Overview

URLhttp://pnzmnepu.ru/forum/viewtopic.php_t=125.html
IP81.177.139.235
ASNAS8342 OJSC RTComm.RU
Location Russian Federation
Report completed2012-11-10 02:33:38 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-10 02:33:02 urlQuery Client 184.105.178.841ET CNC Zeus/Spyeye/Palevo Tracker Reported CnC Server (group 5)
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 3 reports on IP: 81.177.139.235

Date Alerts / IDS URL IP
2013-01-25 00:03:230 / 1http://pnzmnepu.ru/forum/viewtopic.php_p=47.html81.177.139.235
2013-01-20 04:57:300 / 1http://pnzmnepu.ru/forum/viewtopic.php_t=19.html81.177.139.235
2012-11-06 23:44:020 / 1http://pnzmnepu.ru/forum/viewtopic.php_p=122.html81.177.139.235

Last 6 reports on ASN: AS8342 OJSC RTComm.RU

Date Alerts / IDS URL IP
2013-03-23 14:00:112 / 2http://vitser.ru/archiv-2009/blog81.176.228.3
2013-03-23 13:07:250 / 7http://newkino-film.ru/uzhasy-2011/439-ne-boysya-temnoty-2011.html81.177.22.11
2013-03-23 13:07:232 / 5http://newkino-film.ru/serials/2076-dnevniki-vampira-4-sezon-2.html81.177.22.11
2013-03-23 12:59:361 / 9http://newkino-film.ru/cartoons-2011/391-madagaskar-3-2012.html81.177.22.11
2013-03-23 12:41:330 / 5http://www.tuningru.ru/toyota-harrier-acu10w.html81.177.139.63
2013-03-23 12:39:240 / 5http://life-chudo.ru/shop/217.107.219.195

Last 3 reports on domain: pnzmnepu.ru

Date Alerts / IDS URL IP
2013-01-25 00:03:230 / 1http://pnzmnepu.ru/forum/viewtopic.php_p=47.html81.177.139.235
2013-01-20 04:57:300 / 1http://pnzmnepu.ru/forum/viewtopic.php_t=19.html81.177.139.235
2012-11-06 23:44:020 / 1http://pnzmnepu.ru/forum/viewtopic.php_p=122.html81.177.139.235



JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 182, repeated: 1) 

</td><td>&nbsp;</td><td valign="top" nowrap="nowrap"><div style="position:relative"><div style="position:absolute"></div><div style="position:absolute;left:3px;top:-1px"></div></div>


HTTP Transactions (26)


Request Response 
GET /forum/viewtopic.php_t=125.html HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Sat, 10 Nov 2012 01:32:24 GMT
Transfer-Encoding: chunked
Connection: close
Server: Jino.ru/mod_pizza
GET /forum/templates/greenpar/images/lang_english/reply.gif HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 10 Nov 2012 01:32:24 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 08 Jul 2011 07:37:38 GMT
Etag: &quot;14e2b77-68b-4a789e862f480&quot;
Accept-Ranges: bytes
Content-Length: 1675
GET /forum/templates/greenpar/images/icon_minipost.gif HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 10 Nov 2012 01:32:24 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 08 Jul 2011 07:37:38 GMT
Etag: &quot;14c6b2d-7a-4a789e862f480&quot;
Accept-Ranges: bytes
Content-Length: 122
GET /forum/templates/greenpar/images/lang_english/post.gif HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 10 Nov 2012 01:32:24 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 08 Jul 2011 07:23:22 GMT
Etag: &quot;14e2b76-670-4a789b55d6e80&quot;
Accept-Ranges: bytes
Content-Length: 1648
GET /forum/templates/greenpar/images/lang_english/icon_quote.gif HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 10 Nov 2012 01:32:24 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 08 Jul 2011 07:37:46 GMT
Etag: &quot;14e2b73-31a-4a789e8dd0680&quot;
Accept-Ranges: bytes
Content-Length: 794
GET /forum/templates/greenpar/greenpar.css HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Sat, 10 Nov 2012 01:32:24 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 08 Jul 2011 14:22:30 GMT
Etag: &quot;14c6b1d-1a04-4a78f904d7580&quot;
Accept-Ranges: bytes
Content-Length: 6660
GET /forum/templates/greenpar/images/logo.jpg HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 10 Nov 2012 01:32:24 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 08 Jul 2011 06:28:18 GMT
Etag: &quot;14c6b2e-2041-4a788f06e6480&quot;
Accept-Ranges: bytes
Content-Length: 8257
GET /forum/templates/greenpar/images/top_back.jpg HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 10 Nov 2012 01:32:25 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 08 Jul 2011 06:28:16 GMT
Etag: &quot;14c6b30-450-4a788f04fe000&quot;
Accept-Ranges: bytes
Content-Length: 1104
GET /forum/templates/greenpar/images/lang_english/icon_pm.gif HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 10 Nov 2012 01:32:25 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 08 Jul 2011 07:36:30 GMT
Etag: &quot;14e2b71-341-4a789e4555b80&quot;
Accept-Ranges: bytes
Content-Length: 833
GET /forum/templates/greenpar/images/lang_english/icon_profile.gif HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 10 Nov 2012 01:32:25 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 08 Jul 2011 07:37:46 GMT
Etag: &quot;14e2b72-321-4a789e8dd0680&quot;
Accept-Ranges: bytes
Content-Length: 801
GET /forum/templates/greenpar/images/lang_english/icon_email.gif HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 10 Nov 2012 01:32:25 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 08 Jul 2011 07:37:34 GMT
Etag: &quot;14e2b6e-334-4a789e825eb80&quot;
Accept-Ranges: bytes
Content-Length: 820
GET /forum/templates/greenpar/images/spacer.gif HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 10 Nov 2012 01:32:25 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 08 Jul 2011 07:37:46 GMT
Etag: &quot;14c6b2f-2b-4a789e8dd0680&quot;
Accept-Ranges: bytes
Content-Length: 43
GET /forum/templates/greenpar/images/cellpic1.gif HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/templates/greenpar/greenpar.css
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 10 Nov 2012 01:32:25 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 08 Jul 2011 06:50:28 GMT
Etag: &quot;14c6b1f-104-4a7893fb49500&quot;
Accept-Ranges: bytes
Content-Length: 260
GET /forum/templates/greenpar/images/cellpic3.gif HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/templates/greenpar/greenpar.css
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 10 Nov 2012 01:32:25 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 08 Jul 2011 06:50:28 GMT
Etag: &quot;14c6b21-19b-4a7893fb49500&quot;
Accept-Ranges: bytes
Content-Length: 411
GET /forum/templates/greenpar/images/footer.jpg HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 10 Nov 2012 01:32:25 GMT
Connection: close
Server: Jino.ru/mod_pizza
Last-Modified: Fri, 08 Jul 2011 06:32:44 GMT
Etag: &quot;14c6b2b-1be-4a78900493b00&quot;
Accept-Ranges: bytes
Content-Length: 446
GET /index.html_click=7FA4A2 HTTP/1.1

Host: rabetis.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Sat, 10 Nov 2012 01:33:02 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.3.16
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1296
Keep-Alive: timeout=5, max=128
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 404 Not Found

Content-Type: text/html

Date: Sat, 10 Nov 2012 01:32:25 GMT
Connection: close
Server: Jino.ru/mod_pizza
Content-Length: 1734
GET /?fp=Jq8boTUirHV0FvRXgQwAtn06CLu2TLq86OHLVxyrKfBlprLm2v4t82dE7hdZMLkSfZelek8cSor5eH2Aj%2FnGug%3D%3D&prvtof=B36MRIXGn2HS2RbsyvT70P0DEoa7hcI4doJ70Brfu3gdwSVgJqHnXpjSYunJuQNs3mTXiVpbwdDjy9qvflw9UHPsFEA9Pl%2BbyH72gOWtzME%3D&poru=x9k%2FGBX%2B8FSORZY1rHobwu41XI5m4ZRtKymK6P3O1LGVBkUxbsdrL1W3KXN1FELzqsM6Ewmuk8Uxd2AxLxxmQA%3D%3D&cifr=1& HTTP/1.1

Host: rabetis.net
GET /?fp=Jq8boTUirHV0FvRXgQwAtn06CLu2TLq86OHLVxyrKfBlprLm2v4t82dE7hdZMLkSfZelek8cSor5eH2Aj%2FnGug%3D%3D&amp;prvtof=B36MRIXGn2HS2RbsyvT70P0DEoa7hcI4doJ70Brfu3gdwSVgJqHnXpjSYunJuQNs3mTXiVpbwdDjy9qvflw9UHPsFEA9Pl%2BbyH72gOWtzME%3D&amp;poru=x9k%2FGBX%2B8FSORZY1rHobwu41XI5m4ZRtKymK6P3O1LGVBkUxbsdrL1W3KXN1FELzqsM6Ewmuk8Uxd2AxLxxmQA%3D%3D&amp;cifr=1&amp; HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rabetis.net/index.html_click=7FA4A2
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Sat, 10 Nov 2012 01:33:02 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.3.16
Set-Cookie: vsid=907vr1000567824124817; expires=Thu, 09-Nov-2017 01:33:02 GMT; path=/; domain=rabetis.net; httponly
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 193
Keep-Alive: timeout=5, max=127
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: rabetis.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: vsid=907vr1000567824124817
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Sat, 10 Nov 2012 01:33:02 GMT
Server: Apache/2.2.3 (Red Hat)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30
Keep-Alive: timeout=5, max=126
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: rabetis.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: vsid=907vr1000567824124817
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Sat, 10 Nov 2012 01:33:05 GMT
Server: Apache/2.2.3 (Red Hat)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30
Keep-Alive: timeout=5, max=125
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: pnzmnepu.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 404 Not Found

Content-Type: text/html

Date: Sat, 10 Nov 2012 01:32:28 GMT
Connection: close
Server: Jino.ru/mod_pizza
Content-Length: 1734
GET /index.html_click=18377000 HTTP/1.1

Host: internetcountercheck.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 


 
 
GET /forum/viewtopic.php_t=125&view=next.html HTTP/1.1

Host: pnzmnepu.ru
GET /forum/viewtopic.php_t=125&amp;view=next.html HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
X-Moz: prefetch
 		 


 
 
GET /img/thumb_f/048.jpg HTTP/1.1

Host: www.stsws.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 		 


 
 
GET /img/aff_morda/088.jpg HTTP/1.1

Host: www.stsws.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html
 		 


 
 
GET /img/thumb_m/075.jpg HTTP/1.1

Host: www.stsws.cn

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pnzmnepu.ru/forum/viewtopic.php_t=125.html