Overview

URLhttp://nibis.ni.schule.de/~rskoenig/html/lehrer.html
IP213.23.76.70
ASNAS3209 Vodafone D2 GmbH
Location Germany
Report completed2012-11-06 07:14:45 CET
StatusLoading report..
urlQuery Alerts Detected SutraTDS URL pattern


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-06 07:14:07 urlQuery Client 46.165.206.131ET CURRENT_EVENTS TDS Sutra - cookie is set RULEZ
2012-11-06 07:14:07 urlQuery Client 46.165.206.132ET CURRENT_EVENTS TDS Sutra - request in.cgi
2012-11-06 07:14:07 urlQuery Client 46.165.206.132ET CURRENT_EVENTS TDS Sutra - request in.cgi
2012-11-06 07:14:07 urlQuery Client 46.165.206.132ET CURRENT_EVENTS TDS Sutra - request in.cgi
2012-11-06 07:14:07 46.165.206.13 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - redirect received
2012-11-06 07:14:07 46.165.206.13 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - HTTP header redirecting to a SutraTDS
2012-11-06 07:14:07 46.165.206.13 urlQuery Client1ET CURRENT_EVENTS TDS Sutra - cookie set RULEZ
2012-11-06 07:14:07 urlQuery Client 46.165.206.132ET CURRENT_EVENTS TDS Sutra - request in.cgi
2012-11-06 07:14:07 urlQuery Client 46.165.206.132ET CURRENT_EVENTS TDS Sutra - request in.cgi
2012-11-06 07:14:09 46.165.206.13 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - redirect received
2012-11-06 07:14:09 46.165.206.13 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - redirect received
2012-11-06 07:14:09 46.165.206.13 urlQuery Client2ET CURRENT_EVENTS TDS Sutra - redirect received
2012-11-06 07:14:10 178.63.92.185 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-06 07:14:10 178.63.92.185 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-06 07:14:07 urlQuery Client 46.165.206.131MALWARE-CNC TDS Sutra - request in.cgi
2012-11-06 07:14:07 urlQuery Client 46.165.206.131MALWARE-CNC TDS Sutra - request in.cgi
2012-11-06 07:14:07 urlQuery Client 46.165.206.131MALWARE-CNC TDS Sutra - request in.cgi
2012-11-06 07:14:07 urlQuery Client 46.165.206.131MALWARE-CNC TDS Sutra - request in.cgi
2012-11-06 07:14:07 46.165.206.13 urlQuery Client1MALWARE-CNC TDS Sutra - page redirecting to a SutraTDS
2012-11-06 07:14:07 46.165.206.13 urlQuery Client1MALWARE-CNC TDS Sutra - HTTP header redirecting to a SutraTDS


Recent reports on same IP/ASN/Domain

Last 5 reports on IP: 213.23.76.70

Date Alerts / IDS URL IP
2013-01-31 06:40:161 / 2http://nibis.ni.schule.de/~hos-ho213.23.76.70
2012-11-01 01:30:081 / 0http://www.nibis.de/~duerergs213.23.76.70
2012-10-31 20:50:091 / 13http://nibis.ni.schule.de/~rskoenig/html/kontakt.html213.23.76.70
2012-10-25 22:15:051 / 5http://nibis.ni.schule.de/~rskoenig/html/einschulung2012.html213.23.76.70
2012-10-18 17:25:001 / 4http://nibis.ni.schule.de/~rskoenig/html/dies_und_das.html213.23.76.70

Last 6 reports on ASN: AS3209 Vodafone D2 GmbH

Date Alerts / IDS URL IP
2013-02-13 18:34:441 / 0http://kreiterweb.dyndns.org/178.14.150.17
2013-02-13 11:07:470 / 0http://www.bonprix.co.uk195.50.178.58
2013-02-12 04:09:101 / 1http://home.arcor.de/pohl.ulrich/index.htm151.189.20.30
2013-02-11 12:14:440 / 0http://www.worlds-luxury-guide.com/iframe/footer.php195.50.177.64
2013-02-11 01:22:411 / 1http://home.arcor.de/pohl.ulrich/index.htm151.189.20.30
2013-02-10 17:39:050 / 0http://www.sueddeutsche.de/digital/finfisher-entwickler-gamma-spam-vom-staat-1.1595253195.50.176.88

Last 4 reports on domain: nibis.ni.schule.de

Date Alerts / IDS URL IP
2013-01-31 06:40:161 / 2http://nibis.ni.schule.de/~hos-ho213.23.76.70
2012-10-31 20:50:091 / 13http://nibis.ni.schule.de/~rskoenig/html/kontakt.html213.23.76.70
2012-10-25 22:15:051 / 5http://nibis.ni.schule.de/~rskoenig/html/einschulung2012.html213.23.76.70
2012-10-18 17:25:001 / 4http://nibis.ni.schule.de/~rskoenig/html/dies_und_das.html213.23.76.70



JavaScript

Executed Scripts (24)


Executed Evals (0)


Executed Writes (21)

#1 JavaScript::Write (size: 206, repeated: 3)

 <param name="FlashVars" value="big=http%3A//worldtraff.ru/images/peeldown/b1_1347049385.jpg&ad_url=http%3A//worldtraff.ru/click/peeldown.php%3Fsid%3D1%26id%3D30%26hash%3D32d3e5cf0b48edac09f4962e76105405"/>

#2 JavaScript::Write (size: 95, repeated: 3)

 <param name="FlashVars" value="ico=http%3A//worldtraff.ru/images/peeldown/s7_1347049385.jpg"/>

#3 JavaScript::Write (size: 50, repeated: 6)

 <param name="allowScriptAccess" value="always"/> 

#4 JavaScript::Write (size: 240, repeated: 3)

 <param name="movie" value="http://worldtraff.ru/images/large.swf?big=http%3A//worldtraff.ru/images/peeldown/b1_1347049385.jpg&ad_url=http%3A//worldtraff.ru/click/peeldown.php%3Fsid%3D1%26id%3D30%26hash%3D32d3e5cf0b48edac09f4962e76105405"/>

#5 JavaScript::Write (size: 129, repeated: 3)

 <param name="movie" value="http://worldtraff.ru/images/small.swf?ico=http%3A//worldtraff.ru/images/peeldown/s7_1347049385.jpg"/>

#6 JavaScript::Write (size: 39, repeated: 6)

 <param name="quality" value="high" /> 

#7 JavaScript::Write (size: 43, repeated: 3)

 <param name="wmode" value="transparent" />

#8 JavaScript::Write (size: 42, repeated: 3)

 <param name="wmode" value="transparent"/>

#9 JavaScript::Write (size: 96, repeated: 6)

 codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,19,0"

#10 JavaScript::Write (size: 48, repeated: 3)

 id="jcornerBigObject" width="650" height="650">

#11 JavaScript::Write (size: 50, repeated: 3)

 id="jcornerSmallObject" width="100" height="100">

#12 JavaScript::Write (size: 15, repeated: 6)

</object></div>

#13 JavaScript::Write (size: 9, repeated: 3)

</script>

#14 JavaScript::Write (size: 317, repeated: 1)

<a href='http://www.liveinternet.ru/click' target=_blank><img src='//counter.yadro.ru/hit?t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.006316853702863612' border=0 width=88 height=31 alt='' title='LiveInternet: ?>:070=> G8A;> ?@>A<>B@>2 70 24 G0A0, ?>A5B8B5;59 70 24 G0A0 8 70 A53>4=O'></a>

#15 JavaScript::Write (size: 316, repeated: 1)

<a href='http://www.liveinternet.ru/click' target=_blank><img src='//counter.yadro.ru/hit?t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.22128625265590063' border=0 width=88 height=31 alt='' title='LiveInternet: ?>:070=> G8A;> ?@>A<>B@>2 70 24 G0A0, ?>A5B8B5;59 70 24 G0A0 8 70 A53>4=O'></a>

#16 JavaScript::Write (size: 315, repeated: 1)

<a href='http://www.liveinternet.ru/click' target=_blank><img src='//counter.yadro.ru/hit?t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.7054118426558631' border=0 width=88 height=31 alt='' title='LiveInternet: ?>:070=> G8A;> ?@>A<>B@>2 70 24 G0A0, ?>A5B8B5;59 70 24 G0A0 8 70 A53>4=O'></a>

#17 JavaScript::Write (size: 104, repeated: 3)

<div id="jcornerBig" style="position:absolute;width:650px;height:650px;z-index:9999;right:0px;top:0px;">

#18 JavaScript::Write (size: 106, repeated: 3)

<div id="jcornerSmall" style="position:absolute;width:100px;height:100px;z-index:9999;right:0px;top:0px;">

#19 JavaScript::Write (size: 663, repeated: 3)

<embed src="http://worldtraff.ru/images/large.swf?big=http%3A//worldtraff.ru/images/peeldown/b1_1347049385.jpg&ad_url=http%3A//worldtraff.ru/click/peeldown.php%3Fsid%3D1%26id%3D30%26hash%3D32d3e5cf0b48edac09f4962e76105405" id="jcornerBigEmbed" name="jcornerBigObject" wmode="transparent" quality="high" width="650" height="650" flashvars="big=http%3A//worldtraff.ru/images/peeldown/b1_1347049385.jpg&ad_url=http%3A//worldtraff.ru/click/peeldown.php%3Fsid%3D1%26id%3D30%26hash%3D32d3e5cf0b48edac09f4962e76105405" swliveconnect="true" allowscriptaccess="always" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer"></embed>

#20 JavaScript::Write (size: 401, repeated: 3)

<embed src="http://worldtraff.ru/images/small.swf?ico=http%3A//worldtraff.ru/images/peeldown/s7_1347049385.jpg" name="jcornerSmallObject" wmode="transparent" quality="high" width="100" height="100" flashvars="ico=http%3A//worldtraff.ru/images/peeldown/s7_1347049385.jpg" allowscriptaccess="always" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer"></embed>

#21 JavaScript::Write (size: 60, repeated: 6)

<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"


HTTP Transactions (101)


Request Response
GET /~rskoenig/html/lehrer.html HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html
Date: Tue, 06 Nov 2012 06:21:39 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Accept-Ranges: bytes
Content-Length: 7847
Keep-Alive: timeout=5, max=50
Connection: Keep-Alive
GET /~rskoenig/html/body_lehrer.html HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/lehrer.html
HTTP/1.1 200 OK

Content-Type: text/html
Date: Tue, 06 Nov 2012 06:21:39 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Accept-Ranges: bytes
Content-Length: 9014
Keep-Alive: timeout=5, max=50
Connection: Keep-Alive
GET /~rskoenig/html/left_lehrer.html HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/lehrer.html
HTTP/1.1 200 OK

Content-Type: text/html
Date: Tue, 06 Nov 2012 06:21:39 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Accept-Ranges: bytes
Content-Length: 13175
Keep-Alive: timeout=5, max=50
Connection: Keep-Alive
GET /in.cgi?8 HTTP/1.1

Host: katestat10.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/body_lehrer.html
HTTP/1.1 302 Found

Content-Type: text/html
Date: Tue, 06 Nov 2012 06:01:11 GMT
Server: Apache/2.2.16 (Debian)
Set-Cookie: wcvuj8=_0_; domain=katestat10.ru; path=/; expires=Wed, 07-Nov-2012 06:01:11 GMT
Location: http://dinclick.com/
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 153
Keep-Alive: timeout=15
Connection: Keep-Alive
GET /in.cgi?7 HTTP/1.1

Host: natestat10.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/body_lehrer.html
HTTP/1.1 302 Found

Content-Type: text/html
Date: Tue, 06 Nov 2012 06:01:11 GMT
Server: Apache/2.2.16 (Debian)
Set-Cookie: CS=1234567890sutraRULEZcookiessupport; expires=Sun, 17-Jan-2038 19:14:07 GMT; path=/; domain=natestat10.ru
Location: http://natestat10.ru/in.cgi?7&amp;CS=1
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 161
Keep-Alive: timeout=15
Connection: Keep-Alive
GET /in.cgi?8 HTTP/1.1

Host: katestat10.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 302 Found

Content-Type: text/html
Date: Tue, 06 Nov 2012 06:01:11 GMT
Server: Apache/2.2.16 (Debian)
Set-Cookie: wcvuj8=_0_; domain=katestat10.ru; path=/; expires=Wed, 07-Nov-2012 06:01:11 GMT
Location: http://dinclick.com/
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 153
Keep-Alive: timeout=15
Connection: Keep-Alive
GET /~rskoenig/assets/images/autogen/Startseite_Np11.gif HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:21:40 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Mon, 15 Aug 2011 20:04:05 GMT
Etag: &quot;49c29b-76c-c3de9740&quot;
Accept-Ranges: bytes
Content-Length: 1900
Keep-Alive: timeout=5, max=50
Connection: Keep-Alive
GET /~rskoenig/assets/images/autogen/clearpixel.gif HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/body_lehrer.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:21:39 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Mon, 15 Aug 2011 20:03:36 GMT
Etag: &quot;49c24c-2b-c2241600&quot;
Accept-Ranges: bytes
Content-Length: 43
Keep-Alive: timeout=5, max=49
Connection: Keep-Alive
GET /~rskoenig/assets/images/logo_weiss_arial_HRS_klein.jpg HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:21:39 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Sat, 27 Aug 2011 20:01:02 GMT
Etag: &quot;49c2f0-1c49-1f0ebb80&quot;
Accept-Ranges: bytes
Content-Length: 7241
Keep-Alive: timeout=5, max=49
Connection: Keep-Alive
GET /~rskoenig/assets/images/autogen/Aktuell_Np11.gif HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:21:40 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Mon, 15 Aug 2011 20:03:33 GMT
Etag: &quot;49c24b-75a-c1f64f40&quot;
Accept-Ranges: bytes
Content-Length: 1882
Keep-Alive: timeout=5, max=50
Connection: Keep-Alive
GET /~rskoenig/assets/images/hintergrund1.gif HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1
Date: Tue, 06 Nov 2012 06:21:39 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Vary: accept-language,accept-charset
Accept-Ranges: bytes
Keep-Alive: timeout=5, max=49
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Language: en
GET /~rskoenig/assets/images/autogen/Termine_Np11.gif HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:21:40 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Mon, 15 Aug 2011 20:04:07 GMT
Etag: &quot;49c29d-756-c3fd1bc0&quot;
Accept-Ranges: bytes
Content-Length: 1878
Keep-Alive: timeout=5, max=49
Connection: Keep-Alive
GET /in.cgi?7&CS=1 HTTP/1.1

Host: natestat10.ru
GET /in.cgi?7&amp;CS=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/body_lehrer.html
Cookie: CS=1234567890sutraRULEZcookiessupport
HTTP/1.1 302 Found

Content-Type: text/html
Date: Tue, 06 Nov 2012 06:01:11 GMT
Server: Apache/2.2.16 (Debian)
Set-Cookie: wcvuj7=_1_; domain=natestat10.ru; path=/; expires=Wed, 07-Nov-2012 06:01:11 GMT
Location: http://adverdex.info/
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 154
Keep-Alive: timeout=15
Connection: Keep-Alive
GET /~rskoenig/assets/images/autogen/Schuler_Np11.gif HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:21:40 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Mon, 15 Aug 2011 20:04:00 GMT
Etag: &quot;49c297-757-c3924c00&quot;
Accept-Ranges: bytes
Content-Length: 1879
Keep-Alive: timeout=5, max=48
Connection: Keep-Alive
GET /~rskoenig/assets/images/autogen/Schule_Np11.gif HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:21:40 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Mon, 15 Aug 2011 20:04:02 GMT
Etag: &quot;49c299-755-c3b0d080&quot;
Accept-Ranges: bytes
Content-Length: 1877
Keep-Alive: timeout=5, max=48
Connection: Keep-Alive
GET /~rskoenig/assets/images/autogen/Lehrer_Hp13.gif HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:21:40 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Mon, 15 Aug 2011 20:03:56 GMT
Etag: &quot;49c273-6c0-c3554300&quot;
Accept-Ranges: bytes
Content-Length: 1728
Keep-Alive: timeout=5, max=48
Connection: Keep-Alive
GET /~rskoenig/assets/images/autogen/Eltern_Np11.gif HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:21:40 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Mon, 15 Aug 2011 20:03:50 GMT
Etag: &quot;49c252-750-c2f9b580&quot;
Accept-Ranges: bytes
Content-Length: 1872
Keep-Alive: timeout=5, max=49
Connection: Keep-Alive
GET /~rskoenig/assets/images/autogen/Dies_und_Das_Np11.gif HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:21:40 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Mon, 15 Aug 2011 20:03:43 GMT
Etag: &quot;49c24e-782-c28ee5c0&quot;
Accept-Ranges: bytes
Content-Length: 1922
Keep-Alive: timeout=5, max=48
Connection: Keep-Alive
GET /in.cgi?7 HTTP/1.1

Host: natestat10.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 302 Found

Content-Type: text/html
Date: Tue, 06 Nov 2012 06:01:11 GMT
Server: Apache/2.2.16 (Debian)
Set-Cookie: wcvuj7=_0_; domain=natestat10.ru; path=/; expires=Wed, 07-Nov-2012 06:01:11 GMT
Location: http://dinclick.com/
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 153
Keep-Alive: timeout=15
Connection: Keep-Alive
GET /~rskoenig/assets/images/autogen/Dokumente_Np11.gif HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:21:40 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Mon, 15 Aug 2011 20:03:46 GMT
Etag: &quot;49c250-76e-c2bcac80&quot;
Accept-Ranges: bytes
Content-Length: 1902
Keep-Alive: timeout=5, max=47
Connection: Keep-Alive
GET /~rskoenig/assets/images/autogen/Kontakt_Np11.gif HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:21:40 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Mon, 15 Aug 2011 20:03:54 GMT
Etag: &quot;49c256-762-c336be80&quot;
Accept-Ranges: bytes
Content-Length: 1890
Keep-Alive: timeout=5, max=47
Connection: Keep-Alive
GET /~rskoenig/assets/images/HRSK_rot_arial.jpg HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:21:40 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Sat, 27 Aug 2011 20:00:55 GMT
Etag: &quot;49c2ee-1a79-1ea3ebc0&quot;
Accept-Ranges: bytes
Content-Length: 6777
Keep-Alive: timeout=5, max=50
Connection: Keep-Alive
GET / HTTP/1.1

Host: dinclick.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/body_lehrer.html
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx/0.7.67
Date: Tue, 06 Nov 2012 06:14:07 GMT
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze13
refresh: 1; URL=http://worldtraf.net/?1
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 186
GET / HTTP/1.1

Host: dinclick.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx/0.7.67
Date: Tue, 06 Nov 2012 06:14:07 GMT
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze13
refresh: 1; URL=http://worldtraf.net/?1
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 186
GET / HTTP/1.1

Host: dinclick.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx/0.7.67
Date: Tue, 06 Nov 2012 06:14:07 GMT
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze13
refresh: 1; URL=http://worldtraf.net/?1
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 186
GET / HTTP/1.1

Host: adverdex.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/body_lehrer.html
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx/0.7.67
Date: Tue, 06 Nov 2012 06:14:07 GMT
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze13
Set-Cookie: PHPSESSID=age78v230ku63m243t8ebpfqj2; path=/
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Last-Modified: Tue, 06 Nov 2012 06:14:07GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 319
GET /We%20Love%20Films%20-%20Community%20Toolbar_files/welovefilms.css HTTP/1.1

Host: adverdex.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://adverdex.info/
Cookie: PHPSESSID=age78v230ku63m243t8ebpfqj2
HTTP/1.1 200 OK

Content-Type: text/css
Server: nginx/0.7.67
Date: Tue, 06 Nov 2012 06:14:07 GMT
Content-Length: 4369
Last-Modified: Thu, 25 Oct 2012 01:06:07 GMT
Connection: keep-alive
Accept-Ranges: bytes
GET /~rskoenig/assets/images/autogen/Impressum_Np11.gif HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:21:40 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Mon, 15 Aug 2011 20:03:52 GMT
Etag: &quot;49c254-76b-c3183a00&quot;
Accept-Ranges: bytes
Content-Length: 1899
Keep-Alive: timeout=5, max=47
Connection: Keep-Alive
GET /~rskoenig/assets/images/weblogo_austausch_klein.jpg HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nibis.ni.schule.de/~rskoenig/html/left_lehrer.html
HTTP/1.1 200 OK

Content-Type: image/jpeg
Date: Tue, 06 Nov 2012 06:21:40 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Sat, 20 Aug 2011 15:13:32 GMT
Etag: &quot;49c2df-5db-49fcff00&quot;
Accept-Ranges: bytes
Content-Length: 1499
Keep-Alive: timeout=5, max=48
Connection: Keep-Alive
GET /We%20Love%20Films%20-%20Community%20Toolbar_files/l.js HTTP/1.1

Host: adverdex.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://adverdex.info/
Cookie: PHPSESSID=age78v230ku63m243t8ebpfqj2
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Server: nginx/0.7.67
Date: Tue, 06 Nov 2012 06:14:07 GMT
Content-Length: 0
Last-Modified: Thu, 25 Oct 2012 01:06:00 GMT
Connection: keep-alive
Accept-Ranges: bytes
GET /We%20Love%20Films%20-%20Community%20Toolbar_files/display.js HTTP/1.1

Host: adverdex.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://adverdex.info/
Cookie: PHPSESSID=age78v230ku63m243t8ebpfqj2
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Server: nginx/0.7.67
Date: Tue, 06 Nov 2012 06:14:07 GMT
Content-Length: 1795
Last-Modified: Thu, 25 Oct 2012 01:05:55 GMT
Connection: keep-alive
Accept-Ranges: bytes
GET /We%20Love%20Films%20-%20Community%20Toolbar_files/jquery.1.2.6.js HTTP/1.1

Host: adverdex.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://adverdex.info/
Cookie: PHPSESSID=age78v230ku63m243t8ebpfqj2
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Server: nginx/0.7.67
Date: Tue, 06 Nov 2012 06:14:07 GMT
Content-Length: 55519
Last-Modified: Thu, 25 Oct 2012 01:05:59 GMT
Connection: keep-alive
Accept-Ranges: bytes
GET /logo.png HTTP/1.1

Host: bestcomedyfilms.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://adverdex.info/We%20Love%20Films%20-%20Community%20Toolbar_files/welovefilms.css
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:08 GMT
Content-Length: 6485
Last-Modified: Sat, 27 Oct 2012 16:00:14 GMT
Connection: keep-alive
Accept-Ranges: bytes
GET /bg.jpg HTTP/1.1

Host: bestcomedyfilms.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://adverdex.info/We%20Love%20Films%20-%20Community%20Toolbar_files/welovefilms.css
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:08 GMT
Content-Length: 170840
Last-Modified: Sat, 27 Oct 2012 16:00:03 GMT
Connection: keep-alive
Accept-Ranges: bytes
GET /favicon.ico HTTP/1.1

Host: nibis.ni.schule.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: image/x-icon
Date: Tue, 06 Nov 2012 06:21:41 GMT
Server: Apache/2.0.54 (Linux/SUSE)
Last-Modified: Fri, 08 Jun 2007 15:05:28 GMT
Etag: &quot;10dd28-47e-5c927e00&quot;
Accept-Ranges: bytes
Content-Length: 1150
Keep-Alive: timeout=5, max=47
Connection: Keep-Alive
GET /?1 HTTP/1.1

Host: worldtraf.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:08 GMT
Content-Length: 20
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze14
Expires: Thu, 21 Jul 1977 07:30:00 GMT
Last-Modified: Tue, 06 Nov 2012 06:14:08 GMT
Cache-Control: max-age=0
Pragma: no-cache
Location: http://worldtraffic.biz/home.html?lang=en
Vary: Accept-Encoding
Content-Encoding: gzip
GET /?1 HTTP/1.1

Host: worldtraf.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
If-Modified-Since: Tue, 06 Nov 2012 06:14:08 GMT
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 20
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze14
Expires: Thu, 21 Jul 1977 07:30:00 GMT
Last-Modified: Tue, 06 Nov 2012 06:14:09 GMT
Cache-Control: max-age=0
Pragma: no-cache
Location: http://worldtraffic.biz/home.html?lang=en
Vary: Accept-Encoding
Content-Encoding: gzip
GET /home.html?lang=en HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 5926
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze13
Set-Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
GET /images/vk.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 3268
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 17:13:09 GMT
Accept-Ranges: bytes
GET /js/fancybox/jquery.mousewheel-3.0.4.pack.js HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 1279
Connection: keep-alive
Last-Modified: Fri, 17 Aug 2012 23:13:25 GMT
Accept-Ranges: bytes
GET /styles/main.css HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: text/css
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 3852
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 18:23:10 GMT
Accept-Ranges: bytes
GET /share/share.js HTTP/1.1

Host: yandex.st

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Fri, 05 Oct 2012 09:49:49 GMT
Etag: &quot;4207170442&quot;
Expires: Fri, 09 Nov 2012 06:14:09 GMT
Cache-Control: max-age=259200
Accept-Ranges: bytes
Content-Length: 11571
Date: Tue, 06 Nov 2012 06:14:09 GMT
Server: lighttpd/1.4.26
GET /js/peeldown.php?id=30 HTTP/1.1

Host: wtraff1.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: text/html; charset=windows-1251
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 1047
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze13
Vary: Accept-Encoding
Content-Encoding: gzip
GET /ajax/libs/jquery/1.4/jquery.min.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT
Date: Tue, 06 Nov 2012 05:25:46 GMT
Expires: Tue, 06 Nov 2012 06:25:46 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 27106
X-XSS-Protection: 1; mode=block
Age: 2903
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=3600
GET /images/fb.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 3839
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 17:13:03 GMT
Accept-Ranges: bytes
GET /home.html?lang=en HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 5926
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze13
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
GET /images/twitter.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 3319
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 17:13:07 GMT
Accept-Ranges: bytes
GET /?1 HTTP/1.1

Host: worldtraf.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
If-Modified-Since: Tue, 06 Nov 2012 06:14:09 GMT
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 20
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze14
Expires: Thu, 21 Jul 1977 07:30:00 GMT
Last-Modified: Tue, 06 Nov 2012 06:14:09 GMT
Cache-Control: max-age=0
Pragma: no-cache
Location: http://worldtraffic.biz/home.html?lang=en
Vary: Accept-Encoding
Content-Encoding: gzip
GET /js/fancybox/jquery.fancybox-1.3.4.css HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: text/css
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 8852
Connection: keep-alive
Last-Modified: Fri, 17 Aug 2012 23:13:16 GMT
Accept-Ranges: bytes
GET /images/forum.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 3915
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 18:04:39 GMT
Accept-Ranges: bytes
GET /images/lj.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 3611
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 18:21:42 GMT
Accept-Ranges: bytes
GET /js/fancybox/jquery.fancybox-1.3.4.pack.js HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 15624
Connection: keep-alive
Last-Modified: Fri, 17 Aug 2012 23:13:23 GMT
Accept-Ranges: bytes
GET /images/login_eng.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 4096
Connection: keep-alive
Last-Modified: Sat, 18 Aug 2012 17:03:35 GMT
Accept-Ranges: bytes
GET /images/rus.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 551
Connection: keep-alive
Last-Modified: Sat, 18 Aug 2012 17:04:05 GMT
Accept-Ranges: bytes
GET /images/reg_eng.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 5216
Connection: keep-alive
Last-Modified: Sun, 19 Aug 2012 11:36:07 GMT
Accept-Ranges: bytes
GET /images/logo.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 26021
Connection: keep-alive
Last-Modified: Sat, 18 Aug 2012 17:03:41 GMT
Accept-Ranges: bytes
GET /images/reg_bold_eng.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 6078
Connection: keep-alive
Last-Modified: Sat, 18 Aug 2012 17:03:54 GMT
Accept-Ranges: bytes
GET /home.html?lang=en HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 5926
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze13
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
GET /js/peeldown.php?id=30 HTTP/1.1

Host: wtraff1.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: text/html; charset=windows-1251
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 1047
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze13
Vary: Accept-Encoding
Content-Encoding: gzip
GET /site_stats/js/s/a?url=worldtraffic.biz HTTP/1.1

Host: xslt.alexa.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.0 200 OK

Content-Type: application/x-javascript
Content-Length: 3153
Connection: keep-alive
x-amz-id-2: TMMnOAppjV5qWi98ymYhbQR6h3rM4EH8+kZtJP6mv9xmM4BdxkxoCziL+LT04LY3
x-amz-request-id: 21EA70F670AF68D3
Date: Sat, 10 Mar 2012 23:04:53 GMT
x-amz-meta-s3fox-filesize: 3153
x-amz-meta-s3fox-modifiedtime: 1291757166000
Last-Modified: Sat, 11 Dec 2010 00:35:05 GMT
Etag: &quot;f4022b30d2ad8a3755b6e53f31c63252&quot;
Accept-Ranges: bytes
Server: AmazonS3
Age: 39335
X-Amz-Cf-Id: QLKvVRacykFZszX-9w94LFDEIX4OdDR7q3tHHvV26JrXLLSe-MolRA==
Via: 1.0 8b1633b834f6beaa5a2d7797c38cf775.cloudfront.net:1182 (CloudFront), 1.0 3f950afcacdc010fc877820878a8627b.cloudfront.net (CloudFront)
X-Cache: Hit from cloudfront
GET /img/icons/88x31_wm_blue_on_white_ru.png HTTP/1.1

Host: www.webmoney.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx
Date: Tue, 06 Nov 2012 14:27:29 GMT
Content-Length: 854
Last-Modified: Wed, 15 Jun 2011 10:28:34 GMT
Connection: keep-alive
Expires: Tue, 20 Nov 2012 14:27:29 GMT
Cache-Control: max-age=1209600
Accept-Ranges: bytes
GET /img/icons/88x31_wm_v_blue_on_white_ru.png HTTP/1.1

Host: www.webmoney.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx
Date: Tue, 06 Nov 2012 14:27:29 GMT
Content-Length: 805
Last-Modified: Wed, 15 Jun 2011 10:36:06 GMT
Connection: keep-alive
Expires: Tue, 20 Nov 2012 14:27:29 GMT
Cache-Control: max-age=1209600
Accept-Ranges: bytes
GET /images/4.jpg HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 38944
Connection: keep-alive
Last-Modified: Sun, 19 Aug 2012 13:15:16 GMT
Accept-Ranges: bytes
GET /images/3.jpg HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 34158
Connection: keep-alive
Last-Modified: Sun, 19 Aug 2012 13:15:11 GMT
Accept-Ranges: bytes
GET /images/2.jpg HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 44784
Connection: keep-alive
Last-Modified: Sun, 19 Aug 2012 13:15:07 GMT
Accept-Ranges: bytes
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT
HTTP/1.1 200 OK

Content-Type: text/javascript
Content-Length: 14888
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Tue, 06 Nov 2012 01:09:03 GMT
Expires: Tue, 06 Nov 2012 13:09:03 GMT
Vary: Accept-Encoding
Age: 18306
Cache-Control: max-age=43200, public
Server: GFE/2.0
GET /images/1.jpg HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 80073
Connection: keep-alive
Last-Modified: Sun, 19 Aug 2012 13:14:47 GMT
Accept-Ranges: bytes
GET /hit?t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.006316853702863612 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html
Date: Tue, 06 Nov 2012 06:14:09 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit?q;t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.006316853702863612
Content-Length: 32
Expires: Sun, 06 Nov 2011 20:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: FTID=1GcAgn1mLuX2; path=/; expires=Tue, 05 Nov 2013 20:00:00 GMT; domain=.yadro.ru
GET /images/footer.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/styles/main.css
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 39751
Connection: keep-alive
Last-Modified: Sat, 18 Aug 2012 17:03:12 GMT
Accept-Ranges: bytes
GET /metrika/watch.js HTTP/1.1

Host: mc.yandex.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Date: Tue, 06 Nov 2012 06:14:09 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Fri, 19 Oct 2012 12:23:05 GMT
Content-Encoding: gzip
Expires: Tue, 06 Nov 2012 07:14:09 GMT
Content-Length: 15878
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=867768886&utmhn=worldtraffic.biz&utmcs=UTF-8&utmsr=1176x885&utmvp=1x1&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=World%20Traffic%20Network&utmhid=1253954815&utmr=-&utmp=%2Fhome.html%3Flang%3Den&utmac=UA-33874276-1&utmcc=__utma%3D214086161.1661228548.1352182450.1352182450.1352182450.1%3B%2B__utmz%3D214086161.1352182450.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=q~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.7&amp;utms=1&amp;utmn=867768886&amp;utmhn=worldtraffic.biz&amp;utmcs=UTF-8&amp;utmsr=1176x885&amp;utmvp=1x1&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=World%20Traffic%20Network&amp;utmhid=1253954815&amp;utmr=-&amp;utmp=%2Fhome.html%3Flang%3Den&amp;utmac=UA-33874276-1&amp;utmcc=__utma%3D214086161.1661228548.1352182450.1352182450.1352182450.1%3B%2B__utmz%3D214086161.1352182450.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmu=q~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Thu, 01 Nov 2012 01:27:43 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 449186
Server: GFE/2.0
GET /hit?t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.22128625265590063 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html
Date: Tue, 06 Nov 2012 06:14:09 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit?q;t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.22128625265590063
Content-Length: 32
Expires: Sun, 06 Nov 2011 20:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: FTID=1GcAgn1mLuX2; path=/; expires=Tue, 05 Nov 2013 20:00:00 GMT; domain=.yadro.ru
GET /js/peeldown.php?id=30 HTTP/1.1

Host: wtraff1.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: text/html; charset=windows-1251
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 1047
Connection: keep-alive
X-Powered-By: PHP/5.3.3-7+squeeze13
Vary: Accept-Encoding
Content-Encoding: gzip
GET /site_stats/gif/s/a/d29ybGR0cmFmZmljLmJpeg==/s.gif HTTP/1.1

Host: xsltcache.alexa.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.0 200 OK

Content-Type: image/gif
Server: squid
Last-Modified: Sun, 04 Nov 2012 07:00:00 GMT
Expires: Wed, 07 Nov 2012 06:01:43 GMT
Cache-Control: public
Content-Length: 3238
Date: Tue, 06 Nov 2012 06:01:42 GMT
Connection: close
GET /site_stats/js/s/a?url=worldtraffic.biz HTTP/1.1

Host: xslt.alexa.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
If-Modified-Since: Sat, 11 Dec 2010 00:35:05 GMT
If-None-Match: &quot;f4022b30d2ad8a3755b6e53f31c63252&quot;
HTTP/1.0 304 Not Modified

HTTP/1.0 304 Not Modified
Connection: keep-alive
Date: Tue, 06 Nov 2012 06:14:10 GMT
Etag: &quot;f4022b30d2ad8a3755b6e53f31c63252&quot;
Last-Modified: Sat, 11 Dec 2010 00:35:05 GMT
Age: 39336
X-Amz-Cf-Id: pO8gQT9eRRHeAoqkmgVSWt8-Sqk1PwoZoN8OvKEongj4m5HH_5Lpog==
Via: 1.0 3f950afcacdc010fc877820878a8627b.cloudfront.net (CloudFront)
X-Cache: Hit from cloudfront
GET /images/large.swf?big=http%3A//worldtraff.ru/images/peeldown/b1_1347049385.jpg&ad_url=http%3A//worldtraff.ru/click/peeldown.php%3Fsid%3D1%26id%3D30%26hash%3D32d3e5cf0b48edac09f4962e76105405 HTTP/1.1

Host: worldtraff.ru
GET /images/large.swf?big=http%3A//worldtraff.ru/images/peeldown/b1_1347049385.jpg&amp;ad_url=http%3A//worldtraff.ru/click/peeldown.php%3Fsid%3D1%26id%3D30%26hash%3D32d3e5cf0b48edac09f4962e76105405 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:10 GMT
Content-Length: 4124
Connection: keep-alive
Last-Modified: Mon, 06 Aug 2012 00:20:41 GMT
Accept-Ranges: bytes
GET /watch/16261183?rn=550265&wmode=5&callback=_ymjsp142371&page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&browser-info=j:1:s:1176x885x24:f:10.0.45:w:1x1:z:60:i:20121106071410:en:utf-8:v:1825:c:1:la:en-us:hid:582930528:wn:63285:hl:1:t:World%20Traffic%20Network HTTP/1.1

Host: mc.yandex.ru
GET /watch/16261183?rn=550265&amp;wmode=5&amp;callback=_ymjsp142371&amp;page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&amp;browser-info=j:1:s:1176x885x24:f:10.0.45:w:1x1:z:60:i:20121106071410:en:utf-8:v:1825:c:1:la:en-us:hid:582930528:wn:63285:hl:1:t:World%20Traffic%20Network HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Tue, 06 Nov 2012 06:14:10 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Tue, 06 Nov 2012 06:14:10 GMT
Expires: Tue, 06 Nov 2012 06:14:10 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Location: http://mc.yandex.ru/watch/16261183/1?rn=550265&amp;wmode=5&amp;callback=_ymjsp142371&amp;page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&amp;browser-info=j:1:s:1176x885x24:f:10.0.45:w:1x1:z:60:i:20121106071410:en:utf-8:v:1825:c:1:la:en-us:hid:582930528:wn:63285:hl:1:t:World%20Traffic%20Network
Set-Cookie: yandexuid=2294962041352182450; domain=.yandex.ru; path=/; expires=Fri, 04-Nov-2022 06:14:10 GMT yabs-sid=762501541352182450; path=/
Content-Length: 0
GET /images/small.swf?ico=http%3A//worldtraff.ru/images/peeldown/s7_1347049385.jpg HTTP/1.1

Host: worldtraff.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:10 GMT
Content-Length: 7300
Connection: keep-alive
Last-Modified: Mon, 06 Aug 2012 00:20:41 GMT
Accept-Ranges: bytes
GET /images/slider.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/styles/main.css
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 129458
Connection: keep-alive
Last-Modified: Sat, 18 Aug 2012 17:04:12 GMT
Accept-Ranges: bytes
GET /__utm.gif?utmwv=5.3.7&utms=2&utmn=269021382&utmhn=worldtraffic.biz&utmcs=UTF-8&utmsr=1176x885&utmvp=1x1&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=World%20Traffic%20Network&utmhid=1252352824&utmr=-&utmp=%2Fhome.html%3Flang%3Den&utmac=UA-33874276-1&utmcc=__utma%3D214086161.1661228548.1352182450.1352182450.1352182450.1%3B%2B__utmz%3D214086161.1352182450.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=q~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.7&amp;utms=2&amp;utmn=269021382&amp;utmhn=worldtraffic.biz&amp;utmcs=UTF-8&amp;utmsr=1176x885&amp;utmvp=1x1&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=World%20Traffic%20Network&amp;utmhid=1252352824&amp;utmr=-&amp;utmp=%2Fhome.html%3Flang%3Den&amp;utmac=UA-33874276-1&amp;utmcc=__utma%3D214086161.1661228548.1352182450.1352182450.1352182450.1%3B%2B__utmz%3D214086161.1352182450.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmu=q~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Thu, 01 Nov 2012 01:27:43 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 449187
Server: GFE/2.0
GET /hit?q;t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.006316853702863612 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: FTID=1GcAgn1mLuX2
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:14:10 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 836
Expires: Sun, 06 Nov 2011 20:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: VID=3KfAHu3ZEcH2; path=/; expires=Tue, 05 Nov 2013 20:00:00 GMT; domain=.yadro.ru
GET /share/static/b-share-icon.png HTTP/1.1

Host: yandex.st

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: image/png
Expires: Thu, 15 Sep 2022 06:14:10 GMT
Cache-Control: max-age=311040000
Accept-Ranges: bytes
Etag: &quot;52118894&quot;
Last-Modified: Fri, 05 Oct 2012 09:49:41 GMT
Content-Length: 12931
Date: Tue, 06 Nov 2012 06:14:10 GMT
Server: lighttpd/1.4.26
GET /watch/16261183/1?rn=550265&wmode=5&callback=_ymjsp142371&page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&browser-info=j:1:s:1176x885x24:f:10.0.45:w:1x1:z:60:i:20121106071410:en:utf-8:v:1825:c:1:la:en-us:hid:582930528:wn:63285:hl:1:t:World%20Traffic%20Network HTTP/1.1

Host: mc.yandex.ru
GET /watch/16261183/1?rn=550265&amp;wmode=5&amp;callback=_ymjsp142371&amp;page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&amp;browser-info=j:1:s:1176x885x24:f:10.0.45:w:1x1:z:60:i:20121106071410:en:utf-8:v:1825:c:1:la:en-us:hid:582930528:wn:63285:hl:1:t:World%20Traffic%20Network HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: yandexuid=2294962041352182450; yabs-sid=762501541352182450
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Tue, 06 Nov 2012 06:14:11 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Tue, 06 Nov 2012 06:14:11 GMT
Expires: Tue, 06 Nov 2012 06:14:11 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 74
GET /hit?q;t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.22128625265590063 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: FTID=1GcAgn1mLuX2
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:14:11 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 836
Expires: Sun, 06 Nov 2011 20:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: VID=3KfAHu3ZEcH2; path=/; expires=Tue, 05 Nov 2013 20:00:00 GMT; domain=.yadro.ru
GET /images/header_bg.png HTTP/1.1

Host: worldtraffic.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/styles/main.css
Cookie: PHPSESSID=vs6drsrqespfap2c5m8s7vvm53
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:09 GMT
Content-Length: 337786
Connection: keep-alive
Last-Modified: Sat, 18 Aug 2012 17:03:25 GMT
Accept-Ranges: bytes
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/xml
Server: Apache
Last-Modified: Wed, 03 Oct 2012 19:48:11 GMT
Etag: &quot;289dff-26c-4cb2ceb2654c0&quot;
Accept-Ranges: bytes
Content-Length: 620
Date: Tue, 06 Nov 2012 06:14:11 GMT
Connection: keep-alive
GET /__utm.gif?utmwv=5.3.7&utms=3&utmn=271962998&utmhn=worldtraffic.biz&utmcs=UTF-8&utmsr=1176x885&utmvp=1x1&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=World%20Traffic%20Network&utmhid=68992979&utmr=-&utmp=%2Fhome.html%3Flang%3Den&utmac=UA-33874276-1&utmcc=__utma%3D214086161.1661228548.1352182450.1352182450.1352182450.1%3B%2B__utmz%3D214086161.1352182450.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=q~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.7&amp;utms=3&amp;utmn=271962998&amp;utmhn=worldtraffic.biz&amp;utmcs=UTF-8&amp;utmsr=1176x885&amp;utmvp=1x1&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=World%20Traffic%20Network&amp;utmhid=68992979&amp;utmr=-&amp;utmp=%2Fhome.html%3Flang%3Den&amp;utmac=UA-33874276-1&amp;utmcc=__utma%3D214086161.1661228548.1352182450.1352182450.1352182450.1%3B%2B__utmz%3D214086161.1352182450.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmu=q~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Thu, 01 Nov 2012 01:27:43 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 449188
Server: GFE/2.0
GET /images/small.swf?ico=http%3A//worldtraff.ru/images/peeldown/s7_1347049385.jpg HTTP/1.1

Host: worldtraff.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
If-Modified-Since: Mon, 06 Aug 2012 00:20:41 GMT
HTTP/1.1 304 Not Modified

HTTP/1.1 304 Not Modified
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:11 GMT
Connection: keep-alive
Last-Modified: Mon, 06 Aug 2012 00:20:41 GMT
GET /images/large.swf?big=http%3A//worldtraff.ru/images/peeldown/b1_1347049385.jpg&ad_url=http%3A//worldtraff.ru/click/peeldown.php%3Fsid%3D1%26id%3D30%26hash%3D32d3e5cf0b48edac09f4962e76105405 HTTP/1.1

Host: worldtraff.ru
GET /images/large.swf?big=http%3A//worldtraff.ru/images/peeldown/b1_1347049385.jpg&amp;ad_url=http%3A//worldtraff.ru/click/peeldown.php%3Fsid%3D1%26id%3D30%26hash%3D32d3e5cf0b48edac09f4962e76105405 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
If-Modified-Since: Mon, 06 Aug 2012 00:20:41 GMT
HTTP/1.1 304 Not Modified

HTTP/1.1 304 Not Modified
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:11 GMT
Connection: keep-alive
Last-Modified: Mon, 06 Aug 2012 00:20:41 GMT
GET /images/peeldown/s7_1347049385.jpg HTTP/1.1

Host: worldtraff.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:11 GMT
Content-Length: 3464
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 20:23:05 GMT
Accept-Ranges: bytes
GET /hit?t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.7054118426558631 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: FTID=1GcAgn1mLuX2; VID=3KfAHu3ZEcH2
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html
Date: Tue, 06 Nov 2012 06:14:11 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit?q;t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.7054118426558631
Content-Length: 32
Expires: Sun, 06 Nov 2011 20:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: FTID=0; path=/; expires=Sat, 01 Jan 2000 00:00:00 GMT; domain=.yadro.ru
GET /watch/16261183?rn=124302&wmode=5&callback=_ymjsp860419&page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&browser-info=j:1:s:1176x885x24:f:10.0.45:w:1x1:z:60:i:20121106071411:en:utf-8:v:1825:c:1:la:en-us:hid:806667158:wn:63285:hl:1:t:World%20Traffic%20Network HTTP/1.1

Host: mc.yandex.ru
GET /watch/16261183?rn=124302&amp;wmode=5&amp;callback=_ymjsp860419&amp;page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&amp;browser-info=j:1:s:1176x885x24:f:10.0.45:w:1x1:z:60:i:20121106071411:en:utf-8:v:1825:c:1:la:en-us:hid:806667158:wn:63285:hl:1:t:World%20Traffic%20Network HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: yandexuid=2294962041352182450; yabs-sid=762501541352182450
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Tue, 06 Nov 2012 06:14:11 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Tue, 06 Nov 2012 06:14:11 GMT
Expires: Tue, 06 Nov 2012 06:14:11 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 74
GET /images/peeldown/b1_1347049385.jpg HTTP/1.1

Host: worldtraff.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx/1.2.4
Date: Tue, 06 Nov 2012 06:14:11 GMT
Content-Length: 56444
Connection: keep-alive
Last-Modified: Fri, 07 Sep 2012 20:23:05 GMT
Accept-Ranges: bytes
GET /watch/16261183?rn=153372&wmode=5&callback=_ymjsp5898&page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&browser-info=vc:w:j:1:s:1176x885x24:f:10.0.45:w:1x1:z:60:i:20121106071413:en:utf-8:v:1825:c:1:la:en-us:hid:321708683:wn:15491:hl:1:t:World%20Traffic%20Network HTTP/1.1

Host: mc.yandex.ru
GET /watch/16261183?rn=153372&amp;wmode=5&amp;callback=_ymjsp5898&amp;page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&amp;browser-info=vc:w:j:1:s:1176x885x24:f:10.0.45:w:1x1:z:60:i:20121106071413:en:utf-8:v:1825:c:1:la:en-us:hid:321708683:wn:15491:hl:1:t:World%20Traffic%20Network HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: yandexuid=2294962041352182450; yabs-sid=762501541352182450
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Tue, 06 Nov 2012 06:14:13 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Tue, 06 Nov 2012 06:14:13 GMT
Expires: Tue, 06 Nov 2012 06:14:13 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 72
GET /hit?q;t12.6;r;s1176*885*24;uhttp%3A//worldtraffic.biz/home.html%3Flang%3Den;0.7054118426558631 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: VID=3KfAHu3ZEcH2
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:14:13 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 836
Expires: Sun, 06 Nov 2011 20:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
GET /watch/16261183?rn=217012&browser-info=j:1:s:1176x885x24:f:10.0.45:w:1x1:z:60:i:20121106071425:en:utf-8:v:1825:c:1:la:en-us:ar:1:nb:1:cl:492:hid:582930528:wn:63285:hl:1 HTTP/1.1

Host: mc.yandex.ru
GET /watch/16261183?rn=217012&amp;browser-info=j:1:s:1176x885x24:f:10.0.45:w:1x1:z:60:i:20121106071425:en:utf-8:v:1825:c:1:la:en-us:ar:1:nb:1:cl:492:hid:582930528:wn:63285:hl:1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: yandexuid=2294962041352182450; yabs-sid=762501541352182450
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:14:25 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Tue, 06 Nov 2012 06:14:25 GMT
Expires: Tue, 06 Nov 2012 06:14:25 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 43
POST /webvisor/16261183?rn=27977&wv-type=0&cnt-class=0&page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&wmode=0&wv-hit=582930528&wv-part=1&wv-check=60989&browser-info=ct%3A1%3Az%3A60%3Ai%3A20121106071410 HTTP/1.1

Host: mc.yandex.ru
POST /webvisor/16261183?rn=27977&amp;wv-type=0&amp;cnt-class=0&amp;page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&amp;wmode=0&amp;wv-hit=582930528&amp;wv-part=1&amp;wv-check=60989&amp;browser-info=ct%3A1%3Az%3A60%3Ai%3A20121106071410 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Content-Length: 20
Content-Type: text/plain; charset=UTF-8
Origin: http://worldtraffic.biz
Cookie: yandexuid=2294962041352182450; yabs-sid=762501541352182450
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:14:25 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Tue, 06 Nov 2012 06:14:25 GMT
Expires: Tue, 06 Nov 2012 06:14:25 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Access-Control-Allow-Origin: http://worldtraffic.biz
Access-Control-Allow-Credentials: true
Content-Length: 43
GET /watch/16261183?rn=607829&browser-info=j:1:s:1176x885x24:f:10.0.45:w:1x1:z:60:i:20121106071426:en:utf-8:v:1825:c:1:la:en-us:ar:1:nb:1:cl:1888:hid:806667158:wn:63285:hl:1 HTTP/1.1

Host: mc.yandex.ru
GET /watch/16261183?rn=607829&amp;browser-info=j:1:s:1176x885x24:f:10.0.45:w:1x1:z:60:i:20121106071426:en:utf-8:v:1825:c:1:la:en-us:ar:1:nb:1:cl:1888:hid:806667158:wn:63285:hl:1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: yandexuid=2294962041352182450; yabs-sid=762501541352182450
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:14:26 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Tue, 06 Nov 2012 06:14:26 GMT
Expires: Tue, 06 Nov 2012 06:14:26 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 43
POST /webvisor/16261183?rn=99910&wv-type=0&cnt-class=0&page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&wmode=0&wv-hit=806667158&wv-part=1&wv-check=60214&browser-info=ct%3A1%3Az%3A60%3Ai%3A20121106071411 HTTP/1.1

Host: mc.yandex.ru
POST /webvisor/16261183?rn=99910&amp;wv-type=0&amp;cnt-class=0&amp;page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&amp;wmode=0&amp;wv-hit=806667158&amp;wv-part=1&amp;wv-check=60214&amp;browser-info=ct%3A1%3Az%3A60%3Ai%3A20121106071411 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Content-Length: 20
Content-Type: text/plain; charset=UTF-8
Origin: http://worldtraffic.biz
Cookie: yandexuid=2294962041352182450; yabs-sid=762501541352182450
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:14:26 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Tue, 06 Nov 2012 06:14:26 GMT
Expires: Tue, 06 Nov 2012 06:14:26 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Access-Control-Allow-Origin: http://worldtraffic.biz
Access-Control-Allow-Credentials: true
Content-Length: 43
GET /watch/16261183?rn=452901&browser-info=j:1:s:1176x885x24:f:10.0.45:w:1x1:z:60:i:20121106071428:en:utf-8:v:1825:c:1:la:en-us:ar:1:nb:1:cl:218:hid:321708683:wn:15491:hl:1 HTTP/1.1

Host: mc.yandex.ru
GET /watch/16261183?rn=452901&amp;browser-info=j:1:s:1176x885x24:f:10.0.45:w:1x1:z:60:i:20121106071428:en:utf-8:v:1825:c:1:la:en-us:ar:1:nb:1:cl:218:hid:321708683:wn:15491:hl:1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Cookie: yandexuid=2294962041352182450; yabs-sid=762501541352182450
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:14:28 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Tue, 06 Nov 2012 06:14:28 GMT
Expires: Tue, 06 Nov 2012 06:14:28 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 43
POST /webvisor/16261183?rn=39503&wv-type=0&cnt-class=0&page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&wmode=0&wv-hit=321708683&wv-part=1&wv-check=60989&browser-info=ct%3A1%3Az%3A60%3Ai%3A20121106071413 HTTP/1.1

Host: mc.yandex.ru
POST /webvisor/16261183?rn=39503&amp;wv-type=0&amp;cnt-class=0&amp;page-url=http%3A%2F%2Fworldtraffic.biz%2Fhome.html%3Flang%3Den&amp;wmode=0&amp;wv-hit=321708683&amp;wv-part=1&amp;wv-check=60989&amp;browser-info=ct%3A1%3Az%3A60%3Ai%3A20121106071413 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://worldtraffic.biz/home.html?lang=en
Content-Length: 20
Content-Type: text/plain; charset=UTF-8
Origin: http://worldtraffic.biz
Cookie: yandexuid=2294962041352182450; yabs-sid=762501541352182450
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Tue, 06 Nov 2012 06:14:28 GMT
Server: Phantom/0.0.0
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Tue, 06 Nov 2012 06:14:28 GMT
Expires: Tue, 06 Nov 2012 06:14:28 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Access-Control-Allow-Origin: http://worldtraffic.biz
Access-Control-Allow-Credentials: true
Content-Length: 43