Overview

URLhttp://wellbeing.sg/
IP116.12.49.167
ASNAS38532 USONYX PTE LTD
Location Singapore
Report completed2012-11-10 01:27:51 CET
StatusLoading report..
urlQuery Alerts Detected script marked as suspicious


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro No alerts detected
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-10 01:27:17 116.12.49.167 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch
2012-11-10 01:27:23 116.12.49.167 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch
2012-11-10 01:27:24 116.12.49.167 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch
2012-11-10 01:27:24 116.12.49.167 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch
2012-11-10 01:27:24 116.12.49.167 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch
2012-11-10 01:27:24 116.12.49.167 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch
2012-11-10 01:27:24 116.12.49.167 urlQuery Client1EXPLOIT-KIT Blackhole landing page with specific structure - prototype catch


Recent reports on same IP/ASN/Domain

Last 1 reports on IP: 116.12.49.167

Date Alerts / IDS URL IP
2012-11-10 01:27:581 / 7http://www.wellbeing.sg/116.12.49.167

Last 6 reports on ASN: AS38532 USONYX PTE LTD

Date Alerts / IDS URL IP
2012-10-18 02:50:550 / 1http://ahava.com.sg/113.197.39.41
2012-10-18 02:51:030 / 1http://www.ahava.com.sg/113.197.39.41
2012-10-19 01:38:420 / 1http://ahava.com.sg/113.197.39.41
2012-10-19 04:41:160 / 1http://voodoo.sg/113.11.250.127
2012-10-19 19:53:500 / 1http://ahava.com.sg/113.197.39.41
2012-10-19 19:53:570 / 1http://www.ahava.com.sg/113.197.39.41



JavaScript

Executed Scripts (17)


Executed Evals (3)

#1 JavaScript::Eval (size: 0, repeated: 1) 

#2 JavaScript::Eval (size: 17, repeated: 2)  
/*@cc_on!@*/
false
#3 JavaScript::Eval (size: 3, repeated: 1776)  - Script marked as suspicious 
j % 2
      
    

    

    
    
    
Executed Writes (0)

    

      
              
    

            

            

            
            
HTTP Transactions (39)

               

  
    

      Request Response
    

  
  
    
 
GET / HTTP/1.1

Host: wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 		 
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=UTF-8

Date: Sat, 10 Nov 2012 00:27:14 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.17, PleskLin
X-Pingback: http://www.wellbeing.sg/xmlrpc.php
Location: http://www.wellbeing.sg/
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20
Connection: close
 
 
GET /ajax/libs/jquery/1.4.4/jquery.min.js?ver=1.4.4 HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
 		 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT
Date: Fri, 09 Nov 2012 20:33:47 GMT
Expires: Sat, 09 Nov 2013 20:33:47 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 27106
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 14010
 
 
GET / HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 		 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Sat, 10 Nov 2012 00:27:16 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.17, PleskLin
X-Pingback: http://www.wellbeing.sg/xmlrpc.php
Set-Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-cache
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4529
Connection: close
 
 
GET /wp-content/themes/TheJewelryShop/css/print.css HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Sat, 10 Nov 2012 00:27:17 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jan 2012 04:53:28 GMT
Etag: "25094c-238-58560200"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 368
Connection: close
 
 
GET /wp-includes/js/l10n.js?ver=20101110 HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Sat, 10 Nov 2012 00:27:17 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jul 2012 07:59:30 GMT
Etag: "250d53-29d-28c2dc80"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 441
Connection: close
 
 
GET /wp-content/themes/TheJewelryShopDark/images/shopping_icon.jpg HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 10 Nov 2012 00:27:17 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jan 2012 04:57:19 GMT
Etag: "2509c2-662-661ac9c0"
Accept-Ranges: bytes
Content-Length: 1634
X-Powered-By: PleskLin
Connection: close
 
 
GET /wp-content/themes/TheJewelryShopDark/style.css HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Sat, 10 Nov 2012 00:27:17 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Fri, 27 Jan 2012 07:56:28 GMT
Etag: "250a38-bde8-d5868300"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 11643
Connection: close
 
 
GET /wp-content/themes/TheJewelryShop/style.css HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/wp-content/themes/TheJewelryShopDark/style.css
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Sat, 10 Nov 2012 00:27:18 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jan 2012 04:45:35 GMT
Etag: "25095f-157-3c2499c0"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 234
Connection: close
 
 
GET /wp-content/themes/TheJewelryShop/css/basic.css HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/wp-content/themes/TheJewelryShop/style.css
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Sat, 10 Nov 2012 00:27:19 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jan 2012 04:53:29 GMT
Etag: "250949-15aa-58654440"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1936
Connection: close
 
 
GET /wp-content/themes/TheJewelryShop/css/reset.css HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/wp-content/themes/TheJewelryShop/style.css
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Sat, 10 Nov 2012 00:27:19 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jan 2012 04:53:29 GMT
Etag: "25094b-4e6-58654440"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 650
Connection: close
 
 
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT
 		 
HTTP/1.1 200 OK

Content-Type: text/javascript

Content-Length: 14888
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Fri, 09 Nov 2012 20:33:27 GMT
Expires: Sat, 10 Nov 2012 08:33:27 GMT
Vary: Accept-Encoding
Cache-Control: max-age=43200, public
Age: 14033
Server: GFE/2.0
 
 
GET /embed/4ef1B07HLiM?rel=0 HTTP/1.1

Host: www.youtube.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: VISITOR_INFO1_LIVE=TIoxcizkAQ0; hideBrowserUpgradeBox=True; PREF=fv=10.0.45&f4=4000
 		 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Date: Sat, 10 Nov 2012 00:27:20 GMT
Server: Apache
X-Content-Type-Options: nosniff
Expires: Tue, 27 Apr 1971 19:44:06 EST
Cache-Control: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
 
 
GET /embed/u53iYy48wyI?rel=0 HTTP/1.1

Host: www.youtube.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: VISITOR_INFO1_LIVE=TIoxcizkAQ0; hideBrowserUpgradeBox=True; PREF=fv=10.0.45&f4=4000
 		 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Date: Sat, 10 Nov 2012 00:27:20 GMT
Server: Apache
X-Content-Type-Options: nosniff
Expires: Tue, 27 Apr 1971 19:44:06 EST
Cache-Control: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
 
 
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=2067013856&utmhn=www.wellbeing.sg&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Wellbeing.sg%20%7C%20Singapore%27s%20Online%20Store%20for%20Health%20%26%20Sports%20Supplements&utmhid=1321745872&utmr=-&utmp=%2F&utmac=UA-31473548-1&utmcc=__utma%3D237739782.421441920.1352507240.1352507240.1352507240.1%3B%2B__utmz%3D237739782.1352507240.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=q~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=2067013856&utmhn=www.wellbeing.sg&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Wellbeing.sg%20%7C%20Singapore%27s%20Online%20Store%20for%20Health%20%26%20Sports%20Supplements&utmhid=1321745872&utmr=-&utmp=%2F&utmac=UA-31473548-1&utmcc=__utma%3D237739782.421441920.1352507240.1352507240.1352507240.1%3B%2B__utmz%3D237739782.1352507240.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=q~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
 		 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Fri, 09 Nov 2012 20:33:28 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 14032
Server: GFE/2.0
 
 
GET /yts/img/pixel-vfl3z5WfW.gif HTTP/1.1

Host: s.ytimg.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.youtube.com/embed/4ef1B07HLiM?rel=0
 		 
HTTP/1.1 200 OK

Content-Type: image/gif

Last-Modified: Tue, 16 Oct 2012 23:01:29 GMT
Date: Fri, 09 Nov 2012 20:33:28 GMT
Expires: Sat, 09 Nov 2013 20:33:28 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 43
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 14032
 
 
GET /yts/cssbin/www-embed-vflflJV0P.css HTTP/1.1

Host: s.ytimg.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.youtube.com/embed/4ef1B07HLiM?rel=0
 		 
HTTP/1.1 200 OK

Content-Type: text/css

Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Tue, 06 Nov 2012 19:57:53 GMT
Date: Fri, 09 Nov 2012 20:33:27 GMT
Expires: Sat, 09 Nov 2013 20:33:27 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 28808
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 14033
 
 
GET /yts/jsbin/www-embed_core_module-vflZkW0CI.js HTTP/1.1

Host: s.ytimg.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.youtube.com/embed/4ef1B07HLiM?rel=0
 		 
HTTP/1.1 200 OK

Content-Type: text/javascript

Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Tue, 06 Nov 2012 20:01:53 GMT
Date: Fri, 09 Nov 2012 20:33:29 GMT
Expires: Sat, 09 Nov 2013 20:33:29 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 44003
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 14031
 
 
GET /yts/imgbin/www-refresh-vflrvDBWB.png HTTP/1.1

Host: s.ytimg.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s.ytimg.com/yts/cssbin/www-embed-vflflJV0P.css
 		 
HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Tue, 06 Nov 2012 19:58:12 GMT
Date: Fri, 09 Nov 2012 20:33:26 GMT
Expires: Sat, 09 Nov 2013 20:33:26 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 40884
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 14034
 
 
GET /wp-content/themes/TheJewelryShopDark/images/sign_me_up.png HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Sat, 10 Nov 2012 00:27:20 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jan 2012 04:57:19 GMT
Etag: "2509b8-94f-661ac9c0"
Accept-Ranges: bytes
Content-Length: 2383
X-Powered-By: PleskLin
Connection: close
 
 
GET /wp-content/uploads/widget_2col_bassetts-smlbanner-460x122.jpg HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 10 Nov 2012 00:27:20 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Fri, 10 Feb 2012 01:19:56 GMT
Etag: "250a52-3388-ed30a700"
Accept-Ranges: bytes
Content-Length: 13192
X-Powered-By: PleskLin
Connection: close
 
 
GET /yts/swfbin/watch_as3-vflry7sRc.swf HTTP/1.1

Host: s.ytimg.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.youtube.com/embed/4ef1B07HLiM?rel=0
 		 
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash

Last-Modified: Thu, 08 Nov 2012 16:50:30 GMT
Date: Fri, 09 Nov 2012 20:33:27 GMT
Expires: Sat, 09 Nov 2013 20:33:27 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 279966
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 14034
 
 
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 		 
HTTP/1.1 200 OK

Content-Type: text/xml

Server: Apache
Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT
Etag: "87de33-256-4cd617ed12480"
Accept-Ranges: bytes
Content-Length: 598
Date: Sat, 10 Nov 2012 00:27:22 GMT
Connection: keep-alive
 
 
GET /crossdomain.xml HTTP/1.1

Host: i1.ytimg.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 		 
HTTP/1.1 200 OK

Content-Type: text/x-cross-domain-policy

Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Thu, 09 Feb 2012 23:54:11 GMT
Date: Fri, 09 Nov 2012 20:33:27 GMT
Expires: Sat, 10 Nov 2012 02:33:27 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 97
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=21600
Age: 14035
 
 
GET /crossdomain.xml HTTP/1.1

Host: i2.ytimg.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 		 
HTTP/1.1 200 OK

Content-Type: text/x-cross-domain-policy

Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Thu, 09 Feb 2012 23:54:11 GMT
Date: Fri, 09 Nov 2012 20:33:29 GMT
Expires: Sat, 10 Nov 2012 02:33:29 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 97
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=21600
Age: 14033
 
 
GET /vi/4ef1B07HLiM/hqdefault.jpg HTTP/1.1

Host: i1.ytimg.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 		 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 10 Nov 2012 00:27:23 GMT
Expires: Sat, 10 Nov 2012 06:27:23 GMT
Cache-Control: public, max-age=21600
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 9979
X-XSS-Protection: 1; mode=block
 
 
GET /vi/u53iYy48wyI/hqdefault.jpg HTTP/1.1

Host: i2.ytimg.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 		 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 10 Nov 2012 00:27:23 GMT
Expires: Sat, 10 Nov 2012 06:27:23 GMT
Cache-Control: public, max-age=21600
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 15456
X-XSS-Protection: 1; mode=block
 
 
GET /wp-content/uploads/spatone.jpg HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 10 Nov 2012 00:27:20 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jan 2012 04:40:56 GMT
Etag: "250a81-25e2d-2b836600"
Accept-Ranges: bytes
Content-Length: 155181
X-Powered-By: PleskLin
Connection: close
 
 
GET /wp-content/themes/TheJewelryShopDark/js/cufon-yui.js?ver=1.09 HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Sat, 10 Nov 2012 00:27:23 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jul 2012 07:55:01 GMT
Etag: "250a33-48ba-18ba3f40"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 7672
Connection: close
 
 
GET /wp-content/uploads/efamol-epo2.png HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Sat, 10 Nov 2012 00:27:22 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Fri, 10 Feb 2012 01:13:50 GMT
Etag: "250ab4-8c8e-d75fef80"
Accept-Ranges: bytes
Content-Length: 35982
X-Powered-By: PleskLin
Connection: close
 
 
GET /wp-content/themes/TheJewelryShopDark/js/jquery.tools.min.js?ver=1.2.5 HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5; __utma=237739782.421441920.1352507240.1352507240.1352507240.1; __utmb=237739782.1.10.1352507240; __utmc=237739782; __utmz=237739782.1352507240.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
 		 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Sat, 10 Nov 2012 00:27:23 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jul 2012 07:54:10 GMT
Etag: "250a32-33e2-15b00c80"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 4984
Connection: close
 
 
GET /wp-content/themes/TheJewelryShopDark/js/jquery.nivo.slider.pack.js?ver=2.3 HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5; __utma=237739782.421441920.1352507240.1352507240.1352507240.1; __utmb=237739782.1.10.1352507240; __utmc=237739782; __utmz=237739782.1352507240.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
 		 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Sat, 10 Nov 2012 00:27:24 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jul 2012 07:49:32 GMT
Etag: "250a20-25a7-51e1b00"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 2744
Connection: close
 
 
GET /wp-content/themes/TheJewelryShopDark/js/myjquery.js?ver=1 HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5; __utma=237739782.421441920.1352507240.1352507240.1352507240.1; __utmb=237739782.1.10.1352507240; __utmc=237739782; __utmz=237739782.1352507240.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
 		 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Sat, 10 Nov 2012 00:27:24 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jul 2012 07:50:41 GMT
Etag: "250a25-27a4-93af640"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3388
Connection: close
 
 
GET /wp-content/uploads/supreme-protein.jpg HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 10 Nov 2012 00:27:21 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jan 2012 04:41:27 GMT
Etag: "250adc-3edea-2d5c6bc0"
Accept-Ranges: bytes
Content-Length: 257514
X-Powered-By: PleskLin
Connection: close
 
 
GET /wp-content/themes/TheJewelryShopDark/js/Patua_One_400.font.js?ver=1.02 HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5; __utma=237739782.421441920.1352507240.1352507240.1352507240.1; __utmb=237739782.1.10.1352507240; __utmc=237739782; __utmz=237739782.1352507240.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
 		 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Sat, 10 Nov 2012 00:27:23 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jul 2012 07:52:54 GMT
Etag: "250a30-e368-11286180"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 15768
Connection: close
 
 
GET /wp-content/themes/TheJewelryShopDark/js/jquery.validate.pack.js?ver=1.7 HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5; __utma=237739782.421441920.1352507240.1352507240.1352507240.1; __utmb=237739782.1.10.1352507240; __utmc=237739782; __utmz=237739782.1352507240.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
 		 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Sat, 10 Nov 2012 00:27:24 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jul 2012 07:56:10 GMT
Etag: "250a34-3988-1cd71a80"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 7061
Connection: close
 
 
GET /wp-content/themes/TheJewelryShopDark/images/loading.gif HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/wp-content/themes/TheJewelryShopDark/style.css
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 10 Nov 2012 00:27:25 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jan 2012 04:56:45 GMT
Etag: "2509f9-6c9-6413fd40"
Accept-Ranges: bytes
Content-Length: 1737
X-Powered-By: PleskLin
Connection: close
 
 
GET /wp-content/themes/TheJewelryShopDark/images/favicon.ico HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5; __utma=237739782.421441920.1352507240.1352507240.1352507240.1; __utmb=237739782.1.10.1352507240; __utmc=237739782; __utmz=237739782.1352507240.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
 		 
HTTP/1.1 200 OK

Content-Type: text/plain

Date: Sat, 10 Nov 2012 00:27:25 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jan 2012 04:56:39 GMT
Etag: "250a03-47e-63b86fc0"
Accept-Ranges: bytes
Content-Length: 1150
X-Powered-By: PleskLin
Connection: close
 
 
GET /wp-content/themes/TheJewelryShopDark/images/logo.png HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/wp-content/themes/TheJewelryShopDark/style.css
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Sat, 10 Nov 2012 00:27:25 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jan 2012 04:56:48 GMT
Etag: "2509c5-10cb-6441c400"
Accept-Ranges: bytes
Content-Length: 4299
X-Powered-By: PleskLin
Connection: close
 
 
GET /wp-content/uploads/efamol.jpg HTTP/1.1

Host: www.wellbeing.sg

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.wellbeing.sg/
Cookie: PHPSESSID=sb0qmfsccjeiie3mp0f1pc8vj5
 		 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 10 Nov 2012 00:27:22 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Thu, 19 Jan 2012 04:37:13 GMT
Etag: "250bf4-41770-1e38b040"
Accept-Ranges: bytes
Content-Length: 268144
X-Powered-By: PleskLin
Connection: close