Overview

URL www.thegoodonesystemforcontentgreat.win
IP54.89.93.105
ASNAS14618 Amazon.com, Inc.
Location United States
Report completed2018-07-02 10:47:22 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 54.89.93.105

Date UQ / IDS / BL URL IP
2018-08-18 20:22:14 +0200
0 - 0 - 1 www.extensionrandomsystemupgrade4contestpropo (...) 54.89.93.105
2018-07-05 20:19:06 +0200
0 - 0 - 1 www.previewyounewlisteditems4free4listening.trade/ 54.89.93.105
2018-07-03 06:32:25 +0200
0 - 0 - 1 www.addbrandnewsystemfornewrequest.review/bl. (...) 54.89.93.105
2018-07-03 04:58:44 +0200
0 - 0 - 1 www.addbrandnewsystemfornewrequest.review/bl. (...) 54.89.93.105
2018-07-02 00:55:49 +0200
0 - 0 - 1 www.readyoursystemforcontentsgreat.win/?pcl=q (...) 54.89.93.105
2018-07-02 00:54:36 +0200
0 - 0 - 1 www.readyoursystemforcontentsgreat.win/?pcl=q (...) 54.89.93.105
2018-07-02 00:06:17 +0200
0 - 0 - 1 www.autoclickonnewcontentblogoffersplaypause. (...) 54.89.93.105
2018-06-30 22:03:03 +0200
0 - 0 - 1 www.addmorevolume2yourpromotioncontest.win/ 54.89.93.105
2018-06-29 20:36:02 +0200
0 - 0 - 0 hxxp://www.forgetthepathtradebidoptimized4fre (...) 54.89.93.105
2018-06-29 04:44:42 +0200
0 - 1 - 2 www.promotiontradebidoptimized4freecolorup.re (...) 54.89.93.105

Last 10 reports on ASN: AS14618 Amazon.com, Inc.

Date UQ / IDS / BL URL IP
2019-01-18 15:40:26 +0100
0 - 0 - 0 email.notifications.payable.com/c/eJwVjk2KxCA (...) 52.72.166.195
2019-01-18 15:39:01 +0100
0 - 0 - 1 cloudnet2.com/208061/Media_Converter_208061.exe 50.16.239.57
2019-01-18 15:33:03 +0100
0 - 0 - 0 platform.shopmsg.me 52.72.250.2
2019-01-18 15:24:50 +0100
0 - 0 - 1 moztweak.com/downloads/bs-0216-softpublisher- (...) 54.84.55.49
2019-01-18 15:17:27 +0100
0 - 0 - 2 snowdive.top/installs/3299/db1f4cbf.exe 52.4.209.250
2019-01-18 15:16:58 +0100
0 - 0 - 1 botz.in/f/6e3f56cb8a4243035867b5a7e7fd156e.exe 52.0.7.30
2019-01-18 15:15:56 +0100
0 - 0 - 1 botz.in/f/0834d8c6ab7de0f83e4d232d6792ec81.exe 52.0.7.30
2019-01-18 15:13:33 +0100
0 - 0 - 1 botz.in/f/7522b64695ab881eaad7bfa0e3194fd3.exe 52.0.7.30
2019-01-18 15:13:32 +0100
0 - 0 - 1 botz.in/f/1d3b787a0281d2638fa95279dc7d875a.exe 52.0.7.30
2019-01-18 15:13:03 +0100
0 - 0 - 1 botz.in/f/253355544af8e1814601d802a98ecbe8.exe 52.0.7.30

No other reports on domain: thegoodonesystemforcontentgreat.win



JavaScript

Executed Scripts (9)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 13, repeated: 1) - SHA256: e5e82e7883e0b3cb35f5ec2d0d2f5f66e343edcd81eb2cf11eb5612fd1e4fdb2

                                        77.40.129.123
                                    


HTTP Transactions (10)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: www.thegoodonesystemforcontentgreat.win
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.89.93.105
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx/1.8.0
Date: Mon, 02 Jul 2018 08:46:50 GMT
Content-Length: 160
Connection: close
Location: http://www.theadgateway.com/jump/next.php?r=2045607&sub1={source_id}


--- Additional Info ---
Magic:  HTML document text
Size:   160
Md5:    e0d8c58a3c91234c31813b1691baa6c6
Sha1:   d1b7f991404e93e5a282433347955db33f153fd9
Sha256: c0296d7ef857ca2505fb0a1b76ecc741154327ff5f2302a7e9aea551c7c6e7c1
                                        
                                            GET /jump/next.php?r=2045607&sub1={source_id} HTTP/1.1 
Host: www.theadgateway.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         35.190.65.235
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: openresty
Date: Mon, 02 Jul 2018 08:46:51 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
Referrer-Policy: no-referrer
Link: <//www.theadgateway.com>; rel=dns-prefetch,<//www.theadgateway.com>; rel=preconnect
Content-Encoding: gzip
Via: 1.1 google


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1848
Md5:    8c4f5248d5ba5b4cd4ce75809583ea14
Sha1:   f5b3374bc3ac7c51c50274c5c1a671f3328167f9
Sha256: 45284bed726f26406f3df3c318bbe523abb7849d9ace6990c89fd7dc0e0e19ee
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.theadgateway.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         35.190.65.235
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: openresty
Date: Mon, 02 Jul 2018 08:46:51 GMT
Content-Length: 0
Last-Modified: Wed, 27 Dec 2017 10:12:41 GMT
Etag: "5a437219-0"
Accept-Ranges: bytes
Via: 1.1 google


--- Additional Info ---
                                        
                                            GET /jump/next.php?stamat=m%7C%2Cw43a3Y2arB1dAN0dEdHP3xP.271%2CqcWZXKUtG0OcE4BpbnH-ZwifaVWXeXS2e2mAvQcNZJPII3ohn6Zcm0m_3M7Xu5XQ9WyYWE7qD0cRr3ys-5Fu-7ui8mf3XERd9xT_-A1kAog%2C&cbrandom=0.5935664714468767&cbtitle=&cbiframe=0&cbWidth=1176&cbHeight=754&cbdescription=&cbkeywords=&cbref= HTTP/1.1 
Host: www.theadgateway.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.theadgateway.com/jump/next.php?r=2045607&sub1={source_id}

                                         
                                         35.190.65.235
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
                                        
Server: openresty
Date: Mon, 02 Jul 2018 08:46:51 GMT
Transfer-Encoding: chunked
Location: http://go.tutotrack.com/72163850-05c9-428c-9f18-124b5e90d435?zone=2045607-2476246003-0&lang=EN&time=1530521211&campaing=106487220&ban=23391175&ssp=&udid=&org=PowerTech Information Systems AS&advertiser=76327&clickid=15305212111294500219003176274716722&acsc=106487566
Referrer-Policy: no-referrer
Vary: Accept-Encoding
Via: 1.1 google


--- Additional Info ---
                                        
                                            GET /72163850-05c9-428c-9f18-124b5e90d435?zone=2045607-2476246003-0&lang=EN&time=1530521211&campaing=106487220&ban=23391175&ssp=&udid=&org=PowerTech%20Information%20Systems%20AS&advertiser=76327&clickid=15305212111294500219003176274716722&acsc=106487566 HTTP/1.1 
Host: go.tutotrack.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.theadgateway.com/jump/next.php?r=2045607&sub1={source_id}

                                         
                                         18.153.1.93
HTTP/1.1 302 Found
                                        
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Date: Mon, 02 Jul 2018 08:46:50 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://broadnet.lojalitets-program.com/no/iphone-x/pop/broadnet/index.html?ip=77.40.129.123&voluumdata=deprecated&eda=deprecated&cep=lScI6QiktZ8O-0QqAqpvz4alxPOptNxBaZ9-ZLi3c4w-hSUK-e3JvCT0aQwJQ2LwP42LsndenQJUKWc-8J-vSxwC4QX8mx6u3KlAvGzCpRqGSUXJWMhUf87Xr33pskR048t_1fTPrGQ4cuOR01K8aujlmNMIh7uhOnrS_noanUzWkQ3w6MHYxuqga3D0wlIcCrGTVarR0kI5o8fksfJaOJJhMPvWOhjC8QCyfaq8Bvp74N6HQKqZLqvIG08LHQnYLQsM7A9Zv8sXiQ359CFOGvVWCNzwtOBqPe0hUfVU5HFw1SdBohyM9aVGKXLc_CP9KWOaLHyVmNBsZsFUX6ZtCwNebMfNeSnMtB5qDtFaLS4X9PsW64e4y5BUoNmhh-hZ&zone=2045607-2476246003-0&lang=EN&time=1530521211&campaing=106487220&ban=23391175&ssp=&udid=&org=PowerTech Information Systems AS&advertiser=76327&clickid=15305212111294500219003176274716722&acsc=106487566
Pragma: no-cache
Server: nginx
Set-Cookie: 72163850-05c9-428c-9f18-124b5e90d435-v4=72163850-05c9-428c-9f18-124b5e90d435;domain=go.tutotrack.com;path=/;HttpOnly cep-v4=Rj-rUJiC76anYX5lhacmc989aTcwCSYV6sI92IZseSGv76uyyl45vm7csa_Auqyki7f1v2lbu0Ms2JogGDpe-qY9wUxuBT27FHvib0PJaM-24SfbBuMKKj-sJSpWkp9UH2aw4MAusvXs6ilFfhEAFxSujp4nr-0WMQdS0Vfa3XKpN6XOGc0qkx1hvvIgjaCMSaM_44SLrX0YdooWFTwQGQVz65iDeldmzMdmtR4jVx2_wIK_4PQKFIB53AHgaNTEy7FrAXwruGinFOHopoghlYGkJ5uGrk7bEniFw4fjK__UvtAuoZygMbDGJIwPvlcobkBiqIpiP30bef_zZASI6D5NXLc_pf_ojKWmwSx3pnFgbz9p2Vkzzjd-bjJNlVfO;Max-Age=86400;Expires=Tue, 03-Jul-2018 08:46:51 GMT;domain=go.tutotrack.com;path=/;HttpOnly
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /no/iphone-x/pop/broadnet/index.html?ip=77.40.129.123&voluumdata=deprecated&eda=deprecated&cep=lScI6QiktZ8O-0QqAqpvz4alxPOptNxBaZ9-ZLi3c4w-hSUK-e3JvCT0aQwJQ2LwP42LsndenQJUKWc-8J-vSxwC4QX8mx6u3KlAvGzCpRqGSUXJWMhUf87Xr33pskR048t_1fTPrGQ4cuOR01K8aujlmNMIh7uhOnrS_noanUzWkQ3w6MHYxuqga3D0wlIcCrGTVarR0kI5o8fksfJaOJJhMPvWOhjC8QCyfaq8Bvp74N6HQKqZLqvIG08LHQnYLQsM7A9Zv8sXiQ359CFOGvVWCNzwtOBqPe0hUfVU5HFw1SdBohyM9aVGKXLc_CP9KWOaLHyVmNBsZsFUX6ZtCwNebMfNeSnMtB5qDtFaLS4X9PsW64e4y5BUoNmhh-hZ&zone=2045607-2476246003-0&lang=EN&time=1530521211&campaing=106487220&ban=23391175&ssp=&udid=&org=PowerTech%20Information%20Systems%20AS&advertiser=76327&clickid=15305212111294500219003176274716722&acsc=106487566 HTTP/1.1 
Host: broadnet.lojalitets-program.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.theadgateway.com/jump/next.php?r=2045607&sub1={source_id}

                                         
                                         95.101.72.192
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Last-Modified: Sun, 06 May 2018 15:24:30 GMT
Etag: b22c3642197cec9cb5a3b56f0a8292e7
Accept-Ranges: bytes
X-Timestamp: 1525620269.37676
X-Trans-Id: tx7eb8cd76facc4db59b171-005aef2d6fiad3
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=121776
Expires: Tue, 03 Jul 2018 18:36:28 GMT
Date: Mon, 02 Jul 2018 08:46:52 GMT
Content-Length: 6585
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   6585
Md5:    b04df28766c7b671899c65454639ee42
Sha1:   515288faff30fe250ad85e46c3ef7411d227c297
Sha256: 8bd9d906ab52241f1ead21dde3a67aeac45f1bf2b3eb9baa437adf5a4c17407a
                                        
                                            GET /no/iphone-x/pop/broadnet/jquery-3.1.0.min.js.download HTTP/1.1 
Host: broadnet.lojalitets-program.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://broadnet.lojalitets-program.com/no/iphone-x/pop/broadnet/index.html?ip=77.40.129.123&voluumdata=deprecated&eda=deprecated&cep=lScI6QiktZ8O-0QqAqpvz4alxPOptNxBaZ9-ZLi3c4w-hSUK-e3JvCT0aQwJQ2LwP42LsndenQJUKWc-8J-vSxwC4QX8mx6u3KlAvGzCpRqGSUXJWMhUf87Xr33pskR048t_1fTPrGQ4cuOR01K8aujlmNMIh7uhOnrS_noanUzWkQ3w6MHYxuqga3D0wlIcCrGTVarR0kI5o8fksfJaOJJhMPvWOhjC8QCyfaq8Bvp74N6HQKqZLqvIG08LHQnYLQsM7A9Zv8sXiQ359CFOGvVWCNzwtOBqPe0hUfVU5HFw1SdBohyM9aVGKXLc_CP9KWOaLHyVmNBsZsFUX6ZtCwNebMfNeSnMtB5qDtFaLS4X9PsW64e4y5BUoNmhh-hZ&zone=2045607-2476246003-0&lang=EN&time=1530521211&campaing=106487220&ban=23391175&ssp=&udid=&org=PowerTech%20Information%20Systems%20AS&advertiser=76327&clickid=15305212111294500219003176274716722&acsc=106487566

                                         
                                         95.101.72.192
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Last-Modified: Sun, 06 May 2018 15:24:31 GMT
Etag: 05e51b1db558320f1939f9789ccf5c8f
Content-Length: 86351
Accept-Ranges: bytes
X-Timestamp: 1525620270.18681
X-Trans-Id: tx99a5352b278e46e7aeaa4-005aef33cbiad3
Cache-Control: public, max-age=113218
Expires: Tue, 03 Jul 2018 16:13:50 GMT
Date: Mon, 02 Jul 2018 08:46:52 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   86351
Md5:    05e51b1db558320f1939f9789ccf5c8f
Sha1:   c72c1735b4d903d90dd51225ebefb8c74ebbc51f
Sha256: 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
                                        
                                            GET /no/iphone-x/pop/broadnet/broa.png HTTP/1.1 
Host: broadnet.lojalitets-program.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://broadnet.lojalitets-program.com/no/iphone-x/pop/broadnet/index.html?ip=77.40.129.123&voluumdata=deprecated&eda=deprecated&cep=lScI6QiktZ8O-0QqAqpvz4alxPOptNxBaZ9-ZLi3c4w-hSUK-e3JvCT0aQwJQ2LwP42LsndenQJUKWc-8J-vSxwC4QX8mx6u3KlAvGzCpRqGSUXJWMhUf87Xr33pskR048t_1fTPrGQ4cuOR01K8aujlmNMIh7uhOnrS_noanUzWkQ3w6MHYxuqga3D0wlIcCrGTVarR0kI5o8fksfJaOJJhMPvWOhjC8QCyfaq8Bvp74N6HQKqZLqvIG08LHQnYLQsM7A9Zv8sXiQ359CFOGvVWCNzwtOBqPe0hUfVU5HFw1SdBohyM9aVGKXLc_CP9KWOaLHyVmNBsZsFUX6ZtCwNebMfNeSnMtB5qDtFaLS4X9PsW64e4y5BUoNmhh-hZ&zone=2045607-2476246003-0&lang=EN&time=1530521211&campaing=106487220&ban=23391175&ssp=&udid=&org=PowerTech%20Information%20Systems%20AS&advertiser=76327&clickid=15305212111294500219003176274716722&acsc=106487566

                                         
                                         95.101.72.192
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Sun, 06 May 2018 15:24:28 GMT
Etag: 9526c5ada8014af7dbce348383a5b96e
Content-Length: 5832
Accept-Ranges: bytes
X-Timestamp: 1525620267.39386
X-Trans-Id: txe5237c8dc4724c509b836-005aef2d6fiad3
Cache-Control: public, max-age=211954
Expires: Wed, 04 Jul 2018 19:39:26 GMT
Date: Mon, 02 Jul 2018 08:46:52 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 400 x 106, 8-bit/color RGBA, non-interlaced
Size:   5832
Md5:    9526c5ada8014af7dbce348383a5b96e
Sha1:   fabe00a9c292a69a5a0809bcfd2ab41310556abb
Sha256: 166b6921283c534bb0936d57d51d693e125f3780f9e735d04dcca1e660faab9c
                                        
                                            GET /no/iphone-x/pop/broadnet/faviconbb.png HTTP/1.1 
Host: broadnet.lojalitets-program.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         95.101.72.192
HTTP/1.1 200 OK
Content-Type: image/png
                                        
X-Trans-Id: tx55956da3956447e7a0714-005b38b5cbiad3
Last-Modified: Sun, 06 May 2018 15:24:29 GMT
Etag: dd62fab1332eb7b52afb89120db39400
Content-Length: 192
Accept-Ranges: bytes
X-Timestamp: 1525620268.50762
Cache-Control: public, max-age=181199
Expires: Wed, 04 Jul 2018 11:06:51 GMT
Date: Mon, 02 Jul 2018 08:46:52 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   192
Md5:    dd62fab1332eb7b52afb89120db39400
Sha1:   a7decc490a1f4af3b0b8cc910907493960c6b19b
Sha256: 97841340bb7a2bb1dc555c782b0b014f54fe866d3140a0fe2158e78b5f2a7ada
                                        
                                            GET /no/iphone-x/pop/broadnet/xxx.png HTTP/1.1 
Host: broadnet.lojalitets-program.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://broadnet.lojalitets-program.com/no/iphone-x/pop/broadnet/index.html?ip=77.40.129.123&voluumdata=deprecated&eda=deprecated&cep=lScI6QiktZ8O-0QqAqpvz4alxPOptNxBaZ9-ZLi3c4w-hSUK-e3JvCT0aQwJQ2LwP42LsndenQJUKWc-8J-vSxwC4QX8mx6u3KlAvGzCpRqGSUXJWMhUf87Xr33pskR048t_1fTPrGQ4cuOR01K8aujlmNMIh7uhOnrS_noanUzWkQ3w6MHYxuqga3D0wlIcCrGTVarR0kI5o8fksfJaOJJhMPvWOhjC8QCyfaq8Bvp74N6HQKqZLqvIG08LHQnYLQsM7A9Zv8sXiQ359CFOGvVWCNzwtOBqPe0hUfVU5HFw1SdBohyM9aVGKXLc_CP9KWOaLHyVmNBsZsFUX6ZtCwNebMfNeSnMtB5qDtFaLS4X9PsW64e4y5BUoNmhh-hZ&zone=2045607-2476246003-0&lang=EN&time=1530521211&campaing=106487220&ban=23391175&ssp=&udid=&org=PowerTech%20Information%20Systems%20AS&advertiser=76327&clickid=15305212111294500219003176274716722&acsc=106487566

                                         
                                         95.101.72.192
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Sun, 06 May 2018 15:24:33 GMT
Etag: 0da91bab0acff9a572f935d6cebd3534
Content-Length: 16612
Accept-Ranges: bytes
X-Timestamp: 1525620272.37734
X-Trans-Id: tx532da6f2bd3948b28fa6b-005aef2d70iad3
Cache-Control: public, max-age=187948
Expires: Wed, 04 Jul 2018 12:59:20 GMT
Date: Mon, 02 Jul 2018 08:46:52 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 80 x 116, 8-bit/color RGB, non-interlaced
Size:   16612
Md5:    0da91bab0acff9a572f935d6cebd3534
Sha1:   5fe32c62549b93ae42251efe00bbb8caebba094b
Sha256: a46906e5256259c731d27d16f36344f0f6957f59a52f5e48ffe9afb82b461db4