Overview

URL crystaldowns.net/
IP45.33.12.50
ASNAS36351 SoftLayer Technologies Inc.
Location United States
Report completed2019-06-07 19:08:36 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-06-07 2 nexus.ensighten.com/statefarm/Bootstrap.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 45.33.12.50

Date UQ / IDS / BL URL IP
2019-06-10 22:39:53 +0200
0 - 0 - 1 redpoloandkhakis.com/ 45.33.12.50
2019-06-10 14:56:55 +0200
0 - 0 - 1 carrieskinnersf.com/ 45.33.12.50
2019-06-10 11:51:04 +0200
0 - 0 - 1 dwightevjones.com/ 45.33.12.50
2019-06-10 07:09:05 +0200
0 - 0 - 1 kaseyismyagent.com/ 45.33.12.50
2019-06-09 19:00:07 +0200
0 - 0 - 1 helenleeinsurance.com/ 45.33.12.50
2019-06-09 13:54:29 +0200
0 - 0 - 1 youragentjake.com/ 45.33.12.50
2019-06-09 12:12:44 +0200
0 - 0 - 1 youragentamy.com/ 45.33.12.50
2019-06-09 11:58:39 +0200
0 - 0 - 1 gregphillipsinsurance.com/ 45.33.12.50
2019-06-09 07:27:18 +0200
0 - 0 - 1 richdierker.com/ 45.33.12.50
2019-06-07 19:03:24 +0200
0 - 0 - 1 jeffmorgan.org/ 45.33.12.50

Last 10 reports on ASN: AS36351 SoftLayer Technologies Inc.

Date UQ / IDS / BL URL IP
2019-07-01 07:04:06 +0200
0 - 0 - 0 freepaypalmoney.micro.blog/ 104.200.22.214
2019-06-30 01:23:43 +0200
0 - 0 - 0 lasvegasrealtyllc.com/agyuslvf/evps3b0s7oc 173.193.64.139
2019-06-30 01:01:37 +0200
0 - 0 - 0 openx.org 208.43.79.58
2019-06-30 00:55:43 +0200
0 - 0 - 0 www.sharehairdressers.com/ 159.8.24.77
2019-06-30 00:52:05 +0200
0 - 0 - 0 www.sharehairdressers.com/ 159.8.24.77
2019-06-30 00:43:05 +0200
0 - 1 - 0 p237431.cdaz.icu/bati/sa?cid=TOTALSPORTEK_ADB (...) 108.168.193.185
2019-06-30 00:40:37 +0200
0 - 0 - 0 https://www.mg-webs.com/ 198.252.100.133
2019-06-30 00:31:20 +0200
0 - 0 - 0 https://rumble.com/v7vfkx-abc.watchmarvels-ag (...) 169.50.62.153
2019-06-30 00:30:00 +0200
0 - 0 - 0 https://rumble.com/v7vfot-putlockerwatch-marv (...) 169.50.62.153
2019-06-27 17:16:37 +0200
0 - 0 - 0 spiritenv.com 75.126.220.28

Last 1 reports on domain: crystaldowns.net

Date UQ / IDS / BL URL IP
2019-02-18 15:30:49 +0100
0 - 0 - 1 crystaldowns.net/ 159.203.100.19


JavaScript

Executed Scripts (1)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (30)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: crystaldowns.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         45.33.12.50
HTTP/1.1 301 Moved Permanently
                                        
Content-Length: 0
Location: https://crystaldowns.net/


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "F823242065BFC2819EAB98772F0D54D95B165D99DBADE7BEC4F81A891A3B66BF"
Last-Modified: Thu, 06 Jun 2019 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=43200
Expires: Sat, 08 Jun 2019 05:08:05 GMT
Date: Fri, 07 Jun 2019 17:08:05 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    4f38617c370a0a215e917f9bf21b1765
Sha1:   23fe32d82b88f4f5c919f604036f2d045dc4458e
Sha256: f823242065bfc2819eab98772f0d54d95b165d99dbade7bec4f81a891a3b66bf
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.26
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Content-Transfer-Encoding: Binary
Last-Modified: Wed, 05 Jun 2019 20:48:41 GMT
Etag: "be20eb2063e0306a89d35ea475610e4c06553c73"
Content-Length: 1396
Cache-Control: public, no-transform, must-revalidate, max-age=5650
Expires: Fri, 07 Jun 2019 18:42:15 GMT
Date: Fri, 07 Jun 2019 17:08:05 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1396
Md5:    9474e9d20a76d943317f6ad5956ce114
Sha1:   be20eb2063e0306a89d35ea475610e4c06553c73
Sha256: 847435cf43748fa7de0d338f8e82c92580f3315d9b72e7e489973a9ba6113383
                                        
                                            GET / HTTP/1.1 
Host: crystaldowns.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         45.33.12.50
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Fri, 07 Jun 2019 17:08:06 GMT
Transfer-Encoding: chunked
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
Vary: origin,accept-encoding
Set-Cookie: si.es.ar.ef=mmurc8UrOcoSqS9wIznnTDsSbyFz2o1JvIyZofFo-oT; HttpOnly; SameSite=Strict; Path=/ snak=eyJkb21haW4iOiJjcnlzdGFsZG93bnMubmV0Iiwic3NsIjp0cnVlLCJiYWNrZW5kcyI6W119; HttpOnly; SameSite=Strict; Path=/
Cache-Control: no-cache
Content-Encoding: gzip
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   47497
Md5:    5607fd78b735d84081eafb64ef65b9fe
Sha1:   6107d1e83786d9cf95fb0e3478039ac5fed9773c
Sha256: 0af164d67261d612b1cb9d1aae392928701f3b8511796147a6c70ef2ef2ecf73
                                        
                                            GET /kash/290x-/i3.ytimg.com/vi/fV_NZ_dACxU/hqdefault.jpg HTTP/1.1 
Host: crystaldowns.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/
Cookie: si.es.ar.ef=mmurc8UrOcoSqS9wIznnTDsSbyFz2o1JvIyZofFo-oT; snak=eyJkb21haW4iOiJjcnlzdGFsZG93bnMubmV0Iiwic3NsIjp0cnVlLCJiYWNrZW5kcyI6W119

                                         
                                         45.33.12.50
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.12.2
Date: Fri, 07 Jun 2019 17:08:08 GMT
Content-Length: 12654
Timing-Allow-Origin: *
Etag: W/"0"
x-content-type-options: nosniff
x-xss-protection: 0
Age: 719
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Sun, 07 Jul 2019 17:08:08 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   12654
Md5:    92c914c0c6970f425fe915a3ddf591c0
Sha1:   6a69b338715e718ffc5f3a4b8698ee4928b7b8d7
Sha256: 16d1b07b5f47d4706deeaaa0fd6f1e8d6ab191fdc920eba80afd5679b190e73b
                                        
                                            GET /kash/290x-/i2.ytimg.com/vi/QyrxvuZe4wk/hqdefault.jpg HTTP/1.1 
Host: crystaldowns.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/
Cookie: si.es.ar.ef=mmurc8UrOcoSqS9wIznnTDsSbyFz2o1JvIyZofFo-oT; snak=eyJkb21haW4iOiJjcnlzdGFsZG93bnMubmV0Iiwic3NsIjp0cnVlLCJiYWNrZW5kcyI6W119

                                         
                                         45.33.12.50
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.12.2
Date: Fri, 07 Jun 2019 17:08:08 GMT
Content-Length: 11457
Timing-Allow-Origin: *
Etag: W/"1535031431"
x-content-type-options: nosniff
x-xss-protection: 0
Age: 46
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Sun, 07 Jul 2019 17:08:08 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   11457
Md5:    89db57ad3c0708f6eee89f1eecdcf1a5
Sha1:   2b2a43f102f2b916b4257ddeea948f9d6947ab87
Sha256: e8d496844742d9ead515e1cb228a399355750009cc6ef43801abf22a771feeb3
                                        
                                            GET /associate-photos/default/W/WFMD81YS000/formalColorFull__Crystal-Downs-State-Farm-Agent.jpg HTTP/1.1 
Host: crystaldowns.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/
Cookie: si.es.ar.ef=mmurc8UrOcoSqS9wIznnTDsSbyFz2o1JvIyZofFo-oT; snak=eyJkb21haW4iOiJjcnlzdGFsZG93bnMubmV0Iiwic3NsIjp0cnVlLCJiYWNrZW5kcyI6W119

                                         
                                         45.33.12.50
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.12.2
Date: Fri, 07 Jun 2019 17:08:08 GMT
Content-Length: 13814
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
Etag: "7f6ba53298d4cf1:0"
Last-Modified: Sat, 20 Sep 2014 06:00:36 GMT
X-Cache: HIT
x-distil-made-Prod: /803165E/ac1.st8fm.com/associate-photos/W/WFMD81YS000/formalColorFull.jpg
X-Frame-Options: DENY
x-path-rewrite-Prod: /803165E/ac1.st8fm.com/associate-photos/W/WFMD81YS000/formalColorFull.jpg
Expires: Sun, 07 Jul 2019 17:08:08 GMT
X-src-uri: https://ac1.st8fm.com/associate-photos/W/WFMD81YS000/formalColorFull.jpg


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   13814
Md5:    db635811a9719a60d013d8b7e29e0a26
Sha1:   498b0c8730383d2fdd3b30a95c2740971405655f
Sha256: 7b30de43948e067ad7258205ead50313eed9695687df1b8cc5ed0aaa5dfc6776
                                        
                                            GET /kash/300x-/static1.st8fm.com/en_US/img/si/750/golf-cart-safety-wide.jpg HTTP/1.1 
Host: crystaldowns.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/
Cookie: si.es.ar.ef=mmurc8UrOcoSqS9wIznnTDsSbyFz2o1JvIyZofFo-oT; snak=eyJkb21haW4iOiJjcnlzdGFsZG93bnMubmV0Iiwic3NsIjp0cnVlLCJiYWNrZW5kcyI6W119

                                         
                                         45.33.12.50
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.12.2
Date: Fri, 07 Jun 2019 17:08:08 GMT
Content-Length: 13975
Access-Control-Allow-Origin: *
Last-Modified: Thu, 25 Apr 2019 19:04:10 GMT
X-Cache: HIT
x-distil-made-Prod: /803165E/static1.st8fm.com/en_US/img/si/750/golf-cart-safety-wide.jpg
X-Frame-Options: DENY
x-path-rewrite-Prod: /803165E/static1.st8fm.com/en_US/img/si/750/golf-cart-safety-wide.jpg
Expires: Sun, 07 Jul 2019 17:08:08 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   13975
Md5:    b02b633a0481398440d299106e35c29b
Sha1:   e9b9044ba3f1496bd621ce79a4380384cd37f73a
Sha256: 57454d807e0235b6f5a5b2645350cdd197605aacebba1a6fcd350964b09c6570
                                        
                                            GET /kash/300x-/static1.st8fm.com/en_US/img/si/750/8-ways-to-start-paying-off-debt-wide.jpg HTTP/1.1 
Host: crystaldowns.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/
Cookie: si.es.ar.ef=mmurc8UrOcoSqS9wIznnTDsSbyFz2o1JvIyZofFo-oT; snak=eyJkb21haW4iOiJjcnlzdGFsZG93bnMubmV0Iiwic3NsIjp0cnVlLCJiYWNrZW5kcyI6W119

                                         
                                         45.33.12.50
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.12.2
Date: Fri, 07 Jun 2019 17:08:08 GMT
Content-Length: 14106
Access-Control-Allow-Origin: *
Last-Modified: Thu, 25 Apr 2019 18:59:40 GMT
X-Cache: HIT
x-distil-made-Prod: /803165E/static1.st8fm.com/en_US/img/si/750/8-ways-to-start-paying-off-debt-wide.jpg
X-Frame-Options: DENY
x-path-rewrite-Prod: /803165E/static1.st8fm.com/en_US/img/si/750/8-ways-to-start-paying-off-debt-wide.jpg
Expires: Sun, 07 Jul 2019 17:08:08 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   14106
Md5:    7f0f620bcda019bba0724f3496b0348e
Sha1:   f152614c033cf7ae5395c1819d9579f19c399468
Sha256: adcc7bb20d6af41ff69cbc38b28135a33f60b63f78c3ff1bffc878bdbe1bec84
                                        
                                            GET /kash/300x-/static1.st8fm.com/en_US/img/si/750/first-car-insurance-policy-what-should-you-know.jpg HTTP/1.1 
Host: crystaldowns.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/
Cookie: si.es.ar.ef=mmurc8UrOcoSqS9wIznnTDsSbyFz2o1JvIyZofFo-oT; snak=eyJkb21haW4iOiJjcnlzdGFsZG93bnMubmV0Iiwic3NsIjp0cnVlLCJiYWNrZW5kcyI6W119

                                         
                                         45.33.12.50
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.12.2
Date: Fri, 07 Jun 2019 17:08:08 GMT
Content-Length: 13686
Access-Control-Allow-Origin: *
Last-Modified: Mon, 20 May 2019 14:56:12 GMT
X-Cache: HIT
x-distil-made-Prod: /803165E/static1.st8fm.com/en_US/img/si/750/first-car-insurance-policy-what-should-you-know.jpg
X-Frame-Options: DENY
x-path-rewrite-Prod: /803165E/static1.st8fm.com/en_US/img/si/750/first-car-insurance-policy-what-should-you-know.jpg
Expires: Sun, 07 Jul 2019 17:08:08 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   13686
Md5:    b451728fa86c8b52ffba90a7e0a12d32
Sha1:   42b94c74b8cf4eab426852dc0559a58e1d696075
Sha256: 4472072517b99cddeaa9e9cc5142bb80f3d78a42e8b9c87d694ec3e0a85d95ba
                                        
                                            GET /kash/290x-/i2.ytimg.com/vi/I-kT8UEpEdQ/hqdefault.jpg HTTP/1.1 
Host: crystaldowns.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/
Cookie: si.es.ar.ef=mmurc8UrOcoSqS9wIznnTDsSbyFz2o1JvIyZofFo-oT; snak=eyJkb21haW4iOiJjcnlzdGFsZG93bnMubmV0Iiwic3NsIjp0cnVlLCJiYWNrZW5kcyI6W119

                                         
                                         45.33.12.50
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.12.2
Date: Fri, 07 Jun 2019 17:08:08 GMT
Content-Length: 13234
Timing-Allow-Origin: *
Etag: W/"0"
x-content-type-options: nosniff
x-xss-protection: 0
Age: 146
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Sun, 07 Jul 2019 17:08:08 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   13234
Md5:    6b336b8ef6cf6394e99e6b65efc7f7c7
Sha1:   4cc130a1eb5ee48881c8f9b91449244917734485
Sha256: c89554ea014d6c1576b86d2b0bbc8baa1931c774814b7c02d67061854928ad72
                                        
                                            GET /kash/290x-/i1.ytimg.com/vi/lYB3swIawo0/hqdefault.jpg HTTP/1.1 
Host: crystaldowns.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/
Cookie: si.es.ar.ef=mmurc8UrOcoSqS9wIznnTDsSbyFz2o1JvIyZofFo-oT; snak=eyJkb21haW4iOiJjcnlzdGFsZG93bnMubmV0Iiwic3NsIjp0cnVlLCJiYWNrZW5kcyI6W119

                                         
                                         45.33.12.50
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.12.2
Date: Fri, 07 Jun 2019 17:08:08 GMT
Content-Length: 8866
Timing-Allow-Origin: *
Etag: W/"0"
x-content-type-options: nosniff
x-xss-protection: 0
Age: 165
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Sun, 07 Jul 2019 17:08:08 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   8866
Md5:    8e389f0e35e846610f265f3ac0e03bcf
Sha1:   ba625397cd70612067c7c471ffb61ff497d32612
Sha256: 91a91f5ad34821b8551e22252b52e19525b02ba750d040823ee617fef47b006b
                                        
                                            GET /en_US/dxl-1x/prod/css/fonts/SFNewsGothic/otf/SFNewsGothic-Reg.otf HTTP/1.1 
Host: static1.st8fm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/
origin: https://crystaldowns.net

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /m1/app/dist/master/0884c46f/fonts/m1-icons.bc4616f0.ttf HTTP/1.1 
Host: mysf.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/
origin: https://crystaldowns.net

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /m1/app/dist/master/0884c46f/fonts/SourceSansPro-Regular.woff HTTP/1.1 
Host: mysf.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/
origin: https://crystaldowns.net

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /m1/app/dist/master/0884c46f/img/favicon.1666d916.png HTTP/1.1 
Host: mysf.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /m1/maps/c/crystaldowns.net/crystaldowns.net-sidebar-md-b20e82d6fb6d94652cf72d2efaf377bb.png HTTP/1.1 
Host: mysf.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /en_US/dxl-1x/prod/css/fonts/SFNewsGothic/woff/SFNewsGothic-Reg.woff HTTP/1.1 
Host: static1.st8fm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/
origin: https://crystaldowns.net

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /m1/app/dist/master/0884c46f/img/favicon.1666d916.png HTTP/1.1 
Host: mysf.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /m1/app/dist/master/0884c46f/img/favicon.1666d916.png HTTP/1.1 
Host: mysf.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /m1/app/dist/master/0884c46f/fonts/m1-icons.a541d7bd.woff HTTP/1.1 
Host: mysf.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/
origin: https://crystaldowns.net

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /m1/app/dist/master/0884c46f/fonts/news_gothic_bold_bt-webfont.woff HTTP/1.1 
Host: mysf.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/
origin: https://crystaldowns.net

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /m1/app/dist/master/0884c46f/img/equal_housing_grey_120px.b4804008.png HTTP/1.1 
Host: mysf.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /m1/app/dist/master/0884c46f/img/play-store.e0892993.png HTTP/1.1 
Host: mysf.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /en_US/dxl-1x/prod/css/fonts/SFNewsGothic/ttf/SFNewsGothic-Reg.ttf HTTP/1.1 
Host: static1.st8fm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/
origin: https://crystaldowns.net

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /statefarm/Bootstrap.js HTTP/1.1 
Host: nexus.ensighten.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /m1/app/dist/master/0884c46f/js/main.b5d5faf7.js HTTP/1.1 
Host: mysf.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /m1/app/dist/master/0884c46f/js/ChangeBtn.aeafe897.js HTTP/1.1 
Host: mysf.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /m1/app/dist/master/0884c46f/js/HomeView.3b509bc4.js HTTP/1.1 
Host: mysf.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /m1/app/dist/master/0884c46f/js/chunk-vendors.11706960.js HTTP/1.1 
Host: mysf.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://crystaldowns.net/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---