Overview

URLhttp://websearch.good-results.info/
IP141.101.116.45
ASNAS13335 CloudFlare, Inc.
Location Europe
Report completed2013-02-19 21:12:45 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro No alerts detected
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on ASN: AS13335 CloudFlare, Inc.

Date Alerts / IDS URL IP
2013-02-19 20:46:290 / 4http://www.nutjob.eu/108.162.197.247
2013-02-19 20:44:040 / 0http://s9.postimage.org/w7unnspl7/aol.jpg108.162.198.132
2013-02-19 20:41:470 / 2http://www.funimation.com/190.93.241.213
2013-02-19 20:37:360 / 3http://www.cyber12.com/108.162.192.114
2013-02-19 20:35:390 / 2http://www.animepaper.net/141.101.116.95
2013-02-19 20:28:210 / 0http://scanner.virus.org/141.101.124.38

Last 1 reports on domain: websearch.good-results.info

Date Alerts / IDS URL IP
2013-02-05 21:20:540 / 0http://websearch.good-results.info/141.101.117.45



JavaScript

Executed Scripts (6)


Executed Evals (0)


Executed Writes (2)

#1 JavaScript::Write (size: 157, repeated: 1)

<SCRIPT TYPE="text/javascript" SRC="http://ad.xtendmedia.com/imp?Z=300x250&u=websearch.good%2dresults.info&s=4028514&T=3&_salt=2585906220&B=10&r=0"></SCRIPT>

#2 JavaScript::Write (size: 480, repeated: 1)

<a target="_blank" href="http://ad.xtendmedia.com/clk?3,eJytjeEKgjAAhF.IYmsajtGP2ZoYLgwsyX-6TScsrSyUnj6y6Am6H8fHccdBRIB2S72oEFAlVkAVBCJZudArJCodQAhxMYJLvPR8x85GzsOtm-xZjpOaTtpursnwQTpF0YcT.-2Mt7HMvtX2glP6F62byMgvR9NvzXzKr.0RsyH41cLNmGcCioybOFUmZ.QuUm5FAzxx3o9xGjQiPJrT8.DcMWvz-rdcOc6gy14XN2nmddep2U33D3vv501bdS-X3VsA,"><img border="0" alt="" height="250" width="300" src="http://content.yieldmanager.edgesuite.net/atoms/d6/64/0a/c7/d6640ac7b5644ffc4fc992078ea48761.gif"></img></a>


HTTP Transactions (14)


Request Response
GET / HTTP/1.1

Host: websearch.good-results.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html
Server: cloudflare-nginx
Date: Tue, 19 Feb 2013 20:12:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.11
Set-Cookie: __cfduid=dab933d0558cf72e92363632d0d3dd9a21361304724; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.good-results.info
CF-RAY: 4361a40838c05b5
Content-Encoding: gzip
GET /ajax/libs/jquery/1.6.4/jquery.min.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://websearch.good-results.info/
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT
Date: Fri, 15 Feb 2013 00:42:04 GMT
Expires: Sat, 15 Feb 2014 00:42:04 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 32103
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 415800
GET /images/btn.png HTTP/1.1

Host: websearch.good-results.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://websearch.good-results.info/
Cookie: __cfduid=dab933d0558cf72e92363632d0d3dd9a21361304724
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: cloudflare-nginx
Date: Tue, 19 Feb 2013 20:12:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CF-Cache-Status: HIT
CF-RAY: 4361a42e3a505b5
Content-Encoding: gzip
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://websearch.good-results.info/
If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT
HTTP/1.1 200 OK

Content-Type: text/javascript
Content-Length: 14989
Content-Encoding: gzip
Last-Modified: Fri, 18 Jan 2013 04:30:31 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Tue, 19 Feb 2013 15:10:12 GMT
Expires: Wed, 20 Feb 2013 03:10:12 GMT
Vary: Accept-Encoding
Age: 18113
Cache-Control: max-age=43200, public
Server: GFE/2.0
GET /__utm.gif?utmwv=5.3.9&utms=1&utmn=1414450260&utmhn=websearch.good-results.info&utmcs=UTF-8&utmsr=1176x885&utmvp=1176x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Search&utmhid=303632196&utmr=-&utmp=%2F&utmac=UA-38331732-5&utmcc=__utma%3D248003969.1534661573.1361304725.1361304725.1361304725.1%3B%2B__utmz%3D248003969.1361304725.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=q~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.9&amp;utms=1&amp;utmn=1414450260&amp;utmhn=websearch.good-results.info&amp;utmcs=UTF-8&amp;utmsr=1176x885&amp;utmvp=1176x778&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=Search&amp;utmhid=303632196&amp;utmr=-&amp;utmp=%2F&amp;utmac=UA-38331732-5&amp;utmcc=__utma%3D248003969.1534661573.1361304725.1361304725.1361304725.1%3B%2B__utmz%3D248003969.1361304725.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmu=q~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://websearch.good-results.info/
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 13 Feb 2013 10:25:18 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 553607
Server: GFE/2.0
GET /__utm.gif?utmwv=5.3.9&utms=2&utmn=723402182&utmhn=websearch.good-results.info&utmcs=UTF-8&utmsr=1176x885&utmvp=1176x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Search&utmhid=303632196&utmr=-&utmp=%2Fwebsearch.good-results.info&utmac=UA-38331732-5&utmcc=__utma%3D248003969.1534661573.1361304725.1361304725.1361304725.1%3B%2B__utmz%3D248003969.1361304725.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qAC~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.9&amp;utms=2&amp;utmn=723402182&amp;utmhn=websearch.good-results.info&amp;utmcs=UTF-8&amp;utmsr=1176x885&amp;utmvp=1176x778&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=Search&amp;utmhid=303632196&amp;utmr=-&amp;utmp=%2Fwebsearch.good-results.info&amp;utmac=UA-38331732-5&amp;utmcc=__utma%3D248003969.1534661573.1361304725.1361304725.1361304725.1%3B%2B__utmz%3D248003969.1361304725.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmu=qAC~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://websearch.good-results.info/
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 13 Feb 2013 10:25:18 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 553607
Server: GFE/2.0
GET /st?ad_type=iframe&ad_size=300x250&section=4028514&pub_url=websearch.good-results.info HTTP/1.1

Host: ad.xtendmedia.com
GET /st?ad_type=iframe&amp;ad_size=300x250&amp;section=4028514&amp;pub_url=websearch.good-results.info HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://websearch.good-results.info/
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Date: Tue, 19 Feb 2013 20:12:05 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor0091.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Tue, 19 Feb 2013 20:12:05 GMT
Expires: Tue, 19 Feb 2013 20:12:05 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /imp?Z=300x250&u=websearch.good%2dresults.info&s=4028514&T=3&_salt=2585906220&B=10&r=0 HTTP/1.1

Host: ad.xtendmedia.com
GET /imp?Z=300x250&amp;u=websearch.good%2dresults.info&amp;s=4028514&amp;T=3&amp;_salt=2585906220&amp;B=10&amp;r=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ad.xtendmedia.com/st?ad_type=iframe&amp;ad_size=300x250&amp;section=4028514&amp;pub_url=websearch.good-results.info
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Tue, 19 Feb 2013 20:12:05 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor1257.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Location: http://ad.yieldmanager.com/imp?Z=300x250&amp;u=websearch.good%2dresults.info&amp;s=4028514&amp;T=3&amp;_salt=2585906220&amp;B=10&amp;r=0
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Tue, 19 Feb 2013 20:12:05 GMT
Expires: Tue, 19 Feb 2013 20:12:05 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /imp?Z=300x250&u=websearch.good%2dresults.info&s=4028514&T=3&_salt=2585906220&B=10&r=0 HTTP/1.1

Host: ad.yieldmanager.com
GET /imp?Z=300x250&amp;u=websearch.good%2dresults.info&amp;s=4028514&amp;T=3&amp;_salt=2585906220&amp;B=10&amp;r=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ad.xtendmedia.com/st?ad_type=iframe&amp;ad_size=300x250&amp;section=4028514&amp;pub_url=websearch.good-results.info
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Tue, 19 Feb 2013 20:12:05 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor0199.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Location: http://cookex.amp.yahoo.com/v2/cexposer/SIG=13kv13otg/*http%3A//ad.yieldmanager.com/imp?Z=300x250&amp;u=websearch.good%2dresults.info&amp;s=4028514&amp;T=3&amp;_salt=2585906220&amp;B=10&amp;r=0
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Tue, 19 Feb 2013 20:12:05 GMT
Expires: Tue, 19 Feb 2013 20:12:05 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /v2/cexposer/SIG=13kv13otg/*http%3A//ad.yieldmanager.com/imp?Z=300x250&u=websearch.good%2dresults.info&s=4028514&T=3&_salt=2585906220&B=10&r=0 HTTP/1.1

Host: cookex.amp.yahoo.com
GET /v2/cexposer/SIG=13kv13otg/*http%3A//ad.yieldmanager.com/imp?Z=300x250&amp;u=websearch.good%2dresults.info&amp;s=4028514&amp;T=3&amp;_salt=2585906220&amp;B=10&amp;r=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ad.xtendmedia.com/st?ad_type=iframe&amp;ad_size=300x250&amp;section=4028514&amp;pub_url=websearch.good-results.info
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Date: Tue, 19 Feb 2013 20:12:06 GMT
Set-Cookie: B=e1le5gl8i7n4m&amp;b=3&amp;s=dh; expires=Tue, 20-Feb-2015 20:00:00 GMT; path=/; domain=.yahoo.com
P3P: policyref=&quot;http://info.yahoo.com/w3c/p3p.xml&quot;, CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV&quot;
Location: http://ad.yieldmanager.com/imp?Z=300x250&amp;u=websearch.good%2dresults.info&amp;s=4028514&amp;T=3&amp;_salt=2585906220&amp;B=10&amp;r=0&amp;SIG=10v71d0f0;x-cookie=r1yr5ty8v7a4z&amp;o=3&amp;f=qu
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Cache-Control: private
GET /imp?Z=300x250&u=websearch.good%2dresults.info&s=4028514&T=3&_salt=2585906220&B=10&r=0&SIG=10v71d0f0;x-cookie=r1yr5ty8v7a4z&o=3&f=qu HTTP/1.1

Host: ad.yieldmanager.com
GET /imp?Z=300x250&amp;u=websearch.good%2dresults.info&amp;s=4028514&amp;T=3&amp;_salt=2585906220&amp;B=10&amp;r=0&amp;SIG=10v71d0f0;x-cookie=r1yr5ty8v7a4z&amp;o=3&amp;f=qu HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ad.xtendmedia.com/st?ad_type=iframe&amp;ad_size=300x250&amp;section=4028514&amp;pub_url=websearch.good-results.info
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Date: Tue, 19 Feb 2013 20:12:06 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor0380.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Set-Cookie: ih=&quot;b!!!!#!&gt;T5A!!!!#&gt;)[ob&quot;; path=/; expires=Thu, 19-Feb-2015 20:12:06 GMT vuday1=UlD0Y!#uTW&lt;r[gL; path=/; expires=Wed, 20-Feb-2013 00:00:00 GMT BX=e1le5gl8i7n4m&amp;b=3&amp;s=dh&amp;t=49; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT uid=uid=a1eb3130-7ad0-11e2-aa2b-7b60bb189952&amp;_hmacv=1&amp;_salt=3996697574&amp;_keyid=k1&amp;_hmac=8dfb88c526d88b32c888121af24d3045ace5dad8; path=/; expires=Thu, 21-Mar-2013 20:12:06 GMT liday1=WyEuc!#uTWTOM8B; path=/; expires=Wed, 20-Feb-2013 00:00:00 GMT RMBX=e1le5gl8i7n4m&amp;b=3&amp;s=dh&amp;t=49; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Tue, 19 Feb 2013 20:12:06 GMT
Expires: Tue, 19 Feb 2013 20:12:06 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /atoms/d6/64/0a/c7/d6640ac7b5644ffc4fc992078ea48761.gif HTTP/1.1

Host: content.yieldmanager.edgesuite.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ad.xtendmedia.com/st?ad_type=iframe&amp;ad_size=300x250&amp;section=4028514&amp;pub_url=websearch.good-results.info
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache
Etag: &quot;d6640ac7b5644ffc4fc992078ea48761:1338219455&quot;
Last-Modified: Mon, 28 May 2012 15:37:33 GMT
Accept-Ranges: bytes
Content-Length: 10955
Cache-Control: max-age=31536000
Date: Tue, 19 Feb 2013 20:12:06 GMT
Connection: keep-alive
GET /favicon.ico HTTP/1.1

Host: websearch.good-results.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=dab933d0558cf72e92363632d0d3dd9a21361304724; __utma=248003969.1534661573.1361304725.1361304725.1361304725.1; __utmb=248003969.2.10.1361304725; __utmc=248003969; __utmz=248003969.1361304725.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: cloudflare-nginx
Date: Tue, 19 Feb 2013 20:12:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CF-Cache-Status: MISS
CF-RAY: 4361a4dd46805b5
Content-Encoding: gzip
GET /favicon.ico HTTP/1.1

Host: websearch.good-results.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=dab933d0558cf72e92363632d0d3dd9a21361304724; __utma=248003969.1534661573.1361304725.1361304725.1361304725.1; __utmb=248003969.2.10.1361304725; __utmc=248003969; __utmz=248003969.1361304725.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: cloudflare-nginx
Date: Tue, 19 Feb 2013 20:12:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CF-Cache-Status: MISS
CF-RAY: 4361a59252605b5
Content-Encoding: gzip