Overview

URLhttp://galatasaray-cluj-maciizle.es.tl/
IP80.190.202.45
ASNAS15598 IP Exchange GmbH
Location Germany
Report completed2012-11-07 11:46:47 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-07 11:46:15 31.170.162.43 urlQuery Client3ET RBN Known Russian Business Network IP (204)
2012-11-07 11:46:15 31.170.161.156 urlQuery Client3ET RBN Known Russian Business Network IP (204)
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 80.190.202.45

Date Alerts / IDS URL IP
2012-11-15 23:48:070 / 5http://gs-karabuk-canli-izle.es.tl80.190.202.45
2012-11-15 20:13:480 / 8http://galatasaray-karabukspor.es.tl/L%26%23304%3BG-TV-Galatasaray-Karab.ue.kspor-Ma% (...)80.190.202.45
2012-11-15 19:59:140 / 0http://galatasaray-karabukspor.es.tl/80.190.202.45
2012-11-11 03:33:160 / 0http://mersin-galata-maci-justintv-seyret.es.tl/80.190.202.45
2012-11-10 23:41:580 / 0http://fenerbahce-orduspor-ligtv-izle.es.tl/Fenerbah%E7e-Orduspor-Ma%E7%26%23305%3B-C (...)80.190.202.45
2012-11-10 23:28:090 / 0http://fenerbahce-orduspor-ligtv-izle.es.tl/80.190.202.45

Last 6 reports on ASN: AS15598 IP Exchange GmbH

Date Alerts / IDS URL IP
2013-02-14 12:27:130 / 13http://www.mail-promotion.de/80.190.117.150
2013-02-14 11:40:181 / 30http://elsterbau.de/letter.htm89.31.143.100
2013-02-14 10:01:560 / 2http://www.regelschule-unstruttal.de/nuaiadr/mthevg.fu8z8yc2j?t3lqgyzil1ehvu89.31.143.101
2013-02-13 16:33:350 / 0http://pc-welt.de62.146.91.230
2013-02-13 13:58:190 / 0http://www.pcwelt.de62.146.91.230
2013-02-13 10:35:451 / 1http://www.automobilehipp.de/89.31.143.116



JavaScript

Executed Scripts (13)


Executed Evals (2)

#1 JavaScript::Eval (size: 226, repeated: 1)

({
    '0': [0, -15, 5, 8],
    '1': [-5, -15, 3, 8],
    '2': [-8, -15, 5, 8],
    '3': [-13, -15, 5, 8],
    '4': [-18, -15, 5, 8],
    '5': [-23, -15, 5, 8],
    '6': [-28, -15, 5, 8],
    '7': [-33, -15, 5, 8],
    '8': [-38, -15, 5, 8],
    '9': [-43, -15, 5, 8],
    ',': [-48, -15, 2, 8],
    'o': [-50, -15, 24, 8]
})

#2 JavaScript::Eval (size: 17, repeated: 1)

/*@cc_on!@*/
false

Executed Writes (12)

#1 JavaScript::Write (size: 19, repeated: 1)

&cb=44244070656

#2 JavaScript::Write (size: 23, repeated: 1)

&charset=ISO-8859-1

#3 JavaScript::Write (size: 22, repeated: 1)

&exclude=undefined

#4 JavaScript::Write (size: 53, repeated: 1)

&loc=http%3A//ads.webme.com/banner.php%3Fpos%3Dbw

#5 JavaScript::Write (size: 12, repeated: 1)

&nodis=1

#6 JavaScript::Write (size: 54, repeated: 1)

&referer=http%3A//galatasaray-cluj-maciizle.es.tl/

#7 JavaScript::Write (size: 11, repeated: 1)

'></script>

#8 JavaScript::Write (size: 112, repeated: 1)

<SCRIPT TYPE="text/javascript" SRC="http://ad.z5x.net/imp?Z=728x90&s=1728999&_salt=162550875&B=10&r=0"></SCRIPT>

#9 JavaScript::Write (size: 1521, repeated: 1)

<SCRIPT TYPE="text/javascript" SRC="http://ad.z5x.net/st?ad_type=ad&ad_size=728x90&section=1728999"></SCRIPT>
<div id='beacon_567d4d6df9' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'>
<img src="http://cas.criteo.com/delivery/lg.php?ckmode=0&bannerid=0&campaignid=0&zoneid=53832&pb=1&bizmodel=0&catCol=0&catId=0&cb=567d4d6df9&rtb=0&zc=%257cPlJMQy4tv7BIZxue%252bALdxA%253d%253d%257c&b=_%25252fLqVauF2f3GKuekfelxxrA%25253d%25253d&bi=%7cPlJMQy4tv7DpiZqm5t6Kyo7XfrSMGwXdu8F6x5W1%2bZM%3d%7c&loc=http%3a%2f%2fads.webme.com%2fbanner.php%3fpos%3dbw&referer=http%3a%2f%2fgalatasaray-cluj-maciizle.es.tl%2f&c=B4mqdBgpZRLcaZfeC7f-mw&iii=168493637&arbitrageid=3bf75a1709fa487b8517aa59173682b3&impressionid=3bf795903b5d4df48eb389bf11eabc37" width='0' height='0' alt='' style='width: 0px; height: 0px;' />
</div><div id="cton_d" style="display:none"></div>
<script type="text/javascript">
var cton_u = location.protocol + '//nt.criteo.com/ref/notify.aspx?z=53832&d=567d4d6df9', cton_f = 10;function cton_n(){if(Math.random()*1000<cton_f){var b=document.getElementById("cton_d"),a;if(b!=null&&b.appendChild&&document.createElement){try{cton_u+="&u0="+escape(document.location)}catch(c){}try{cton_u+="&u1="+escape(document.referrer)}catch(c){}a=document.createElement("IMG");if(a){b.appendChild(a);a.src=cton_u}}}}cton_n();
</script><div><img width="0" height="0" src="http://sync.mathtag.com/sync/img?type=sync&mt_exid=20&redir=http%3a%2f%2fdis.criteo.com%2frex%2fmatch.aspx%3fc%3d2%26uid%3d%5bMM_UUID%5d"></div>

#10 JavaScript::Write (size: 512, repeated: 1)

<a target="_blank" href="http://ad.z5x.net/clk?3,eJydTctugzAQ.BpuCPlBeMjqwcTQokDTVE6QuZmYYkgTKEFC7dfXKW0-oKPVaHY1Mwsx8QLvzYWhC0KIUAUlgVgq6Us3qFc2IIQgiH0MVjgE9hh6jG6Vfmwi.aRS-oMNyvLdImlzI7Hol-DGMUs343ZeTq3YfyxqjVT8m.8XIsd..dOmx.Q3zPw7aQ91fXS3sUOXF.tPUcQg46krvpop58l73sK25BRnXLWiO6KyEOiZn2C5uycfbFtP02BhaqHEjFRXZ66rc-0c-7PZK3m51KMzaGNJhv5qYVbN306zXs4=,"><img border="0" alt="" height="90" width="728" src="http://content.yieldmanager.edgesuite.net/atoms/e1/1e/e6/a9/e11ee6a9d7e47e4be4fba70f8a3887f6.gif"></img></a>

#11 JavaScript::Write (size: 75, repeated: 1)

<script type='text/javascript' src='http://cas.criteo.com/delivery/ajs.php?

#12 JavaScript::Write (size: 12, repeated: 1)

zoneid=53832


HTTP Transactions (59)


Request Response
GET / HTTP/1.1

Host: galatasaray-cluj-maciizle.es.tl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html; charset=ISO-8859-15
Date: Wed, 07 Nov 2012 10:46:15 GMT
Server: Apache
X-Powered-By: PHP/5.2.4-2ubuntu5.10
X-wm-1: 16c1a82a4aa2e13a662b2efdc37e48a2
Set-Cookie: PHPSESSID=015176b7aca07396390a0518e5c2336c; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: User-Agent,Accept-Encoding
Content-Encoding: gzip
Content-Length: 5712
Connection: close
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT
HTTP/1.1 200 OK

Content-Type: text/javascript
Content-Length: 14888
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Wed, 07 Nov 2012 01:21:26 GMT
Expires: Wed, 07 Nov 2012 13:21:26 GMT
Vary: Accept-Encoding
Age: 33889
Cache-Control: max-age=43200, public
Server: GFE/2.0
GET /banner.php?pos=bw HTTP/1.1

Host: ads.webme.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: text/html
Date: Wed, 07 Nov 2012 10:46:14 GMT
Server: Apache
X-Powered-By: PHP/5.2.12-pl0-gentoo
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Set-Cookie: adid=1; expires=Wed, 07-Nov-2012 12:46:14 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 503
Connection: close
GET /-I6AcO7H8DzE/TYfOKRkXBLI/AAAAAAAAADQ/LNxZdsnnABY/s320/backlink.gif HTTP/1.1

Host: 2.bp.blogspot.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Access-Control-Allow-Origin: *
Etag: &quot;v34&quot;
Expires: Thu, 08 Nov 2012 10:17:01 GMT
Content-Disposition: inline;filename=&quot;backlink.gif&quot;
X-Content-Type-Options: nosniff
Date: Wed, 07 Nov 2012 10:17:01 GMT
Server: fife
Content-Length: 227
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400, no-transform
Age: 1754
GET /_SCHl1nrEOHA/TUIaS_LyUVI/AAAAAAAAEgY/T-lBDLy4TdI/s1600/free%2Bbacklink.gif HTTP/1.1

Host: 2.bp.blogspot.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Access-Control-Allow-Origin: *
Etag: &quot;v1206&quot;
Expires: Tue, 06 Nov 2012 19:58:12 GMT
Content-Disposition: inline;filename=&quot;free backlink.gif&quot;
X-Content-Type-Options: nosniff
Date: Wed, 07 Nov 2012 10:01:57 GMT
Server: fife
Content-Length: 248
X-XSS-Protection: 1; mode=block
Age: 2658
Cache-Control: public, max-age=86400, no-transform
GET /iping.php?aut=EF14380489BD68920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1 HTTP/1.1

Host: www.auto-ping.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 10:49:24 GMT
Server: Apache
Pragma: public
Expires: Mon, 26 Jul 2014 05:00:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 208
Connection: close
GET /designs/fussball/Bilder/nav_bg.gif HTTP/1.1

Host: theme.webme.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Fri, 07 Dec 2012 10:46:15 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
Etag: &quot;1125039813&quot;
Last-Modified: Wed, 01 Aug 2012 15:44:43 GMT
Content-Length: 583
Date: Wed, 07 Nov 2012 10:46:15 GMT
Server: lighttpd/1.4.19
GET /designs/fussball/Bilder/bg.gif HTTP/1.1

Host: theme.webme.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Fri, 07 Dec 2012 10:46:15 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
Etag: &quot;591296005&quot;
Last-Modified: Wed, 01 Aug 2012 15:44:43 GMT
Content-Length: 19685
Date: Wed, 07 Nov 2012 10:46:15 GMT
Server: lighttpd/1.4.19
GET /designs/fussball/Bilder/content_bg.gif HTTP/1.1

Host: theme.webme.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Fri, 07 Dec 2012 10:46:15 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
Etag: &quot;856601497&quot;
Last-Modified: Wed, 01 Aug 2012 15:44:43 GMT
Content-Length: 64
Date: Wed, 07 Nov 2012 10:46:15 GMT
Server: lighttpd/1.4.19
GET /free-backlink.png HTTP/1.1

Host: backlink.comule.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 10:46:15 GMT
Server: Apache
Last-Modified: Thu, 01 Jul 2010 19:45:28 GMT
Accept-Ranges: bytes
Content-Length: 248
Connection: close
GET /designs/fussball/Bilder/header.gif HTTP/1.1

Host: theme.webme.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Fri, 07 Dec 2012 10:46:15 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
Etag: &quot;590947733&quot;
Last-Modified: Wed, 01 Aug 2012 15:44:43 GMT
Content-Length: 63805
Date: Wed, 07 Nov 2012 10:46:15 GMT
Server: lighttpd/1.4.19
GET /PftGo.png HTTP/1.1

Host: i.imgur.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Accept-Ranges: bytes
Cache-Control: max-age=315360000
Date: Wed, 07 Nov 2012 10:46:15 GMT
Etag: &quot;47f49162e84787a8c42a5119f49dd092&quot;
Expires: Thu, 15 Apr 2038 23:45:49 GMT
Last-Modified: Sat, 05 Nov 2011 22:40:19 GMT
Server: ECAcc (arn/46A9)
X-Cache: HIT
Content-Length: 2861
GET /zuZ9M.png HTTP/1.1

Host: i.imgur.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Accept-Ranges: bytes
Cache-Control: max-age=315360000
Date: Wed, 07 Nov 2012 10:46:15 GMT
Etag: &quot;06cefcee0578fc25d1351b87bbf9861d&quot;
Expires: Wed, 31 Mar 2038 14:01:02 GMT
Last-Modified: Sun, 06 Nov 2011 12:21:05 GMT
Server: ECAcc (arn/46B8)
X-Cache: HIT
X-Cached: BYPASS
Content-Length: 2920
GET /_nufQYaP5pPQ/TD1Ay8YhzAI/AAAAAAAAAAo/4vTSVAzNAIc/S170/GREEN.gif HTTP/1.1

Host: 4.bp.blogspot.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Access-Control-Allow-Origin: *
Etag: &quot;va&quot;
Expires: Thu, 08 Nov 2012 09:18:17 GMT
Content-Disposition: inline;filename=&quot;GREEN.gif&quot;
X-Content-Type-Options: nosniff
Date: Wed, 07 Nov 2012 10:20:56 GMT
Server: fife
Content-Length: 630
X-XSS-Protection: 1; mode=block
Age: 1519
Cache-Control: public, max-age=86400, no-transform
GET /bl/byethost8.png HTTP/1.1

Host: xn--crdenas-hwa.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 10:46:15 GMT
Server: Apache
Last-Modified: Wed, 09 Mar 2011 09:03:03 GMT
Etag: &quot;a8402a-bbc-49e08ff0fdfc0&quot;
Accept-Ranges: bytes
Content-Length: 3004
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /elindulo_abl_80x15.gif HTTP/1.1

Host: autobacklink.elindulo.hu

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 10:46:15 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 mod_fcgid/2.3.6
Last-Modified: Sat, 16 Jun 2012 17:55:54 GMT
Etag: &quot;161886bb-e9-4c29aa4e3fe80&quot;
Accept-Ranges: bytes
Content-Length: 233
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /bl/aumabali.png HTTP/1.1

Host: xn--crdenas-hwa.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 10:46:15 GMT
Server: Apache
Last-Modified: Tue, 17 Aug 2010 11:37:38 GMT
Etag: &quot;a840b0-b97-48e036044a480&quot;
Accept-Ranges: bytes
Content-Length: 2967
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /albums/ff136/marcoscane/phillink2.png HTTP/1.1

Host: i242.photobucket.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 10:46:15 GMT
Expires: Wed, 07 Nov 2012 19:58:58 GMT
Last-Modified: Thu, 23 Dec 2010 08:42:52 GMT
Cache-Control: max-age=86400
Etag: &quot;c3f-4980fdaf0fb00&quot;
Accept-Ranges: bytes
Server: Apache
Access-Control-Allow-Origin: *
X-Forwarded-Server: den2ws001
Vary: Accept
Content-Length: 3135
GET /gif/pb.png HTTP/1.1

Host: elvira-cardenas.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 10:46:15 GMT
Server: Apache
Last-Modified: Mon, 10 Oct 2011 11:00:54 GMT
Etag: &quot;5d8051-ba8-4aeefb4686580&quot;
Accept-Ranges: bytes
Content-Length: 2984
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /services/backlink/backlink2.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1332B416B8AC57D243F57613FCB2A3E351ACB2180A35240BDA3 HTTP/1.1

Host: www.morevisits.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 08:57:40 GMT
Server: windows server 2003
X-Powered-By: PHP/5.1.6
Pragma: public
Expires: Mon, 26 Jul 2014 05:00:00 GMT
Cache-Control: max-age=604800
Content-Length: 235
Connection: close
GET /services/backlink/backlink.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1332B416B8AC57D243F57613FCB2A3E351ACB2180A35240BDA3 HTTP/1.1

Host: www.morevisits.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 08:57:40 GMT
Server: windows server 2003
X-Powered-By: PHP/5.1.6
Pragma: public
Expires: Mon, 26 Jul 2014 05:00:00 GMT
Cache-Control: max-age=904800
Content-Length: 189
Connection: close
GET /services/backlink/backlink2.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C133214B6D89C17132344F7139C830162C23D81597BA7B4BBFE8 HTTP/1.1

Host: www.getfreebl.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 08:57:40 GMT
Server: windows server 2003
X-Powered-By: PHP/5.1.6
Pragma: public
Expires: Mon, 26 Jul 2014 05:00:00 GMT
Cache-Control: max-age=604800
Content-Length: 235
Connection: close
GET /iping.php?aut=EC153B028BB768920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1 HTTP/1.1

Host: www.ping-fast.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 08:57:40 GMT
Server: windows server 2003
X-Powered-By: PHP/5.1.6
Pragma: public
Expires: Mon, 26 Jul 2014 05:00:00 GMT
Cache-Control: max-age=604800
Content-Length: 193
Connection: close
GET /services/backlink/backlink.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C133214B6D89C17132344F7139C830162C23D81597BA7B4BBFE8 HTTP/1.1

Host: www.getfreebl.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 08:57:40 GMT
Server: windows server 2003
X-Powered-By: PHP/5.1.6
Pragma: public
Expires: Mon, 26 Jul 2014 05:00:00 GMT
Cache-Control: max-age=904800
Content-Length: 198
Connection: close
GET /designs/fussball/Bilder/navi.gif HTTP/1.1

Host: img.homepage-baukasten.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Etag: &quot;858379668&quot;
Accept-Ranges: bytes
Last-Modified: Fri, 08 Sep 2006 17:46:08 GMT
Content-Length: 2918
Date: Wed, 07 Nov 2012 10:46:15 GMT
Server: lighttpd/1.5.0
GET /pirata-link.png HTTP/1.1

Host: pirata-link.webege.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 10:46:15 GMT
Server: Apache
Last-Modified: Wed, 26 Jan 2011 17:52:09 GMT
Accept-Ranges: bytes
Content-Length: 214
Connection: close
GET /designs/fussball/Bilder/footer.gif HTTP/1.1

Host: theme.webme.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Fri, 07 Dec 2012 10:46:15 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
Etag: &quot;51328727&quot;
Last-Modified: Wed, 01 Aug 2012 15:44:43 GMT
Content-Length: 1517
Date: Wed, 07 Nov 2012 10:46:15 GMT
Server: lighttpd/1.4.19
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=110891151&utmhn=galatasaray-cluj-maciizle.es.tl&utmcs=ISO-8859-15&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Galatasaray%20Cluj%20Ma%C3%A7%C4%B1n%C4%B1%20Canl%C4%B1%20izle%207%20Kas%C4%B1m%20-%20Galatasaray%20Cluj%20Ma%C3%A7%C4%B1%20Canl%C4%B1%20izle%207%20Kas%C4%B1m%202012&utmhid=136175853&utmr=-&utmp=%2F&utmac=UA-2594508-9&utmcc=__utma%3D28130090.370480554.1352285176.1352285176.1352285176.1%3B%2B__utmz%3D28130090.1352285176.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&aip=1&utmu=qAQ~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.7&amp;utms=1&amp;utmn=110891151&amp;utmhn=galatasaray-cluj-maciizle.es.tl&amp;utmcs=ISO-8859-15&amp;utmsr=1176x885&amp;utmvp=1159x778&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=Galatasaray%20Cluj%20Ma%C3%A7%C4%B1n%C4%B1%20Canl%C4%B1%20izle%207%20Kas%C4%B1m%20-%20Galatasaray%20Cluj%20Ma%C3%A7%C4%B1%20Canl%C4%B1%20izle%207%20Kas%C4%B1m%202012&amp;utmhid=136175853&amp;utmr=-&amp;utmp=%2F&amp;utmac=UA-2594508-9&amp;utmcc=__utma%3D28130090.370480554.1352285176.1352285176.1352285176.1%3B%2B__utmz%3D28130090.1352285176.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;aip=1&amp;utmu=qAQ~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Thu, 01 Nov 2012 01:38:40 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 551256
Server: GFE/2.0
GET /delivery/ajs.php?zoneid=53832&nodis=1&cb=44244070656&exclude=undefined&charset=ISO-8859-1&loc=http%3A//ads.webme.com/banner.php%3Fpos%3Dbw&referer=http%3A//galatasaray-cluj-maciizle.es.tl/ HTTP/1.1

Host: cas.criteo.com
GET /delivery/ajs.php?zoneid=53832&amp;nodis=1&amp;cb=44244070656&amp;exclude=undefined&amp;charset=ISO-8859-1&amp;loc=http%3A//ads.webme.com/banner.php%3Fpos%3Dbw&amp;referer=http%3A//galatasaray-cluj-maciizle.es.tl/ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.webme.com/banner.php?pos=bw
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=iso-8859-1
Cache-Control: private, max-age=0, no-cache
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Server: Microsoft-IIS/7.5
P3P: CP='CUR ADM OUR NOR STA NID'
Set-Cookie: uid=5decfc3a-4a31-48e8-985f-1d0417ffd4db; domain=.criteo.com; expires=Thu, 07-Nov-2013 10:46:15 GMT; path=/ uid=5decfc3a-4a31-48e8-985f-1d0417ffd4db; domain=.criteo.com; expires=Thu, 07-Nov-2013 10:46:15 GMT; path=/ udc=*1euxYQ09pFGqaApz0d%2bBcow%3d%3d; domain=.criteo.com; expires=Tue, 07-May-2013 09:46:16 GMT; path=/ zdi=*1VXcisv%2fD3jmM1417yzGAU%2ffmaXivlh4oM5yvSmVjnkU%3d; domain=.criteo.com; expires=Tue, 07-May-2013 09:46:16 GMT; path=/ udi=*1RpK96PUF1K%2fouiAsw6ARxw%3d%3d; domain=.criteo.com; expires=Thu, 08-Nov-2012 10:46:16 GMT; path=/
Date: Wed, 07 Nov 2012 10:46:15 GMT
Content-Length: 1233
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: Keep-Alive
GET /delivery/lg.php?ckmode=0&bannerid=0&campaignid=0&zoneid=53832&pb=1&bizmodel=0&catCol=0&catId=0&cb=567d4d6df9&rtb=0&zc=%257cPlJMQy4tv7BIZxue%252bALdxA%253d%253d%257c&b=_%25252fLqVauF2f3GKuekfelxxrA%25253d%25253d&bi=%7cPlJMQy4tv7DpiZqm5t6Kyo7XfrSMGwXdu8F6x5W1%2bZM%3d%7c&loc=http%3a%2f%2fads.webme.com%2fbanner.php%3fpos%3dbw&referer=http%3a%2f%2fgalatasaray-cluj-maciizle.es.tl%2f&c=B4mqdBgpZRLcaZfeC7f-mw&iii=168493637&arbitrageid=3bf75a1709fa487b8517aa59173682b3&impressionid=3bf795903b5d4df48eb389bf11eabc37 HTTP/1.1

Host: cas.criteo.com
GET /delivery/lg.php?ckmode=0&amp;bannerid=0&amp;campaignid=0&amp;zoneid=53832&amp;pb=1&amp;bizmodel=0&amp;catCol=0&amp;catId=0&amp;cb=567d4d6df9&amp;rtb=0&amp;zc=%257cPlJMQy4tv7BIZxue%252bALdxA%253d%253d%257c&amp;b=_%25252fLqVauF2f3GKuekfelxxrA%25253d%25253d&amp;bi=%7cPlJMQy4tv7DpiZqm5t6Kyo7XfrSMGwXdu8F6x5W1%2bZM%3d%7c&amp;loc=http%3a%2f%2fads.webme.com%2fbanner.php%3fpos%3dbw&amp;referer=http%3a%2f%2fgalatasaray-cluj-maciizle.es.tl%2f&amp;c=B4mqdBgpZRLcaZfeC7f-mw&amp;iii=168493637&amp;arbitrageid=3bf75a1709fa487b8517aa59173682b3&amp;impressionid=3bf795903b5d4df48eb389bf11eabc37 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.webme.com/banner.php?pos=bw
Cookie: uid=5decfc3a-4a31-48e8-985f-1d0417ffd4db; udc=*1euxYQ09pFGqaApz0d%2bBcow%3d%3d; zdi=*1VXcisv%2fD3jmM1417yzGAU%2ffmaXivlh4oM5yvSmVjnkU%3d; udi=*1RpK96PUF1K%2fouiAsw6ARxw%3d%3d
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: private, max-age=0, no-cache
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Server: Microsoft-IIS/7.5
P3P: CP='CUR ADM OUR NOR STA NID'
Date: Wed, 07 Nov 2012 10:46:16 GMT
Content-Length: 43
Vary: Accept-Encoding
GET /img_track.png HTTP/1.1

Host: pub.sitetag.us

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Server: Apache/2.2.22 (Ubuntu)
Last-Modified: Tue, 03 Jul 2012 03:53:09 GMT
Accept-Ranges: bytes
Content-Length: 512
Cache-Control: max-age=31536000
Date: Wed, 07 Nov 2012 10:46:16 GMT
Connection: keep-alive
X-N: S
GET /services/backlink/backlink2.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1332B416B8AC6673224507B38C3232D1C24C12199937747B8 HTTP/1.1

Host: www.moreusers.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 08:57:40 GMT
Server: windows server 2003
X-Powered-By: PHP/5.1.6
Pragma: public
Expires: Mon, 26 Jul 2014 05:00:00 GMT
Cache-Control: max-age=604800
Content-Length: 235
Connection: close
GET /addlinksto/add-80x15.gif HTTP/1.1

Host: f3.blog.br

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx/1.0.11
Date: Wed, 07 Nov 2012 10:46:16 GMT
Content-Length: 239
Last-Modified: Mon, 06 Feb 2012 16:42:43 GMT
Connection: keep-alive
Expires: Wed, 07 Nov 2012 11:16:16 GMT
Cache-Control: max-age=1800
Accept-Ranges: bytes
GET /sync/img?type=sync&mt_exid=20&redir=http%3a%2f%2fdis.criteo.com%2frex%2fmatch.aspx%3fc%3d2%26uid%3d%5bMM_UUID%5d HTTP/1.1

Host: sync.mathtag.com
GET /sync/img?type=sync&amp;mt_exid=20&amp;redir=http%3a%2f%2fdis.criteo.com%2frex%2fmatch.aspx%3fc%3d2%26uid%3d%5bMM_UUID%5d HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.webme.com/banner.php?pos=bw
HTTP/1.1 302 Found

Content-Type: image/gif
Date: Wed, 07 Nov 2012 10:46:16 GMT
Content-Length: 0
Connection: keep-alive
Server: mt2/2.6.2.2465 Sep 24 2012 22:21:34 zrh-pixel-x3 pid 0x9fc 2556
Cache-Control: no-cache
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Set-Cookie: uuid=509a3bf8-efe7-709e-937b-88183fa954d6; domain=.mathtag.com; path=/; expires=Thu, 07-Nov-2013 10:46:16 GMT mt_mop=20:1352285176; domain=.mathtag.com; path=/; expires=Fri, 07-Dec-2012 10:46:16 GMT
Location: http://dis.criteo.com/rex/match.aspx?c=2&amp;uid=509a3bf8-efe7-709e-937b-88183fa954d6
GET /services/backlink/backlink2.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C133214B6D89C171323442713DC9253F2224C73C88A35C48B0A3371BCFC74D HTTP/1.1

Host: www.getfreebacklinks.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 08:57:40 GMT
Server: windows server 2003
X-Powered-By: PHP/5.1.6
Pragma: public
Expires: Mon, 26 Jul 2014 05:00:00 GMT
Cache-Control: max-age=604800
Content-Length: 235
Connection: close
GET /services/backlink/backlink2.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C133354D6B86C3602464127139C830027B66D81F8CB175 HTTP/1.1

Host: www.scripts21.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 08:57:40 GMT
Server: windows server 2003
X-Powered-By: PHP/5.1.6
Pragma: public
Expires: Mon, 26 Jul 2014 05:00:00 GMT
Cache-Control: max-age=604800
Content-Length: 235
Connection: close
GET /rex/match.aspx?c=2&uid=509a3bf8-efe7-709e-937b-88183fa954d6 HTTP/1.1

Host: dis.criteo.com
GET /rex/match.aspx?c=2&amp;uid=509a3bf8-efe7-709e-937b-88183fa954d6 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.webme.com/banner.php?pos=bw
Cookie: uid=5decfc3a-4a31-48e8-985f-1d0417ffd4db; udc=*1euxYQ09pFGqaApz0d%2bBcow%3d%3d; zdi=*1VXcisv%2fD3jmM1417yzGAU%2ffmaXivlh4oM5yvSmVjnkU%3d; udi=*1RpK96PUF1K%2fouiAsw6ARxw%3d%3d
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: no-cache
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Server: Microsoft-IIS/7.5
P3P: CP='CUR ADM OUR NOR STA NID'
X-AspNet-Version: 4.0.30319
Set-Cookie: eid=*1%2f%2bgUUKDJe13wJypEZ90%2bWsKBldxFEDSgl843uNM25DcZ7oNfR5ya5xJkhW%2fP6%2f2g; domain=.criteo.com; expires=Tue, 07-May-2013 09:46:16 GMT; path=/
Date: Wed, 07 Nov 2012 10:46:16 GMT
Content-Length: 43
Vary: Accept-Encoding
GET /st?ad_type=ad&ad_size=728x90&section=1728999 HTTP/1.1

Host: ad.z5x.net
GET /st?ad_type=ad&amp;ad_size=728x90&amp;section=1728999 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.webme.com/banner.php?pos=bw
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Date: Wed, 07 Nov 2012 10:46:16 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor1055.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Wed, 07 Nov 2012 10:46:16 GMT
Expires: Wed, 07 Nov 2012 10:46:16 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /imp?Z=728x90&s=1728999&_salt=162550875&B=10&r=0 HTTP/1.1

Host: ad.z5x.net
GET /imp?Z=728x90&amp;s=1728999&amp;_salt=162550875&amp;B=10&amp;r=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.webme.com/banner.php?pos=bw
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Wed, 07 Nov 2012 10:46:16 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor0383.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Location: http://ad.yieldmanager.com/imp?Z=728x90&amp;s=1728999&amp;_salt=162550875&amp;B=10&amp;r=0
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Wed, 07 Nov 2012 10:46:16 GMT
Expires: Wed, 07 Nov 2012 10:46:16 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /tracking.js?hash=22d971c9e2b67795e407a2dc5ff74a1f HTTP/1.1

Host: track.sitetag.us

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: application/javascript
Server: Apache/2.2.22 (Ubuntu)
Last-Modified: Tue, 03 Jul 2012 03:52:44 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 854
Cache-Control: max-age=31536000
Date: Wed, 07 Nov 2012 10:46:16 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET /tracking.js?hash=e436d8ffded46e18052fd25f9d2c6a43 HTTP/1.1

Host: track.sitetag.us

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: application/javascript
Server: Apache/2.2.22 (Ubuntu)
Last-Modified: Tue, 03 Jul 2012 03:52:44 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 854
Cache-Control: max-age=31536000
Date: Wed, 07 Nov 2012 10:46:16 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET /cookie.php?visit=galatasaray-cluj-maciizle&auth1=59b033511f5bfb7578887594d9a7ccdb&auth2=bce7977c0d05e837f0ee297446825b1d&auth3=8dca18cb8b265fb9bd23dbdf3604a445&auth4=48e79f2f61d6590ad51ca65ec0b119e8&auth5=f6dc3816f27daddb7cc589be48763549&mode=track HTTP/1.1

Host: www.homepage-baukasten.de
GET /cookie.php?visit=galatasaray-cluj-maciizle&amp;auth1=59b033511f5bfb7578887594d9a7ccdb&amp;auth2=bce7977c0d05e837f0ee297446825b1d&amp;auth3=8dca18cb8b265fb9bd23dbdf3604a445&amp;auth4=48e79f2f61d6590ad51ca65ec0b119e8&amp;auth5=f6dc3816f27daddb7cc589be48763549&amp;mode=track HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: text/plain;charset=iso-8859-15
Date: Wed, 07 Nov 2012 10:46:16 GMT
Server: Apache
X-Powered-By: PHP/5.2.4-2ubuntu5.10
X-wm-1: 16c1a82a4aa2e13a662b2efdc37e48a2
Set-Cookie: PHPSESSID=41359cf016c179117edfbc65f6c852a6; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: User-Agent,Accept-Encoding
Content-Encoding: gzip
Content-Length: 20
Connection: close
GET /small.js HTTP/1.1

Host: widgets.amung.us

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Date: Wed, 07 Nov 2012 10:46:16 GMT
Last-Modified: Wed, 31 Oct 2012 07:27:00 GMT
Transfer-Encoding: chunked
Connection: close
Server: Apache/1.1 (Windows 4.00.950)
Expires: Fri, 07 Dec 2012 10:46:16 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
GET /imp?Z=728x90&s=1728999&_salt=162550875&B=10&r=0 HTTP/1.1

Host: ad.yieldmanager.com
GET /imp?Z=728x90&amp;s=1728999&amp;_salt=162550875&amp;B=10&amp;r=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.webme.com/banner.php?pos=bw
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Wed, 07 Nov 2012 10:46:16 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor0016.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Location: http://cookex.amp.yahoo.com/v2/cexposer/SIG=12eu1899h/*http%3A//ad.yieldmanager.com/imp?Z=728x90&amp;s=1728999&amp;_salt=162550875&amp;B=10&amp;r=0
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Wed, 07 Nov 2012 10:46:16 GMT
Expires: Wed, 07 Nov 2012 10:46:16 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /resim/banner65-14.gif HTTP/1.1

Host: linkdevi.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 10:46:16 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;a4-4f4bb141-0&quot;
Last-Modified: Mon, 27 Feb 2012 16:37:21 GMT
Content-Length: 164
Cache-Control: max-age=604800
Expires: Wed, 14 Nov 2012 10:46:16 GMT
GET /resim/linkon65-14.gif HTTP/1.1

Host: linkon.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 10:46:16 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;86-4f4bb244-0&quot;
Last-Modified: Mon, 27 Feb 2012 16:41:40 GMT
Content-Length: 134
Cache-Control: max-age=604800
Expires: Wed, 14 Nov 2012 10:46:16 GMT
GET /resim/banner65-14.gif HTTP/1.1

Host: www.v8link.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 10:46:16 GMT
Server: LiteSpeed
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Etag: &quot;b8-4f48b72c-0&quot;
Last-Modified: Sat, 25 Feb 2012 10:25:48 GMT
Content-Length: 184
Cache-Control: max-age=604800
Expires: Wed, 14 Nov 2012 10:46:16 GMT
GET /images/backlink.gif HTTP/1.1

Host: www.overshopping.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 10:46:16 GMT
Server: Apache
Last-Modified: Mon, 09 May 2011 18:27:46 GMT
Etag: &quot;34e109b-b7-4a2dbfefa36c5&quot;
Accept-Ranges: bytes
Content-Length: 183
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /images/backlink.gif HTTP/1.1

Host: www.allnewssite.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 10:46:16 GMT
Server: Apache
Last-Modified: Mon, 09 May 2011 18:33:56 GMT
Etag: &quot;30ad92b-2d0-4a2dc150594ea&quot;
Accept-Ranges: bytes
Content-Length: 720
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /tc.js HTTP/1.1

Host: cdn.tynt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Server: Apache
Etag: &quot;e90262a9b7f893f49e37312d301ae8d5:1351183796&quot;
Last-Modified: Mon, 22 Oct 2012 17:32:05 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 07 Nov 2012 10:46:17 GMT
Content-Length: 3481
Connection: keep-alive
GET /pingjs/?k=q92zgigdlvof&t=Galatasaray%20Cluj%20Ma%C3%A7%C4%B1n%C4%B1%20Canl%C4%B1%20izle%207%20Kas%C4%B1m%20-%20Galatasaray%20Cluj%20Ma%C3%A7%C4%B1%20Canl%C4%B1%20izle%207%20&c=s&y=&a=0&r=95630 HTTP/1.1

Host: whos.amung.us
GET /pingjs/?k=q92zgigdlvof&amp;t=Galatasaray%20Cluj%20Ma%C3%A7%C4%B1n%C4%B1%20Canl%C4%B1%20izle%207%20Kas%C4%B1m%20-%20Galatasaray%20Cluj%20Ma%C3%A7%C4%B1%20Canl%C4%B1%20izle%207%20&amp;c=s&amp;y=&amp;a=0&amp;r=95630 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Wed, 07 Nov 2012 10:46:17 GMT
Transfer-Encoding: chunked
Connection: close
Set-Cookie: uid=CgH9H1CaO/lhgxVsZi/xAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=whos.amung.us; path=/
Content-Encoding: gzip
GET /v2/cexposer/SIG=12eu1899h/*http%3A//ad.yieldmanager.com/imp?Z=728x90&s=1728999&_salt=162550875&B=10&r=0 HTTP/1.1

Host: cookex.amp.yahoo.com
GET /v2/cexposer/SIG=12eu1899h/*http%3A//ad.yieldmanager.com/imp?Z=728x90&amp;s=1728999&amp;_salt=162550875&amp;B=10&amp;r=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.webme.com/banner.php?pos=bw
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Date: Wed, 07 Nov 2012 10:46:17 GMT
Set-Cookie: B=4fks2a589kevp&amp;b=3&amp;s=f0; expires=Tue, 08-Nov-2014 20:00:00 GMT; path=/; domain=.yahoo.com
P3P: policyref=&quot;http://info.yahoo.com/w3c/p3p.xml&quot;, CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV&quot;
Location: http://ad.yieldmanager.com/imp?Z=728x90&amp;s=1728999&amp;_salt=162550875&amp;B=10&amp;r=0&amp;SIG=10vlgh4h9;x-cookie=4sxf2n589xric&amp;o=3&amp;f=s0
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Cache-Control: private
GET /imp?Z=728x90&s=1728999&_salt=162550875&B=10&r=0&SIG=10vlgh4h9;x-cookie=4sxf2n589xric&o=3&f=s0 HTTP/1.1

Host: ad.yieldmanager.com
GET /imp?Z=728x90&amp;s=1728999&amp;_salt=162550875&amp;B=10&amp;r=0&amp;SIG=10vlgh4h9;x-cookie=4sxf2n589xric&amp;o=3&amp;f=s0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.webme.com/banner.php?pos=bw
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Date: Wed, 07 Nov 2012 10:46:18 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor1088.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Set-Cookie: BX=4fks2a589kevp&amp;b=3&amp;s=f0&amp;t=311; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT uid=uid=5c1d07d2-28c8-11e2-b882-c396df88e48c&amp;_hmacv=1&amp;_salt=2573289770&amp;_keyid=k1&amp;_hmac=b51af9b1fcc6d1e663b53716388235f481d25e0e; path=/; expires=Fri, 07-Dec-2012 10:46:17 GMT RMBX=4fks2a589kevp&amp;b=3&amp;s=f0&amp;t=311; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Wed, 07 Nov 2012 10:46:18 GMT
Expires: Wed, 07 Nov 2012 10:46:18 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 1
Transfer-Encoding: chunked
Connection: keep-alive
GET /atoms/e1/1e/e6/a9/e11ee6a9d7e47e4be4fba70f8a3887f6.gif HTTP/1.1

Host: content.yieldmanager.edgesuite.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.webme.com/banner.php?pos=bw
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache
Etag: &quot;e11ee6a9d7e47e4be4fba70f8a3887f6:1329043515&quot;
Last-Modified: Sun, 12 Feb 2012 10:45:03 GMT
Accept-Ranges: bytes
Content-Length: 15056
Cache-Control: max-age=31536000
Date: Wed, 07 Nov 2012 10:46:18 GMT
Connection: keep-alive
GET /sync/img?type=sync&mt_exid=20&redir=http%3a%2f%2fdis.criteo.com%2frex%2fmatch.aspx%3fc%3d2%26uid%3d%5bMM_UUID%5d HTTP/1.1

Host: sync.mathtag.com
GET /sync/img?type=sync&amp;mt_exid=20&amp;redir=http%3a%2f%2fdis.criteo.com%2frex%2fmatch.aspx%3fc%3d2%26uid%3d%5bMM_UUID%5d HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.webme.com/banner.php?pos=bw
Cookie: uuid=509a3bf8-efe7-709e-937b-88183fa954d6; mt_mop=20:1352285176
HTTP/1.1 302 Found

Content-Type: image/gif
Date: Wed, 07 Nov 2012 10:46:18 GMT
Content-Length: 0
Connection: keep-alive
Server: mt2/2.6.2.2465 Sep 24 2012 22:21:34 zrh-pixel-x3 pid 0x9fd 2557
Cache-Control: no-cache
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Set-Cookie: mt_mop=20:1352285178; domain=.mathtag.com; path=/; expires=Fri, 07-Dec-2012 10:46:18 GMT
Location: http://dis.criteo.com/rex/match.aspx?c=2&amp;uid=509a3bf8-efe7-709e-937b-88183fa954d6
GET /rex/match.aspx?c=2&uid=509a3bf8-efe7-709e-937b-88183fa954d6 HTTP/1.1

Host: dis.criteo.com
GET /rex/match.aspx?c=2&amp;uid=509a3bf8-efe7-709e-937b-88183fa954d6 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ads.webme.com/banner.php?pos=bw
Cookie: uid=5decfc3a-4a31-48e8-985f-1d0417ffd4db; udc=*1euxYQ09pFGqaApz0d%2bBcow%3d%3d; zdi=*1VXcisv%2fD3jmM1417yzGAU%2ffmaXivlh4oM5yvSmVjnkU%3d; udi=*1RpK96PUF1K%2fouiAsw6ARxw%3d%3d; eid=*1%2f%2bgUUKDJe13wJypEZ90%2bWsKBldxFEDSgl843uNM25DcZ7oNfR5ya5xJkhW%2fP6%2f2g
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: no-cache
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Server: Microsoft-IIS/7.0
P3P: CP='CUR ADM OUR NOR STA NID'
X-AspNet-Version: 4.0.30319
Date: Wed, 07 Nov 2012 10:46:17 GMT
Content-Length: 43
Vary: Accept-Encoding
GET /favicon.ico HTTP/1.1

Host: galatasaray-cluj-maciizle.es.tl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=015176b7aca07396390a0518e5c2336c; __utma=28130090.370480554.1352285176.1352285176.1352285176.1; __utmb=28130090.1.10.1352285176; __utmc=28130090; __utmz=28130090.1352285176.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/x-icon
Date: Wed, 07 Nov 2012 10:46:18 GMT
Server: Apache
Last-Modified: Tue, 31 Jul 2012 11:55:58 GMT
Etag: &quot;93ef-0-4c61edc870f80&quot;
Accept-Ranges: bytes
Content-Length: 0
Vary: User-Agent
Connection: close
GET /deb/v2?id=w!q92zgigdlvof&r= HTTP/1.1

Host: de.tynt.com
GET /deb/v2?id=w!q92zgigdlvof&amp;r= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: application/javascript
Server: Apache-Coyote/1.1
Cache-Control: max-age=86400
Expires: Thu, 08 Nov 2012 10:46:18 GMT
Content-Length: 2
Date: Wed, 07 Nov 2012 10:46:18 GMT
Connection: close
GET /b/p?id=w!q92zgigdlvof&ts=1352285177241&t=Galatasaray%20Cluj%20Ma%C3%A7%C4%B1n%C4%B1%20Canl%C4%B1%20izle%207%20Kas%C4%B1m%20-%20Galatasaray%20Cluj%20Ma%C3%A7%C4%B1%20Canl%C4%B1%20izle%207%20Kas%C4%B1m%202012 HTTP/1.1

Host: ic.tynt.com
GET /b/p?id=w!q92zgigdlvof&amp;ts=1352285177241&amp;t=Galatasaray%20Cluj%20Ma%C3%A7%C4%B1n%C4%B1%20Canl%C4%B1%20izle%207%20Kas%C4%B1m%20-%20Galatasaray%20Cluj%20Ma%C3%A7%C4%B1%20Canl%C4%B1%20izle%207%20Kas%C4%B1m%202012 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://galatasaray-cluj-maciizle.es.tl/
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx/0.7.65
Date: Wed, 07 Nov 2012 10:46:18 GMT
Content-Length: 35
Last-Modified: Fri, 16 Apr 2010 15:38:20 GMT
Connection: close
Cache-Control: &quot;no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false&quot;
Expires: &quot;Sat, 26 Jul 1997 05:00:00 GMT&quot;
Set-Cookie: uid=CgUVbFCaO/ocnzutA/hFAg==; expires=Thu, 07-Nov-13 10:46:18 GMT; domain=tynt.com; path=/
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;CUR ADM OUR NOR STA NID&quot;
Accept-Ranges: bytes