Overview

URL https://newsherb.info/?tid=729685
IP52.0.22.24
ASNAS14618 Amazon.com, Inc.
Location United States
Report completed2018-12-15 20:04:36 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-12-15 2 ak.imgfarm.com/images/anx/anemone-1.2.7.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 2 reports on IP: 52.0.22.24

Date UQ / IDS / BL URL IP
2018-12-17 01:58:24 +0100
0 - 0 - 1 https://newshuis.info/?tid=729685 52.0.22.24
2018-12-16 14:42:17 +0100
0 - 0 - 1 https://newshuis.info/?tid=729685 52.0.22.24

Last 10 reports on ASN: AS14618 Amazon.com, Inc.

Date UQ / IDS / BL URL IP
2019-02-20 17:44:52 +0100
0 - 0 - 0 https://rebrand.ly/d09719/ 184.73.106.85
2019-02-20 17:41:03 +0100
0 - 1 - 0 en-us.secureconnection.moneytransaction.kb4.i (...) 52.6.9.183
2019-02-20 17:25:26 +0100
0 - 0 - 0 23.20.239.12 23.20.239.12
2019-02-20 17:14:16 +0100
0 - 0 - 2 downloads.securityfocus.com/vulnerabilities/e (...) 52.7.56.121
2019-02-20 17:07:54 +0100
0 - 0 - 0 shareaholic.com 52.20.72.246
2019-02-20 16:52:43 +0100
0 - 0 - 0 www.euclidea.xyz/ 52.5.204.162
2019-02-20 16:20:04 +0100
0 - 0 - 0 hubspotfree.net 52.86.254.86
2019-02-20 16:19:42 +0100
0 - 0 - 0 54.152.54.76 54.152.54.76
2019-02-20 16:13:28 +0100
0 - 0 - 0 logx.optimizely.com 52.20.174.157
2019-02-20 16:01:13 +0100
0 - 3 - 1 nondollarreport.com/wp-content/cache/elb6.exe 54.163.225.136

Last 10 reports on domain: newsherb.info

Date UQ / IDS / BL URL IP
2019-02-11 03:37:41 +0100
0 - 0 - 1 https://newsherb.info/?tid=722803 18.210.69.92
2018-12-23 04:19:41 +0100
0 - 0 - 1 https://newsherb.info/?tid=729685 54.85.244.67
2018-12-20 16:11:45 +0100
0 - 0 - 1 https://newsherb.info/?tid=729685 52.207.129.17
2018-12-19 03:32:12 +0100
0 - 0 - 1 https://newsherb.info/?tid=729685 54.84.51.215
2018-12-18 19:38:04 +0100
0 - 0 - 1 https://newsherb.info/?tid=729685 54.84.51.215
2018-12-18 16:00:11 +0100
0 - 0 - 1 https://newsherb.info/?tid=729685 54.84.51.215
2018-12-17 20:13:27 +0100
0 - 0 - 1 https://newsherb.info/?tid=729685 100.26.83.225
2018-12-15 20:03:52 +0100
0 - 0 - 1 https://newsherb.info/?tid=729685 54.84.51.215
2018-12-15 19:54:29 +0100
0 - 0 - 1 https://newsherb.info/?tid=729685 52.71.147.50
2018-12-15 19:39:34 +0100
0 - 0 - 1 https://newsherb.info/?tid=729685 52.71.147.50


JavaScript

Executed Scripts (6)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 4, repeated: 1) - SHA256: 152e69cf3c8e76c8d8b0aed924ddd1708e4c68624611af33d52c2c2814dd5df9

                                        2018
                                    


HTTP Transactions (22)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.24
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=93173
Date: Sat, 15 Dec 2018 19:04:03 GMT
Etag: "5c13e401-1d7"
Expires: Sun, 16 Dec 2018 20:56:56 GMT
Last-Modified: Fri, 14 Dec 2018 17:10:25 GMT
Server: ECS (lga/1341)
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Id: QEKp6svHNk9ntQmFsVIDUFfl8nGcUQci8tdVP7iVxeFkxlnv7tKrVw==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    a203096872183a329fa4b8518b010213
Sha1:   a6f605e676fb520611078583df136501de80eeb6
Sha256: d99ae4a270b1f6d080affd1a96e5aad1e9bd33a6f67bb8b3778ffc6003c0d841
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         143.204.51.149
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Sat, 15 Dec 2018 19:04:03 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.7/2018-03-28)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0771.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 11Youyup8XjFOGrWtAmOUnq_dezCZqjaEjrc7m6HDz_jSNjy4sxK6A==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    3bffcdab3ad482e65a094a9b2691eb7a
Sha1:   ba5803f014957a32166561b36929c36eccacf158
Sha256: 3e5d5c4c1ca812013530e4aab10f0e5420d370ce2272db80708d584b83835df4
                                        
                                            GET /?tid=729685 HTTP/1.1 
Host: newsherb.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         52.71.147.50
HTTP/1.1 302 Found
Content-Type: text/plain
                                        
Date: Sat, 15 Dec 2018 19:04:04 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
Pragma: no-cache
P3P: CP="NID DSP ALL COR"
Set-Cookie: csu=fb493007-4c4f-4ed5-9ace-00410d80c8f6 fv=rjk9qdUErdg9qcEFqjn9pjaEqTn9vdw=; Expires=Sun, 15 Dec 2019 19:04:04 GMT; Max-Age=31536000; Domain=.newsherb.info; Path=/; Version=1
Location: https://permanyabbot.club/THJMZEK?tag_id=729685&sub_id1=&sub_id2=7021356656404700820&cookie_id=fb493007-4c4f-4ed5-9ace-00410d80c8f6&lp=loading&tb=redirect&allb=redirect&ob=redirect&href=https%3A%2F%2Fnewsherb.info%2F%3Ftid%3D716852%26noocp%3D1&hop=7


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.24
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=152781
Date: Sat, 15 Dec 2018 19:04:04 GMT
Etag: "5c14f635-1d7"
Expires: Mon, 17 Dec 2018 13:30:25 GMT
Last-Modified: Sat, 15 Dec 2018 12:40:21 GMT
Server: ECS (lga/1343)
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Id: JDYhB6zUmgKbEJcx9-iNg2KdUA_XrmV7zsgeEIlWc0d-sEywqnQhqQ==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    10b93df259543fbcfa74b40065e7bd32
Sha1:   c3974d0a5143e184ac2bc9c4dd3c582d0f3fdeff
Sha256: 352a19922a331b5d361be57ffef17997c49f9ebc85c8ee553ae3cd13667d728e
                                        
                                            GET /THJMZEK?tag_id=729685&sub_id1=&sub_id2=7021356656404700820&cookie_id=fb493007-4c4f-4ed5-9ace-00410d80c8f6&lp=loading&tb=redirect&allb=redirect&ob=redirect&href=https%3A%2F%2Fnewsherb.info%2F%3Ftid%3D716852%26noocp%3D1&hop=7 HTTP/1.1 
Host: permanyabbot.club
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.234.151.129
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Sat, 15 Dec 2018 19:04:04 GMT
Content-Length: 28864
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST
Access-Control-Allow-Headers: X-Requested-With,content-type
Etag: W/"70c0-wLnKY8BMMP28NGifVlS8uxVdeKw"


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   28864
Md5:    54d03d313ffad8dbafde93e309f74c3c
Sha1:   c0b9ca63c04c30fdbc34689f5654bcbb155d78ac
Sha256: b2e711c8554c7c84a660d2648e8226cae52ec46a4cc53754984533ed9c5abdc9
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: permanyabbot.club
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.234.151.129
HTTP/1.1 204 No Content
                                        
Date: Sat, 15 Dec 2018 19:04:05 GMT
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST
Access-Control-Allow-Headers: X-Requested-With,content-type


--- Additional Info ---
                                        
                                            GET /?tid=716852&noocp=1 HTTP/1.1 
Host: newsherb.info
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://permanyabbot.club/THJMZEK?tag_id=729685&sub_id1=&sub_id2=7021356656404700820&cookie_id=fb493007-4c4f-4ed5-9ace-00410d80c8f6&lp=loading&tb=redirect&allb=redirect&ob=redirect&href=https%3A%2F%2Fnewsherb.info%2F%3Ftid%3D716852%26noocp%3D1&hop=7
Cookie: csu=fb493007-4c4f-4ed5-9ace-00410d80c8f6; fv=rjk9qdUErdg9qcEFqjn9pjaEqTn9vdw=

                                         
                                         52.71.147.50
HTTP/1.1 302 Found
Content-Type: text/plain
                                        
Date: Sat, 15 Dec 2018 19:04:05 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
Pragma: no-cache
P3P: CP="NID DSP ALL COR"
Set-Cookie: fv=rjk9qdUErdg9qcEFqjn9pjaEqTn8vds=; Expires=Sun, 15 Dec 2019 19:04:05 GMT; Max-Age=31536000; Domain=.newsherb.info; Path=/; Version=1
Location: http://www.cryptopricesearch.com/index.jhtml?partner=^CXO^xdm367&s2=370919971238794343&s1=716852


--- Additional Info ---
                                        
                                            GET /index.jhtml?partner=^CXO^xdm367&s2=370919971238794343&s1=716852 HTTP/1.1 
Host: www.cryptopricesearch.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         74.113.235.138
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Date: Sat, 15 Dec 2018 19:04:05 GMT
Server: Apache-Coyote/1.1
X-Frame-Options: DENY
P3P: CP='CURa ADMa DEVa PSA PSD OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
Expires: -1
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Language: en-NO
Set-Cookie: userSegment=""; Domain=.cryptopricesearch.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ sessionData="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"; Version=1; Domain=.cryptopricesearch.com; Path=/ org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en_NO; Path=/ anx="xracl=CXOxdm367&xckoid=&xgds=&lv=1544900645260&adfi=&xad=&xmvte=&xmt=&add=&adc=&xit=&adn=&adm=&xlang=en&adp=&xmvtv=&xmvtt=&adt=&xose=&xckid=&xrm=&xrp=%5ECXO%5Exdm378%5ETTAB02%5Eno&xica=xdm367&xrs=716852&xrt=TTAB02&adap=&xnt=dsl&xriad=&xft=&nv=1&fv=1544900645260&xuer=1&ob=-&xrct=CPA&oc=-&od=none&xgc=false&sn=dubprdsndlbfe72.dub.jabodo.com&ok=-&om=-&xrco=CXO&xrkw=&xrca=xdm378&op=-&xrcc=no&xsee=&os=-&surveyUrl=&xkw=&xtc=&g=-&xct=&xiad=&xbkw=&tbGuid=6260DD7D-844B-4466-9D1F-61CF0CBB50E9&xg=&xeid=lnmlojblhgkocmjkkbjcpnjagmmlabng&xh=9850&xi=MANUAL_OTHER&xtp=vhigh&adti=&xn=&xp=vicinio&xtt=template_responsive&xpp=%5ECXO%5Exdm378%5ETTAB02%5Eno&xs=56264&xt=rxs&xpt=&xu=&xcid=2e11abda812843709607f029c74c9dcc"; Version=1; Domain=.cryptopricesearch.com; Max-Age=7776000; Expires=Fri, 15-Mar-2019 19:04:05 GMT; Path=/ ltm-1d=rd119o00000000000000000000ffff0a904c62o80; expires=Sun, 16-Dec-2018 19:03:31 GMT; path=/
Via: 1.1 www.mapsgalaxy.com
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   28852
Md5:    a2fdbdc3bae7966f77a593ee9c3f8734
Sha1:   5ce51c5fa1abee1f03d8712aca9bc88fd9e89c9b
Sha256: 05726b305e7c4ab0fcf1b375eccff8dcebc14f9f6373b73f8ac1064b26c5337e
                                        
                                            GET /unsupported/myway/index.html?p2=%5ECXO%5Exdm378%5ETTAB02%5Eno&n=784A172A&ptb=6260DD7D-844B-4466-9D1F-61CF0CBB50E9&si=716852&rd=unsupported HTTP/1.1 
Host: hp.myway.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.cryptopricesearch.com/index.jhtml?partner=^CXO^xdm367&s2=370919971238794343&s1=716852

                                         
                                         88.221.72.187
HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
                                        
Server: Apache
X-Application-Context: application:prod:8081
Last-Modified: Fri, 14 Apr 2017 18:45:10 GMT
Etag: "be996e-fa3-54d24d74f1980"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1344
Expires: Sat, 15 Dec 2018 19:04:05 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Sat, 15 Dec 2018 19:04:05 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1344
Md5:    0a8720b569c0a80ca5111c4890d13f8a
Sha1:   4ce16481d2b0ca5ea50f34fd890fa5c7a567fac5
Sha256: 3f660794b724c1a26864d177f464247e4a4a3a8bdcb22ea9261e7ad37f4f688c
                                        
                                            GET /images/anx/anemone-1.2.7.js HTTP/1.1 
Host: ak.imgfarm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.cryptopricesearch.com/index.jhtml?partner=^CXO^xdm367&s2=370919971238794343&s1=716852

                                         
                                         88.221.72.187
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: Apache
Last-Modified: Mon, 08 Jul 2013 20:02:48 GMT
Etag: "774114-a236-4e105874e8a00"
Accept-Ranges: bytes
Content-Length: 41526
Cache-Control: max-age=21034
Expires: Sun, 16 Dec 2018 00:54:39 GMT
Date: Sat, 15 Dec 2018 19:04:05 GMT
Connection: keep-alive
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  Lisp/Scheme program text
Size:   41526
Md5:    843306a0d584c6fa394cb0b531456405
Sha1:   14815f83128de371fb1e87f5d24701a1cf2aaa46
Sha256: b61f1dc82835d8bc3b6332443358eb5b9c41a5f4b0672497cdf06ac0a8bbfdfa

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.cryptopricesearch.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: sessionData="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"; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en_NO; anx="xracl=CXOxdm367&xckoid=&xgds=&lv=1544900645260&adfi=&xad=&xmvte=&xmt=&add=&adc=&xit=&adn=&adm=&xlang=en&adp=&xmvtv=&xmvtt=&adt=&xose=&xckid=&xrm=&xrp=%5ECXO%5Exdm378%5ETTAB02%5Eno&xica=xdm367&xrs=716852&xrt=TTAB02&adap=&xnt=dsl&xriad=&xft=&nv=1&fv=1544900645260&xuer=1&ob=-&xrct=CPA&oc=-&od=none&xgc=false&sn=dubprdsndlbfe72.dub.jabodo.com&ok=-&om=-&xrco=CXO&xrkw=&xrca=xdm378&op=-&xrcc=no&xsee=&os=-&surveyUrl=&xkw=&xtc=&g=-&xct=&xiad=&xbkw=&tbGuid=6260DD7D-844B-4466-9D1F-61CF0CBB50E9&xg=&xeid=lnmlojblhgkocmjkkbjcpnjagmmlabng&xh=9850&xi=MANUAL_OTHER&xtp=vhigh&adti=&xn=&xp=vicinio&xtt=template_responsive&xpp=%5ECXO%5Exdm378%5ETTAB02%5Eno&xs=56264&xt=rxs&xpt=&xu=&xcid=2e11abda812843709607f029c74c9dcc"; ltm-1d=rd119o00000000000000000000ffff0a904c62o80

                                         
                                         74.113.235.138
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Sat, 15 Dec 2018 19:04:05 GMT
Server: Apache-Coyote/1.1
Accept-Ranges: bytes
Etag: W/"894-1544544580000"
Last-Modified: Tue, 11 Dec 2018 16:09:40 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Via: 1.1 www.mapsgalaxy.com
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   241
Md5:    10af52d67c177dd2fc61524bd07cabca
Sha1:   37d1ecf0cff3542641d0fa2ad6f06319d32649ca
Sha256: c74f5beb2d7aa15817ecab15f17291f37764c39d3d68e387dd127890ccccd2c2
                                        
                                            GET /unsupported/myway/styles/8c8a8c1a.app.css HTTP/1.1 
Host: hp.myway.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5ECXO%5Exdm378%5ETTAB02%5Eno&n=784A172A&ptb=6260DD7D-844B-4466-9D1F-61CF0CBB50E9&si=716852&rd=unsupported

                                         
                                         88.221.72.187
HTTP/1.1 200 OK
Content-Type: text/css;charset=utf-8
                                        
Server: Apache
X-Application-Context: application:prod:8081
Last-Modified: Fri, 14 Apr 2017 18:45:11 GMT
Etag: "be9970-11e4-54d24d75e5bc0"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1320
Expires: Sat, 15 Dec 2018 19:04:06 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Sat, 15 Dec 2018 19:04:06 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1320
Md5:    7067cf74d0b71cfeda9d97e5b1328a79
Sha1:   69d49b1e5e419c6d7637d5adac909e8e92510ba3
Sha256: 0389282e062e4f42e1e84459a75d5f031eed83dacbd79a76c091fb3d2fc2280c
                                        
                                            GET /unsupported/myway/scripts/4e6ca3d5.app.js HTTP/1.1 
Host: hp.myway.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5ECXO%5Exdm378%5ETTAB02%5Eno&n=784A172A&ptb=6260DD7D-844B-4466-9D1F-61CF0CBB50E9&si=716852&rd=unsupported

                                         
                                         88.221.72.187
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=utf-8
                                        
Server: Apache
X-Application-Context: application:prod:8081
Last-Modified: Fri, 14 Apr 2017 18:45:11 GMT
Etag: "be9972-6270-54d24d75e5bc0"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7790
Expires: Sat, 15 Dec 2018 19:04:06 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Sat, 15 Dec 2018 19:04:06 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7790
Md5:    2b0a47209489eec4a89768b918681246
Sha1:   99bde60b9744ce9923df49aa6aea9d6a53ea121c
Sha256: 512e5061cc4f163411e69f52438fbd3fb94a1526d4f07952b92911978a778a8d
                                        
                                            GET /images/vicinio/chrome/spent/images/favicon/__COBRAND__.ico HTTP/1.1 
Host: akz.imgfarm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.123.124.215
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Last-Modified: Mon, 13 Jun 2016 04:00:00 GMT
Etag: "a109e3-47e-ec1b7000"
Accept-Ranges: bytes
Content-Length: 1150
Cache-Control: max-age=236249714
Expires: Thu, 11 Jun 2026 03:59:20 GMT
Date: Sat, 15 Dec 2018 19:04:06 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1150
Md5:    cc9becf51e20cba5c8a0bd600e1dc588
Sha1:   81c38090b7e51988227a63afe82816d0273f9749
Sha256: 65018cf229b50ef80816ffd62865b7a1c71ad9f1ce9a7c0ae898b87b8ed683d9
                                        
                                            GET /images/webtooltab/search/google.png HTTP/1.1 
Host: akz.imgfarm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5ECXO%5Exdm378%5ETTAB02%5Eno&n=784A172A&ptb=6260DD7D-844B-4466-9D1F-61CF0CBB50E9&si=716852&rd=unsupported

                                         
                                         104.123.124.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Tue, 01 Dec 2015 15:54:44 GMT
Etag: "3d2bcd-d8a-2d233900"
Accept-Ranges: bytes
Content-Length: 3466
Cache-Control: max-age=219444636
Expires: Fri, 28 Nov 2025 15:54:42 GMT
Date: Sat, 15 Dec 2018 19:04:06 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 97 x 33, 8-bit/color RGBA, non-interlaced
Size:   3466
Md5:    953f6562d9c856bbe67943b342ef3812
Sha1:   423d9ef5d57b4c8b318103b2bbc4e5be8359800a
Sha256: 089f2a53201e9ec91ba795d1c4a785b4c61b819702761436396d3380ff7015c4
                                        
                                            GET /images/webtooltab/assets/myway.png HTTP/1.1 
Host: akz.imgfarm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5ECXO%5Exdm378%5ETTAB02%5Eno&n=784A172A&ptb=6260DD7D-844B-4466-9D1F-61CF0CBB50E9&si=716852&rd=unsupported

                                         
                                         104.123.124.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Wed, 27 Apr 2016 19:14:11 GMT
Etag: "97207b-1a43-36f0a6c0"
Accept-Ranges: bytes
Content-Length: 6723
Cache-Control: max-age=232243928
Expires: Sat, 25 Apr 2026 19:16:14 GMT
Date: Sat, 15 Dec 2018 19:04:06 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 156 x 36, 8-bit/color RGBA, non-interlaced
Size:   6723
Md5:    522f52df77af55b88144d6d1a8056df8
Sha1:   77cd1afa0f072b70de215b5b0fab562fbc9a98f3
Sha256: 2a3c8d7f7c0e9957c0a615558839d535423fbd7b9babd5edf46a828d211aac7c
                                        
                                            GET /images/webtooltab/chiclets/firefoxinstall.png HTTP/1.1 
Host: akz.imgfarm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5ECXO%5Exdm378%5ETTAB02%5Eno&n=784A172A&ptb=6260DD7D-844B-4466-9D1F-61CF0CBB50E9&si=716852&rd=unsupported

                                         
                                         104.123.124.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 06 Apr 2017 14:16:14 GMT
Etag: "6f62a8-df1-26cc4780"
Accept-Ranges: bytes
Content-Length: 3569
Cache-Control: max-age=261947453
Expires: Sun, 04 Apr 2027 14:14:59 GMT
Date: Sat, 15 Dec 2018 19:04:06 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 43 x 43, 8-bit/color RGBA, non-interlaced
Size:   3569
Md5:    755905933d8c299437cdad1f07cd3f3f
Sha1:   ff71686d372c5e29cafda3ea1aff551b20405947
Sha256: 23adfa67077f73c4b3ad84cdf45423f3b3cb9b3f8a0d1e4d1f2516ce3a264f1f
                                        
                                            GET /images/webtooltab/chiclets/chromeinstall.png HTTP/1.1 
Host: akz.imgfarm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5ECXO%5Exdm378%5ETTAB02%5Eno&n=784A172A&ptb=6260DD7D-844B-4466-9D1F-61CF0CBB50E9&si=716852&rd=unsupported

                                         
                                         104.123.124.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Thu, 06 Apr 2017 14:16:20 GMT
Etag: "6f62a7-d71-2727d500"
Accept-Ranges: bytes
Content-Length: 3441
Cache-Control: max-age=261947694
Expires: Sun, 04 Apr 2027 14:19:00 GMT
Date: Sat, 15 Dec 2018 19:04:06 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 43 x 43, 8-bit/color RGBA, non-interlaced
Size:   3441
Md5:    536faf1a976f41810d17399800ff20d2
Sha1:   1aac76d1a968392c3eedd84ce25c4dda6e8d4a75
Sha256: 85bcdd2eb3d0e03b18242cfd1fff0224c2c60b7b83ddf48221870a9f039e8d51
                                        
                                            GET /anx.gif?anxuu=4C37C1B2-0713-4A93-A7E3-5DACB5DBF809&anxa=WebTooltab&anxv=Wtt-Unsupported-Page-1.0.0&anxd=-&anxsn=&anxu=http%3A%2F%2Fhp.myway.com%2Funsupported%2Fmyway%2Findex.html&anxlv=0&anxrd=www.cryptopricesearch.com&anxrp=index.jhtml&anxrk=-&anxrm=referral&anxrb=-&anxrc=-&anxrs=-&anxsq=2&pageType=tab&anxe=PageView&anxr=593684308 HTTP/1.1 
Host: anx.tb.ask.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5ECXO%5Exdm378%5ETTAB02%5Eno&n=784A172A&ptb=6260DD7D-844B-4466-9D1F-61CF0CBB50E9&si=716852&rd=unsupported

                                         
                                         74.113.233.187
HTTP/1.1 204 No Content
                                        
Server: nginx/1.0.10
Date: Sat, 15 Dec 2018 19:04:06 GMT
Connection: close
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, max-age=0


--- Additional Info ---
                                        
                                            GET /images/webtooltab/assets/logos/%5ECXO%5Exdm378%5ETTAB02%5Eno.png HTTP/1.1 
Host: akz.imgfarm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hp.myway.com/unsupported/myway/index.html?p2=%5ECXO%5Exdm378%5ETTAB02%5Eno&n=784A172A&ptb=6260DD7D-844B-4466-9D1F-61CF0CBB50E9&si=716852&rd=unsupported

                                         
                                         104.123.124.215
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Content-Length: 363
Date: Sat, 15 Dec 2018 19:04:06 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   363
Md5:    579ed9a5b56455431aa59b55d80180f2
Sha1:   ebe53ef9eed0c57bf3440bebb9abf93de994eaa2
Sha256: 9fd60a57d8ded8468387fdfbf3e5469648b3ac6a331bc7e5dc412877ca762ec4
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.cryptopricesearch.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: sessionData="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"; org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en_NO; anx="xracl=CXOxdm367&xckoid=&xgds=&lv=1544900645260&adfi=&xad=&xmvte=&xmt=&add=&adc=&xit=&adn=&adm=&xlang=en&adp=&xmvtv=&xmvtt=&adt=&xose=&xckid=&xrm=&xrp=%5ECXO%5Exdm378%5ETTAB02%5Eno&xica=xdm367&xrs=716852&xrt=TTAB02&adap=&xnt=dsl&xriad=&xft=&nv=1&fv=1544900645260&xuer=1&ob=-&xrct=CPA&oc=-&od=none&xgc=false&sn=dubprdsndlbfe72.dub.jabodo.com&ok=-&om=-&xrco=CXO&xrkw=&xrca=xdm378&op=-&xrcc=no&xsee=&os=-&surveyUrl=&xkw=&xtc=&g=-&xct=&xiad=&xbkw=&tbGuid=6260DD7D-844B-4466-9D1F-61CF0CBB50E9&xg=&xeid=lnmlojblhgkocmjkkbjcpnjagmmlabng&xh=9850&xi=MANUAL_OTHER&xtp=vhigh&adti=&xn=&xp=vicinio&xtt=template_responsive&xpp=%5ECXO%5Exdm378%5ETTAB02%5Eno&xs=56264&xt=rxs&xpt=&xu=&xcid=2e11abda812843709607f029c74c9dcc"; ltm-1d=rd119o00000000000000000000ffff0a904c62o80

                                         
                                         74.113.235.138
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Sat, 15 Dec 2018 19:04:07 GMT
Server: Apache-Coyote/1.1
Accept-Ranges: bytes
Etag: W/"894-1544544580000"
Last-Modified: Tue, 11 Dec 2018 16:09:40 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Via: 1.1 www.mapsgalaxy.com
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   241
Md5:    10af52d67c177dd2fc61524bd07cabca
Sha1:   37d1ecf0cff3542641d0fa2ad6f06319d32649ca
Sha256: c74f5beb2d7aa15817ecab15f17291f37764c39d3d68e387dd127890ccccd2c2
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: permanyabbot.club
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.234.151.129
HTTP/1.1 204 No Content
                                        
Date: Sat, 15 Dec 2018 19:04:08 GMT
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST
Access-Control-Allow-Headers: X-Requested-With,content-type


--- Additional Info ---