Overview

URLhttp://95.211.181.166
IP95.211.181.166
ASNAS16265 LeaseWeb B.V.
Location Netherlands
Report completed2012-11-11 00:47:49 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-11 00:47:15 93.184.221.245 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 2 reports on IP: 95.211.181.166

Date Alerts / IDS URL IP
2012-11-15 16:24:180 / 1http://uu.canna.to95.211.181.166
2012-11-11 10:40:390 / 1http://95.211.181.16695.211.181.166

Last 6 reports on ASN: AS16265 LeaseWeb B.V.

Date Alerts / IDS URL IP
2013-03-17 17:04:360 / 1http://potload.net/dhzo7vovloqn95.211.225.227
2013-03-17 16:39:540 / 2http://files.avast.com/iavs5x/avast_free_antivirus_setup.exe46.165.210.9
2013-03-17 16:30:250 / 2http://secuurity.net/95.211.172.143
2013-03-17 16:29:050 / 1http://secuurity.net95.211.172.143
2013-03-17 16:24:510 / 1http://bluecreekmalta.com/manager/faq1hbh.php85.17.251.7
2013-03-17 15:20:020 / 2http://seks-onlain.com/62.212.73.196

Last 1 reports on domain: 95.211.181.166

Date Alerts / IDS URL IP
2012-11-11 10:40:390 / 1http://95.211.181.16695.211.181.166



JavaScript

Executed Scripts (25)


Executed Evals (2)

#1 JavaScript::Eval (size: 1609, repeated: 1)

var data = {
    "webmaster_id": "6402",
    "pcTrackingData": {
        "wm": "6402",
        "pr": "XXXX",
        "prd": "",
        "ts": "biglayer",
        "tsd": "",
        "domainID": 316,
        "designID": 431,
        "referer": "http%3A%2F%2F95.211.181.166%2Fcpuser%2Flinks.php"
    },
    "nextCity": null,
    "cityFullName": null,
    "trackingCodes": [],
    "nearCities": [{
        "country_code": "de",
        "city_accented": "Flensburg",
        "region": 10,
        "population": 83758,
        "latitude": 54.7833333,
        "longitude": 9.4333333,
        "linear_distance": "1.08643880301032e-10"
    }, {
        "country_code": "de",
        "city_accented": "Schleswig",
        "region": 10,
        "population": 24995,
        "latitude": 54.5166667,
        "longitude": 9.55,
        "linear_distance": "30.5199166993075"
    }, {
        "country_code": "de",
        "city_accented": "Eckernf\u00f6rde",
        "region": 10,
        "population": 23237,
        "latitude": 54.4666667,
        "longitude": 9.8333333,
        "linear_distance": "43.4122483525858"
    }, {
        "country_code": "de",
        "city_accented": "Husum",
        "region": 10,
        "population": 20960,
        "latitude": 54.4666667,
        "longitude": 9.05,
        "linear_distance": "43.4214043302881"
    }, {
        "country_code": "de",
        "city_accented": "Rendsburg",
        "region": 10,
        "population": 29132,
        "latitude": 54.3,
        "longitude": 9.6666667,
        "linear_distance": "55.6829756761544"
    }, {
        "country_code": "de",
        "city_accented": "Kiel",
        "region": 10,
        "population": 229884,
        "latitude": 54.3333333,
        "longitude": 10.1333333,
        "linear_distance": "67.1151342837871"
    }, {
        "country_code": "de",
        "city_accented": "Heide",
        "region": 10,
        "population": 20671,
        "latitude": 54.2,
        "longitude": 9.1,
        "linear_distance": "68.7994575608173"
    }, {
        "country_code": "de",
        "city_accented": "Neum\u00fcnster",
        "region": 10,
        "population": 80448,
        "latitude": 54.0666667,
        "longitude": 9.9833333,
        "linear_distance": "87.0039159258908"
    }],
    "nextCityData": [],
    "uuid": "0bdeb002-4c7e-42f6-a942-6859130479ec"
};

#2 JavaScript::Eval (size: 2940, repeated: 1)

var response = {
    "OBJECT_TYPE_USERS": 1,
    "OBJECT_TYPE_USER_BLOG_ENTRIES": 2,
    "OBJECT_TYPE_CLUBS": 3,
    "OBJECT_TYPE_CATEGORIES": 4,
    "OBJECT_TYPE_IMAGES": 5,
    "OBJECT_TYPE_CHAT": 6,
    "OBJECT_TYPE_VIDEOCHAT": 7,
    "OBJECT_TYPE_MESSAGE": 8,
    "OBJECT_TYPE_SHORTMESSAGE": 9,
    "OBJECT_TYPE_MEDIA_IMAGE": 10,
    "OBJECT_TYPE_MEDIA_VIDEO": 11,
    "OBJECT_TYPE_MEDIA_GALLERY": 12,
    "OBJECT_TYPE_SENDERCHAT": 13,
    "OBJECT_TYPE_HELPTOPIC": 14,
    "OBJECT_TYPE_HELPITEM": 15,
    "OBJECT_TYPE_USERCONTACT": 16,
    "OBJECT_TYPE_NEWS": 17,
    "OBJECT_TYPE_DISCUSSION_BOARD": 19,
    "OBJECT_TYPE_DISCUSSION_THREAD": 20,
    "OBJECT_TYPE_DISCUSSION_POST": 21,
    "OBJECT_TYPE_USER_GROUP": 22,
    "OBJECT_TYPE_GUESTBOOK_ENTRY": 23,
    "OBJECT_TYPE_USER_BLOG": 24,
    "OBJECT_TYPE_LOCATION": 25,
    "OBJECT_TYPE_CMS_GROUP": 26,
    "OBJECT_TYPE_CMS_ENTRY": 27,
    "OBJECT_TYPE_VOTEING_PROJECT": 28,
    "OBJECT_TYPE_VOTEING_RATES": 29,
    "OBJECT_TYPE_VOTEING_VOTES": 30,
    "OBJECT_TYPE_POLLS": 31,
    "OBJECT_TYPE_TIP": 32,
    "OBJECT_TYPE_PHONECASH_CALL": 33,
    "OBJECT_TYPE_USER_PREFERENCE_TRACKING_PROPERTY": 34,
    "OBJECT_TYPE_EXTERNAL_USER": 1000,
    "OBJECT_TYPE_EXTERNAL_MEDIA": 1001,
    "OBJECT_TYPE_EXTERNAL_CHAT": 1002,
    "required_javascript": [],
    "link_page": "ajax_result",
    "sentdata": [],
    "view": "{\"webmaster_id\":\"6402\",\"pcTrackingData\":{\"wm\":\"6402\",\"pr\":\"XXXX\",\"prd\":\"\",\"ts\":\"biglayer\",\"tsd\":\"\",\"domainID\":316,\"designID\":431,\"referer\":\"http%3A%2F%2F95.211.181.166%2Fcpuser%2Flinks.php\"},\"nextCity\":null,\"cityFullName\":null,\"trackingCodes\":[],\"nearCities\":[{\"country_code\":\"de\",\"city_accented\":\"Flensburg\",\"region\":10,\"population\":83758,\"latitude\":54.7833333,\"longitude\":9.4333333,\"linear_distance\":\"1.08643880301032e-10\"},{\"country_code\":\"de\",\"city_accented\":\"Schleswig\",\"region\":10,\"population\":24995,\"latitude\":54.5166667,\"longitude\":9.55,\"linear_distance\":\"30.5199166993075\"},{\"country_code\":\"de\",\"city_accented\":\"Eckernf\\u00f6rde\",\"region\":10,\"population\":23237,\"latitude\":54.4666667,\"longitude\":9.8333333,\"linear_distance\":\"43.4122483525858\"},{\"country_code\":\"de\",\"city_accented\":\"Husum\",\"region\":10,\"population\":20960,\"latitude\":54.4666667,\"longitude\":9.05,\"linear_distance\":\"43.4214043302881\"},{\"country_code\":\"de\",\"city_accented\":\"Rendsburg\",\"region\":10,\"population\":29132,\"latitude\":54.3,\"longitude\":9.6666667,\"linear_distance\":\"55.6829756761544\"},{\"country_code\":\"de\",\"city_accented\":\"Kiel\",\"region\":10,\"population\":229884,\"latitude\":54.3333333,\"longitude\":10.1333333,\"linear_distance\":\"67.1151342837871\"},{\"country_code\":\"de\",\"city_accented\":\"Heide\",\"region\":10,\"population\":20671,\"latitude\":54.2,\"longitude\":9.1,\"linear_distance\":\"68.7994575608173\"},{\"country_code\":\"de\",\"city_accented\":\"Neum\\u00fcnster\",\"region\":10,\"population\":80448,\"latitude\":54.0666667,\"longitude\":9.9833333,\"linear_distance\":\"87.0039159258908\"}],\"nextCityData\":[],\"uuid\":\"0bdeb002-4c7e-42f6-a942-6859130479ec\"}"
};

Executed Writes (10)

#1 JavaScript::Write (size: 4139, repeated: 1)

<div id="cpDivID55557" style="position: fixed; bottom: 0; right:0;height:200; width:350; ;z-index: 99999999"><div style="font-family: Tahoma,Geneva,sans-serif ;overflow: hidden;  background: url(http://c1.campartner.com/medien/11/5/0/4/bgr.gif) no-repeat;width: 350px; height: 200px; z-index: 9999999;"><a target="_blank" href="http://www.camgeil.com/profile/geileMelissa.html?cpID=100026&cpPID=2917&cpDID=511&cpMID=11504&cpPOID=1000&fsk=16&cpTRK=&type=script" style="border: none; text-decoration: none; color: black;" ><span style="width: 330px; height:22px; float: left; display: block;"></span></a><span style="width: 20px; height: 22px; float: left; cursor: pointer; display: block; " onclick="CPimclose();"></span><span style="width: 75px; height: 180px; float: left; margin: 0px; display: block;"><span style="width: 75px; height: 20px; float: left; margin: 0px; display: block;"></span><a target="_blank" href="http://www.camgeil.com/profile/XtremBabe.html?cpID=100026&cpPID=2917&cpDID=511&cpMID=11504&cpPOID=1000&fsk=16&cpTRK=&type=script" style="border: none; text-decoration: none; color: black; font-size: 10px; float: left; display: block;" ><span style="width: 70px; height: 70px; margin: 0px; padding: 0px; float: left; display: block;"><center><img src="http://c1.campartner.com/assets/102/16/96x138/XtremBabe_96x138.jpg" width="40" height="50" alt="" style="border: none;"/></center><span style="margin: auto auto; display: block;"><center>Xtrem...</center></span></span></a><a target="_blank" href="http://www.camgeil.com/profile/HeisseDina.html?cpID=100026&cpPID=2917&cpDID=511&cpMID=11504&cpPOID=1000&fsk=16&cpTRK=&type=script" style="border: none; text-decoration: none; color: black; font-size: 10px; float: left;" ><span style="width: 70px; height: 70px; margin: 0px; padding: 0px; float: left; display: block;"><center><img src="http://c1.campartner.com/assets/102/16/96x138/HeisseDina_96x138.jpg" width="40" height="50" alt="" style="border: none;"/></center><span style="margin: auto auto; display: block;" ><center>Heiss...</center></span></span></a><span style="width: 80px; height: 20px; float: left; margin: 0px;"></span></span><a target="_blank" href="http://www.camgeil.com/profile/geileMelissa.html?cpID=100026&cpPID=2917&cpDID=511&cpMID=11504&cpPOID=1000&fsk=16&cpTRK=&type=script" style="border: none; text-decoration: none; color: black; cursor: pointer;"><span style="height: 177px; width: 130px; float: left; margin: 2px 0px 0px 8px; overflow: hidden; display: block;"><div id="div-cp1352591234" style="width:120px; height:130px;"><object data="http://c1.campartner.com/medien/11/5/0/4/video_test.swf" width="120" height="130" id="obj-cp1352591234" type="application/x-shockwave-flash" ><param name="movie" value="http://c1.campartner.com/medien/11/5/0/4/video_test.swf" /><param name="src" value="http://c1.campartner.com/medien/11/5/0/4/video_test.swf" /><param name="quality" value="high" /><param name="bgcolor" value="#ffffff" /><param name="play" value="true" /><param name="loop" value="true" /><param name="wmode" value="transparent" /><param name="scale" value="showall" /><param name="menu" value="false" /><param name="devicefont" value="false" /><param name="salign" value="" /><param name="allowScriptAccess" value="always" /><param name="allowFullScreen" value="true" /><param name="flashvars" value="flv=http://c1.campartner.com/assets/102/16/120x127/geileMelissa_120x127.flv" /><a href="http://www.adobe.com/go/getflash">Get Adobe Flash Player</a></object></div></span><span style="height: 176px; width: 130px; float: left; margin: 2px 0px 0px 0px; display: block;"><span style="line-height: normal; padding: 2px 0px; font-size: 11px; margin: 2px 0px 0px 0px; width: 130px; height: 16px; display: block;"><strong style="font-size: 12px;">geileMelissa</strong></span><span style="display: block; float: left; font-size: 11px; height: 108px; width:125px;overflow: hidden;"> (24) Ich bin offen f&uuml;r verschiedene Experimente, liebe wilden Sex, heisse Aktion und auch Schmusen, K&uuml;ssen. Willst du es richtig geniessen und den heissesten H&ouml;hepun...</span></span></a></div></div>

#2 JavaScript::Write (size: 887, repeated: 1)

<div id="maxolutionAdDivpromotion509ee78318fcd" style="position: absolute; width:970px; height:690px; visibility:hidden; z-index:999; opacity: 1;filter: alpha(opacity=100);" ><table><tr><td><table><tr><td align="center" valign="middle"><div style=" text-align:right; MozOpacity:100; opacity:100; filter:alpha(opacity=100);"><a href="javascript:closepromotion509ee78318eb0()"><img style="border-style:none;border-width:0px;" src="http://promotion.partnercash.com/blog/icons/exit.gif"></a></div><iframe border="0" style="border:0;" id="as" src="http://www.amateurseite.com/index.php?main=registration&view=page_minisite_registration_1&wm=6402&pr=XXXX&nt=pc&ts=biglayer&tsd=&prd="scrolling="auto" width="950px" height="650px">                      <p>Ihr Browser unterst&uuml;tzt leider keine iFrames.                                      </iframe></td></tr></table></td></tr></table></div>

#3 JavaScript::Write (size: 103, repeated: 1)

<iframe src="http://www.fidel.to/mobile.php" frameborder="no" border="0" height="0" width="0"></iframe>

#4 JavaScript::Write (size: 152, repeated: 1)

<script language="javascript" src="http://media.campartner.com/index.php?cpID=100026&cpMID=11504&cpDID=511&cpPID=2917&cpPOID=1000&type=script"></script>

#5 JavaScript::Write (size: 183, repeated: 1)

<script language="javascript" src="http://meineserver.com/feed/index.php?wm=6402&pr=XXXX&params=&pg=1&pc=79&sc=3&do=316&ds=431&ab=2&chrset=iso8859&program=13&cfg=layer&cf=1"></script>

#6 JavaScript::Write (size: 86, repeated: 1)

<script language="javascript" src="http://www.topiaserv.net/user/7/code.php"></script>

#7 JavaScript::Write (size: 178, repeated: 1)

<script src="http://cdn1.amateurseite.com/image_data/static/resources/page/js/_pc_tracking_minified_ts22428755.js?start_time=20120823000000&token=4702df8cbe1c4f4983287"></script>

#8 JavaScript::Write (size: 155, repeated: 1)

<script src="http://cdn2.amateurseite.com/image_data/static/js/ajax_minified_ts21916273.js?start_time=20110902000000&token=48f74e97b339eaff231d1"></script>

#9 JavaScript::Write (size: 175, repeated: 1)

<script src="http://cdn4.amateurseite.com/image_data/static/modules/page/js/_guest_ajax_minified_ts22142384.js?start_time=20120206000000&token=4dfd28790fc7cd84eca1c"></script>

#10 JavaScript::Write (size: 179, repeated: 1)

<script src="http://cdn4.amateurseite.com/image_data/static/resources/page/js/jquery_cookie_minified_ts21538687.js?start_time=20101214000000&token=20ac5ddfd9ad568e190a2"></script>


HTTP Transactions (48)


Request Response
GET / HTTP/1.1

Host: 95.211.181.166

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html; charset=ISO-8859-15
Date: Sat, 10 Nov 2012 23:47:13 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Mon, 17 Sep 2012 17:52:33 GMT
Etag: &quot;3007a2-3d1-4c9e97029c48c&quot;
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 512
Connection: close
GET /favicon.ico HTTP/1.1

Host: 95.211.181.166

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: image/x-icon
Date: Sat, 10 Nov 2012 23:47:13 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Tue, 04 Sep 2012 20:46:42 GMT
Etag: &quot;30079f-10be-4c8e65b0c279a&quot;
Accept-Ranges: bytes
Content-Length: 4286
Connection: close
GET /cpuser/links.php HTTP/1.1

Host: 95.211.181.166

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/
HTTP/1.1 200 OK

Content-Type: text/html; charset=ISO-8859-15
Date: Sat, 10 Nov 2012 23:47:13 GMT
Server: Apache/2.2.16 (Debian)
X-Powered-By: PHP/5.3.3-7+squeeze14
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2957
Connection: close
X-Pad: avoid browser bug
GET /cpuser/cp.css HTTP/1.1

Host: 95.211.181.166

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: text/css
Date: Sat, 10 Nov 2012 23:47:13 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Tue, 06 Nov 2012 16:14:25 GMT
Etag: &quot;30038b-29da-4cdd5e54760cd&quot;
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1470
Connection: close
GET /cpuser/charts.js HTTP/1.1

Host: 95.211.181.166

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Sat, 10 Nov 2012 23:47:13 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Fri, 05 Oct 2012 01:46:10 GMT
Etag: &quot;300389-3817-4cb4609499312&quot;
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2821
Connection: close
GET /cpuser/preview.js HTTP/1.1

Host: 95.211.181.166

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Sat, 10 Nov 2012 23:47:13 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Tue, 25 Sep 2012 18:08:44 GMT
Etag: &quot;40006-c37-4ca8a98c6b32c&quot;
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 863
Connection: close
GET /cpuser/links/images/suche.png HTTP/1.1

Host: 95.211.181.166

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: image/png
Date: Sat, 10 Nov 2012 23:47:13 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Tue, 04 Sep 2012 13:48:42 GMT
Etag: &quot;3006cf-568-4c8e0842b09b3&quot;
Accept-Ranges: bytes
Content-Length: 1384
Connection: close
GET /cpuser/links/images/logo.gif HTTP/1.1

Host: 95.211.181.166

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 23:47:13 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Tue, 04 Sep 2012 13:48:38 GMT
Etag: &quot;3006b7-3735-4c8e083ef9a04&quot;
Accept-Ranges: bytes
Content-Length: 14133
Connection: close
X-Pad: avoid browser bug
GET /cpuser/links/images/ordner_pfeil.gif HTTP/1.1

Host: 95.211.181.166

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 23:47:13 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Tue, 04 Sep 2012 13:48:39 GMT
Etag: &quot;3006be-3e6-4c8e083ff90ef&quot;
Accept-Ranges: bytes
Content-Length: 998
Connection: close
GET /cpuser/links/images/link.gif HTTP/1.1

Host: 95.211.181.166

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 23:47:13 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Tue, 04 Sep 2012 13:48:38 GMT
Etag: &quot;3006b6-37a-4c8e083ec61c5&quot;
Accept-Ranges: bytes
Content-Length: 890
Connection: close
GET /cpuser/links/images/admin.gif HTTP/1.1

Host: 95.211.181.166

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 23:47:13 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Tue, 04 Sep 2012 13:48:36 GMT
Etag: &quot;3006a8-3cc-4c8e083cb4519&quot;
Accept-Ranges: bytes
Content-Length: 972
Connection: close
GET /user/7/code.php HTTP/1.1

Host: www.topiaserv.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx/1.2.4
Date: Sat, 10 Nov 2012 23:47:14 GMT
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.3.18-1~dotdeb.0
Content-Encoding: gzip
GET /index.php?cpID=100026&cpMID=11504&cpDID=511&cpPID=2917&cpPOID=1000&type=script HTTP/1.1

Host: media.campartner.com
GET /index.php?cpID=100026&amp;cpMID=11504&amp;cpDID=511&amp;cpPID=2917&amp;cpPOID=1000&amp;type=script HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: text/html
Date: Sat, 10 Nov 2012 23:47:14 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1550
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
GET /mobile.php HTTP/1.1

Host: www.fidel.to

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx/1.2.4
Date: Sat, 10 Nov 2012 23:47:14 GMT
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.3.18-1~dotdeb.0
Content-Encoding: gzip
GET /assets/102/16/96x138/XtremBabe_96x138.jpg HTTP/1.1

Host: c1.campartner.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: image/jpeg
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 10 Nov 2012 23:47:15 GMT
Expires: Sun, 11 Nov 2012 01:47:15 GMT
Last-Modified: Wed, 07 Dec 2011 16:09:16 GMT
Server: ECAcc (arn/46A7)
X-Cache: HIT
Content-Length: 3659
GET /medien/11/5/0/4/bgr.gif HTTP/1.1

Host: c1.campartner.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: image/gif
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 10 Nov 2012 23:47:15 GMT
Expires: Sun, 11 Nov 2012 01:47:15 GMT
Last-Modified: Fri, 10 Feb 2012 15:55:19 GMT
Server: ECAcc (arn/46A9)
X-Cache: HIT
Content-Length: 17315
GET /medien/11/5/0/4/video_test.swf HTTP/1.1

Host: c1.campartner.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 10 Nov 2012 23:47:15 GMT
Expires: Sun, 11 Nov 2012 01:47:15 GMT
Last-Modified: Fri, 10 Feb 2012 15:55:19 GMT
Server: ECAcc (arn/46B0)
X-Cache: HIT
Content-Length: 58175
GET /assets/102/16/96x138/HeisseDina_96x138.jpg HTTP/1.1

Host: c1.campartner.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: image/jpeg
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 10 Nov 2012 23:47:15 GMT
Expires: Sun, 11 Nov 2012 01:47:15 GMT
Last-Modified: Wed, 07 Dec 2011 16:09:15 GMT
Server: nginx
X-Cache: HIT
Content-Length: 4109
GET /feed/index.php?wm=6402&pr=XXXX&params=&pg=1&pc=79&sc=3&do=316&ds=431&ab=2&chrset=iso8859&program=13&cfg=layer&cf=1 HTTP/1.1

Host: meineserver.com
GET /feed/index.php?wm=6402&amp;pr=XXXX&amp;params=&amp;pg=1&amp;pc=79&amp;sc=3&amp;do=316&amp;ds=431&amp;ab=2&amp;chrset=iso8859&amp;program=13&amp;cfg=layer&amp;cf=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: text/html
Date: Sat, 10 Nov 2012 23:47:14 GMT
Server: Apache
Set-Cookie: prlastcall79=1352591234; expires=Mon, 12-Nov-2012 23:47:14 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1528
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
GET /cook.php HTTP/1.1

Host: www.admonkey.cc

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.fidel.to/mobile.php
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx/1.2.4
Date: Sat, 10 Nov 2012 23:47:15 GMT
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.3.18-1~dotdeb.0
Content-Encoding: gzip
GET /blog/icons/exit.gif HTTP/1.1

Host: promotion.partnercash.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 23:47:16 GMT
Server: Apache
Last-Modified: Tue, 08 Apr 2008 06:19:21 GMT
Etag: &quot;d4823e-ee-44a5690a1ac40&quot;
Accept-Ranges: bytes
Content-Length: 238
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
GET /index.php?main=registration&view=page_minisite_registration_1&wm=6402&pr=XXXX&nt=pc&ts=biglayer&tsd=&prd= HTTP/1.1

Host: www.amateurseite.com
GET /index.php?main=registration&amp;view=page_minisite_registration_1&amp;wm=6402&amp;pr=XXXX&amp;nt=pc&amp;ts=biglayer&amp;tsd=&amp;prd= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Set-Cookie: qluid=ab8875eac4ca3128f763555896720b00; path=/; domain=amateurseite.com; Discard=1;
qlwm=6402; path=/; domain=amateurseite.com; Discard=1;
PHPSESSID=54de7823acd758c94850957be4576a85; path=/
lang=en_US; expires=Mon, 10-Dec-2012 23:47:16 GMT
wm=6402; path=/; domain=amateurseite.com
pr=XXXX; path=/; domain=amateurseite.com
ts=biglayer; path=/; domain=amateurseite.com
SERVERID=com-38; path=/
Cache-Control: private, max-age=0, pre-check=0
Last-Modified: Wed, 18 Apr 2012 09:55:48 GMT
X-WP: 14886.6 (www.amateurseite.com) com-38
P3P: CP=&quot;NOI CURa OUR NOR UNI&quot;
Location: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Content-Length: 0
X-Time: 0.0767 sec
Connection: close
Date: Sat, 10 Nov 2012 23:47:16 GMT
Server: LightSpeed
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/xml
Server: Apache
Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT
Etag: &quot;87de33-256-4cd617ed12480&quot;
Accept-Ranges: bytes
Content-Length: 598
Date: Sat, 10 Nov 2012 23:47:17 GMT
Connection: keep-alive
GET /assets/102/16/120x127/geileMelissa_120x127.flv HTTP/1.1

Host: c1.campartner.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: video/x-flv
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 10 Nov 2012 23:47:17 GMT
Expires: Sun, 11 Nov 2012 01:47:17 GMT
Last-Modified: Wed, 07 Dec 2011 16:08:28 GMT
Server: nginx
X-Cache: HIT
Content-Length: 245240
GET /index.php?main=registration&view=page_minisite_registration_1&tsd=&prd=&geoip_cc=NO&geoip_lat=59.916698&geoip_lon=10.750000 HTTP/1.1

Host: www.amateurseite.com
GET /index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402; PHPSESSID=54de7823acd758c94850957be4576a85; lang=en_US; wm=6402; pr=XXXX; ts=biglayer; SERVERID=com-38
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Cache-Control: private, max-age=0, pre-check=0
X-WP: 14898.12 (www.amateurseite.com) com-38
Set-Cookie: lang=en_US; expires=Mon, 10-Dec-2012 23:47:16 GMT wm=deleted; expires=Fri, 11-Nov-2011 23:47:15 GMT; path=/; domain=amateurseite.com pr=deleted; expires=Fri, 11-Nov-2011 23:47:15 GMT; path=/; domain=amateurseite.com ts=deleted; expires=Fri, 11-Nov-2011 23:47:15 GMT; path=/; domain=amateurseite.com ppsk=deleted; expires=Fri, 11-Nov-2011 23:47:15 GMT
P3P: CP=&quot;NOI CURa OUR NOR UNI&quot;
Expires: Sun, 11 Nov 2012 0:52:20 GMT
Etag: 3681972224.146144
Content-Encoding: deflate
Content-Length: 42699
X-Time: 3.6184 sec
Last-Modified: Thu, 08 Nov 2012 16:00:17 GMT
X-Monstercache-Keys: main=G&amp;page=G&amp;view=G&amp;skin=C&amp;ppsk=C&amp;lang=A&amp;geoip_cc=G
X-Monstercache-Timeout: 86400
X-Monstercache-Hash: 66f098dcc781a88878ad0e4654a9a302
Connection: close
Date: Sat, 10 Nov 2012 23:47:20 GMT
Server: LightSpeed
GET /image_data/dynimage/8cef42843166df69c684eb47147ebe9b/c18e97c31fe29ae08fe8e0c523c7069f.gif?start_time=20110509000000&token=807490c92db7d5110df16 HTTP/1.1

Host: cdn4.amateurseite.com
GET /image_data/dynimage/8cef42843166df69c684eb47147ebe9b/c18e97c31fe29ae08fe8e0c523c7069f.gif?start_time=20110509000000&amp;token=807490c92db7d5110df16 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: max-age=2592000
Content-Length: 3183
Expires: Thu, 20 Dec 2012 09:49:22 GMT
Last-Modified: Mon, 09 May 2011 14:46:16 GMT
Accept-Ranges: bytes
Server: Apache
Date: Sat, 10 Nov 2012 23:47:20 GMT
Connection: keep-alive
GET /image_data/static/js/ajax_minified_ts21916273.js?start_time=20110902000000&token=48f74e97b339eaff231d1 HTTP/1.1

Host: cdn2.amateurseite.com
GET /image_data/static/js/ajax_minified_ts21916273.js?start_time=20110902000000&amp;token=48f74e97b339eaff231d1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sat, 10 Nov 2012 23:47:20 GMT
Expires: Mon, 24 Dec 2012 20:10:27 GMT
Last-Modified: Wed, 17 Oct 2012 14:07:33 GMT
Cache-Control: max-age=5184000
Content-Encoding: gzip
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding
Content-Length: 3564
GET /image_data/static/modules/images/images/logo_170x50_dark_ts21750209.png?start_time=20110510000000&token=3f8d0fed4bcafeb6238fa HTTP/1.1

Host: cdn3.amateurseite.com
GET /image_data/static/modules/images/images/logo_170x50_dark_ts21750209.png?start_time=20110510000000&amp;token=3f8d0fed4bcafeb6238fa HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: image/png
Cache-Control: max-age=2592000
Content-Length: 8227
Expires: Wed, 02 Jan 2013 05:08:33 GMT
Last-Modified: Tue, 10 May 2011 07:29:17 GMT
Accept-Ranges: bytes
Server: Apache
Date: Sat, 10 Nov 2012 23:47:20 GMT
Connection: keep-alive
GET /image_data/03/41/71/28.crop-140.214-300-214-300.orig.jpg?start_time=20121031000000&token=2184ca53ccbad14333006 HTTP/1.1

Host: cdn3.amateurseite.com
GET /image_data/03/41/71/28.crop-140.214-300-214-300.orig.jpg?start_time=20121031000000&amp;token=2184ca53ccbad14333006 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: image/jpeg
Cache-Control: max-age=5184000
Content-Length: 8218
Expires: Sun, 30 Dec 2012 12:40:20 GMT
Last-Modified: Thu, 13 Sep 2012 17:59:31 GMT
Accept-Ranges: bytes
Server: Apache
Date: Sat, 10 Nov 2012 23:47:20 GMT
Connection: keep-alive
GET /image_data/03/35/59/82.crop-140.214-300-214-300.orig.jpg?start_time=20120518000000&token=29a5cc48c8c1fbed37206 HTTP/1.1

Host: cdn3.amateurseite.com
GET /image_data/03/35/59/82.crop-140.214-300-214-300.orig.jpg?start_time=20120518000000&amp;token=29a5cc48c8c1fbed37206 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: image/jpeg
Cache-Control: max-age=2592000
Content-Length: 10254
Expires: Thu, 20 Dec 2012 09:49:22 GMT
Last-Modified: Fri, 18 May 2012 07:40:33 GMT
Accept-Ranges: bytes
Server: Apache
Date: Sat, 10 Nov 2012 23:47:20 GMT
Connection: keep-alive
GET /image_data/03/24/05/66.crop-140.214-300-214-300.orig.jpg?start_time=20120526000000&token=29ef0b4755406f9d6fd6c HTTP/1.1

Host: cdn3.amateurseite.com
GET /image_data/03/24/05/66.crop-140.214-300-214-300.orig.jpg?start_time=20120526000000&amp;token=29ef0b4755406f9d6fd6c HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: image/jpeg
Cache-Control: max-age=2592000
Content-Length: 18393
Expires: Thu, 20 Dec 2012 09:49:22 GMT
Last-Modified: Sat, 26 May 2012 13:45:24 GMT
Accept-Ranges: bytes
Server: Apache
Date: Sat, 10 Nov 2012 23:47:20 GMT
Connection: keep-alive
GET /image_data/03/42/90/44.crop-140.214-300-214-300.orig.jpg?start_time=20120918000000&token=26c49351341984fcd141a HTTP/1.1

Host: cdn3.amateurseite.com
GET /image_data/03/42/90/44.crop-140.214-300-214-300.orig.jpg?start_time=20120918000000&amp;token=26c49351341984fcd141a HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: image/jpeg
Cache-Control: max-age=2592000
Content-Length: 19422
Expires: Sat, 01 Dec 2012 21:09:53 GMT
Last-Modified: Tue, 18 Sep 2012 08:33:49 GMT
Accept-Ranges: bytes
Server: Apache
Date: Sat, 10 Nov 2012 23:47:20 GMT
Connection: keep-alive
GET /image_data/03/29/80/22.crop-140.214-300-214-300.orig.jpg?start_time=20120222000000&token=205f3972fd1705a93e731 HTTP/1.1

Host: cdn3.amateurseite.com
GET /image_data/03/29/80/22.crop-140.214-300-214-300.orig.jpg?start_time=20120222000000&amp;token=205f3972fd1705a93e731 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: image/jpeg
Cache-Control: max-age=2592000
Content-Length: 13422
Expires: Mon, 03 Dec 2012 05:08:33 GMT
Last-Modified: Wed, 22 Feb 2012 10:42:14 GMT
Accept-Ranges: bytes
Server: Apache
Date: Sat, 10 Nov 2012 23:47:20 GMT
Connection: keep-alive
GET /image_data/static/resources/page/js/jquery_cookie_minified_ts21538687.js?start_time=20101214000000&token=20ac5ddfd9ad568e190a2 HTTP/1.1

Host: cdn4.amateurseite.com
GET /image_data/static/resources/page/js/jquery_cookie_minified_ts21538687.js?start_time=20101214000000&amp;token=20ac5ddfd9ad568e190a2 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sat, 10 Nov 2012 23:47:21 GMT
Expires: Wed, 02 Jan 2013 05:08:34 GMT
Last-Modified: Thu, 11 Oct 2012 16:58:32 GMT
Cache-Control: max-age=5184000
Content-Encoding: gzip
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding
Content-Length: 411
GET /image_data/03/44/90/32.crop-140.214-300-214-300.orig.jpg?start_time=20121021000000&token=23193884d39e6d853dd0d HTTP/1.1

Host: cdn3.amateurseite.com
GET /image_data/03/44/90/32.crop-140.214-300-214-300.orig.jpg?start_time=20121021000000&amp;token=23193884d39e6d853dd0d HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: image/jpeg
Cache-Control: max-age=5184000
Content-Length: 10115
Expires: Thu, 20 Dec 2012 20:54:03 GMT
Last-Modified: Sun, 21 Oct 2012 11:23:49 GMT
Accept-Ranges: bytes
Server: Apache
Date: Sat, 10 Nov 2012 23:47:21 GMT
Connection: keep-alive
GET /image_data/static/resources/page/js/_pc_tracking_minified_ts22428755.js?start_time=20120823000000&token=4702df8cbe1c4f4983287 HTTP/1.1

Host: cdn1.amateurseite.com
GET /image_data/static/resources/page/js/_pc_tracking_minified_ts22428755.js?start_time=20120823000000&amp;token=4702df8cbe1c4f4983287 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sat, 10 Nov 2012 23:47:21 GMT
Expires: Mon, 31 Dec 2012 20:51:48 GMT
Last-Modified: Wed, 17 Oct 2012 14:07:06 GMT
Cache-Control: max-age=5184000
Content-Encoding: gzip
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding
Content-Length: 1153
GET /image_data/static/modules/page/js/_guest_ajax_minified_ts22142384.js?start_time=20120206000000&token=4dfd28790fc7cd84eca1c HTTP/1.1

Host: cdn4.amateurseite.com
GET /image_data/static/modules/page/js/_guest_ajax_minified_ts22142384.js?start_time=20120206000000&amp;token=4dfd28790fc7cd84eca1c HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sat, 10 Nov 2012 23:47:21 GMT
Expires: Thu, 20 Dec 2012 09:49:22 GMT
Last-Modified: Wed, 17 Oct 2012 14:07:06 GMT
Cache-Control: max-age=5184000
Content-Encoding: gzip
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding
Content-Length: 947
GET /image_data/03/45/78/43.crop-140.214-300-214-300.orig.jpg?start_time=20121107000000&token=23559502742d837dc088e HTTP/1.1

Host: cdn3.amateurseite.com
GET /image_data/03/45/78/43.crop-140.214-300-214-300.orig.jpg?start_time=20121107000000&amp;token=23559502742d837dc088e HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: image/jpeg
Cache-Control: max-age=5184000
Content-Length: 11608
Expires: Sun, 06 Jan 2013 14:25:41 GMT
Last-Modified: Tue, 06 Nov 2012 18:44:59 GMT
Accept-Ranges: bytes
Server: Apache
Date: Sat, 10 Nov 2012 23:47:20 GMT
Connection: keep-alive
GET /image_data/03/43/77/82.crop-140.214-300-214-300.orig.jpg?start_time=20121004000000&token=2f55ba23c8186ff146f91 HTTP/1.1

Host: cdn3.amateurseite.com
GET /image_data/03/43/77/82.crop-140.214-300-214-300.orig.jpg?start_time=20121004000000&amp;token=2f55ba23c8186ff146f91 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: image/jpeg
Cache-Control: max-age=2592000
Content-Length: 11468
Expires: Wed, 02 Jan 2013 09:23:19 GMT
Last-Modified: Thu, 04 Oct 2012 09:13:27 GMT
Accept-Ranges: bytes
Server: Apache
Date: Sat, 10 Nov 2012 23:47:21 GMT
Connection: keep-alive
GET /image_data/03/18/28/24.crop-140.214-300-214-300.orig.jpg?start_time=20110703000000&token=23423f2eea1deac365607 HTTP/1.1

Host: cdn3.amateurseite.com
GET /image_data/03/18/28/24.crop-140.214-300-214-300.orig.jpg?start_time=20110703000000&amp;token=23423f2eea1deac365607 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: image/jpeg
Cache-Control: max-age=2592000
Content-Length: 13717
Expires: Tue, 25 Dec 2012 12:45:00 GMT
Last-Modified: Sun, 03 Jul 2011 13:10:16 GMT
Accept-Ranges: bytes
Server: Apache
Date: Sat, 10 Nov 2012 23:47:21 GMT
Connection: keep-alive
GET /image_data/03/26/78/45.crop-140.214-300-214-300.orig.jpg?start_time=20111228000000&token=219544bb220a78695f074 HTTP/1.1

Host: cdn3.amateurseite.com
GET /image_data/03/26/78/45.crop-140.214-300-214-300.orig.jpg?start_time=20111228000000&amp;token=219544bb220a78695f074 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: image/jpeg
Cache-Control: max-age=2592000
Content-Length: 14385
Expires: Tue, 25 Dec 2012 12:45:00 GMT
Last-Modified: Wed, 28 Dec 2011 09:23:44 GMT
Accept-Ranges: bytes
Server: Apache
Date: Sat, 10 Nov 2012 23:47:21 GMT
Connection: keep-alive
GET /image_data/03/45/83/87.crop-140.214-300-214-300.orig.jpg?start_time=20121107000000&token=23a025d1f4868afb656f8 HTTP/1.1

Host: cdn3.amateurseite.com
GET /image_data/03/45/83/87.crop-140.214-300-214-300.orig.jpg?start_time=20121107000000&amp;token=23a025d1f4868afb656f8 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: image/jpeg
Cache-Control: max-age=5184000
Content-Length: 15197
Expires: Sun, 06 Jan 2013 14:00:59 GMT
Last-Modified: Wed, 07 Nov 2012 10:08:38 GMT
Accept-Ranges: bytes
Server: Apache
Date: Sat, 10 Nov 2012 23:47:21 GMT
Connection: keep-alive
GET /image_data/03/39/77/34.crop-140.214-300-214-300.orig.jpg?start_time=20120720000000&token=26e703093b85c0c76e34d HTTP/1.1

Host: cdn3.amateurseite.com
GET /image_data/03/39/77/34.crop-140.214-300-214-300.orig.jpg?start_time=20120720000000&amp;token=26e703093b85c0c76e34d HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402
HTTP/1.1 200 OK

Content-Type: image/jpeg
Cache-Control: max-age=2592000
Content-Length: 16532
Expires: Thu, 20 Dec 2012 09:58:33 GMT
Last-Modified: Fri, 20 Jul 2012 11:31:11 GMT
Accept-Ranges: bytes
Server: Apache
Date: Sat, 10 Nov 2012 23:47:21 GMT
Connection: keep-alive
POST /index.php?main=page&view=ajax_result&fetchview=guestAjax HTTP/1.1

Host: www.amateurseite.com
POST /index.php?main=page&amp;view=ajax_result&amp;fetchview=guestAjax HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Pragma: no-cache, no-cache
Cache-Control: no-cache, no-cache
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
Content-Length: 0
Cookie: qluid=ab8875eac4ca3128f763555896720b00; qlwm=6402; PHPSESSID=54de7823acd758c94850957be4576a85; lang=en_US; SERVERID=com-38
HTTP/1.1 200 OK

Content-Type: application/json; charset=UTF-8
X-WP: 14582.28 (www.amateurseite.com) com-38
Set-Cookie: lang=en_US; expires=Mon, 10-Dec-2012 23:47:21 GMT
P3P: CP=&quot;NOI CURa OUR NOR UNI&quot;
Expires: Thu Jan 01 1970 01:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Content-Encoding: deflate
Content-Length: 995
X-Time: 0.0494 sec
Last-Modified: Thu, 08 Nov 2012 16:00:17 GMT
Connection: close
Date: Sat, 10 Nov 2012 23:47:21 GMT
Server: LightSpeed
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT
HTTP/1.1 200 OK

Content-Type: text/javascript
Content-Length: 14888
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Sat, 10 Nov 2012 20:33:27 GMT
Expires: Sun, 11 Nov 2012 08:33:27 GMT
Vary: Accept-Encoding
Age: 11634
Cache-Control: max-age=43200, public
Server: GFE/2.0
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=278083479&utmhn=www.amateurseite.com&utmcs=UTF-8&utmsr=1176x885&utmvp=933x633&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=amateurseite.com&utmhid=1202340979&utmr=http%3A%2F%2F95.211.181.166%2Fcpuser%2Flinks.php&utmp=%2Findex.php%3Fmain%3Dregistration%26view%3Dpage_minisite_registration_1%26tsd%3D%26prd%3D%26geoip_cc%3DNO%26geoip_lat%3D59.916698%26geoip_lon%3D10.750000&utmac=UA-7380076-3&utmcc=__utma%3D31451567.2043523455.1352591242.1352591242.1352591242.1%3B%2B__utmz%3D31451567.1352591242.1.1.utmcsr%3D95.211.181.166%7Cutmccn%3D(referral)%7Cutmcmd%3Dreferral%7Cutmcct%3D%2Fcpuser%2Flinks.php%3B&utmu=q~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.7&amp;utms=1&amp;utmn=278083479&amp;utmhn=www.amateurseite.com&amp;utmcs=UTF-8&amp;utmsr=1176x885&amp;utmvp=933x633&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=amateurseite.com&amp;utmhid=1202340979&amp;utmr=http%3A%2F%2F95.211.181.166%2Fcpuser%2Flinks.php&amp;utmp=%2Findex.php%3Fmain%3Dregistration%26view%3Dpage_minisite_registration_1%26tsd%3D%26prd%3D%26geoip_cc%3DNO%26geoip_lat%3D59.916698%26geoip_lon%3D10.750000&amp;utmac=UA-7380076-3&amp;utmcc=__utma%3D31451567.2043523455.1352591242.1352591242.1352591242.1%3B%2B__utmz%3D31451567.1352591242.1.1.utmcsr%3D95.211.181.166%7Cutmccn%3D(referral)%7Cutmcmd%3Dreferral%7Cutmcct%3D%2Fcpuser%2Flinks.php%3B&amp;utmu=q~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.amateurseite.com/index.php?main=registration&amp;view=page_minisite_registration_1&amp;tsd=&amp;prd=&amp;geoip_cc=NO&amp;geoip_lat=59.916698&amp;geoip_lon=10.750000
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Fri, 09 Nov 2012 20:49:55 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 97046
Server: GFE/2.0
GET /gadget/ffsearch.htm HTTP/1.1

Host: canna.to

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://95.211.181.166/cpuser/links.php


GET /adserver/csCore/gClk.blmi.Core.php HTTP/1.1

Host: 87.230.55.113

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.admonkey.cc/cook.php