: public, max-age=7200

Access-Control-Allow-Origin: *

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 212ec9595b202690-FRA
.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:C2C30D9C4F6711E4915ADCD2
B030BC8E" xmpMM:DocumentID="xmp.did:C2C30D9D4F6711E4915ADCD2B030BC8E"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C2C30D9A4F6711E491
5ADCD2B030BC8E" stRef:documentID="xmp.did:C2C30D9B4F6711E4915ADCD2B030
BC8E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>v.......IDATx.b...?.%...B0j...l...~..)....h
$...<Xohh._KK.?..A.[.l.k........a.^/.:t.....AXX.AHH.....C..>?.4 
)).5?z......x........O. [email protected].*1.)....IEND.B`.t>....


GET /images/ts3/flags/br.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.tsviewer.com

Connection: Keep-Alive

Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:32 GMT

Content-Type: image/png

Content-Length: 593

Connection: keep-alive

Last-Modified: Mon, 30 Jul 2012 14:12:50 GMT

ETag: "50169662-251"

Expires: Sun, 09 Aug 2015 00:51:32 GMT

Cache-Control: public, max-age=7200

Access-Control-Allow-Origin: *

CF-Cache-Status: REVALIDATED

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 212ec959ab212690-FRA
.PNG........IHDR................n....gAMA....7.......tEXtSoftware.Adob
e ImageReadyq.e<....IDATx.bdHf@.....`./0.3 [email protected]`..........
..6Z.X..l9..... .............U.........O..B...Y.........;K..^.....?...
[email protected]....$~.........e..O;......o.......b..L_g.~.U
.s.zhd.....Y../.....D..:.....U..6.....[R.?...f...?........O.....Gs..A.
..........._..2................0.<.t..{..W.|x._...D..._...f.g.. ...
..y..)h).....b.U?.}..........n[.../.I..^..r.2|d.. .........&.g....o...
.......~Ko2...,@......`....H..?.$x$A......^.;...3...k....a.........(.@
.128"b.9F.1.........C/A...n....IEND.B`.....


GET /images/ts3/viewer/client_snd_muted.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.tsviewer.com

Connection: Keep-Alive

Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:32 GMT

Content-Type: image/png

Content-Length: 908

Connection: keep-alive

Last-Modified: Tue, 18 May 2010 06:27:58 GMT

ETag: "4bf2336e-38c"

Expires: Sun, 09 Aug 2015 00:51:32 GMT

Cache-Control: public, max-age=7200

Access-Control-Allow-Origin: *

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 212ec95a1b222690-FRA
.PNG........IHDR................a....pHYs.................gAMA....aLA.
... cHRM..z%..............R....X..:....o.Z......IDATx..S]HSq.=S.9.v...
..6?2B...I...... $#...A.".m.ST.A.=D......k.%. 5...s.0K&9..c.......Ct.^
z.<..w~...O!I...9.000 ....*** ."x...l.....A..x.z.~-...:........^..A
*.B,......oll\hnn6.....E.N.1>>~xxx......Q...sssE*.*..FA)].8..R..
..............5b4..q....B...ACC..".Y.T....|g.Z.$Iz.vd$m.X.............
ijj.[[[.........mmmx?;...L.,..^9\..,..kk........a.x.............7s...;
......~.....E]I.............l..... ...(I......;...\g.[,x.....e_.W...x.
_\.\.j.......T]...7@W\TRV^ql......ts.....P__......El..(7.`d...<4.._
Z......(.ew...)...B2.........................!.E.[. T...lSS..j5j... ..
 ...@.$.A...>..#...Z..7$I........lY..}_.....0H<.. @.dpn........9
....i.,...Uh..O&..?.a.~?..jh.Ade2.GG....N.#W.2.....J.....`N.|.....<
....n.M...J.G...h.w.......!XL&o.......D.../."...U...H...C...M.P..;...)
.o?.(6N....IEND.B`.....


GET //images/teamspeak3/default/tsv20100409.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.tsviewer.com

Connection: Keep-Alive

Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:32 GMT

Content-Type: image/png

Content-Length: 1877

Connection: keep-alive

Last-Modified: Fri, 09 Apr 2010 12:05:57 GMT

ETag: "4bbf1825-755"

Expires: Sun, 09 Aug 2015 00:51:32 GMT

Cache-Control: public, max-age=7200

Access-Control-Allow-Origin: *

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 212ec95a6b242690-FRA
.PNG........IHDR...l............X....tEXtSoftware.Adobe ImageReadyq.e&
lt;....PLTE.................................r~.......am...............
.^l....}.............................FVt......EUq.....................
....................................eee...rrrYYY...LLL................
.......................t..............................................
.............p|.............G.q.........AOj...........................
...............Y.x......t|.......v..9.]...............................
...........E.f.........o{....Bt]............6.<...{.....M[tN\x.....
.........................bm.........................eq.oz.............
...........................z..y..}..s................................z
....................P^x......... s3...............w........DZd......Q`
|Pfz..........................._.Y.....................???t~..........
....................IDATx...e`.6....k.5....u........M...B...;...1t..13
C....13s.....&.w.l_.....~.....{..xy.x4ox........._~|......N.s......&.^
.x....>../gl...9O......V<w.....X-.......>........H..E.}a.....
O..xGv..#.o.>Q....0j..t..."\.j!.{.7k...7.................G.:v$.\...
.....g..q.!.... I........i...,......a-..e..ILl.;......La.2...R...M..#.
21......9.M.}n#v.bKsX....q]a....,XT<rliQ.ir..P.Q...}.{S....z.....V.
2.S.n..1,.Th&3.D^2.....e.d.{PU...W.L_7.V....j../..X...$..C..(....'....
.'.."1T&&A..t.......aEOz.. "3Qo.a..H..L..-.!([email protected]..#
..#.W...FD......Pd..m"...M.ql...#2......2...3.L,.pX..~%....P...z.._..[
9.....>.}G..Q&..:{.....D.e........2.X..9n.......e......<..}.
<<< skipped >>>

GET /loader/info/go.txt?nocache HTTP/1.1

Host: videospornoadultos.net

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Last-Modified: Fri, 07 Aug 2015 21:05:36 GMT

Accept-Ranges: bytes

Cache-Control: max-age=1

Content-Type: text/plain

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:35 GMT

Connection: keep-alive

X-Full-URL: videospornoadultos.net/loader/info/go.txt?nocache

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00196..//Jogos.CrossFire.Point Blank.Combat Arms.WarFace.AIKA BR.Elswo
rd.Sudden Attack. .//Cheats CF.RL ESP (WIN 7).RL WALL (WIN 8, 8.1)....
.RL Hackers VIP ULTRA.RL Hackers 1.1... .//Cheats PB.RL Hackers PB VIP
..MasterPB ViP (Use em conta Fake). . .//Cheats GC.AIKABR Trainer.. . 
.//Cheats WF.RL Warface 1.9.RL Aimbot Aimbot.. . .//Cheats ELS.MasterS
word v4.0. . . .//Cheats SA.RL Hackers Sudden Attack Loader......HTTP/
1.1 200 OK..Last-Modified: Fri, 07 Aug 2015 21:05:36 GMT..Accept-Range
s: bytes..Cache-Control: max-age=1..Content-Type: text/plain..Server: 
X2 Network HT wS..Transfer-Encoding: chunked..Date: Sat, 08 Aug 2015 2
2:50:35 GMT..Connection: keep-alive..X-Full-URL: videospornoadultos.ne
t/loader/info/go.txt?nocache..X-Served-By: VVV.x2n.com.br..X-Optimizat
ion: High Traffic (HT)..X-Cache: MISS..00196..//Jogos.CrossFire.Point 
Blank.Combat Arms.WarFace.AIKA BR.Elsword.Sudden Attack. .//Cheats CF.
RL ESP (WIN 7).RL WALL (WIN 8, 8.1).....RL Hackers VIP ULTRA.RL Hacker
s 1.1... .//Cheats PB.RL Hackers PB VIP..MasterPB ViP (Use em conta Fa
ke). . .//Cheats GC.AIKABR Trainer.. . .//Cheats WF.RL Warface 1.9.RL 
Aimbot Aimbot.. . .//Cheats ELS.MasterSword v4.0. . . .//Cheats SA.RL 
Hackers Sudden Attack Loader......0..0..
<<< skipped >>>

GET /forum/public/min/index.php?ipbv=f687db9fbe2f009e9077ef1abc25ea51&f=public/style_css/css_6/Badges.css,public/style_css/css_6/ipb_help.css,public/style_css/css_6/extra.css,public/style_css/css_6/calendar_select.css,public/style_css/css_6/ipb_common.css,public/style_css/css_6/ipb_styles.css,public/style_css/css_6/ipshoutbox.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126

HTTP/1.1 200 OK

Vary: Accept-Encoding

ETag: "pub1439049966;gz"

Cache-Control: max-age=31536000

Content-Encoding: gzip

Last-Modified: Sat, 08 Aug 2015 16:06:06 GMT

Content-Type: text/css; charset=utf-8

Server: X2 Network HT wS

Content-Length: 20317

Accept-Ranges: bytes

Date: Sat, 08 Aug 2015 22:50:44 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/min/index.php?ipbv=f687db9fbe2f009e9077ef1abc25ea51&f=public/style_css/css_6/Badges.css,public/style_css/css_6/ipb_help.css,public/style_css/css_6/extra.css,public/style_css/css_6/calendar_select.css,public/style_css/css_6/ipb_common.css,public/style_css/css_6/ipb_styles.css,public/style_css/css_6/ipshoutbox.css

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
...........}{............z... .&......",..Jko.c...`.;$A.......W.U..z.l
5[..Y..&P.GVV>~....,.....M.......f..q.<..F.....wy..a.E.l.)...?..
e.n....*6i..P.B.../.............X.........j.]s.e....CQ..}.....(....MST
..f.J?....G...U...YC.Y}.~.6.."..?V.a.....c.p.6...f.....?~.....(.:..m..
.X..a......./..iS.1c..c.../..p.{.....b_.A.../....).. f..O.|.{d........
..f.[..2........N!&....(.....}...:.n.)<zIm.......z...k.uy....uuW.H.
U.z.z.?4.......lh...e..).......1 7e.p3..3...#[...&..~.t..j.[.....b...3
>.w.b.@...."..\~......].J....zW.M...(j...ck....E...8.h...{Y.....C..
Z.S....(....C.0$. ..53...q.n.m...\L.i<=...MQ7..L......5w..o..`..|..
.a..n.].V.<m.y]l..9..............z.I....2{?......`..$..^V.....x.).i
hwU.`E.X.2.t:u.'hVE..........E...v..KS9.r:.l..8..|$.....M.0.......1j[|
j....q...;F...L`g.a...$IW....gu..-6.M[.P.` RV[<.4.b#W.CD. nvo.`.\..
.....X./L..-.H5.z.....jo..0W...ba.{.|.A*.4.4.htz.;"...gf.........pbL.5
.{wv.......p...H.Eyv.IGBa...m....Z..=.dZ.U.e]_...F.....T...8>3.b..Y
..j;.S.zo..........\{n..M.f....u.o...X......E..}p...(|.h..OP..Gb.^.. O
u..]....d. `.{S..........8..{)...=R.c.....R.r'M.W..y.D9.<.W.kb.I..l
........s......Y}WUeU.....1ny...O7..l..8NX\".<....:..l...q...zWH.?R
....G...CS.....DA..D..6...E.......V.J'L..~.w..~ID.....X...6.'|;k\../.8
..0b.......-...C...O..O....u.z......;U4/B.....Xh..f8............l..o..
....^r.bgvVT..z....).f....i.....vCU9.^.....l..{...#r...um.E....... y..
.G.z......>......l f.6mR.1.t.].....t...?.....]..Nw...-.....:m...Q..
A...~..B-q......mE.>..I....`...b.....V...|5..Y..mh]..D..vQT...z
<<< skipped >>>

GET /forum/public/style_images/grand/fonts/DBM.otf HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126

HTTP/1.1 200 OK

Last-Modified: Sun, 08 Feb 2015 16:07:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=1

Content-Type: application/x-font-otf

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:44 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/style_images/grand/fonts/DBM.otf

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
0022fb.............z.X.G.w..3....:Dv.Y.....>@EP.OPTTTnD..X.oQA....x
....D.....$..._.......^.W....7..=...yz.......U.....a...C4......t...B..
.qQ....c..M..Q.|."...}.?.".m.u.'E.G.?....6b.:. .W..H.......L.P.@BZ[c.9
!<3...Tx..........zc[.!V..I.i.O...p....2-.9..;0...7..(s..?........w
.nX..5....u.G.4..S..w....3..@......=a....:....r.C......`....<-%U..Y
s.\D.M. /~..O[4P.gU...o...~m...V...i.5..th.....4........>..4G.HB.mM
.......'..h[.....#mUB..H..z..*[email protected][email protected]...
.s.k....5.Q......O.h[..!.....x..N.Or...t......o|J\..4.....)...~...x...
....!.Qq..~.......sX._...a......S................O.vI...NqIKrI......Kk
.35:2-.).%&)...............2.%<--%."..%1)-.2:.].>z.K`x*.K.w.....
...A).L..t......}...=6&.=*<9)%-&)>..=2).}@bjr\JxZ.K\.K0.........
[email protected]...?.!..w$...<...-)$...I$...-......(...
Fl..6....7...Kk.I.}.G...$..Fn>.'....?...5.9........E"wK.....-."..eD
.E&..1...di..R2....(c"....D,.`...11..4KM.........)X...i.~.(..pI.\)EZ..
.o.F...(.".'~...;&a..=........../.&Y.HFk..7...c- ..|..U.,..Q.ERw./..iO
..K*...pL.h.g.$...~X......R..*.....3..Y.,2 .Q,[email protected])........z4
.x.[".7vp.6..>[email protected]...{{...;u...[..==.z......._.?...
...N7f...9lZ`P....G...5zf....B.....|.&.Ea6%&....'.SK...:!N.&........."
.,Vi.. ...-.K..*f...G..Rr.Y......../Q.I(H&..m..9.....>V}.B.....||..
..G>.{<.o....E.!x.3..M.]..'m:.A.....).....:?.R......ZW.1.[...j.K
...U>].... ........./:..P.......[..4a.{bz|..p......L.....=.....4...
R......P..*.]..B.T....Q..Q7Ee...P!*..*2.!c......J...lB...O.dB....B
<<< skipped >>>

GET /forum/public/style_images/grand/js/cookie.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126

HTTP/1.1 200 OK

Last-Modified: Sun, 08 Feb 2015 16:07:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: application/javascript

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:45 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/style_images/grand/js/cookie.js

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
001a5............m.Ko.0...J.ae7.."....P....T...8q...c.U6.......H......
....WV[;(.2.. kpE{...$...X.........4.,Z..aYy$z!...H.^ .5.?.r0....W.2H.
...........].C.....}z|...2-!K.%.e..$.E.......L.d3.G..K..-._.......H..(
.BV.g.%...g.......H...7F|*}.%.....<.S\<!mD..Ke..Y...g....up...B)
..:h0.t...".([email protected].....(.
u8A.(x.y`#..w...-.....E.4.......l....X..........j...h...............|p
&k....8.........HTTP/1.1 200 OK..Last-Modified: Sun, 08 Feb 2015 16:07
:28 GMT..Accept-Ranges: bytes..Cache-Control: max-age=604800..Content-
Type: application/javascript..Server: X2 Network HT wS..Content-Encodi
ng: gzip..Transfer-Encoding: chunked..Date: Sat, 08 Aug 2015 22:50:45 
GMT..Connection: keep-alive..X-Full-URL: VVV.rlhackers.com.br/forum/pu
blic/style_images/grand/js/cookie.js..X-Served-By: VVV.x2n.com.br..X-O
ptimization: High Traffic (HT)..X-Cache: MISS..001a5............m.Ko.0
...J.ae7.."....P....T...8q...c.U6.......H..........WV[;(.2.. kpE{...$.
..X.........4.,Z..aYy$z!...H.^ .5.?.r0....W.2H............].C.....}z|.
..2-!K.%.e..$.E.......L.d3.G..K..-._.......H..(.BV.g.%...g.......H...7
F|*}.%.....<.S\<!mD..Ke..Y...g....up...B)..:h0.t...".(..6.......
[email protected].....(.u8A.(x.y`#..w...-.....E
.4.......l....X..........j...h...............|p&k....8.........0..0..<
/font>....
<<< skipped >>>

GET /forum/public/min/index.php?ipbv=f687db9fbe2f009e9077ef1abc25ea51&g=js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126

HTTP/1.1 200 OK

Vary: Accept-Encoding

ETag: "pub1437230417;gz"

Cache-Control: max-age=31536000

Content-Encoding: gzip

Last-Modified: Sat, 18 Jul 2015 14:40:17 GMT

Content-Type: application/x-javascript; charset=utf-8

Server: X2 Network HT wS

Content-Length: 48132

Accept-Ranges: bytes

Date: Sat, 08 Aug 2015 22:50:46 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/min/index.php?ipbv=f687db9fbe2f009e9077ef1abc25ea51&g=js

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
............}....(..?..fM2.e9m..Ra.8..x..Y..iWV..%.V#K:....t?..y. AINz
.....sb. 0....`0....T.OF...a..._.I....`..... ~9.}..I.^...S.%.f.D..N:.|
..t..I.^......&|..'.l.IO......X..OGg.I.xS.v...s...}.. o..Ak.. X..4'..~
2...%....3.v..G.DM[[.\O..........4...E....u.......w....n.S..8..`.~..2.
.~}..M ...boGW.Av...L.....?....4...}'Z,.0.x{.uD/.<....3..]....w....
Sgp..f.Y6...M....f...g...1>.d.z.e..a....tE.tr..SF......:.i.....(..e
........q.._...........bTz....6.P...^..Y/.6...Qg.....J.......K....D..h
rW..>.<...~<.M.Y/.....).%....K...e...*$.... -.}2.aK...Nl..~0`
dV.|..E|.....W..../.......E....uqqvq....E./v..x.."........`*.....;.O..
. Hi[../..O..."9..d'.....W<..1...g..%.q3.,...5..L.u.....wI..RJ`d.@.
.:y..Dz|vyx......../?...oV....r. ..L..dw.T5..0..A.}.........l%...B[..:
...[5.LD7p(c1...L.Y.>..;....<..1K.......j.J.`H:......f{>rc...
\0...........O.BH..Z..\i.H..X:F...f..QOd..z~/.......N..=j....5...z.sA.
. t.a.Ya...u...}~Km.......x..o..&f(.....j.h....z.9...6....&.....[....0
n..&#.orz.....J....~....:..X.Di.b=,[[N...$;.........L....A...... N.{..
..T.....K........./...t....!..<F.)5.%. .K,om..%...........]&f...iZ}
..P...p.S...*5_.S..`U."...k.M``G..Q...3....j.h5k....R.Y..*.. .k....U.B
.........=L.P..E>.6#...O..)..I.........\....}|y..O>..K. .....>
;.ysy....4x'V. .........CN...........w...h4.:[email protected]....&A|v~z..'N.e,
>y..G...H-..W........<x..v.ecI.m]...[.VMp.S[..1.gj....z....u.2.&
lt;.....G..C1.P..../G. .\R...~.<........K....$%.K=.z......!.....a..
.....6$..1..4Q$..y...,miI"..oF..3...J<..!.....3HZ?...b.O:W.L$.k
<<< skipped >>>

GET /forum/random_logos/logo-1425575286.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126

HTTP/1.1 200 OK

Last-Modified: Thu, 05 Mar 2015 17:08:06 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:50 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/random_logos/logo-1425575286.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
008000...PNG........IHDR..............i......pHYs...............9.iTXt
XML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTc
zkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP 
Core 5.5-c014 79.151481, 2013/03/13-12:09:15        ">.   <rdf:R
DF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">.      &
lt;rdf:Description rdf:about="".            xmlns:xmp="hXXp://ns.adobe
.com/xap/1.0/".            xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm
/".            xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/Resource
Event#".            xmlns:dc="hXXp://purl.org/dc/elements/1.1/".      
      xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/".           
 xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/".            xmlns:exif="ht
tp://ns.adobe.com/exif/1.0/">.         <xmp:CreatorTool>Adobe
 Photoshop CC (Windows)</xmp:CreatorTool>.         <xmp:Creat
eDate>2015-02-19T19:58:49-02:00</xmp:CreateDate>.         <
;xmp:MetadataDate>2015-02-19T19:58:49-02:00</xmp:MetadataDate>
;.         <xmp:ModifyDate>2015-02-19T19:58:49-02:00</xmp:Mod
ifyDate>.         <xmpMM:InstanceID>xmp.iid:1322f85f-14a6-124
e-b3f6-e1f280eb0d6b</xmpMM:InstanceID>.         <xmpMM:Docume
ntID>xmp.did:446e908c-f5bf-6040-b454-899130d7aa8e</xmpMM:Documen
tID>.         <xmpMM:OriginalDocumentID>xmp.did:446e908c-f5bf
-6040-b454-899130d7aa8e</xmpMM:OriginalDocumentID>.         <
xmpMM:History>.            <rdf:Seq>.               <r
<<< skipped >>>

GET /forum/public/style_images/grand/highlight.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126

HTTP/1.1 200 OK

Last-Modified: Sun, 08 Feb 2015 16:07:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:52 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/style_images/grand/highlight.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
0082...PNG........IHDR.............Q.g.....tEXtSoftware.Adobe ImageRea
dyq.e<...$IDATx.b....5....a...D....O..B.......8S.">mEo....IEND.B
`...HTTP/1.1 200 OK..Last-Modified: Sun, 08 Feb 2015 16:07:28 GMT..Acc
ept-Ranges: bytes..Cache-Control: max-age=604800..Content-Type: image/
png..Server: X2 Network HT wS..Transfer-Encoding: chunked..Date: Sat, 
08 Aug 2015 22:50:52 GMT..Connection: keep-alive..X-Full-URL: VVV.rlha
ckers.com.br/forum/public/style_images/grand/highlight.png..X-Served-B
y: VVV.x2n.com.br..X-Optimization: High Traffic (HT)..X-Cache: MISS..0
082...PNG........IHDR.............Q.g.....tEXtSoftware.Adobe ImageRead
yq.e<...$IDATx.b....5....a...D....O..B.......8S.">mEo....IEND.B`
...0..0..

GET /ajax/libs/jquery/1.7.1/jquery.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ajax.googleapis.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/javascript; charset=UTF-8

Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT

Date: Mon, 03 Aug 2015 12:17:47 GMT

Expires: Tue, 02 Aug 2016 12:17:47 GMT

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 33186

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Age: 469976
.............~.F....?......!J......7.......Y...h....w.T*.".Y.Y...|.D..
 (g..;.....b=q.8......?.....w.....>.......g{s.....2...........e. WK
?VI.h....~.<n...fy6.....e.z...8.{.U......(.. .e.8....V...}.[..|../.
......j-.~'...Q.....%Q.KV...Ec....q.{...x........*..^...^Vn........&_.
..~.....o.Z..~..^....{?.S..&.w.W.|A...r......t.../V.,.Dt.Pf...&yYLv.U.
.....r.Q}.^']...*W.:H.........~_=.r..s.^..T..=l.]..)Vj.......^.ys...x.
..C_.h..&............`.^b<.^:_m1'Y....c.....e..1Oo....q...q.x......
o...........?..q:..;.>.whu.....=.... . P..i...I..E.!..f.&v(.......m
...r...w~.SW.......6p>...........,.........Lsj...L7..j.......y..'.F
..h44..SY.V.......i.mw...4Yi.H{'.._..].9?...}..Jn................5Q%m.
y.,v.5U.(.^..\-.R...?^m."...7e..vy...b...L..%....]..f...l5>...nw.rY
x..|8..V.......0F..|4....<.q....d.(~...h....p.......q1.......y..ZF.
p1..;.^..W.Y...(.....<x.F...iI.t..n..p.-......w.p:..I.\.:x\...H..T.
j...../i..h....3....Y..w.......5...:..n.....U...]B..`.ZQ..nE}.....L..`
..A..W....C.\'......e^./.j\[...6.v."..u...-..K.3Tb....24>,..hD.R..&
lt;.F..q5C..vR.iO)Z.(..&T..v.Z#.. [email protected]..
.=Q...RZ ..SIt.}.....J.me.....Yq`..5......5.....28L..~.-L.=...b)M'..Gd
.....1..,.:H...f.....h..T. Q...~.|%#%....y....7....L......"QU.y0H...&l
t;.s....n....I'Z............A........K...k..2...P._..1Z...B..4~.&..h.o
{.y..q.......Z..R...l......&.....>....P.......&.;W.3...L......@$...
,....Q..U1..hC1.$ .;ByWj.M..... B=1....s_....:HP...&.7.&..>7.(=....
.P.b8...Q..Nw,...E........t;.4..`..._ F.P.......t....hm..w...Q....
<<< skipped >>>

GET /forum/uploads/forumicons/3-icon-10e2d59ff8ca683bb387754cef8c6766.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Fri, 19 Jun 2015 14:41:02 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:32 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/forumicons/3-icon-10e2d59ff8ca683bb387754cef8c6766.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
006f5...PNG........IHDR...#...#........Y....IDATX....k....?g~.o.....ZZ
[.............BbB,.P\....I......R..........`.BpJBi.<..!..v.S.P.0."i
%[Z...{.0;....d...2...{.....3wVx.qcv. ..U8/.{`^!8...Hk.#.q.QU.$".S..4.
_.....YX..W0.gg..)..^..... .....o.z....C.$....(._Wx]`.6...2...#.3.?.l&
gt;(K...x@]U.....:.......I.[QxS.w..#.....s}f..."_....g......4s-5g..%..
U.:......m.!.k...:....,.8."..cD........'..33...........vy%. ........\.
..K6..;J.O.|......".Z...........T.l'0....;.........~...4....c..Q......
n.........9..tO....~....w...-.0.H..h....$79I..H..........t;.uT.#"...ud
a..7fg. .......T$...s."`-......).\.@....}....1.}...$..tUZj..."........
{.......f.....0.m.p....:E......!..?>N..!.......F..q....-pX.........
D.8"...&.?..0....../087..o...h....##.........C....v.I...j*.x]m<[...
....>..'..........V ^.q.("...V......:kW....Gh.............;.....m.p
k5*O=E...X. @. .6.[.l..x..'....e..U....Q....#..... ..n^.4..V..Cr..T.{.
.....=1.Q.e.l#.. ..........u..z.pq1..|....0..P.1.f..u)MOS...85...m{CDp
...j.Dr.Z.F.j-.. ......Y.r....`77q..mc'`...(.nl...1...T.y..b..Cl.t.p..
c....4.M.1x.G.X.\..y^.H5...).<..w/....}......r9.K.fT..L..E..!....2=
.T.=ei6.,--....1....yT.UFGG).....!j-^........g..e.O>.R..W........{.
...[.y..Biz....a.X...V.....Y^^....;.1..J....mw].X.B..c..?x...O...[....
........q^....V:q....$.k.......h4bZ=.sODp..7..VWW.....Tc.ZJ'N087wM\.'.
.......M..Z.z......~.F.qkL.WA..,--.l6q]...........t.I.UkA.|.~M|....?.)
..7'j4.6...C./nJ...a.U....!A........  ...)....!R,...^......F.m....[...
....kj...#....xvS...o.V..'n...p.Hm;.t.t@...<...t{.<...w....]
<<< skipped >>>

GET /forum/uploads/profile/photo-thumb-29851.png?_r=1438930686 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Fri, 07 Aug 2015 06:58:06 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:33 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/profile/photo-thumb-29851.png?_r=1438930686

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
[email protected].. .IDATx.d.Y.
%Yz....q...Kn.UY{.].L.t.g..p.P...HJ....d..e...........a.2`..,.. ."%b..
p6.,==..]]{VeVe.r..8K...9.f..t.7...;............G...?...$..jg.R.Ng.i.W
.....:.t..{..G....t...I...b.pz.....|.3'..s.oh.....$......3ew....-~..[|
.Sg9.^.....B..5()..Aj...)%...Lo...........V.........d..:....9..Xc.B...
)..Z.R8...k.._K%1."D....I..?o.EH......|u.......#.$Xc......&4uM.f....14
...4c<.R..;.........J3....=~....'wvH...(!..A..[7.L .9.N....)..1$".u
.\H\c.E..a.k.E...d.=k..#.rfmH....>..=...g.\........o...|.....w.. ..
`.cM8..!..X.R......k..V...G..X....;.........#...&.....4ux..K`.J....L`.
Aj..&^...R.............w-..XS#..ZG..h..w...#2A...y.>..T."..q.%$....
.W..Bp`..WU...UVJ.V..,Rd4MC1...e)....*T..O.....Vx....;...U&...z..A...n
.......m>..].;.._..._|."..G.%Mm.Rb.CjI3=Bh..J(.`.$..>M3EjM..h..!
*.1..4.5..9.=.AI.s...m.Ba.AJ.4..C..R....".{..?.,.x.ur%(l.Z].1U.L.AIAsx
.H...Bd..t...p.Z.D..Bi...Ja......%O2...^.k..V..He.xVC/..K.2|k....K.2R.
Y_)QrN.&`.Z.8. ........)[ C..4......'Opj%...W.......W?....L...~......j
.....>i.9.2......ZJ.u....k.........eXc.Y..."|-2....\x.......L.....G
.........vH....i..,......d..`ZaI.eP4....q./yH.1....L.)J...C........$=.
.*.{. ..uE.e.i..........8...6.-..6(-.CDO;.:b:..|...o..._........y...~.
.....O.........c..e...Y.....I..............,.!4.i....c.E(...c...X.E.5.
,...p.%.).L.d=.n.....e!.K)i&.....&....7O8...R..W..L..,....JH..A.I.4.(.
<rj..........W.....Ge,:..f..L"m..5||k.g.>..u.]P5.!.......9.._...
....,esp.W......_..=..9..[....>.C[.EQp.u.....(.....5.....2.S)b"
<<< skipped >>>

GET /forum/uploads/forumicons/4-icon-c3d3ddbe58898931d336287a51575aeb.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Mon, 08 Jun 2015 22:31:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:33 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/forumicons/4-icon-c3d3ddbe58898931d336287a51575aeb.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
0042c...PNG........IHDR... ... .....szz.....IDATX....K.g..?.j.Y.v.z..P
.n..fK..^$. =mC{.....,.?"........^.JJ...<TD.nR..]..qoukD.u|...u\wg\
...s.y...y...}g.=...ywc....CS).........%.....'[email protected]....
V.QJ}W...3f..0..b....?.S..0...... _.....L89..0... 0.$...^...R.........
.......z....wV....X\.fg5[.8.<.3#.O. cF.....K...E..rE...o..V........
.....(`T...B...,xu'.>.Ke.8l...={.{Q..D...$...0..}Y..H#0..*.C..T..0.
..L..........c3..u..w."O.O!}.o%-P..[.......'J)...X...'@...P.ZA}.L.w7..
....XK..n/....-%.k .K...Q............5G1....u....[..SDn....-.jN.S.%...
N6...Z..&....wv.S..Z.......&Bk}_*.s.1.. "..[.....9..j..5U..~..Ly.w.Ix.
.M.pF......Y.......V}r..>..7...c.YI..z....PD. u....(.-c-/..}...b..x
Z..........P.S..N.M..@.{wf....XoZ..[..^..B.j....e...j9.x~M..&.>/)..
......Hx....R...)....G..0.M&...'8..6......^.m%r...u....40...rC,>...
Ck=..Zt8....m.....g....i.J...K......f..&.u\....R.\.._.^....0..R>&D.
T./`...aa.vV.n.tz./.I..e.8 [email protected]..[ V.^l%`..k.A.G........R..k......
..P..=.x.[[email protected]{.../..'.t.t.....`.....J{^f*No...M..
........:...%`.~WxZ...{....i..Qb.!....IEND.B`...0......
<<< skipped >>>

GET /forum/uploads/forumicons/88-icon-7c856ea116692e478e47f7fc4b5230d5.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Mon, 08 Jun 2015 22:31:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:34 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/forumicons/88-icon-7c856ea116692e478e47f7fc4b5230d5.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00717...PNG........IHDR... ... .....szz.....IDATX...]lT....3..z.k..`c.
.v.iI..Q[>[email protected]$.(AJ..By.......*....R.*[email protected].\..)...l..
m...w..G..5^....o...\..3....93s.....~..V%.k.....R"&..BT..d.....cm.....
...Mx..;....@G[....bk"&...q.....h.m......x*...s3*(...`.....rg..f....n.
.u?..x.xbSc....M?....6V..F%.........H.........v....'>...s.s._..Y.q.
....../w....w....deU...5......>..oP}`F...Q.............w..7f.......
.t.U%.j..^;....;[email protected]].... .V5V;...~
.D..mUr.../v...k......G..'([email protected]`.......H..m..aKE..[=s.FE.*..w
...x......[.57.......~(.... .h.&4.....(...{..$.w..M....r.B..^..I.kI.:.
........8.se........}..D..#3.\.y.Y.L....MN*.....]..&.d..z..8B~M.4=....
...uO.... C..H.b.....3...x.....,(...r..j.F5'O.`Ld....G..FM....`....;Jf
]]...q{:.k-.\D..b.../fD..x=.<.......Yn`hP..!..I...%~.*".d!...w.m...
G..K.0.n..g*....=..4.M8..!.6..L........i..Q..S...4.>.$.m.N..'(.A..Q
j.... .N.. ...C.:..o..x.Ca..e....z.*P.$...Ka:L..ZM...3....... ..a...Kf
.B%._.E*h..15M<1.*m.K.(j.-..S.Ii.."M..&..~........~....TX..w..0.,`#
...0.a.....a..@.?;:....[W#....|...e"3b.}[email protected].=.5.
....,.....|..,....`...1.{.....|L.. W..)..v~....6.^*.v.F..ak..-..Q.....
6....)m..%.X8v...q.]TQaT.B.e....[[...ud.......IY...U.(.r.....cK.(.;.w.
..s.......b58.......m.([email protected]...........%...a.l.....5;vm
2.G(!...L.....[......J.*."...!...h..._...-................_.g..{..S...
i...'....(.i....%.....^.}.H.......2...:I.sq..:......"........iurmU..rO
..u.U%.....w.y....[...e.1...tE8J......_.B.H!ox.3>.a.<^......
<<< skipped >>>

GET /forum/uploads/forumicons/24-icon-ee1fa91d95ca615352f926ec506c9126.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Mon, 08 Jun 2015 22:31:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:34 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/forumicons/24-icon-ee1fa91d95ca615352f926ec506c9126.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00196...PNG........IHDR... ... .....szz....]IDATX....KBQ...W..x.[.>
."...h.B.#[email protected].. .>.-........L..v...3>..}~....
.[].`[email protected]...}0M.4...7..e*.1.0|sIl........m>...9..~..C..&
gt;.B)..h:[email protected]`.Tt...0...*.t..0:Ab}.....,..O. ...jxi
.*..}.l.....]..SA.aP)...D.....kE........'..[*.n...J.j..]...]K..`....iZ
sG I............'..5...N.x..9........|QU.E.. ....u.....zK...W*Hh......
IEND.B`...HTTP/1.1 200 OK..Last-Modified: Mon, 08 Jun 2015 22:31:28 GM
T..Accept-Ranges: bytes..Cache-Control: max-age=604800..Content-Type: 
image/png..Server: X2 Network HT wS..Transfer-Encoding: chunked..Date:
 Sat, 08 Aug 2015 22:51:34 GMT..Connection: keep-alive..X-Full-URL: ww
w.rlhackers.com.br/forum/uploads/forumicons/24-icon-ee1fa91d95ca615352
f926ec506c9126.png..X-Served-By: VVV.x2n.com.br..X-Optimization: High 
Traffic (HT)..X-Cache: MISS..00196...PNG........IHDR... ... .....szz..
..]IDATX....KBQ...W..x.[.>."...h.B.#[email protected].. .>.
-........L..v...3>..}~.....[].`[email protected]...}0M.4...7..e*.1.0|
sIl........m>...9..~..C..>.B)..h:[email protected]`.Tt...0.
..*.t..0:Ab}.....,..O. ...jxi.*..}.l.....]..SA.aP)...D.....kE........'
..[*.n...J.j..]...]K..`....iZsG I............'..5...N.x..9........|QU.
E.. ....u.....zK...W*Hh......IEND.B`...0......
<<< skipped >>>

GET /forum/uploads/profile/photo-thumb-1.png?_r=1437405973 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Mon, 20 Jul 2015 15:26:13 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:34 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/profile/photo-thumb-1.png?_r=1437405973

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
0042fa............5..8.....n@.<."s.1$C$$!$..9.!$CBf..L!I..d.<%T.
..$S.L..=....k.s...w.k=.}....{B.5U..3....c.Y5e...%.7.....p....Gw.UV...
.Wq...X..v.W.%w.e..;J....j..9s.......v...u-..^..[...]T.....>Z..NE.?
d.H..Z.<.|...Y.%........g.]9.X.....`.x.s.....rvg....u4!.......,.^s.
.;=...qX.5xf..~P..A.....Y'.S'.&RU..h..9....Q.......<."....Y..c..<
;8u.....Xeee.._....Q....R.....;Z.n{..O..jyD........._.u..........|...x
.V...e.....,......n.y&mi....|.}.R......y...................bO......Z.U
UuMM. V~.>9~......h.................G..3q....]g.I>pWak>.....u
uu...`evg....e.\......(.ss..z%}}./..[....~-...(.....W.......kjk._.T.`.
.....>y~..Exx..p....^./......x./YZ...;....e.<R.2.c..9{...k....hh
h...(988V..1'>U.!...8............3%.5.......s{......Q*..(_....6S..$
;UTUE.4..$~;bbb$$%..Z....%..W.h]..H....p.)gg.}...&.....0.k.tM.>.Tb.
..2..I......S.c;.s..4.ne...L.*..>......Q,.(.........VE.N...?gc.....
u..."w(Bea.....b..0.V.hn.O%.../..m)..f?.^;FG.g..5-......Pr..y..{.H.g..
...333..(......1L...-vT../t....|R......[.cc....k...W..z*.O...Y8;?.j..3
 .....lIAA. 1...{]...'..GL...s#.....m~...Y7..*...5U.a.K..H|.ZM...w....
.no6.9.9H.l-.7...X.R......S...0...5.....-E..>7..8...3....Q$.z-...~M
O..J|......M.......$y.'.W.?...i}.J...e}y.C^>EasR....a~~;...........
.{.........ffw;;/.`..pp.2.].?......B.J..B..H.B...7._........K.G5.vq..I
.|.N..|............J..eWWWp.yii...<.*R'....s...........j.|.....}.j.
... ....W....[.......}L>.X........$Lu......{....sss]o.J......VPH.3.
.....kIq.W.;%)i..<..>.UV.X^..9HNN&j......L.m...k..XQ.~P\....
<<< skipped >>>

GET /forum/uploads/forumicons/7-icon-6acdc91dd9d6f265c0311278e82ede40.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Mon, 08 Jun 2015 22:31:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:35 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/forumicons/7-icon-6acdc91dd9d6f265c0311278e82ede40.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00a16...PNG........IHDR... ... .....szz.....IDATX...[l.....3svfm.... .
...6..\B..I$.q!M..4$4"...Z.(.%R...4...D...@.&..X....16"u.;.5.......x..
zw......Þ..>..h..........x.!.e6.meii...f..g.Z.L&...z"..M...9o..u.
n..........X._....X.h...|......Y.yy.I"..s/.A.e.f3........?....u...#v..
s`.........K/..... .....8.....1:0@"[email protected]?...:.CC...._>
y..n.....{d....[.~...[.>..F.c..r...T.. ..../:.......((..<.i...Y.
...c....cww...V...HKK[..k.... ...9q.s..c.z..R..I.....D,..S.I..a...H..G
.}.yGG.o..d<%..d2-..m[. [..}......(.......S........0....:..NZ.....K
Y.v.....|..q..<[email protected])I$HO.Oy..)).....5..BG.....b..y]]
].>..m...raaa.$.Q]]...w.}...S\....D..`y.\....P.Z$.S(D...<...rNNN
eGGG..f{^[email protected].~...233.G............<.....QI"&I.%..$.7t.5.......
a...,..=...Wy<.c.H...{k.......%.....e#...4....E..GMME.e.!..f4..UQ0)
.VYF..$.fc..-Y.w.n.z.....U.<...vs......K$)^O.4.i...{.5........4$IB.
e....q.^.P.....P.v....n.........5E.gg...1.......5.T.... $.E.Pd.!..,...
....W.Y.y3o..:B.G..wuu.v.Y.j.........ey[[.....v.>.V iii.......7.*B.
...{..a....V.~dp].9z.(YV ....G.........3.....i...J...$...GUU...q8.....
........:::....X,.t_.(..d.$..........[.$...`........%.........<..(.
......`..8{.,n...[....>.../.....L.......b.*..2.H...B.V ...."%%T1A
OO..p......%IB.u.. .....@.!........p.BFGGI$...~....$.%.~...L\...A,.!..
3.L...T....!t]O8].N.>...;4...U......((...k..uvR.."t.[...54 ........
...........UU.4.....S....$cb......$...............E"\..3.......u.UUq:.
De..h..x...fQZ^...D.$....1...b.!...L&n..........[.h..............[
<<< skipped >>>

GET /forum/uploads/profile/photo-thumb-8115.png?_r=1437845673 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Sat, 25 Jul 2015 17:34:34 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:35 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/profile/photo-thumb-8115.png?_r=1437845673

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
[email protected].. .IDATx.....
m.u.....f.....e.....(.J..*...E.`.l_../..~.?..........ug.6..d.*.E5.)2If
..<m.....f.bE&.*...V.v4k...c....?C~.......".r.\.J..].*.....H.#.0...
.e...C.Wti ..E.AQ.?#....c0......X.X0F.'5...... .........7Je....k.h..J.
.R&.......!.B......D.F^..dq................u.j}.._<..?.....i9%...."
....Ct.L...E*?a.=....GgoS...g..l.........y..H...aqX.w.:n..4...Q...M...
..X.....(..X.....R....g.Q..{HB.. B.b.-....p._......*..".....0.-.i.;...
....9.33|8w<.8.......PyCa.#.(8....$.d.5.....x. <.s......[.h.....
.D.0....:..'...RUS....Z.y.......brf.v...'...<0....u.............r..
..N..b.F#}..qF.HL{.(Y..#=8 ...d......4P.Gc;..S....@ag....[...RG;..J...
.*.c4...*I3...,..............q....li...[..d4gRJ.hPIDI.# D.9.A0F...Y0..
..a.IG...n7....!.......80.k.....&.0psu....rtCxyJ.:tH.1.A..$,..s.I.l.z^
..]..._.9;(......q.z.I,Ws...N...c..b>a*. ].*....$AUQ.)...c....M ...
Bg..#....T3......x!...fT.'....a.;..__z.-.G.b..{....-...u81...9.1.6.l.!
.. ...bU.....b$ce|NQ...T..A....g.ln9.-..>Q.x.p~...~....O.L5/p*.w...
..........m..m ...nCW7......|....61.*.M.lsD........t\.K.q.iM,.6..Iy..v
 d81.....$*&x..6..lP.`0..$......../X_.)...3f..j.....stP......9.*a..q..
.E...Qy.....".....)!).B.........!...5f...2..&F....D....IE.P.Y..pH..}..
.5.6'.......d..`...7.1./:...}.*X..]&U.....C..'.7..xs9.&C.#.>......s
2<..]..H.:..T.....z.0r.;..).J.C&Y(.9....C..W.I$..dP.{...*..........
,k......%.......u._x...e.-J..q.Q......}....{...bI.}TH.5J.J.LVHd.D....W
:..Y..& .Yi..}$K&..../.oWhP.0?.1.....{]....<...K..R;..G[..H.Y..
<<< skipped >>>

GET /forum/uploads/profile/photo-thumb-21167.jpeg?_r=1437361828 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Mon, 20 Jul 2015 03:10:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/jpeg

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:35 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/uploads/profile/photo-thumb-21167.jpeg?_r=1437361828

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00e8b..............g4.......5J....5....A.F}.G'.A..{...$JDytaD.(!Hd.A..
.Fo........}q...wg.u.........@[email protected](....9..D.{.;p........
vrs...T...E.q.I...sz...8..r.s.........22r2R.rrrJJ.*.&Z.jj.0.M:&vV(.; .
..#..yG......W......._F^.&'*...s........6-.m.......U;[email protected]..;......t.
[email protected]..)(....................z..H.H.....n.....d.E".(...t0...
x..zEQR.b..f..... (!)u_Z....PUS..40|ldlbjfkg...........@`P.....q...i.o
.fdfe.SXT\RZV^Q[W........[.wLWw..!...(nl|b~.............pxt|r.....A...
..p.""!!&!.......` !..#cT.#...y..I...YP.A.-.O`~.5Hu.Gb.w.......,..%./.
..&..b....3.....Q.hs...S..m.i*....,...{.-a.u(%....$-.f.y..1U.}v....qV.
d...<.y!.5...~*..........z..|...{..O.0.....9.........$.]...OR^.G..c
..xIK!U.KD.C...Lj`u..?...#.....#[../O..(p/$..].L.M.5..?..E......:.uN..
...,...E....#Y..;..........m`AD.....]..U....--.....h.j..K.../;..*.....
;Y.a..m..-..a1.k.... ..P.....A........q.W(....%..../.v. .g.i3.......Y.
.....9i{...v ..q...Z.ud........8.{...!q.]...P......_.....!.F....T..n'.
...iU3Q.7-....{j.S.:}.........m..G.x.k'..Y.R..q..j>hm....c...f&....
..3l..l9......c....{..>..N\..&...."d.r ...Z.#h.e..jeZ!.j.4U.@A..%1.
...50.:.m..y..dA.......9..P~..h............o......GwIjv.|...^..xc.Z~..
.....k..e..v.....yT0...7h...D{^J..'F...#h....zm.......,......v)._.eV.9
...Z..qI.w(.[.........'......r.Cl................Xt..d.2.y.O.6..t.d.].
........../......&...WM..b...l.s.M9l..6-._.C...G..G.u....t"...V>..K
..t...hp>_..N..W..z...l. ./c-.Pp.......b....BTW.c&.?g.3..{.. %...L`
.........%..s.ti.G..Y.8.z...,.k....]...#........Z.."....#xy...v...
<<< skipped >>>

GET /forum/public/style_images/grand/subforum_nonew.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; _ga=GA1.3.320727732.1439074258; _gat=1

HTTP/1.1 200 OK

Last-Modified: Sun, 08 Feb 2015 16:07:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: image/png

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:51:36 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/style_images/grand/subforum_nonew.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
0013b...PNG........IHDR................a....tEXtSoftware.Adobe ImageRe
adyq.e<....IDATx.b...?.%...B0..`A....g`cc.1g..1....._.~1l...8......
........ ..'..3....4}...f.....{........t./_.0.......mc ....6m.........
..*u.(......J....g.~.....o..........X.8...0&n......[...3..=.........##
# [email protected]@...L)k.w=GL....IEND.B`...HTTP/1.1 200 OK..Last-M
odified: Sun, 08 Feb 2015 16:07:28 GMT..Accept-Ranges: bytes..Cache-Co
ntrol: max-age=604800..Content-Type: image/png..Server: X2 Network HT 
wS..Transfer-Encoding: chunked..Date: Sat, 08 Aug 2015 22:51:36 GMT..C
onnection: keep-alive..X-Full-URL: VVV.rlhackers.com.br/forum/public/s
tyle_images/grand/subforum_nonew.png..X-Served-By: VVV.x2n.com.br..X-O
ptimization: High Traffic (HT)..X-Cache: MISS..0013b...PNG........IHDR
................a....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b..
.?.%...B0..`A....g`cc.1g..1....._.~1l...8.............. ..'..3....4}..
.f.....{........t./_.0.......mc ....6m...........*u.(......J....g.~...
..o..........X.8...0&n......[...3..=.........### [email protected]@.
..L)k.w=GL....IEND.B`.....

GET /short_expire/js/ts3viewer_loader.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.tsviewer.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:31 GMT

Content-Type: application/javascript

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291; expires=Sun, 07-Aug-16 22:51:31 GMT; path=/; domain=.tsviewer.com; HttpOnly

Last-Modified: Wed, 15 Jul 2015 11:40:48 GMT

ETag: W/"55a646c0-b81"

Expires: Sun, 09 Aug 2015 00:51:31 GMT

Cache-Control: public, max-age=7200

Access-Control-Allow-Origin: *

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 212ec952869c2750-FRA

Content-Encoding: gzip
[email protected]@.p.K.....R-.U.:.!..-...,hw.G...Z...8..#3.
...y.. ...bM|..Q].DO.WI-#...E.4..V...c?.|..)..NcS.z....}.y....x...p.m.
....)..;.#.R..Z...Yj..g...F.v..m[..U.R......^.?e....Mu.D........E.`.. 
.....2.4 .5&.oLD...*.;...M3.1u...>.*..m&...N....W....".....5B....S.
....;.......Q._..J,.$`.ja.......>.>}d..."%.?.!VWA....|.=..."..OA
.Q).$.|.7.y.c!.W~*.Jx..R..s`.rI..kQ.\..R".P..L8..$......OQ.\.F.....Gz=
.........Eb....S.1Z...!!....bM...^.R..%..e/.R......^..8Gx.....}7......
..%.......h..DP .....~.A.h.~.....o.....qgbS5...UL.g.....s..^..d.\"...]
.....=.:a;.\..=wy.5.?...-..3...".=O.\.]J4D.4.../9p....p<.q....!c..U
V..x....O...ctor:?.v.....o.H.f...MtY.f. ....O..{......g.Q........q....
...m...} U......0..HTTP/1.1 200 OK..Date: Sat, 08 Aug 2015 22:51:31 GM
T..Content-Type: application/javascript..Transfer-Encoding: chunked..C
onnection: keep-alive..Set-Cookie: __cfduid=db4123b30187327c1c5ee62e9f
0b820b41439074291; expires=Sun, 07-Aug-16 22:51:31 GMT; path=/; domain
=.tsviewer.com; HttpOnly..Last-Modified: Wed, 15 Jul 2015 11:40:48 GMT
..ETag: W/"55a646c0-b81"..Expires: Sun, 09 Aug 2015 00:51:31 GMT..Cach
e-Control: public, max-age=7200..Access-Control-Allow-Origin: *..CF-Ca
che-Status: HIT..Server: cloudflare-nginx..CF-RAY: 212ec952869c2750-FR
A..Content-Encoding: [email protected]@.p.K.....R-.U.
:.!..-...,hw.G...Z...8..#3....y.. ...bM|..Q].DO.WI-#...E.4..V...c?.|..
)..NcS.z....}.y....x...p.m.....)..;.#.R..Z...Yj..g...F.v..m[..U.R.....
.^.?e....Mu.D........E.`.. .....2.4 .5&.oLD...*.;...M3.1u...>.*
<<< skipped >>>

GET /images/content/ajax-loading2.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.tsviewer.com

Connection: Keep-Alive

Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:32 GMT

Content-Type: image/gif

Content-Length: 847

Connection: keep-alive

Last-Modified: Sat, 02 Jan 2010 15:16:44 GMT

ETag: "4b3f635c-34f"

Expires: Sun, 09 Aug 2015 00:51:32 GMT

Cache-Control: public, max-age=7200

Access-Control-Allow-Origin: *

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 212ec95677382750-FRA
GIF89a..................8........&...........v..f...........H..V......
.......................................!..NETSCAPE2.0.....!..Created w
ith ajaxload.info.!.......,..........P  .di..0.l!*.`.......5......[..&
lt;.i.P.........),.IZ..$b..H..8..5&.x.5k <...y....B.!.......,......
....h  .G..h*.....@$E}..........eh..... @..L...cQG..B...P5. <.5UdQ.
 ."..g.0......Ak..#A..<P70.<...0.Y.8*...#!.!.......,..........` 
 .#..(..H*..P..-..1.3..:[email protected]...,0.B
...k.J...U?5w..|$k.\)...!.!.......,..........R  .di.. [email protected].
...!B.`?......#E.8zBQX.c.m.v..". ...`.`..UF..r....p.).f..!.!.......,..
........`  [email protected]]....H....(....4. .(,..F!aH.XS...m5...bDH....
.ab,..%.p3.c.#.'...".467P&*X/.(..$!.!.......,.........._  .di..H..@..@
4....A"I.....`.>n..I0$....K7..H,...-t.*..E.....-.`..`[email protected]
7h./1.f.\)..&!.;.........HTTP/1.1 200 OK..Date: Sat, 08 Aug 2015 22:51
:32 GMT..Content-Type: image/gif..Content-Length: 847..Connection: kee
p-alive..Last-Modified: Sat, 02 Jan 2010 15:16:44 GMT..ETag: "4b3f635c
-34f"..Expires: Sun, 09 Aug 2015 00:51:32 GMT..Cache-Control: public, 
max-age=7200..Access-Control-Allow-Origin: *..CF-Cache-Status: HIT..Ac
cept-Ranges: bytes..Server: cloudflare-nginx..CF-RAY: 212ec95677382750
-FRA..GIF89a..................8........&...........v..f...........H..V
.............................................!..NETSCAPE2.0.....!..Cre
ated with ajaxload.info.!.......,..........P  .di..0.l!*.`.......5....
..[..<.i.P.........),.IZ..$b..H..8..5&.x.5k <...y....B.!....
<<< skipped >>>

GET /images/ts3/viewer/server_open.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.tsviewer.com

Connection: Keep-Alive

Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:32 GMT

Content-Type: image/png

Content-Length: 827

Connection: keep-alive

Last-Modified: Tue, 18 May 2010 06:27:58 GMT

ETag: "4bf2336e-33b"

Expires: Sun, 09 Aug 2015 00:51:32 GMT

Cache-Control: public, max-age=7200

Access-Control-Allow-Origin: *

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 212ec957e7602750-FRA
.PNG........IHDR................a....pHYs.................gAMA....aLA.
... cHRM..z%..............R....X..:....o.Z......IDATx...Mk\e....=.1u.6
...3$nL!.m.p'...O..,\.....E7R.P.........V&MMq......9.3........"....{..
.....(...d../...........[.V........v..T.L.Z....y.!...'.|v..;...?.....:
...7Vo|..\p.=..mmmq||L.E.q....i....i...z..u....[..6.p8.}.../..=.......
.."i.........(..z.n..._.v.{.a..U.f.b....GGG$I....Z....<.0.\...Y...%
*.(.(....2B..,C.A.Z...!.BJE.^G)=.X.I..G:.C.?.L..g4....I.0....Z3...a..V
f.......:.>...%...Z....y|...lrxxH.E(un07W.``....K.....>.........
y.....0..,.PJ]..hU..T(.W......~.=..51m.8..R.h4....8......k.......{p...
...1&0.G.A.....qB.%3.CZE<.`Z..RjVVV.....Z..FLr.c..aH..8.;..5..G....
..xE.d.......!&LDN>.1*&J).V8.7....v._..~.D7 ...5i......8.S.%JI.\"..
4..`mm.N.....A..z...?x.|#J<.C.S....../.&.R...y...?..^2n.O.......IEN
D.B`.....


GET /images/ts3/viewer/channel_flag_default.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.tsviewer.com

Connection: Keep-Alive

Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:32 GMT

Content-Type: image/png

Content-Length: 696

Connection: keep-alive

Last-Modified: Tue, 16 Jul 2013 16:48:38 GMT

ETag: "51e57966-2b8"

Expires: Sun, 09 Aug 2015 00:51:32 GMT

Cache-Control: public, max-age=7200

Access-Control-Allow-Origin: *

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 212ec958a7812750-FRA
.PNG........IHDR................a....pHYs.................gAMA....aLA.
... cHRM..z%..............R....X..:[email protected]$D6
..0DUe..2...)#.b`.......L..........K.U.D".. ..Jp}>.:.X....n...{....
...MKk..88.........q....y........Q.T.V....m.h.1..loo..).r.............
.....N.....wB...ibY....8.1.|...,,.J...X]].prr..n.i...........$..e..-.!
..j,//..v.:[email protected]..(......}===..R.<o.T*-...|...............8;;.
..(......?....L.gg..j...F...i..Z-...l........h....K......`..Zk.</..
$....(....@..<v]..h42.Rh.1M...J)..<...K.........H)y||DJ.R...{.8.
..m..z.....z.. .2.<'.c.4E....9777.4.....PJa..3...H_..055..$?#0...Y.
..i.6Y{....y...".R.'.&....... ........'...`0.....p}}. .....~.?..x..r..
{p....IEND.B`.....


GET /images/ts3/viewer/channel_open.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.tsviewer.com

Connection: Keep-Alive

Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:32 GMT

Content-Type: image/png

Content-Length: 847

Connection: keep-alive

Last-Modified: Tue, 18 May 2010 06:27:57 GMT

ETag: "4bf2336d-34f"

Expires: Sun, 09 Aug 2015 00:51:32 GMT

Cache-Control: public, max-age=7200

Access-Control-Allow-Origin: *

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 212ec959078e2750-FRA
.PNG........IHDR................a....pHYs.................gAMA....aLA.
... cHRM..z%..............R....X..:....o.Z......IDATx....O.g....3.....
..vWl..Lz.^.........F.V)..<...II.c.&z...7..*\...z]L...^....-.awAG..
.g...v..~N......#.1....J.ji]...UL....4....Ng..>....DJ..O..?.....0.P
.VZ...._G.c.....>x...K8......d..5a..h....[....$..b_;.....!T-...b;..
..}...........Y\....U.....Q..k.p@`.(b...s..J%../366...[..SE.._.>...
M.]...n...S....|.../[email protected].[..M...`D.v.........#...[...[..KKKx.G
6.!..>.l.v;...9.....Z.....N7#.|L.|.....H.S..E.Z...#.u..."m).I.W&H..
....wO....9fffp..........c.V.8......XH$.'....=^.......K".`[email protected].
.l#..#...{....u........\.eww...Y.t:..;..C#.DE.2!.q.:_]_DJ...Z..F....A.
[email protected]........{.k......$A.0>>.....T.J....... .....Od.;.\...
..F:6...h4.>9L.^gyy...*[email protected] .......ZM..4..PJ..[d.=LL. 
...M.....=.:..u.7!=....IEND.B`.....


GET /images/ts3/viewer/channel_full.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.tsviewer.com

Connection: Keep-Alive

Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:32 GMT

Content-Type: image/png

Content-Length: 822

Connection: keep-alive

Last-Modified: Tue, 18 May 2010 06:27:57 GMT

ETag: "4bf2336d-336"

Expires: Sun, 09 Aug 2015 00:51:32 GMT

Cache-Control: public, max-age=7200

Access-Control-Allow-Origin: *

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 212ec95967a62750-FRA
.PNG........IHDR................a....pHYs.................gAMA....aLA.
... cHRM..z%..............R....X..:....o.Z......IDATx....O.a.....}....
H....D.....8.([email protected].@b4...$.u......XZ.......I..>.3
}.'y..5....\.... t..r....*.n~%.L..t .D........N.89.`h.....oLM9J)..D..V
......L.dee.X,.R.F.A.ZcO.....3".. t.J.....5~.#./.0%B....@..?.m.......,
.-:[email protected]|n.|>.............2A.........$....^...."....r.
.E.:.......c....B.|?.c...n..F....O..8....,-,.....d2......r..$.f.....T.
..=..a.L.qv.4n..h..r$....P..........F..y............p.W.N066.iZ...lU.8
.CDDZ...a.j.....)....=.....4.e..FY]]%.Nc`....,[email protected].
.......Hi...Z.....).w..........A.Ra.X.'...m..[@jg....Bk.f.......cb....
288...<.D.b.H___.hJYx.N.....m..G....,..*...bkk...9...tww.~.....#..z
.....g...(.W'.J.1".A...H....:W............A...~.J....IEND.B`...
..


GET /images/ts3/viewer/client_idle.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.tsviewer.com

Connection: Keep-Alive

Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:32 GMT

Content-Type: image/png

Content-Length: 829

Connection: keep-alive

Last-Modified: Tue, 01 Jun 2010 16:53:32 GMT

ETag: "4c053b0c-33d"

Expires: Sun, 09 Aug 2015 00:51:32 GMT

Cache-Control: public, max-age=7200

Access-Control-Allow-Origin: *

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 212ec959b7b52750-FRA
.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e&
lt;....IDATx.t..oTU....~..L-...-A.X ...X..X..h# JB. .......h...?.D... 
5@*..........s...8....QB.....9..>.}.......j(.........(.I..r.=...r..
/P.<.=!...W.5.Y%.7.....h....[..S..=..'.R......(....`.R..=..L.^...N.
{..W......,...P....E.$t.]...E{.w.v...y..c.......o...{..9f..'..A...ILN.
..........=k.....O..U...Pnz....X..q{.MaE;.u..`..Z.|s0..N;".I....M.....
...=..,%.I..>.:"N..#<..)5.L......%.m.....Ci.z..8...l ...U`;.....
z.C&4F..eDty..#...D..X^Ax.8..-G.oR.....fh.bB.&......"._U...k..R..\.p..
.|$.n7....a..D.S......D.d...._....1.r.w..(z......Ns.....$....".f.T.bIT
...y..w.....F\.b.R.F.R.P....atL.[..E..?.x/.7H..&..1..Z.52%.xh..H....;.
m.... ........*...R............4...t..XAo......=..o.........ty.j.\.[..
.K...)...y...o.a.Y..rF.yO.bK.....,..|.y...............i.S.J.......IEND
.B`.....


GET /images/ts3/viewer/client_mic_muted.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.tsviewer.com

Connection: Keep-Alive

Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:32 GMT

Content-Type: image/png

Content-Length: 906

Connection: keep-alive

Last-Modified: Tue, 18 May 2010 06:27:57 GMT

ETag: "4bf2336d-38a"

Expires: Sun, 09 Aug 2015 00:51:32 GMT

Cache-Control: public, max-age=7200

Access-Control-Allow-Origin: *

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 212ec95a07c32750-FRA
.PNG........IHDR................a....pHYs.................gAMA....aLA.
... cHRM..z%..............R....X..:....o.Z......IDATx...]H.{.....wn..^
"2....N...},G..pD......x1..P.. ...."..B./.....m...J..T..Q.......^..w.-
[email protected]._..R....f.5\f/....0..{...Y/..ZZZ....h..d.$I
H............peE.l4.a... [email protected].,.......E..&. ...q.Ly......,8.
=*..7..!. ...p..l(./.....y.....yHR..WC.W.PP.~......$...8{..R..4.....$.
........!x......L.p.....8.u..G....x....?..^.....GCCk.3.."..E.9v....c..
...c.l.7....|..{.....r8.......e,.0.....D.m.i{.....c.>r.ri).V ..x...
..<.....`!...R....q.b1.).....\.ryB......#..C_\.....x........#.... .
..QU.....8............|.3.....o....2..[Q..LM......J)....(.[..,...b.Nxj
[email protected].$I.E..iZ....lEE.Wwt0..\...a...099P.Q
.d........f?..bY......... .}.>.Y........Vx<.......r..H ..px.....
.. ...y0.......L..%...c0X{5meaa!.....\.....skXU......~'...QgP0(.......
IEND.B`.....


GET /images/ts3/viewer/group_icon_100.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: static.tsviewer.com

Connection: Keep-Alive

Cookie: __cfduid=db4123b30187327c1c5ee62e9f0b820b41439074291

HTTP/1.1 200 OK

Date: Sat, 08 Aug 2015 22:51:32 GMT

Content-Type: image/png

Content-Length: 809

Connection: keep-alive

Last-Modified: Tue, 18 May 2010 06:27:58 GMT

ETag: "4bf2336e-329"

Expires: Sun, 09 Aug 2015 00:51:32 GMT

Cache-Control: public, max-age=7200

Access-Control-Allow-Origin: *

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 212ec95a57d32750-FRA
.PNG........IHDR................a....pHYs.................gAMA....aLA.
... cHRM..z%..............R....X..:....o.Z......IDATx....O.q....][z.=H
.t....L..EH.&.IE!1........u6ew...p ..!F%$.........^.^z.r.~.........<
;...a(...p7bvv.n..KK./9...f.>...j.."..........y..TLQ...........c..j
...!1....{..........?8...:4].W*............D>1.g...(...k..8.e....VL
NN".J[~ol.n.,7BQ.F.. ..!.I..... .R....V......U.. ....rV.uM.T.........e
.b.|..(]^b{;..............R)I........oho.....b?p....RdsY<...1E(.Z.X
[email protected].\..b....PJ.qV..|..(.......*......#..ckk.bK3.B../......w.L
._..0.N.....(......S....fz..^..i ..z{{.M.I..J..A._?7......... .Y@8....
^....vtH.OT...V.)..QZ.8:Jb...*..X...lF....Gf.E.......GV...T..C%.MN....
../.....S.... .f.a.`Y............'.8=I..p...@b >A)E.Z5G`Y.,.bttd."w
.... "671..:..6JH.]08.f...k#s.:....}9D........IEND.B`.HTTP/1.1 200 OK.
.Date: Sat, 08 Aug 2015 22:51:32 GMT..Content-Type: image/png..Content
-Length: 809..Connection: keep-alive..Last-Modified: Tue, 18 May 2010 
06:27:58 GMT..ETag: "4bf2336e-329"..Expires: Sun, 09 Aug 2015 00:51:32
 GMT..Cache-Control: public, max-age=7200..Access-Control-Allow-Origin
: *..CF-Cache-Status: HIT..Accept-Ranges: bytes..Server: cloudflare-ng
inx..CF-RAY: 212ec95a57d32750-FRA...PNG........IHDR................a..
..pHYs.................gAMA....aLA.... cHRM..z%..............R....X..:
....o.Z......IDATx....O.q....][z.=H.t....L..EH.&.IE!1........u6ew...p 
..!F%$.........^.^z.r.~.........<...a(...p7bvv.n..KK./9...f.>...
j.."..........y..TLQ...........c..j...!1....{..........?8...:4].W*
<<< skipped >>>

GET /loader/info/fapcf.txt?nocache HTTP/1.1

Host: videospornoadultos.net

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Last-Modified: Wed, 15 Jul 2015 16:27:33 GMT

Accept-Ranges: bytes

Cache-Control: max-age=1

Content-Type: text/plain

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:35 GMT

Connection: keep-alive

X-Full-URL: videospornoadultos.net/loader/info/fapcf.txt?nocache

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
0014..92J923JD9JX23K.0.exe..HTTP/1.1 200 OK..Last-Modified: Wed, 15 Ju
l 2015 16:27:33 GMT..Accept-Ranges: bytes..Cache-Control: max-age=1..C
ontent-Type: text/plain..Server: X2 Network HT wS..Transfer-Encoding: 
chunked..Date: Sat, 08 Aug 2015 22:50:35 GMT..Connection: keep-alive..
X-Full-URL: videospornoadultos.net/loader/info/fapcf.txt?nocache..X-Se
rved-By: VVV.x2n.com.br..X-Optimization: High Traffic (HT)..X-Cache: M
ISS..0014..92J923JD9JX23K.0.exe..0......


GET /loader/info/name.txt?nocache HTTP/1.1

Host: videospornoadultos.net

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Last-Modified: Sat, 28 Feb 2015 01:10:27 GMT

Accept-Ranges: bytes

Cache-Control: max-age=1

Content-Type: text/plain

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:36 GMT

Connection: keep-alive

X-Full-URL: videospornoadultos.net/loader/info/name.txt?nocache

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
001d..RLPRO\ieisiISaeijasSKKJ19.EXE..HTTP/1.1 200 OK..Last-Modified: S
at, 28 Feb 2015 01:10:27 GMT..Accept-Ranges: bytes..Cache-Control: max
-age=1..Content-Type: text/plain..Server: X2 Network HT wS..Transfer-E
ncoding: chunked..Date: Sat, 08 Aug 2015 22:50:36 GMT..Connection: kee
p-alive..X-Full-URL: videospornoadultos.net/loader/info/name.txt?nocac
he..X-Served-By: VVV.x2n.com.br..X-Optimization: High Traffic (HT)..X-
Cache: MISS..001d..RLPRO\ieisiISaeijasSKKJ19.EXE..0......


GET /loader/info/title.txt?nocache HTTP/1.1

Host: videospornoadultos.net

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Last-Modified: Sat, 28 Feb 2015 01:01:42 GMT

Accept-Ranges: bytes

Cache-Control: max-age=1

Content-Type: text/plain

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:36 GMT

Connection: keep-alive

X-Full-URL: videospornoadultos.net/loader/info/title.txt?nocache

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
0017..ieisiISaeijasSKKJ19.EXE..HTTP/1.1 200 OK..Last-Modified: Sat, 28
 Feb 2015 01:01:42 GMT..Accept-Ranges: bytes..Cache-Control: max-age=1
..Content-Type: text/plain..Server: X2 Network HT wS..Transfer-Encodin
g: chunked..Date: Sat, 08 Aug 2015 22:50:36 GMT..Connection: keep-aliv
e..X-Full-URL: videospornoadultos.net/loader/info/title.txt?nocache..X
-Served-By: VVV.x2n.com.br..X-Optimization: High Traffic (HT)..X-Cache
: MISS..0017..ieisiISaeijasSKKJ19.EXE..0......


GET /loader/info/go.txt?nocache HTTP/1.1

Host: videospornoadultos.net

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Last-Modified: Fri, 07 Aug 2015 21:05:36 GMT

Accept-Ranges: bytes

Cache-Control: max-age=1

Content-Type: text/plain

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:37 GMT

Connection: keep-alive

X-Full-URL: videospornoadultos.net/loader/info/go.txt?nocache

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00196..//Jogos.CrossFire.Point Blank.Combat Arms.WarFace.AIKA BR.Elswo
rd.Sudden Attack. .//Cheats CF.RL ESP (WIN 7).RL WALL (WIN 8, 8.1)....
.RL Hackers VIP ULTRA.RL Hackers 1.1... .//Cheats PB.RL Hackers PB VIP
..MasterPB ViP (Use em conta Fake). . .//Cheats GC.AIKABR Trainer.. . 
.//Cheats WF.RL Warface 1.9.RL Aimbot Aimbot.. . .//Cheats ELS.MasterS
word v4.0. . . .//Cheats SA.RL Hackers Sudden Attack Loader......HTTP/
1.1 200 OK..Last-Modified: Fri, 07 Aug 2015 21:05:36 GMT..Accept-Range
s: bytes..Cache-Control: max-age=1..Content-Type: text/plain..Server: 
X2 Network HT wS..Transfer-Encoding: chunked..Date: Sat, 08 Aug 2015 2
2:50:37 GMT..Connection: keep-alive..X-Full-URL: videospornoadultos.ne
t/loader/info/go.txt?nocache..X-Served-By: VVV.x2n.com.br..X-Optimizat
ion: High Traffic (HT)..X-Cache: MISS..00196..//Jogos.CrossFire.Point 
Blank.Combat Arms.WarFace.AIKA BR.Elsword.Sudden Attack. .//Cheats CF.
RL ESP (WIN 7).RL WALL (WIN 8, 8.1).....RL Hackers VIP ULTRA.RL Hacker
s 1.1... .//Cheats PB.RL Hackers PB VIP..MasterPB ViP (Use em conta Fa
ke). . .//Cheats GC.AIKABR Trainer.. . .//Cheats WF.RL Warface 1.9.RL 
Aimbot Aimbot.. . .//Cheats ELS.MasterSword v4.0. . . .//Cheats SA.RL 
Hackers Sudden Attack Loader......0..0..
<<< skipped >>>

GET /red2.html?nocache HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: rlhackers.com.br

Connection: Keep-Alive

HTTP/1.1 200 OK

Last-Modified: Thu, 16 Jul 2015 13:52:15 GMT

Accept-Ranges: bytes

Cache-Control: max-age=1

Content-Type: text/html

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:35 GMT

Connection: keep-alive

X-Full-URL: rlhackers.com.br/red2.html?nocache

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
0060..............I.. ........*..lJj....o..l.4.V.'z..z..B..`.JU=......
..$s.D.-.bOq1$..%..a@&.?h..bV.....HTTP/1.1 200 OK..Last-Modified: Thu,
 16 Jul 2015 13:52:15 GMT..Accept-Ranges: bytes..Cache-Control: max-ag
e=1..Content-Type: text/html..Server: X2 Network HT wS..Content-Encodi
ng: gzip..Transfer-Encoding: chunked..Date: Sat, 08 Aug 2015 22:50:35 
GMT..Connection: keep-alive..X-Full-URL: rlhackers.com.br/red2.html?no
cache..X-Served-By: VVV.x2n.com.br..X-Optimization: High Traffic (HT).
.X-Cache: MISS..0060..............I.. ........*..lJj....o..l.4.V.'z..z
..B..`.JU=........$s.D.-.bOq1$..%..a@&.?h..bV.....0..0..

GET /forum HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently

Location: hXXp://VVV.rlhackers.com.br/forum/

Cache-Control: max-age=1

Content-Type: text/html; charset=iso-8859-1

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:43 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00c7............m.=..0..w~..n.......&..up,p.FjI-..........9.$....).Uv.
..9...O....!&*.5.1CLO....[K2.....P.\....7W......P...eD8.T..3.......5R.
.....c0..vDI..|[.&.f..u.......K........b,.{&.R.6.}.......^.........HTT
P/1.1 301 Moved Permanently..Location: hXXp://VVV.rlhackers.com.br/for
um/..Cache-Control: max-age=1..Content-Type: text/html; charset=iso-88
59-1..Server: X2 Network HT wS..Content-Encoding: gzip..Transfer-Encod
ing: chunked..Date: Sat, 08 Aug 2015 22:50:43 GMT..Connection: keep-al
ive..X-Full-URL: VVV.rlhackers.com.br/forum..X-Served-By: VVV.x2n.com.
br..X-Optimization: High Traffic (HT)..X-Cache: MISS..00c7............
m.=..0..w~..n.......&..up,p.FjI-..........9.$....).Uv...9...O....!&*.5
.1CLO....[K2.....P.\....7W......P...eD8.T..3.......5R......c0..vDI..|[
.&.f..u.......K........b,.{&.R.6.}.......^.........0......


GET /forum/ HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

HTTP/1.1 200 OK

Cache-Control: no-cache, must-revalidate, max-age=0

Content-Encoding: gzip

Vary: Accept-Encoding

Set-Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126; path=/; domain=.rlhackers.com.br; httponly

Content-Type: text/html;charset=ISO-8859-1

Server: X2 Network HT wS

Content-Length: 23791

Accept-Ranges: bytes

Date: Sat, 08 Aug 2015 22:50:44 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
.............r.H..|mG.;.Y3.=%Q8..%V...R.di$.zfj;.I I......U.. ..<..
...W..v..........=7}.W&.$..!.......... W~k.Z..../.n........x.....,lw. 
.. .D...>9...#..].......]U..]....s..-..:C.c..q=..........'I.=...._.
.........GN..}.m.....'6-....]..n..'.............n..\.9..<......j...
 P..~...u...^....j..:....]..\}...A.2.=...H.}..u]l.{..aJm`w..<.5.>
;..........G|...*}co....G.....p...wL.A.~."....Gt.x>[email protected]..
..?....O....NZ.......hg.....%....0P.C.#..-.% .......h...!...|..=.._.B=
b.:.......5/H.5...%.g.[.yE.n../]...'..uJhr..M{.XV......#.^H!.....:.g..
..p..3.G._.....C........U(..{g..._.y.27O.M{.....6...3..........i...q..
.z.tx....`.....W..!....:.....F...y;...BZ.....mt...tl...n.#...Y.A..0.f.
..{.[0....|.........g..?..d.....:e.9......96.j....C .ve^.L...F,P..|..m
..Xe5f.dG=|..{.f....~C..].....Q..L.W...-..%."..o.....G.V....v..s.>.
.5Bo.W........(.Ut.c.a.xu. ...G..D..Rm.....:.......>...UH...g....@B
c...?......_.V?."..3 ...Xq...;33...S.k....>i......../.....OIL...E..
..  ...2...|.....c.A.......l ..T%..0..l.......uM...F.......=C.10..7...
..z2b_.aF.*..}.....>.3..G..{;h..HCm..?. .u<.c.d..a..u....A.5|.r.
A}..;..lT.{[email protected].~.. ...D,..q..k?0...P....P.v(A.<.>..YB.a*..@I
.%..4.1?.{...!$m.N...#...w....ik.:V...q;..gr......-H.w...vX.........;.
.%V0....T..O...3h..m7.>...|!.....1'.J.&$A.cwG.Y...N.a].tB6....#.a~q
.8.'&...V.....j.......0...g.M2..8.S7.sz....NR.....1.WM .ovL........s.P
.y...2d..x.l.Y(.y.v%[xr....P.aeo.B.Z.q.....U...Yf....P....k.....`..}.*
.,F.......t.j......?....T2..\..^T..X...6...z...............`.b.*.d
<<< skipped >>>

GET /forum/public/style_css/css_6/ipb_ie.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126

HTTP/1.1 200 OK

Last-Modified: Sat, 08 Aug 2015 16:06:06 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: text/css

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:44 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/style_css/css_6/ipb_ie.css

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00284.............T[n.0...).0...i..Z...^A.m.&".Z........l.n.b..Y$G..0Y
...?...i.....N.ed..4..1x.3.d. W.J..V%..4G........L..*.u.V.q..j.x.m..N7
[email protected][email protected]$..Rl6w.
?..;..*.....Xs;...7..jF\e..bG...!...P..Q. ...#...E.;..O.w..N....$f..'w
.(.....l...{..$u...C...!.=.....op.;=.U.%......Bm.i/...i.L.."7.......%.
..h....P......hm...<8m\..U.......$..^.X.-....{wJ...4.l6#k!3..uE.h..
.....Q........ZN....E.=....."vp....fC|..........W...M.k...LN$q...<.
?`....q...l.Hl....7.K.o/t...G)wx......B..)i.....3.x....n.....-1....h./
 .._.fQfZ..MC...F....<.. ~...U..h"....2...s....{.4......P..oS...i..
E.<,M...,./....v.<~......<......HTTP/1.1 200 OK..Last-Modifie
d: Sat, 08 Aug 2015 16:06:06 GMT..Accept-Ranges: bytes..Cache-Control:
 max-age=604800..Content-Type: text/css..Server: X2 Network HT wS..Con
tent-Encoding: gzip..Transfer-Encoding: chunked..Date: Sat, 08 Aug 201
5 22:50:44 GMT..Connection: keep-alive..X-Full-URL: VVV.rlhackers.com.
br/forum/public/style_css/css_6/ipb_ie.css..X-Served-By: VVV.x2n.com.b
r..X-Optimization: High Traffic (HT)..X-Cache: MISS..00284............
.T[n.0...).0...i..Z...^A.m.&".Z........l.n.b..Y$G..0Y...?...i.....N.ed
..4..1x.3.d. W.J..V%..4G........L..*.u.V.q..j.x.m..N7PX......gmyl.....
[email protected][email protected]$..Rl6w.?..;..*.....Xs;..
.7..jF\e..bG...!...P..Q. ...#...E.;..O.w..N....$f..'w.(.....l...{..$u.
..C...!.=.....op.;=.U.%......Bm.i/...i.L.."7.......%...h....P......hm.
..<8m\..U.......$..^.X.-....{wJ...4.l6#k!3..uE.h.......Q.......
<<< skipped >>>

GET /forum/public/style_images/grand/js/ipbforumskins.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126

HTTP/1.1 200 OK

Last-Modified: Sun, 08 Feb 2015 16:07:28 GMT

Accept-Ranges: bytes

Cache-Control: max-age=604800

Content-Type: application/javascript

Server: X2 Network HT wS

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:45 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/style_images/grand/js/ipbforumskins.js

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
00227.............R[k.0.~....[......CB_...m.2...E:.......^...Q..3..6X.
..9.w..F#.Yd..,z...2.k.RjWr....|5....x....E.H.....p...%....!.Z:..B...6
...*k.x...]...p%...C........>....3ax...yIJE.U......|...e..o........
../rc......].....G4....}...K...l(.l..5J..v2...z<&A..X..%3L9....FQ..
.....5..emVh....`.(/5>[email protected]*aQ....4s./...(Sa.'....L.......&.s
>..r..DH.*.'E.P./........6..............(.A.ihW./..o...l..,L..b.;..
...>.}....;.l..UC]=..\...5.'...d...Jn..;.=i......."...........^.}S@
.|=.t.n.F....z...>.?.}.....Sjh...3]..2.N.rxq..1....6C....3ym..I..w.
.....,......T.....HTTP/1.1 200 OK..Last-Modified: Sun, 08 Feb 2015 16:
07:28 GMT..Accept-Ranges: bytes..Cache-Control: max-age=604800..Conten
t-Type: application/javascript..Server: X2 Network HT wS..Content-Enco
ding: gzip..Transfer-Encoding: chunked..Date: Sat, 08 Aug 2015 22:50:4
5 GMT..Connection: keep-alive..X-Full-URL: VVV.rlhackers.com.br/forum/
public/style_images/grand/js/ipbforumskins.js..X-Served-By: VVV.x2n.co
m.br..X-Optimization: High Traffic (HT)..X-Cache: MISS..00227.........
....R[k.0.~....[......CB_...m.2...E:.......^...Q..3..6X...9.w..F#.Yd..
,z...2.k.RjWr....|5....x....E.H.....p...%....!.Z:..B...6...*k.x...]...
p%...C........>....3ax...yIJE.U......|...e..o........../rc......]..
...G4....}...K...l(.l..5J..v2...z<&A..X..%3L9....FQ.......5..emVh..
..`.(/5>[email protected]*aQ....4s./...(Sa.'....L.......&.s>..r..DH.*.
'E.P./........6..............(.A.ihW./..o...l..,L..b.;.....>.}....;
.l..UC]=..\...5.'...d...Jn..;.=i......."...........^.}S@.|=.t.n.F.
<<< skipped >>>

GET /forum/public/min/index.php?ipbv=f687db9fbe2f009e9077ef1abc25ea51&charset=ISO-8859-1&f=public/js/ipb.js,cache/lang_cache/3/ipb.lang.js,public/js/ips.hovercard.js,public/js/ips.quickpm.js,public/js/ips.board.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126

HTTP/1.1 200 OK

Vary: Accept-Encoding

ETag: "pub1439049955;gz"

Cache-Control: max-age=31536000

Content-Encoding: gzip

Last-Modified: Sat, 08 Aug 2015 16:05:55 GMT

Content-Type: application/x-javascript; charset=ISO-8859-1

Server: X2 Network HT wS

Content-Length: 33544

Accept-Ranges: bytes

Date: Sat, 08 Aug 2015 22:50:49 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/forum/public/min/index.php?ipbv=f687db9fbe2f009e9077ef1abc25ea51&charset=ISO-8859-1&f=public/js/ipb.js,cache/lang_cache/3/ipb.lang.js,public/js/ips.hovercard.js,public/js/ips.quickpm.js,public/js/ips.board.js

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS
............]..8. .._A.<I..)g..z.%...W.....]5..l....hS.......?.....
...g.9.4........H.R....{.O.S... .."...y.9.............Ix.....,*...2..Q
.t...........vvn.9....~..H&.Y....E.L...8M.4.{......).....$.J..A.......
.YZ...".?...<../.6&.Y.YP.....bk.,K...Q.Vv."..........,.j...B..6...~
3..A../......4(......i...|y..Y.L.s.5....n...................j......W..
_.k...T...j.<..y......?F..N z...u{...zC.....Q..B.....Uc...wo...2K.b
...,\..8.....|....sw...L....,.D..tr...p..R..w?I'..`.5...."..y..2...7O.
........0=...e...t..R.......k.......WO_...~..i.WX...,l....?...O......Z
&a>..I..0N..3....$.......?...,...A....................c.1h.`..wKt.N
..Z..i..W..M....4...RL...~T\.a#..].y..p{.}7/."..=...2.bI...ZA..0...n.Q
."....][.<w...B.\.......d....M...u1......[..N..jVu..0.;...l.\..9..:
w.:...........Gi.M..q...q..E.]%.....|p|..."....5.....2.9.N.Rb8..y..;..
.l.Q.$M@..`..3...gM..^I;|.$.n...|...N......~.7TMOOa....$...$.t<...C
}...#.......~.....|......N.....*M^r%e{fA2.....I....n.@..=9vg.$DDa....o
....9.p.8`]w.n....n.=nB.8. ... '..(..8.#.]....J..v.P..axv......yJ?....
..[k...,...5...[../M...?..ln|...u=.....)......F=..n.$..!%f.9nh........
..K.....'.P.N.s<..`o.G..q.}..t.......R.KJF..X.qz..}.h.u.....2..Ff..
...Q.9......4..29...q..Uj~..a...(^f.J. ..s..`=l_I.|.^0.....Y4&d..|IL.3
.%Mt....qH.R....../.....U6i;.....k....W.}.k...../.e8\.O..w.[.p....1..P
..q.A.W.......(..Q...'.0......;..(.~....4 l...Z....4.Yf.2cj.....b.....
..hR...=n..............4`...k..................@d..;;...........b.....
>.O.d.]\..j........-....*...F.7.q........g..9....8.pQ.J'Al..bM.
<<< skipped >>>

GET /wp-content/uploads/2014/06/bg.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.rlhackers.com.br/forum/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.rlhackers.com.br

Connection: Keep-Alive

Cookie: -forum-session_id=557aa5342a5df58d074fdb66001e9126

HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Cache-Control: max-age=86400

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 08 Aug 2015 22:50:50 GMT

Connection: keep-alive

X-Full-URL: VVV.rlhackers.com.br/wp-content/uploads/2014/06/bg.png

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: HIT
0015e..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<ht
ml><head>.<title>404 Not Found</title>.</head&
gt;<body>.<h1>Not Found</h1>.<p>The requested 
URL /wp-content/uploads/2014/06/bg.png was not found on this server.&l
t;/p>.<p>Additionally, a 404 Not Found.error was encountered 
while trying to use an ErrorDocument to handle the request.</p>.
</body></html>.....

The Trojan connects to the servers at the folowing location(s):

`.rsrc

TArray<System.Byte>

TArray<System.Char>

TArray<System.Word>

TArray<System.ShortInt>

TArray<System.SmallInt>

TArray<System.Integer>

TArray<System.Int64>

TArray<System.TPtrWrapper>

System.Types

System.UITypes

TWindowState

ssHorizontal

biClrImportant

tagMSG

Winapi.Windows

HKEY

TWMKey

MsgFiller

KeyData

KeyDataFiller

!"#$%&'(!)* ,-./0'

System.SysUtils

ENoMonitorSupportException

TFormatSettings.TEraInfo

IEnumerable<System.string>X!@

TArray<System.string>

TMarshaller.PDisposeRec<

TMarshaller.TDisposeProc(

TMarshaller.TDisposeRec

TMarshaller.IDisposer$!@

TMarshaller.TDisposer'

TMarshaller.TDisposer

/TArray<System.SysUtils.TMarshaller.TDisposeRec>

System.SysUtilsL

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

&TArray<System.SysUtils.TUnitHashEntry>

System.Variants

Operator

System.VariantsP&@

EVariantBadIndexErrorl

EVariantBadIndexErrorD

Uhs%C

Winapi.ActiveX

grfLocksSupported

System.Generics.Defaults

IEqualityComparer<System.string>$!@

IComparer<System.string>$!@

TCustomComparer<System.string>

System.Generics.Collections

doOwnsKeys

System.Rtti

GetIndexedProperties

GetIndexedProperty

GetDeclaredIndexedProperties

TMethodImplementation.TFloatReg

):TMethodImplementation.TInterceptFrame.:1

%TMethodImplementation.TInterceptFrame(

*TMethodImplementation.TFirstStageIntercept

%TMethodImplementation.PInterceptFrame

*TMethodImplementation.PFirstStageInterceptL

TMethodImplementation.TParamLoc

!TMethodImplementation.TInvokeInfoK

!TMethodImplementation.TInvokeInfo

TRttiIndexedPropertyS

TRttiIndexedProperty

FIndexedProps

TArray<System.TCustomAttribute>

-TFunc<System.TArray<System.TCustomAttribute>>$!@

TArray<System.Rtti.TRttiMethod>

TArray<System.Rtti.TRttiField>

!TArray<System.Rtti.TRttiProperty>

(TArray<System.Rtti.TRttiIndexedProperty>

%TArray<System.Rtti.TRttiManagedField>

TArray<System.Rtti.TValue>

3TArray<System.Rtti.TMethodImplementation.TParamLoc>

8TEnumerator<System.Rtti.TMethodImplementation.TParamLoc>(

8TEnumerator<System.Rtti.TMethodImplementation.TParamLoc>

8TEnumerable<System.Rtti.TMethodImplementation.TParamLoc>'

8TEnumerable<System.Rtti.TMethodImplementation.TParamLoc>\

;TList<System.Rtti.TMethodImplementation.TParamLoc>.arrayofT

6IComparer<System.Rtti.TMethodImplementation.TParamLoc>$!@

CTCollectionNotifyEvent<System.Rtti.TMethodImplementation.TParamLoc>

:TArrayManager<System.Rtti.TMethodImplementation.TParamLoc>g

:TArrayManager<System.Rtti.TMethodImplementation.TParamLoc>

8IEnumerable<System.Rtti.TMethodImplementation.TParamLoc>X!@

=TList<System.Rtti.TMethodImplementation.TParamLoc>.TEmptyFunc$!@

>TList<System.Rtti.TMethodImplementation.TParamLoc>.TEnumerator5

>TList<System.Rtti.TMethodImplementation.TParamLoc>.TEnumerator

2TList<System.Rtti.TMethodImplementation.TParamLoc>&

2TList<System.Rtti.TMethodImplementation.TParamLoc>

"TArray<System.Rtti.TRttiParameter>

&TArray<System.Rtti.TRttiInterfaceType>

-TPair<System.Pointer,System.Rtti.TRttiObject>

AKey

ATArray<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

FTEnumerator<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>(

FTEnumerator<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

FTEnumerable<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>'

FTEnumerable<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>4

9TDictionary<System.Pointer,System.Rtti.TRttiObject>.TItem

>TDictionary<System.Pointer,System.Rtti.TRttiObject>.TItemArray

!IEqualityComparer<System.Pointer>$!@

&TCollectionNotifyEvent<System.Pointer>

/TCollectionNotifyEvent<System.Rtti.TRttiObject>

TArray<System.Pointer>

TEnumerator<System.Pointer>(

TEnumerator<System.Pointer>

TEnumerable<System.Pointer>'

TEnumerable<System.Pointer>(

BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyEnumerator;

BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyEnumerator

BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyCollection;

BTDictionary<System.Pointer,System.Rtti.TRttiObject>.TKeyCollection

TArray<System.Rtti.TRttiObject>

$TEnumerator<System.Rtti.TRttiObject>(

$TEnumerator<System.Rtti.TRttiObject>

$TEnumerable<System.Rtti.TRttiObject>'

$TEnumerable<System.Rtti.TRttiObject>0

DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueEnumerator;

DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueEnumerator

DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueCollection;

DTDictionary<System.Pointer,System.Rtti.TRttiObject>.TValueCollection

CTDictionary<System.Pointer,System.Rtti.TRttiObject>.TPairEnumerator;

CTDictionary<System.Pointer,System.Rtti.TRttiObject>.TPairEnumerator

FOnKeyNotify

FKeyCollection

3TDictionary<System.Pointer,System.Rtti.TRttiObject>9

ContainsKey

3TDictionary<System.Pointer,System.Rtti.TRttiObject>

Keys

OnKeyNotify

TArray<System.Rtti.TRttiType>

TArray<System.Rtti.TRttiPackage>

Uhs%D

-TPair<System.TypInfo.PTypeInfo,System.string>

ATArray<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

FTEnumerator<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>(

FTEnumerator<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

FTEnumerable<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>'

FTEnumerable<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>x3D

9TDictionary<System.TypInfo.PTypeInfo,System.string>.TItem

>TDictionary<System.TypInfo.PTypeInfo,System.string>.TItemArray

 IEqualityComparer<System.TypInfo.PTypeInfo>$!@

0TCollectionNotifyEvent<System.TypInfo.PTypeInfo>

TArray<System.TypInfo.PTypeInfo>

%TEnumerator<System.TypInfo.PTypeInfo>(

%TEnumerator<System.TypInfo.PTypeInfo>

%TEnumerable<System.TypInfo.PTypeInfo>'

%TEnumerable<System.TypInfo.PTypeInfo>

BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyEnumerator;

BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyEnumeratort:D

BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyCollection;

BTDictionary<System.TypInfo.PTypeInfo,System.string>.TKeyCollectiond<D

DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueEnumerator;

DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueEnumerator

DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueCollection;

DTDictionary<System.TypInfo.PTypeInfo,System.string>.TValueCollection|@D

CTDictionary<System.TypInfo.PTypeInfo,System.string>.TPairEnumerator;

CTDictionary<System.TypInfo.PTypeInfo,System.string>.TPairEnumerator

3TDictionary<System.TypInfo.PTypeInfo,System.string>9

3TDictionary<System.TypInfo.PTypeInfo,System.string>

-TPair<System.string,System.TypInfo.PTypeInfo>

ATArray<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

FTEnumerator<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>(

FTEnumerator<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>HMD

FTEnumerable<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>'

FTEnumerable<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

9TDictionary<System.string,System.TypInfo.PTypeInfo>.TItem

>TDictionary<System.string,System.TypInfo.PTypeInfo>.TItemArray

System.Generics.Collections<PD

BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyEnumerator;

BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyEnumerator

BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyCollection;

BTDictionary<System.string,System.TypInfo.PTypeInfo>.TKeyCollection

DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueEnumerator;

DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueEnumerator

DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueCollection;

DTDictionary<System.string,System.TypInfo.PTypeInfo>.TValueCollection

CTDictionary<System.string,System.TypInfo.PTypeInfo>.TPairEnumerator;

CTDictionary<System.string,System.TypInfo.PTypeInfo>.TPairEnumerator

3TDictionary<System.string,System.TypInfo.PTypeInfo>9

3TDictionary<System.string,System.TypInfo.PTypeInfo>

OnKeyNotifyT6D

#IComparer<System.Rtti.TRttiPackage>$!@

%TComparison<System.Rtti.TRttiPackage>$!@

#TComparer<System.Rtti.TRttiPackage>2

#TComparer<System.Rtti.TRttiPackage>`eD

$TEnumerator<System.TCustomAttribute>(

$TEnumerator<System.TCustomAttribute>

$TEnumerable<System.TCustomAttribute>'

$TEnumerable<System.TCustomAttribute>

'TList<System.TCustomAttribute>.arrayofT

"IComparer<System.TCustomAttribute>$!@

/TCollectionNotifyEvent<System.TCustomAttribute>

&TArrayManager<System.TCustomAttribute>g

&TArrayManager<System.TCustomAttribute>

$IEnumerable<System.TCustomAttribute>X!@

)TList<System.TCustomAttribute>.TEmptyFunc$!@

*TList<System.TCustomAttribute>.TEnumerator5

*TList<System.TCustomAttribute>.TEnumerator

TList<System.TCustomAttribute>&

TList<System.TCustomAttribute>t

-TArray<System.TArray<System.Rtti.TRttiField>>

7TArray<System.TArray<System.Rtti.TRttiIndexedProperty>>

.TArray<System.TArray<System.Rtti.TRttiMethod>>

0TArray<System.TArray<System.Rtti.TRttiProperty>>

&TEnumerator<System.Rtti.TRttiProperty>(

&TEnumerator<System.Rtti.TRttiProperty>$

&TEnumerable<System.Rtti.TRttiProperty>'

&TEnumerable<System.Rtti.TRttiProperty>h

)TList<System.Rtti.TRttiProperty>.arrayofT

$IComparer<System.Rtti.TRttiProperty>$!@

1TCollectionNotifyEvent<System.Rtti.TRttiProperty>

(TArrayManager<System.Rtti.TRttiProperty>g

(TArrayManager<System.Rtti.TRttiProperty>t

&IEnumerable<System.Rtti.TRttiProperty>X!@

 TList<System.Rtti.TRttiProperty>.TEmptyFunc$!@

,TList<System.Rtti.TRttiProperty>.TEnumerator5

,TList<System.Rtti.TRttiProperty>.TEnumeratorl

TList<System.Rtti.TRttiProperty>&

TList<System.Rtti.TRttiProperty>$

$TEnumerator<System.Rtti.TRttiMethod>(

$TEnumerator<System.Rtti.TRttiMethod>

$TEnumerable<System.Rtti.TRttiMethod>'

$TEnumerable<System.Rtti.TRttiMethod><

'TList<System.Rtti.TRttiMethod>.arrayofT

System.Generics.Collections0

"IComparer<System.Rtti.TRttiMethod>$!@

/TCollectionNotifyEvent<System.Rtti.TRttiMethod>

&TArrayManager<System.Rtti.TRttiMethod>g

&TArrayManager<System.Rtti.TRttiMethod>8

$IEnumerable<System.Rtti.TRttiMethod>X!@

)TList<System.Rtti.TRttiMethod>.TEmptyFunc$!@

*TList<System.Rtti.TRttiMethod>.TEnumerator5

*TList<System.Rtti.TRttiMethod>.TEnumerator,

TList<System.Rtti.TRttiMethod>&

TList<System.Rtti.TRttiMethod>

#TEnumerator<System.Rtti.TRttiField>(

#TEnumerator<System.Rtti.TRttiField>

#TEnumerable<System.Rtti.TRttiField>'

#TEnumerable<System.Rtti.TRttiField>

&TList<System.Rtti.TRttiField>.arrayofT

!IComparer<System.Rtti.TRttiField>$!@

.TCollectionNotifyEvent<System.Rtti.TRttiField>

%TArrayManager<System.Rtti.TRttiField>g

%TArrayManager<System.Rtti.TRttiField>

#IEnumerable<System.Rtti.TRttiField>X!@

(TList<System.Rtti.TRttiField>.TEmptyFunc$!@

)TList<System.Rtti.TRttiField>.TEnumerator5

)TList<System.Rtti.TRttiField>.TEnumerator

TList<System.Rtti.TRttiField>&

TList<System.Rtti.TRttiField>

*TEnumerator<System.Rtti.TRttiManagedField>(

*TEnumerator<System.Rtti.TRttiManagedField>

*TEnumerable<System.Rtti.TRttiManagedField>'

*TEnumerable<System.Rtti.TRttiManagedField>

-TList<System.Rtti.TRttiManagedField>.arrayofT

(IComparer<System.Rtti.TRttiManagedField>$!@

5TCollectionNotifyEvent<System.Rtti.TRttiManagedField>

,TArrayManager<System.Rtti.TRttiManagedField>g

,TArrayManager<System.Rtti.TRttiManagedField>,6E

*IEnumerable<System.Rtti.TRttiManagedField>X!@

/TList<System.Rtti.TRttiManagedField>.TEmptyFunc$!@

0TList<System.Rtti.TRttiManagedField>.TEnumerator5

0TList<System.Rtti.TRttiManagedField>.TEnumerator49E

$TList<System.Rtti.TRttiManagedField>&

$TList<System.Rtti.TRttiManagedField>

9TObjectDictionary<System.Pointer,System.Rtti.TRttiObject>M

9TObjectDictionary<System.Pointer,System.Rtti.TRttiObject>0lE

hExE

8TComparison<System.Rtti.TMethodImplementation.TParamLoc>$!@

6TComparer<System.Rtti.TMethodImplementation.TParamLoc>2

6TComparer<System.Rtti.TMethodImplementation.TParamLoc>

>TMoveArrayManager<System.Rtti.TMethodImplementation.TParamLoc>g

>TMoveArrayManager<System.Rtti.TMethodImplementation.TParamLoc>

{System.Generics.Collections}TList<System.Rtti.TMethodImplementation.TParamLoc>.:{System.Generics.Collections}TList<System.Rtti.TMethodImplementation.TParamLoc>.:1

ITList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.arrayofT

System.Generics.Collections`

DIComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>$!@

QTCollectionNotifyEvent<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

Item-TPair<System.Pointer,System.Rtti.TRttiObject>

HTArrayManager<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>g

HTArrayManager<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>

FIEnumerable<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>X!@

KTList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.TEmptyFunc$!@

LTList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.TEnumerator5

LTList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.TEnumerator8

@TList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>&

@TList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>0

TList<System.Pointer>.arrayofT

IComparer<System.Pointer>$!@

TArrayManager<System.Pointer>g

TArrayManager<System.Pointer>,)F

IEnumerable<System.Pointer>X!@

TList<System.Pointer>.TEmptyFunc$!@

!TList<System.Pointer>.TEnumerator5

!TList<System.Pointer>.TEnumerator

TList<System.Pointer>&

TList<System.Pointer>

'TList<System.Rtti.TRttiObject>.arrayofT

"IComparer<System.Rtti.TRttiObject>$!@

&TArrayManager<System.Rtti.TRttiObject>g

&TArrayManager<System.Rtti.TRttiObject>

$IEnumerable<System.Rtti.TRttiObject>X!@

)TList<System.Rtti.TRttiObject>.TEmptyFunc$!@

*TList<System.Rtti.TRttiObject>.TEnumerator5

*TList<System.Rtti.TRttiObject>.TEnumerator

TList<System.Rtti.TRttiObject>&

TList<System.Rtti.TRttiObject>

ITList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.arrayofT

DIComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>$!@

QTCollectionNotifyEvent<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

Item-TPair<System.TypInfo.PTypeInfo,System.string>

HTArrayManager<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>g

HTArrayManager<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

FIEnumerable<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>X!@

KTList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.TEmptyFunc$!@

LTList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.TEnumerator5

LTList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.TEnumerator

@TList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>&

@TList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

(TList<System.TypInfo.PTypeInfo>.arrayofT

#IComparer<System.TypInfo.PTypeInfo>$!@

'TArrayManager<System.TypInfo.PTypeInfo>g

'TArrayManager<System.TypInfo.PTypeInfo>

%IEnumerable<System.TypInfo.PTypeInfo>X!@

*TList<System.TypInfo.PTypeInfo>.TEmptyFunc$!@

 TList<System.TypInfo.PTypeInfo>.TEnumerator5

 TList<System.TypInfo.PTypeInfo>.TEnumerator

TList<System.TypInfo.PTypeInfo>&

TList<System.TypInfo.PTypeInfo>

TList<System.string>.arrayofT

TArrayManager<System.string>g

TArrayManager<System.string>

TList<System.string>.TEmptyFunc$!@

TList<System.string>.TEnumerator5

TList<System.string>.TEnumerator|vF

TList<System.string>&

TList<System.string>

ITList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.arrayofT

DIComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>$!@

QTCollectionNotifyEvent<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

Item-TPair<System.string,System.TypInfo.PTypeInfo>

HTArrayManager<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>g

HTArrayManager<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

FIEnumerable<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>X!@

KTList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.TEmptyFunc$!@

LTList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.TEnumerator5

LTList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.TEnumerator

@TList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>&

@TList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

,TDelegatedComparer<System.Rtti.TRttiPackage>8

,TDelegatedComparer<System.Rtti.TRttiPackage>

$TComparison<System.TCustomAttribute>$!@

"TComparer<System.TCustomAttribute>2

"TComparer<System.TCustomAttribute>D

*TMoveArrayManager<System.TCustomAttribute>g

*TMoveArrayManager<System.TCustomAttribute>

{{System.Generics.Collections}TList<System.TCustomAttribute>.:{System.Generics.Collections}TList<System.TCustomAttribute>.:1

&TComparison<System.Rtti.TRttiProperty>$!@

$TComparer<System.Rtti.TRttiProperty>2

$TComparer<System.Rtti.TRttiProperty>

,TMoveArrayManager<System.Rtti.TRttiProperty>g

,TMoveArrayManager<System.Rtti.TRttiProperty>X

{System.Generics.Collections}TList<System.Rtti.TRttiProperty>.:{System.Generics.Collections}TList<System.Rtti.TRttiProperty>.:1

$TComparison<System.Rtti.TRttiMethod>$!@

"TComparer<System.Rtti.TRttiMethod>2

"TComparer<System.Rtti.TRttiMethod>

*TMoveArrayManager<System.Rtti.TRttiMethod>g

*TMoveArrayManager<System.Rtti.TRttiMethod>

{{System.Generics.Collections}TList<System.Rtti.TRttiMethod>.:{System.Generics.Collections}TList<System.Rtti.TRttiMethod>.:1

System.Rtti0

#TComparison<System.Rtti.TRttiField>$!@

!TComparer<System.Rtti.TRttiField>2

!TComparer<System.Rtti.TRttiField>d

)TMoveArrayManager<System.Rtti.TRttiField>g

)TMoveArrayManager<System.Rtti.TRttiField>

y{System.Generics.Collections}TList<System.Rtti.TRttiField>.:{System.Generics.Collections}TList<System.Rtti.TRttiField>.:1

*TComparison<System.Rtti.TRttiManagedField>$!@

(TComparer<System.Rtti.TRttiManagedField>2

(TComparer<System.Rtti.TRttiManagedField>

0TMoveArrayManager<System.Rtti.TRttiManagedField>g

0TMoveArrayManager<System.Rtti.TRttiManagedField>

{System.Generics.Collections}TList<System.Rtti.TRttiManagedField>.:{System.Generics.Collections}TList<System.Rtti.TRttiManagedField>.:1

FTComparison<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>$!@

DTComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>2

DTComparer<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>`

LTMoveArrayManager<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>g

LTMoveArrayManager<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>X

{System.Generics.Collections}TList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.:{System.Generics.Collections}TList<System.Rtti.TPair<System.Pointer,System.Rtti.TRttiObject>>.:1

System.Rtti`

TComparison<System.Pointer>$!@

TComparer<System.Pointer>2

TComparer<System.Pointer>

!TMoveArrayManager<System.Pointer>g

!TMoveArrayManager<System.Pointer>

i{System.Generics.Collections}TList<System.Pointer>.:{System.Generics.Collections}TList<System.Pointer>.:1

$TComparison<System.Rtti.TRttiObject>$!@

"TComparer<System.Rtti.TRttiObject>2

"TComparer<System.Rtti.TRttiObject>

*TMoveArrayManager<System.Rtti.TRttiObject>g

*TMoveArrayManager<System.Rtti.TRttiObject>X

{{System.Generics.Collections}TList<System.Rtti.TRttiObject>.:{System.Generics.Collections}TList<System.Rtti.TRttiObject>.:1

FTComparison<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>$!@

DTComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>2

DTComparer<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>$

LTMoveArrayManager<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>g

LTMoveArrayManager<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>

{System.Generics.Collections}TList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.:{System.Generics.Collections}TList<System.Rtti.TPair<System.TypInfo.PTypeInfo,System.string>>.:1

%TComparison<System.TypInfo.PTypeInfo>$!@

#TComparer<System.TypInfo.PTypeInfo>2

#TComparer<System.TypInfo.PTypeInfo>L

 TMoveArrayManager<System.TypInfo.PTypeInfo>g

 TMoveArrayManager<System.TypInfo.PTypeInfo>

}{System.Generics.Collections}TList<System.TypInfo.PTypeInfo>.:{System.Generics.Collections}TList<System.TypInfo.PTypeInfo>.:1

TComparison<System.string>$!@

TComparer<System.string>2

TComparer<System.string>

TMoveArrayManager<System.string>g

TMoveArrayManager<System.string>@

g{System.Generics.Collections}TList<System.string>.:{System.Generics.Collections}TList<System.string>.:1

FTComparison<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>$!@

DTComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>2

DTComparer<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

LTMoveArrayManager<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>g

LTMoveArrayManager<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>

{System.Generics.Collections}TList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.:{System.Generics.Collections}TList<System.Rtti.TPair<System.string,System.TypInfo.PTypeInfo>>.:1

System.TypInfo

mkOperatorOverload

PFieldExEntry

TFieldExEntry

PVmtMethodExEntry