Overview

URL wwwapps.ee77red.ru/a009b7e385?l\=68
IP52.202.226.7
ASN
Location United States
Report completed2019-04-23 18:51:54 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 3 reports on IP: 52.202.226.7

Date UQ / IDS / BL URL IP
2019-05-06 16:56:08 +0200
0 - 0 - 0 52.202.226.7 52.202.226.7
2019-05-06 16:14:05 +0200
0 - 0 - 0 52.202.226.7 52.202.226.7
2019-04-29 13:22:28 +0200
0 - 0 - 0 updates.account-maintenance.com/0e9fb51a02?l=14 52.202.226.7

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2019-07-02 09:48:15 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049696316/ 143.204.52.228
2019-07-02 09:48:17 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049696333/ 143.204.52.228
2019-07-02 09:48:03 +0200
0 - 0 - 0 https://www.spreaker.com/show/ver-peru-x-urug (...) 52.51.101.146
2019-07-01 11:37:34 +0200
0 - 0 - 0 https://www.tig-uk.com/tts/nbn4298k3o7tvns8vp (...) 144.217.235.30
2019-07-01 11:37:22 +0200
0 - 0 - 0 https://www.tig-uk.com/tts/nbn4298k3o7tvns8vp (...) 144.217.235.30
2019-07-01 11:36:59 +0200
0 - 0 - 0 https://healthadviserpro.com/power-efficiency (...) 108.179.246.37
2019-07-01 11:35:37 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049291106/ 143.204.52.228
2019-07-01 11:31:59 +0200
0 - 0 - 1 https://fp.bwjf.cn/downInvoice/98d3884f381b46 (...) 39.107.217.15
2019-07-01 11:28:01 +0200
0 - 0 - 0 https://d9.flashtalking.com/d9core 52.211.104.166
2019-07-01 11:27:51 +0200
0 - 0 - 0 https://www.launchora.com/story/123movies-wat (...) 52.38.238.5

No other reports on domain: ee77red.ru



JavaScript

Executed Scripts (4)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (43)


Request Response
                                        
                                            GET /a009b7e385?l\=68 HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         52.5.106.253
HTTP/1.1 410 Gone
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache
Date: Tue, 23 Apr 2019 16:51:22 GMT
Server: ThreatSim-Web-Server
Set-Cookie: EXFILGUID=a009b7e385; path=/ link_clicked_a009b7e385=1; path=/
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0824b7be8359e7be9, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 0af45398-ecdb-4372-afef-6535b903bbb6
X-Runtime: 0.007642
X-XSS-Protection: 1; mode=block
Content-Length: 2525
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   2525
Md5:    f814fe7bb2fc1a25b39eb32184379ec7
Sha1:   9fc939569ef7fccd2a66cde3b8a95eb77b06c303
Sha256: 6c747b0028d1e9877bf05f7f349c2c613fb2e2e27d00c968316136b55dd21936
                                        
                                            GET /ajax/libs/jquery/1.8.0/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68

                                         
                                         216.58.207.234
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 33285
Date: Fri, 19 Apr 2019 15:31:29 GMT
Expires: Sat, 18 Apr 2020 15:31:29 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 350393


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   33285
Md5:    4361e2f35109abc381fac461dbb67c3b
Sha1:   3c944fb27fb8f20a2dc17122534754518ab65b6c
Sha256: 33c6c5d5089f6d20bf7de56cf3937768647b5ab560ca1ebad69f5a528e78c893
                                        
                                            GET /assets/all.js?g=410 HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Access-Control-Allow-Origin: *
Cache-Control: max-age=315360000, public
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:22 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Last-Modified: Fri, 22 Mar 2019 19:40:31 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
Content-Length: 7149
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Fri Mar 03 22:28:11 2017, max compression
Size:   7149
Md5:    7ef5804bf7d4879e5ccdfbd01de4ed2b
Sha1:   81960b78265b10afc3ae75b9434d1377cfa7a17f
Sha256: 8e4b430299b5c01368fb14b0ed378091efe77c9c7e3279092ce29c7a434e0bd2
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
If-Modified-Since: Fri, 03 Oct 2014 00:48:42 GMT

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Tue, 23 Apr 2019 16:04:31 GMT
Expires: Tue, 23 Apr 2019 18:04:31 GMT
Last-Modified: Tue, 19 Feb 2019 19:44:11 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17543
Cache-Control: public, max-age=7200
Age: 2811


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17543
Md5:    a6ce90b9145f18e7a721eb3819daaaab
Sha1:   1c422016bd20a08535d2cc37448c498cf4a0f829
Sha256: 94fe45c14a2ce4fd5f1401c835e5d63111ebf89ff58e03d6b780592f02abf778
                                        
                                            GET /trace?id=undefined&msg=window.tracking_id%20is%20not%20set%2C%20let%27s%20get%20it&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0fec962f0ea1dbdae, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 74393b54-2cb6-4d29-a0ef-92816658c1aa
X-Runtime: 0.003475
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20browser%20%3D%20Firefox&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-07ce83c84ad4ee59e, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 06568931-cf08-45f5-be31-6d8708da0f3c
X-Runtime: 0.001835
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=unknown&msg=get-id%20is%20undefined&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0fec962f0ea1dbdae, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 084f5890-02e5-4eeb-adc1-2f7a08307570
X-Runtime: 0.002703
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=unknown&msg=found%20guid%20in%20last%20part%20of%20location&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0824b7be8359e7be9, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 61fb261e-5ac2-46df-84de-2348330bae24
X-Runtime: 0.002062
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20localStorage%20%3D%20true&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0f895940792bec2a4, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 763b1fd1-65f3-4286-8040-f1092bf7d76a
X-Runtime: 0.002278
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20sessionStorage%20%3D%20true&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0824b7be8359e7be9, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: ad92f2ca-d40c-4068-b148-7404cd70ae81
X-Runtime: 0.002569
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20browser_version%20%3D%203.6&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0fec962f0ea1dbdae, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 41eeacee-6f9c-441b-adb3-97f53f81701c
X-Runtime: 0.002822
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20os%20%3D%20Windows&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-07ce83c84ad4ee59e, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: af20e939-8858-44d0-b3f2-48c40bc86b6f
X-Runtime: 0.002417
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20hasCookies%20%3D%20true&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0fec962f0ea1dbdae, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 95a9d7ff-e10e-4c22-b3bc-c8a2cb4b104e
X-Runtime: 0.002401
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20os_version%20%3D%206.1&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0824b7be8359e7be9, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: bf35ebdb-abfe-47de-b183-ed8ac4a576f4
X-Runtime: 0.002149
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20language%20%3D%20en-US&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0824b7be8359e7be9, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 895060d1-2273-49ac-ab9b-2bc5527835ae
X-Runtime: 0.002540
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20colorDepth%20%3D%2024&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-07ce83c84ad4ee59e, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 848604ba-0b5e-4647-b2cc-7651dafd9b60
X-Runtime: 0.002398
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20width%20%3D%201176&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0f895940792bec2a4, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 4686b424-e70d-4ea1-99c5-4484e0e1231c
X-Runtime: 0.003421
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20height%20%3D%20885&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0fec962f0ea1dbdae, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 875f4d18-6271-44e1-9fc2-f29515829c3c
X-Runtime: 0.002281
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20plugin%20Java%20Deployment%20Toolkit%207.0.50.5&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0824b7be8359e7be9, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: a40b8d6a-3a21-491f-8648-a61abc4808db
X-Runtime: 0.002585
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20plugin%20Mozilla%20Default%20Plug-in&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0f895940792bec2a4, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 28ac2234-a9d1-4266-904a-51378b5ce3ad
X-Runtime: 0.002834
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20plugin%20Java(TM)%20Platform%20SE%207%20U5&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-07ce83c84ad4ee59e, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: ef1a1d67-33f7-4df5-9ddf-858ba0b95268
X-Runtime: 0.002508
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20plugin%20Windows%20Presentation%20Foundation&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0f895940792bec2a4, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 501a018e-93f7-4f09-967e-189cc26b603a
X-Runtime: 0.002677
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20plugin%20Shockwave%20Flash&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0fec962f0ea1dbdae, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 857a6e14-6540-42da-93a6-cfbb93f5a1f3
X-Runtime: 0.002789
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20plugin%20Adobe%20Acrobat&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0fec962f0ea1dbdae, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 83c4723a-898e-4572-be7e-ebcb9c45d2fd
X-Runtime: 0.002179
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /r/collect?v=1&_v=j73&a=719358252&t=pageview&_s=1&dl=http%3A%2F%2Fwwwapps.ee77red.ru%2Fa009b7e385%3Fl%5C%3D68&ul=en-us&de=UTF-8&dt=The%20page%20cannot%20be%20found&sd=24-bit&sr=1176x885&vp=1176x754&je=1&fl=10.0%20r45&_u=IEBAAEQ~&jid=920787708&gjid=765390147&cid=1369229218.1556038284&tid=UA-83403-17&_gid=2069343167.1556038284&_r=1&z=977893405 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 23 Apr 2019 16:51:23 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /log?id=a009b7e385&sev=1&msg=PluginDetect%20is%20not%20defined&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: image/gif; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0824b7be8359e7be9, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: f19128a1-e17c-40a5-9115-b6804f506905
X-Runtime: 0.002591
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20plugin%20Microsoft%C2%AE%20DRM&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0f895940792bec2a4, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 4e027e2d-2942-4be6-9f4f-d952a70ad27d
X-Runtime: 0.002701
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=BrowserDetect%20-%20plugin%20Windows%20Media%20Player%20Plug-in%20Dynamic%20Link%20Library&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0fec962f0ea1dbdae, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: aee2c635-c57c-458a-a885-cf2ec75a2727
X-Runtime: 0.002827
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            POST /secure/browser_post HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Content-Length: 2289
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: image/gif; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-07ce83c84ad4ee59e, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 677fb5b4-3756-4836-abd9-58dba0722bd0
X-Runtime: 0.007002
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=Loading%20Java%20version%20from%20pinlady&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-07ce83c84ad4ee59e, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: b5ef4643-d97f-496e-82cd-87624569754d
X-Runtime: 0.002905
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /log?id=a009b7e385&sev=1&msg=window.plugin_detector%20is%20undefined&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: image/gif; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0f895940792bec2a4, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 8cec3adc-694c-4d5e-b658-cc276594d312
X-Runtime: 0.002789
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=java_version%20%3D%20undefined&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-07ce83c84ad4ee59e, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: ef34ccba-6e2d-4831-b59a-0e5035308ad3
X-Runtime: 0.002402
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=Loading%20flash%20version&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0f895940792bec2a4, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 03dbb12e-d567-4753-872c-d9be08ead0c9
X-Runtime: 0.002816
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=Loading%20Java%20version%20from%20deployJava&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0824b7be8359e7be9, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: c61cf21d-ffd1-4ecf-92ec-37f972af145d
X-Runtime: 0.004733
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /log?id=a009b7e385&sev=1&msg=deployJava%20is%20not%20defined&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: image/gif; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0fec962f0ea1dbdae, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 26a21d01-6962-4869-8576-dcada02548aa
X-Runtime: 0.003663
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=Loading%20quicktime%20version&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0fec962f0ea1dbdae, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: b3cd2697-3a2b-4dab-bebd-13c9139059d8
X-Runtime: 0.003153
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=Loading%20pdf%20version&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:23 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0824b7be8359e7be9, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 569d6320-ea4e-4330-975f-18303c5a70c2
X-Runtime: 0.006307
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=Loading%20RealPlayer%20version&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:24 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-07ce83c84ad4ee59e, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: ba395b28-61a8-42cc-8b6e-f66ddaca5fbb
X-Runtime: 0.002401
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=Loading%20Silverlight%20version&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:24 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0f895940792bec2a4, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 3bb27289-f1aa-4229-b013-178a8e56c4c4
X-Runtime: 0.003031
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=Loading%20WindowsMediaPlayer%20version&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:24 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0fec962f0ea1dbdae, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: 50aed02d-36f3-48f7-9097-8edfd1935dd2
X-Runtime: 0.002675
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=redirect_url%20is%20undefined&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:24 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-0824b7be8359e7be9, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: d9c34de6-0462-43e5-973c-768f39e34872
X-Runtime: 0.002389
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /trace?id=a009b7e385&msg=browser_post_successful&correlation_id=undefined HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://wwwapps.ee77red.ru/a009b7e385?l\=68
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1; _ga=GA1.2.1369229218.1556038284; _gid=GA1.2.2069343167.1556038284; _gat=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 16:51:24 GMT
Server: ThreatSim-Web-Server
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Host-Info: lw-prd-us-i-07ce83c84ad4ee59e, ; a0c03aee1aa6d49b6c4b3a2af8d098409e338a34
X-Request-Id: fc6d9671-3644-4b09-a59f-05217d6240db
X-Runtime: 0.002404
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: wwwapps.ee77red.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: EXFILGUID=a009b7e385; link_clicked_a009b7e385=1; _ga=GA1.2.1369229218.1556038284; _gid=GA1.2.2069343167.1556038284; _gat=1

                                         
                                         52.5.106.253
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Date: Tue, 23 Apr 2019 16:51:24 GMT
Etag: "5c953a2f-0"
Last-Modified: Fri, 22 Mar 2019 19:40:31 GMT
Server: ThreatSim-Web-Server
Content-Length: 0
Connection: keep-alive


--- Additional Info ---