Overview

URLhttp://www.kod4.yoyo.pl/FSGXVVAKJT.html
IP88.198.196.10
ASNAS24940 Hetzner Online AG RZ
Location Germany
Report completed2012-11-07 17:01:27 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-07 17:00:54 88.198.196.10 urlQuery Client3FILEMAGIC Zip archive data
2012-11-07 17:00:55 62.168.44.115 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 88.198.196.10

Date Alerts / IDS URL IP
2013-01-05 13:17:270 / 5http://www.ekozso13.yoyo.pl/index2.html88.198.196.10
2013-01-01 07:57:421 / 1http://www.forum-24host.yoyo.pl/88.198.196.10
2013-01-01 07:11:151 / 1http://www.forum-24host.yoyo.pl/88.198.196.10
2013-01-01 07:11:061 / 1http://forum-24host.yoyo.pl/88.198.196.10
2012-12-07 22:24:571 / 1http://www.keg.yoyo.pl/88.198.196.10
2012-12-02 16:24:061 / 2http://www.pawcixportfolio.yoyo.pl/temps/acomplia-no-prescription/cheapest-acomplia-i (...)88.198.196.10

Last 6 reports on ASN: AS24940 Hetzner Online AG RZ

Date Alerts / IDS URL IP
2013-01-12 18:02:481 / 1http://virtuoso-luxury.info/go.php?sid=1176.9.70.221
2013-01-12 17:58:500 / 2http://ftp.indexdata.dk/pub/yaz/win32/yaz_4.2.48.exe78.47.209.209
2013-01-12 17:45:160 / 1http://img96-imageshack.us/img96/613451234/ToplessAshley.jpg46.4.236.152
2013-01-12 17:39:311 / 4http://tattoo-info.ru/blog/tag/film/176.9.0.75
2013-01-12 17:27:460 / 3http://zxstat105.info/wxc/set2.exe188.40.91.80
2013-01-12 17:11:392 / 0http://curryhouseexpress.com/Rozwoj--wlasne-cztery-katy.html176.9.44.184



JavaScript

Executed Scripts (16)


Executed Evals (16)

#1 JavaScript::Eval (size: 1607, repeated: 1) 

function zzcatfishclose() {
    document.getElementById('zzadfooter').style.display = "none";
    document.getElementById('zzadclose').style.display = "none";
    document.getElementById('zzadcontent').style.display = "none";
    document.getElementById('zzright').style.display = "none"
}
var zzcfHeight = 90;
var zzcfWidth = 728;
document.write('<style type="text/css">#zzadfooter{position:fixed;left:0px; bottom:0px; height:90;width:100%; z-index:99999;}/* For ie 6*/* html #zzadfooter{z-index:99999; position:absolute; top:expression((0-(zzadfooter.offsetHeight)+(document.documentElement.clientHeight ? document.documentElement.clientHeight : document.body.clientHeight)+(ignoreMe = document.documentElement.scrollTop ? document.documentElement.scrollTop : document.body.scrollTop))+"px");}</style>');
document.write('<div id="zzadfooter"><TABLE width=100% border=0 cellspacing=0 cellpadding=0><TR><TD valign="bottom" width=49%></TD><TD><div id="zzadcontent" style="z-index:99998;">' + zztagbase + '</div></TD><TD valign="bottom" width=49%><div id="zzright" style="height:90px"><span id="zzadclose" onclick="zzcatfishclose()" style="float:left;width:60px;height:19px;overflow:hidden;"><TABLE cellpadding="0" cellspacing="0" border="0" style="border:1px solid #CC3333;"><TR><TD style="font-family:Arial,Helvetica,sans-serif; font-size:8pt;font-weight:bold;color:#FFFFFF;cursor:pointer;z-index:999999;background-color:#CC3333;width:60px;height:17px;background-image:url(' + zz_used_domain + '1x1gradient.png);background-repeat:repeat-x;" valign="middle" align="center">' + zflag_stayon_close + '</TD></TR> </TABLE></span></div></TD></TR></TABLE></div>');

#2 JavaScript::Eval (size: 29, repeated: 1) 

typeof(zflag_d1) != "undefined"

#3 JavaScript::Eval (size: 29, repeated: 1) 

typeof(zflag_d2) != "undefined"

#4 JavaScript::Eval (size: 29, repeated: 1) 

typeof(zflag_d3) != "undefined"

#5 JavaScript::Eval (size: 29, repeated: 1) 

typeof(zflag_d4) != "undefined"

#6 JavaScript::Eval (size: 29, repeated: 1) 

typeof(zflag_d5) != "undefined"

#7 JavaScript::Eval (size: 29, repeated: 1) 

typeof(zflag_d6) != "undefined"

#8 JavaScript::Eval (size: 29, repeated: 1) 

typeof(zflag_d7) != "undefined"

#9 JavaScript::Eval (size: 29, repeated: 1) 

typeof(zflag_d8) != "undefined"

#10 JavaScript::Eval (size: 29, repeated: 1) 

typeof(zflag_d9) != "undefined"

#11 JavaScript::Eval (size: 29, repeated: 1) 

typeof(zflag_da) != "undefined"

#12 JavaScript::Eval (size: 29, repeated: 1) 

typeof(zflag_db) != "undefined"

#13 JavaScript::Eval (size: 29, repeated: 1) 

typeof(zflag_dc) != "undefined"

#14 JavaScript::Eval (size: 29, repeated: 1) 

typeof(zflag_dd) != "undefined"

#15 JavaScript::Eval (size: 29, repeated: 1) 

typeof(zflag_de) != "undefined"

#16 JavaScript::Eval (size: 29, repeated: 1) 

typeof(zflag_df) != "undefined"

Executed Writes (6)

#1 JavaScript::Write (size: 272, repeated: 1) 

<SCRIPT language='JavaScript'>
var zflag_nid='1070'; var zflag_cid='884'; var zflag_sid='438'; var zflag_width='1'; var zflag_height='1'; var zflag_sz='16'; var zflag_charset='utf-8'; 
</SCRIPT>
<SCRIPT language='JavaScript' src='http://d2.zedo.com/jsc/d2/fo.js'></SCRIPT>

#2 JavaScript::Write (size: 1175, repeated: 1) 

<div id="zzadfooter"><TABLE width=100% border=0 cellspacing=0 cellpadding=0><TR><TD valign="bottom" width=49%></TD><TD><div id="zzadcontent" style="z-index:99998;"><IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=728 HEIGHT=90 SRC='http://ad.z5x.net/st?ad_type=iframe&ad_size=728x90&section=3271156&pub_redirect=http://yads.zedo.com/ads2/c%3Fa=1251390%3Bn=1070%3Bx=4096%3Bc=1070000884%2C1070000884%3Bg=124%3Bi=0%3B1=5%3B2=1%3Btg=1352302489%3Bv=1000002%3Bs=438%3Bg=124%3Bm=0%3Bw=0%3Bi=0%3Bu=unknown%3Bk='></IFRAME></div></TD><TD valign="bottom" width=49%><div id="zzright" style="height:90px"><span id="zzadclose" onclick="zzcatfishclose()" style="float:left;width:60px;height:19px;overflow:hidden;"><TABLE cellpadding="0" cellspacing="0" border="0" style="border:1px solid #CC3333;"><TR><TD style="font-family:Arial,Helvetica,sans-serif; font-size:8pt;font-weight:bold;color:#FFFFFF;cursor:pointer;z-index:999999;background-color:#CC3333;width:60px;height:17px;background-image:url(http://c2.zedo.com/jsc/images/1x1gradient.png);background-repeat:repeat-x;" valign="middle" align="center">[X] Close</TD></TR> </TABLE></span></div></TD></TR></TABLE></div>

#3 JavaScript::Write (size: 173, repeated: 1) 

<script language="javascript" src="http://d7.zedo.com/bar/v17-004/d2/jsc/fm.js?c=884&a=0&f=&n=1070&r=13&d=16&q=&$=&s=438&zsm=0&z=0.14270286840226598" charset=utf-8></script>

#4 JavaScript::Write (size: 349, repeated: 1) 

<script language=JavaScript>document.write("<SCR"+"IPT language='JavaScript'>\nvar zflag_nid='1070'; var zflag_cid='884'; var zflag_sid='438'; var zflag_width='1'; var zflag_height='1'; var zflag_sz='16'; var zflag_charset='utf-8'; \n<"+"/SCR"+"IPT>\n<SCR"+"IPT language='JavaScript' src='http://d2.zedo.com/jsc/d2/fo.js'><"+"/SCR"+"IPT>");</script>

#5 JavaScript::Write (size: 533, repeated: 1) 

<script type='text/javascript' charset='utf-8' src='http://go.evolutionmedia.bbelements.com/please/showit/0/0/0/1/?typkodu=js&one2n1=/14216/1/1/1/;14216.1.1.1;&one2n2=/14216/1/1/12/;14216.1.1.12;&one2n=2&ubl=undefined&ucc=undefined&ucd=24&uce=true&udx=undefined&udy=undefined&usl=undefined&uje=true&uah=855&uaw=1176&ubd=undefined&uhe=885&ulx=undefined&uly=undefined&use=undefined&uto=-60&uti=1352304053487&uui=undefined&uul=undefined&uwi=1176&bbnautg=3aa0026c23e00635&alttext=0&border=0&bust=0.5820509448500936&target=_top'></script>

#6 JavaScript::Write (size: 455, repeated: 1) 

<style type="text/css">#zzadfooter{position:fixed;left:0px; bottom:0px; height:90;width:100%; z-index:99999;}/* For ie 6*/* html #zzadfooter{z-index:99999; position:absolute; top:expression((0-(zzadfooter.offsetHeight)+(document.documentElement.clientHeight ? document.documentElement.clientHeight : document.body.clientHeight)+(ignoreMe = document.documentElement.scrollTop ? document.documentElement.scrollTop : document.body.scrollTop))+"px");}</style>


HTTP Transactions (21)


Request Response 
GET /FSGXVVAKJT.html HTTP/1.1

Host: www.kod4.yoyo.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html

Server: nginx/0.7.67
Date: Wed, 07 Nov 2012 16:00:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
X-Powered-By: PHP/5.2.0-5.2.0+etch10yoyo0
Set-Cookie: yoyo_ad=1; expires=Wed, 07-Nov-2012 16:00:55 GMT; path=/
Content-Encoding: gzip
GET /urchin.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Content-Length: 6847
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Thu, 01 Nov 2012 01:08:56 GMT
Expires: Thu, 15 Nov 2012 01:08:56 GMT
Vary: Accept-Encoding
Cache-Control: max-age=1209600, public
Age: 571916
Server: GFE/2.0
GET /advertisements/lib.js HTTP/1.1

Host: ad.yoyo.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Server: Apache/2.2.14 (Ubuntu)
Last-Modified: Tue, 27 Jul 2010 12:01:43 GMT
Etag: &quot;3ea5509-6a0-48c5d43bab7c0&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 622
Date: Wed, 07 Nov 2012 16:02:04 GMT
X-Varnish: 474955051
Age: 0
Via: 1.1 varnish
Connection: keep-alive
GET /img/kill.png HTTP/1.1

Host: ad.yoyo.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html
 
HTTP/1.1 200 OK

Content-Type: image/png

Server: Apache/2.2.14 (Ubuntu)
Last-Modified: Thu, 06 May 2010 10:54:38 GMT
Etag: &quot;3ea5710-2a1-485eac4d55780&quot;
Content-Length: 673
Date: Wed, 07 Nov 2012 16:02:04 GMT
X-Varnish: 474955052
Age: 0
Via: 1.1 varnish
Connection: keep-alive
GET /bb/bb_one2n.js HTTP/1.1

Host: go.evolutionmedia.bbelements.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html
 
HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1

Date: Wed, 07 Nov 2012 16:00:52 GMT
Server: Apache
Location: http://bbcdn.go.evolutionmedia.bbelements.com/bb/bb_one2n.r40073.js
Cache-Control: max-age=10800
Expires: Wed, 07 Nov 2012 19:00:52 GMT
Content-Length: 251
Connection: close
GET /xgemius.js HTTP/1.1

Host: arbo.hit.gemius.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Wed, 07 Nov 2012 16:00:52 GMT
Expires: Thu, 08 Nov 2012 04:00:52 GMT
Accept-Ranges: none
Cache-Control: max-age=43200
Last-Modified: Wed, 31 Oct 2012 08:32:16 GMT
Vary: Accept-Encoding
P3P: CP=&quot;NOI DSP COR NID PSAo OUR IND&quot;
Connection: close
Content-Length: 1954
Content-Encoding: gzip
GET /bb/bb_one2n.r40073.js HTTP/1.1

Host: bbcdn.go.evolutionmedia.bbelements.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Server: bbcdn
Date: Wed, 07 Nov 2012 16:00:53 GMT
Connection: close
Last-Modified: Mon, 05 Nov 2012 12:51:23 GMT
Etag: &quot;384006-b972-4cdbef151e8c0&quot;
Cache-Control: max-age=86400
Expires: Thu, 08 Nov 2012 16:00:53 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 13661
Accept-Ranges: bytes
GET /please/showit/0/0/0/1/?typkodu=js&one2n1=/14216/1/1/1/;14216.1.1.1;&one2n2=/14216/1/1/12/;14216.1.1.12;&one2n=2&ubl=undefined&ucc=undefined&ucd=24&uce=true&udx=undefined&udy=undefined&usl=undefined&uje=true&uah=855&uaw=1176&ubd=undefined&uhe=885&ulx=undefined&uly=undefined&use=undefined&uto=-60&uti=1352304053487&uui=undefined&uul=undefined&uwi=1176&bbnautg=3aa0026c23e00635&alttext=0&border=0&bust=0.5820509448500936&target=_top HTTP/1.1

Host: go.evolutionmedia.bbelements.com
GET /please/showit/0/0/0/1/?typkodu=js&amp;one2n1=/14216/1/1/1/;14216.1.1.1;&amp;one2n2=/14216/1/1/12/;14216.1.1.12;&amp;one2n=2&amp;ubl=undefined&amp;ucc=undefined&amp;ucd=24&amp;uce=true&amp;udx=undefined&amp;udy=undefined&amp;usl=undefined&amp;uje=true&amp;uah=855&amp;uaw=1176&amp;ubd=undefined&amp;uhe=885&amp;ulx=undefined&amp;uly=undefined&amp;use=undefined&amp;uto=-60&amp;uti=1352304053487&amp;uui=undefined&amp;uul=undefined&amp;uwi=1176&amp;bbnautg=3aa0026c23e00635&amp;alttext=0&amp;border=0&amp;bust=0.5820509448500936&amp;target=_top HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8

Date: Wed, 07 Nov 2012 16:00:53 GMT
Server: Apache
Expires: -1
Cache-Control: no-cache
P3P: CP=&quot;CUR ADM DEV OUR STP PRE DSP NOI COR NID&quot;
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Set-Cookie: bbnaut=3aa0026c23e00635; path=/; domain=bbelements.com; expires=Thu, 07 Nov 2013 16:00:53 GMT
bm2uu=1355524350_1568757723_0_18_0_0_(null)~*; path=/please/; domain=go.evolutionmedia.bbelements.com; expires=Thu, 07 Nov 2013 16:00:53 GMT
Connection: close
Transfer-Encoding: chunked
GET /jsc/d2/fo.js HTTP/1.1

Host: d2.zedo.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Encoding: gzip
Accept-Ranges: bytes
Cache-Control: max-age=432000
Date: Wed, 07 Nov 2012 16:00:53 GMT
Edge-Control: dca=esi, !no-store
Etag: &quot;1ba156c-1592-4cd7da23793c0&quot;
Expires: Mon, 12 Nov 2012 15:56:24 GMT
Last-Modified: Fri, 02 Nov 2012 06:56:23 GMT
P3P: CP=&quot;NOI DSP COR CURa ADMa DEVa PSDa OUR BUS UNI COM NAV OTC&quot;, policyref=&quot;/w3c/p3p.xml&quot;
Server: ECS (arn/46EC)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 1985
GET /bar/v17-004/d2/jsc/fm.js?c=884&a=0&f=&n=1070&r=13&d=16&q=&$=&s=438&zsm=0&z=0.14270286840226598 HTTP/1.1

Host: d7.zedo.com
GET /bar/v17-004/d2/jsc/fm.js?c=884&amp;a=0&amp;f=&amp;n=1070&amp;r=13&amp;d=16&amp;q=&amp;$=&amp;s=438&amp;zsm=0&amp;z=0.14270286840226598 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html
 
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html

Server: ZEDO 3G
Content-Length: 153
Location: http://d7.zedo.com/bar/v17-004/d2/jsc/fmr.js?c=884&amp;a=0&amp;f=&amp;n=1070&amp;r=13&amp;d=16&amp;q=&amp;$=&amp;s=438&amp;zsm=0&amp;z=0.14270286840226598
Set-Cookie: ZCBC=1;expires=Thu, 08 Nov 2012 05:00:00 GMT;domain=.zedo.com;path=/;
Etag: &quot;2183d05-9868-4cc9ea317fd00&quot;
Vary: Accept-Encoding
P3P: CP=&quot;NOI DSP COR CURa ADMa DEVa PSDa OUR BUS UNI COM NAV OTC&quot;, policyref=&quot;/w3c/p3p.xml&quot;
Cache-Control: max-age=2083049
Expires: Sat, 01 Dec 2012 18:38:22 GMT
Date: Wed, 07 Nov 2012 16:00:53 GMT
Connection: keep-alive
GET /bar/v17-004/d2/jsc/fmr.js?c=884&a=0&f=&n=1070&r=13&d=16&q=&$=&s=438&zsm=0&z=0.14270286840226598 HTTP/1.1

Host: d7.zedo.com
GET /bar/v17-004/d2/jsc/fmr.js?c=884&amp;a=0&amp;f=&amp;n=1070&amp;r=13&amp;d=16&amp;q=&amp;$=&amp;s=438&amp;zsm=0&amp;z=0.14270286840226598 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html
Cookie: ZCBC=1
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Server: ZEDO 3G
Set-Cookie: FFgeo=124;expires=Thu, 07 Nov 2013 16:00:53 GMT;domain=.zedo.com;path=/;
FFcat=1070,884,16;expires=Thu, 08 Nov 2012 05:00:00 GMT;domain=.zedo.com;path=/;
FFad=0;expires=Thu, 08 Nov 2012 05:00:00 GMT;domain=.zedo.com;path=/;
FFMChanCap=3077940B1070,884#1251390|0,1#0,24;expires=Fri, 07 Dec 2012 16:00:54 GMT;path=/;domain=.zedo.com;
ZEDOIDA=tYWaUMtQ-qi0NkojtrdvU7-4~110712;expires=Thu, 07 Nov 2013 16:00:53 GMT;domain=.zedo.com;path=/;
Etag: &quot;16a21cf-965b-4cc9ea3de5a40&quot;
Vary: Accept-Encoding
P3P: CP=&quot;NOI DSP COR CURa ADMa DEVa PSDa OUR BUS UNI COM NAV OTC&quot;, policyref=&quot;/w3c/p3p.xml&quot;
Content-Encoding: gzip
Cache-Control: max-age=70
Expires: Wed, 07 Nov 2012 16:02:04 GMT
Date: Wed, 07 Nov 2012 16:00:54 GMT
Content-Length: 2655
Connection: keep-alive
GET /img/d2/x.gif?x=29&z=0.7105177609576916 HTTP/1.1

Host: d7.zedo.com
GET /img/d2/x.gif?x=29&amp;z=0.7105177609576916 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html
Cookie: ZCBC=1; FFgeo=124; FFcat=1070,884,16; FFad=0; FFMChanCap=3077940B1070,884#1251390|0,1#0,24; ZEDOIDA=tYWaUMtQ-qi0NkojtrdvU7-4~110712
 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: ZEDO 3G
Content-Length: 44
Set-Cookie: ZEDOIDX=29;expires=Fri, 07 Dec 2012 16:00:54 GMT;domain=.zedo.com;path=/;
Etag: &quot;1d42f89-1c4-4bc71943a07c0&quot;
P3P: CP=&quot;NOI DSP COR CURa ADMa DEVa PSDa OUR BUS UNI COM NAV OTC&quot;, policyref=&quot;/w3c/p3p.xml&quot;
Cache-Control: max-age=46438
Expires: Thu, 08 Nov 2012 04:54:52 GMT
Date: Wed, 07 Nov 2012 16:00:54 GMT
Connection: keep-alive
GET /jsc/images/1x1gradient.png HTTP/1.1

Host: c2.zedo.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html
Cookie: ZCBC=1; FFgeo=124; FFcat=1070,884,16; FFad=0; FFMChanCap=3077940B1070,884#1251390|0,1#0,24; ZEDOIDA=tYWaUMtQ-qi0NkojtrdvU7-4~110712
 
HTTP/1.1 200 OK

Content-Type: image/png

Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Wed, 07 Nov 2012 16:00:54 GMT
Etag: &quot;91abcdcc-cc-4ad4508649200&quot;
Expires: Fri, 07 Dec 2012 16:00:54 GMT
Last-Modified: Mon, 19 Sep 2011 05:58:32 GMT
P3P: CP=&quot;NOI DSP COR CURa ADMa DEVa PSDa OUR BUS UNI COM NAV OTC&quot;, policyref=&quot;/w3c/p3p.xml&quot;
Server: ECS (arn/46FA)
X-Cache: HIT
Content-Length: 204
GET /favicon.ico HTTP/1.1

Host: www.kod4.yoyo.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: yoyo_ad=1
 
HTTP/1.1 404 Not Found

Content-Type: text/html

Server: nginx/0.7.67
Date: Wed, 07 Nov 2012 16:00:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Content-Encoding: gzip
GET /Shipping_Label_USPS.zip HTTP/1.1

Host: www.kod4.yoyo.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html
Cookie: yoyo_ad=1
 
HTTP/1.1 200 OK

Content-Type: application/zip

Server: nginx/0.7.67
Date: Wed, 07 Nov 2012 16:00:54 GMT
Content-Length: 50048
Last-Modified: Thu, 01 Nov 2012 04:52:42 GMT
Connection: keep-alive
Keep-Alive: timeout=20
Accept-Ranges: bytes
GET /flash/bbnaut.swf HTTP/1.1

Host: go.eu.bbelements.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html
Cookie: bbnaut=3aa0026c23e00635
 
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash

Date: Wed, 07 Nov 2012 16:00:54 GMT
Server: Apache-Coyote/1.1
Etag: W/&quot;3034-1272966728000&quot;
Last-Modified: Tue, 04 May 2010 09:52:08 GMT
Content-Length: 3034
Cache-Control: max-age=604800
Expires: Wed, 14 Nov 2012 16:00:55 GMT
Connection: close
GET /favicon.ico HTTP/1.1

Host: www.kod4.yoyo.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 404 Not Found

Content-Type: text/html

Server: nginx/0.7.67
Date: Wed, 07 Nov 2012 16:00:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Content-Encoding: gzip
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/xml

Server: Apache
Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT
Etag: &quot;87de33-256-4cd617ed12480&quot;
Accept-Ranges: bytes
Content-Length: 598
Date: Wed, 07 Nov 2012 16:00:55 GMT
Connection: keep-alive
GET /bbnaut/getBbnaut?newBbnaut=acc026047ca73b5d HTTP/1.1

Host: go.eu.bbelements.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html
Cookie: bbnaut=3aa0026c23e00635
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript;charset=UTF-8

Date: Wed, 07 Nov 2012 16:00:55 GMT
Server: Apache-Coyote/1.1
P3P: CP=&quot;CUR ADM DEV OUR STP PRE DSP NOI COR NID&quot;
Content-Language: en-US
Content-Length: 60
Set-Cookie: bbnaut=3aa0026c23e00635; Expires=Thu, 07-Nov-2013 16:00:55 GMT; Path=/
Connection: close
GET /favicon.ico HTTP/1.1

Host: www.kod4.yoyo.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: bbnaut=3aa0026c23e00635
 
HTTP/1.1 404 Not Found

Content-Type: text/html

Server: nginx/0.7.67
Date: Wed, 07 Nov 2012 16:00:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Content-Encoding: gzip
GET /st?ad_type=iframe&ad_size=728x90&section=3271156&pub_redirect=http://yads.zedo.com/ads2/c%3Fa=1251390%3Bn=1070%3Bx=4096%3Bc=1070000884%2C1070000884%3Bg=124%3Bi=0%3B1=5%3B2=1%3Btg=1352302489%3Bv=1000002%3Bs=438%3Bg=124%3Bm=0%3Bw=0%3Bi=0%3Bu=unknown%3Bk= HTTP/1.1

Host: ad.z5x.net
GET /st?ad_type=iframe&amp;ad_size=728x90&amp;section=3271156&amp;pub_redirect=http://yads.zedo.com/ads2/c%3Fa=1251390%3Bn=1070%3Bx=4096%3Bc=1070000884%2C1070000884%3Bg=124%3Bi=0%3B1=5%3B2=1%3Btg=1352302489%3Bv=1000002%3Bs=438%3Bg=124%3Bm=0%3Bw=0%3Bi=0%3Bu=unknown%3Bk= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kod4.yoyo.pl/FSGXVVAKJT.html