Overview

URLhttp://rockingham911.org/api.gif%20-n
IP184.168.221.70
ASNAS26496 GoDaddy.com, LLC
Location United States
Report completed2012-11-07 17:18:51 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-07 17:18:14 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 2
2012-11-07 17:18:15 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 3
2012-11-07 17:18:15 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 2
2012-11-07 17:18:15 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 3
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 184.168.221.70

Date Alerts / IDS URL IP
2013-02-07 11:10:560 / 4http://veganstraightedge.org/youthliberation/:script1184.168.221.70
2013-02-06 00:27:390 / 4http://www.pdfscanpro.com/184.168.221.70
2013-01-21 12:25:240 / 4http://vrvv.com/?hg=0184.168.221.70
2013-01-21 06:16:350 / 4http://vrvv.com/?hg=0184.168.221.70
2013-01-20 08:38:320 / 4http://norddrums.com/cgi-sys/suspendedpage.cgi184.168.221.70
2013-01-18 21:00:510 / 4http://cocojewelry.com/upload/bbs/botping.txt184.168.221.70

Last 6 reports on ASN: AS26496 GoDaddy.com, LLC

Date Alerts / IDS URL IP
2013-02-15 09:46:010 / 3http://mkvrpknidkurcrftiqsfjqdxbn.com/AffgJ5XRi1LTdj0xLjEmaWQ9MTU4Nzc2ODYzMSZhaWQ9MzA1NDQmc2lkP (...)50.62.12.103
2013-02-15 09:44:520 / 0http://www.microcodes.info/a-ds2480-library-33527.html50.63.77.1
2013-02-15 09:41:550 / 1http://tag5industries.com/987.pdf173.201.208.1
2013-02-15 09:22:530 / 4http://argentmarketingtools.com/hitin.php50.63.202.32
2013-02-15 09:22:460 / 4http://argentmarketingtools.com/downloader.php50.63.202.32
2013-02-15 09:21:010 / 3http://mkvrpknidkurcrftiqsfjqdxbn.com/UQf9W3RXWEHbdj0xLjEmaWQ9MTY0NDY1MjE1NSZhaWQ9MzA0OTgmc2lkP (...)50.62.12.103

Last 6 reports on domain: rockingham911.org

Date Alerts / IDS URL IP
2012-11-15 02:40:300 / 0http://rockingham911.org69.57.170.93
2012-11-12 01:20:370 / 4http://rockingham911.org/api.gif184.168.221.70
2012-11-08 21:19:170 / 4http://rockingham911.org184.168.221.70
2012-11-07 17:16:310 / 0http://rockingham911.org/api.gif%20-n/?-d%20allow_url_include%3DOn+-d%20auto_prepend_file%3D184.168.221.70
2012-11-01 00:39:400 / 4http://rockingham911.org/api.gif%20-n50.63.202.83
2012-10-31 20:16:110 / 4http://rockingham911.org/api.gif50.63.202.83



JavaScript

Executed Scripts (17)


Executed Evals (1)

#1 JavaScript::Eval (size: 2645, repeated: 1) 

({
    "name": "master-1",
    "slave-0-1": {
        "verticalSpacing": 2,
        "lines": 2,
        "clicktrackUrl": "http://rockingham911.org/caf.aspx/?e=Wzp9ZGNkWzD9WzZ9ZPMcCFMyCKIaM2ZyZ24yZaZyZaAyLaO4qzS0qJ56BGRkYzWyqPHlp25wqv50qaZyZwHlZP1uWz49WzA2pG0gZmD4BQLkZwH4AQpjAQR1ZwNjZPMyMm0lZQRlZGRjAmN5ZGtkAPMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lAQxznT5aCGRzpUN9DHVzqTL9AvMjpm0mBGNlAmpmBGt4AGxjBQN3AmRl-1",
        "colorTitleLink": "#0000FF",
        "colorDomainLink": "#006600",
        "colorAttribution": "#000000",
        "fontFamilyAttribution": "arial",
        "linkTarget": "_blank",
        "fontSizeTitle": "16px",
        "fontSizeDescription": "12px",
        "fontSizeDomainLink": "12px",
        "fontSizeAttribution": "14px",
        "titleBold": 1,
        "attributionText": "Ads",
        "adIconPageLocation": "ad-left",
        "plaFormat": "twoColumn",
        "resultsPageBaseUrl": "http://rockingham911.org?caf=1&schnl=caf-test-extra",
        "type": "ads",
        "searchBoxMethod": "get",
        "attributionBold": true,
        "columns": 1
    },
    "slave-1-1": {
        "lines": 3,
        "clicktrackUrl": "http://rockingham911.org/caf.aspx/?e=Wzp9ZGNkWzD9WzZ9ZPMcCFMyCKIaM2ZyZ24yZaZyZaAyLaO4qzS0qJ56BGRkYzWyqPHlp25wqv50qaZyZwHlZP1uWz49WzA2pG0gZmD4BQLkZwH4AQpjAQR1ZwNjZPMyMm0lZQRlZGRjAmN5ZGtkAPMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lAQxznT5aCGRzpUN9DHVzqTL9AvMjpm0mBGNlAmpmBGt4AGxjBQN3AmRl-1",
        "colorBackground": "transparent",
        "colorAttribution": "#000000",
        "fontFamilyAttribution": "arial",
        "linkTarget": "_blank",
        "fontSizeTitle": "16px",
        "fontSizeDescription": "12px",
        "fontSizeDomainLink": "12px",
        "fontSizeAttribution": "14px",
        "attributionText": "Ads",
        "adIconPageLocation": "ad-left",
        "plaFormat": "twoColumn",
        "resultsPageBaseUrl": "http://rockingham911.org?caf=1&schnl=caf-test-extra",
        "type": "searchbox",
        "hideSearchInputBorder": true,
        "hideSearchButtonBorder": true,
        "colorSearchButton": "transparent",
        "colorSearchButtonText": "transparent",
        "widthSearchInput": 338,
        "widthSearchButton": 90,
        "searchBoxMethod": "get",
        "attributionBold": true,
        "columns": 1
    },
    "master-1": {
        "verticalSpacing": 2,
        "lines": 2,
        "clicktrackUrl": "http://rockingham911.org/caf.aspx/?e=Wzp9ZGNkWzD9WzZ9ZPMcCFMyCKIaM2ZyZ24yZaZyZaAyLaO4qzS0qJ56BGRkYzWyqPHlp25wqv50qaZyZwHlZP1uWz49WzA2pG0gZmD4BQLkZwH4AQpjAQR1ZwNjZPMyMm0lZQRlZGRjAmN5ZGtkAPMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lAQxznT5aCGRzpUN9DHVzqTL9AvMjpm0mBGNlAmpmBGt4AGxjBQN3AmRl-1",
        "colorTitleLink": "#0000FF",
        "colorDomainLink": "#006600",
        "colorAttribution": "#000000",
        "fontFamilyAttribution": "arial",
        "linkTarget": "_blank",
        "fontSizeTitle": "16px",
        "fontSizeDescription": "12px",
        "fontSizeDomainLink": "12px",
        "fontSizeAttribution": "14px",
        "titleBold": 1,
        "attributionText": "Ads",
        "adIconPageLocation": "ad-left",
        "plaFormat": "twoColumn",
        "resultsPageBaseUrl": "http://rockingham911.org?caf=1&schnl=caf-test-extra",
        "type": "ads",
        "searchBoxMethod": "get",
        "attributionBold": true,
        "columns": 1
    }
})

Executed Writes (3)

#1 JavaScript::Write (size: 44, repeated: 1) 

<div style="display:inline" id="oV10"></div>

#2 JavaScript::Write (size: 109, repeated: 1) 

<input style="width:0px; top:0px; position:absolute; visibility:hidden;" id="oV6" onchange="fV8(fV1,5,true)">

#3 JavaScript::Write (size: 143, repeated: 3) 

<script src="//www.google.com/ads/search/module/ads/1.0/b5757bbe7c0ba99e5046fa56f7680887ce3b11d8/n/domains.js" type="text/javascript"></script>


HTTP Transactions (23)


Request Response 
GET /api.gif%20-n HTTP/1.1

Host: rockingham911.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily

Content-Length: 0
Location: /api.gif%20-n?06ac4f00
GET /api.gif%20-n?06ac4f00 HTTP/1.1

Host: rockingham911.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily

Content-Length: 0
Location: /api.gif%20-n
GET /api.gif%20-n HTTP/1.1

Host: rockingham911.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
Set-Cookie: fc=fcVal=3902773988590807712; domain=rockingham911.org; expires=Fri, 01-Jan-2038 07:00:00 GMT; path=/
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 16:18:13 GMT
Content-Length: 694
Age: 0
Connection: keep-alive
GET /adsense/domains/caf.js HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/api.gif%20-n
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

Date: Wed, 07 Nov 2012 16:18:14 GMT
Expires: Wed, 07 Nov 2012 16:18:14 GMT
Cache-Control: private, max-age=3600
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: amfe
Content-Length: 217
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /apps/domainpark/show_afd_ads.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/api.gif%20-n
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

Last-Modified: Wed, 31 Oct 2012 23:10:23 GMT
Date: Wed, 07 Nov 2012 01:40:01 GMT
Expires: Thu, 08 Nov 2012 01:40:01 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Server: domainserver
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
Cache-Control: public, max-age=86400
Content-Length: 1932
Age: 52693
GET /ads/search/module/ads/1.0/b5757bbe7c0ba99e5046fa56f7680887ce3b11d8/n/domains.js HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/api.gif%20-n
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

Date: Wed, 07 Nov 2012 16:18:14 GMT
Expires: Thu, 07 Nov 2013 16:18:14 GMT
Cache-Control: public, max-age=31536000
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: amfe
Content-Length: 33491
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /domainads/tracking/splitter.gif?&vid=caf-test-extra&afdts=1352305094357&afdrid=5725558 HTTP/1.1

Host: www.gstatic.com
GET /domainads/tracking/splitter.gif?&amp;vid=caf-test-extra&amp;afdts=1352305094357&amp;afdrid=5725558 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/api.gif%20-n
 
HTTP/1.1 200 OK

Content-Type: image/gif

Last-Modified: Tue, 12 Jun 2012 00:35:58 GMT
Date: Wed, 07 Nov 2012 16:18:14 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 43
X-XSS-Protection: 1; mode=block
GET /default.aspx?caf=1&vid=caf-test-extra&afdts=1352305094357&afdrid=5725558 HTTP/1.1

Host: rockingham911.org
GET /default.aspx?caf=1&amp;vid=caf-test-extra&amp;afdts=1352305094357&amp;afdrid=5725558 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/api.gif%20-n
Cookie: fc=fcVal=3902773988590807712
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 16:18:14 GMT
Content-Length: 7199
Age: 0
Connection: keep-alive
GET /images/or2.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/default.aspx?caf=1&amp;vid=caf-test-extra&amp;afdts=1352305094357&amp;afdrid=5725558
 
HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Wed, 26 Sep 2012 21:03:06 GMT
Etag: &quot;02114532a9ccd1:319&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 987
X-Varnish: 594459974 594443862
Cache-Control: max-age=3888000
Date: Wed, 07 Nov 2012 16:18:14 GMT
Connection: keep-alive
GET /images/bul_blacksquare.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/default.aspx?caf=1&amp;vid=caf-test-extra&amp;afdts=1352305094357&amp;afdrid=5725558
 
HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Fri, 25 Jul 2008 21:49:00 GMT
Etag: &quot;02ec3fa0eec81:31d&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 126
X-Varnish: 972599184 972517252
Cache-Control: max-age=3888000
Date: Wed, 07 Nov 2012 16:18:14 GMT
Connection: keep-alive
GET /images/bul_bluesquare.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/default.aspx?caf=1&amp;vid=caf-test-extra&amp;afdts=1352305094357&amp;afdrid=5725558
 
HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Fri, 25 Jul 2008 21:49:00 GMT
Etag: &quot;02ec3fa0eec81:31d&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 126
X-Varnish: 972599185 972517310
Cache-Control: max-age=3888000
Date: Wed, 07 Nov 2012 16:18:14 GMT
Connection: keep-alive
GET /images/logo_gd3.jpg HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/default.aspx?caf=1&amp;vid=caf-test-extra&amp;afdts=1352305094357&amp;afdrid=5725558
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Last-Modified: Wed, 26 Sep 2012 20:33:00 GMT
Etag: &quot;0669e1e269ccd1:311&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 5837
X-Varnish: 597314952 597289102
Cache-Control: max-age=3888000
Date: Wed, 07 Nov 2012 16:18:14 GMT
Connection: keep-alive
GET /script/jquery-1.3.1.min.js HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/default.aspx?caf=1&amp;vid=caf-test-extra&amp;afdts=1352305094357&amp;afdrid=5725558
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Last-Modified: Tue, 13 Jul 2010 18:55:42 GMT
Etag: &quot;0cbf3fdbc22cb1:316&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Varnish: 972597056 972517225
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=3888000
Date: Wed, 07 Nov 2012 16:18:14 GMT
Content-Length: 19149
Connection: keep-alive
GET /domainads/tracking/caf.gif?ts=1352305094698&rid=4087210 HTTP/1.1

Host: www.gstatic.com
GET /domainads/tracking/caf.gif?ts=1352305094698&amp;rid=4087210 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/default.aspx?caf=1&amp;vid=caf-test-extra&amp;afdts=1352305094357&amp;afdrid=5725558
 
HTTP/1.1 200 OK

Content-Type: image/gif

Last-Modified: Fri, 01 Jun 2012 22:49:22 GMT
Date: Wed, 07 Nov 2012 16:18:14 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 43
X-XSS-Protection: 1; mode=block
GET /images/GDPPC_CAF_Searcha.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/default.aspx?caf=1&amp;vid=caf-test-extra&amp;afdts=1352305094357&amp;afdrid=5725558
 
HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Fri, 05 Oct 2012 20:07:29 GMT
Etag: &quot;bbb11c35a3cd1:619&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 1446
X-Varnish: 1422707048 1422689149
Cache-Control: max-age=3888000
Date: Wed, 07 Nov 2012 16:18:14 GMT
Connection: keep-alive
GET /images/GDPPCSprite.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/default.aspx?caf=1&amp;vid=caf-test-extra&amp;afdts=1352305094357&amp;afdrid=5725558
 
HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Wed, 26 Sep 2012 21:18:10 GMT
Etag: &quot;095e76d2c9ccd1:316&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 8912
X-Varnish: 594459976 594443865
Cache-Control: max-age=3888000
Date: Wed, 07 Nov 2012 16:18:14 GMT
Connection: keep-alive
GET /sd?s=95331&f=1 HTTP/1.1

Host: as.casalemedia.com
GET /sd?s=95331&amp;f=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/default.aspx?caf=1&amp;vid=caf-test-extra&amp;afdts=1352305094357&amp;afdrid=5725558
 
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html; charset=iso-8859-1

Server: Apache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Location: http://as.casalemedia.com/sd?s=95331&amp;f=1&amp;C=1
Content-Length: 236
Expires: Wed, 07 Nov 2012 16:18:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 07 Nov 2012 16:18:14 GMT
Connection: keep-alive
Set-Cookie: CMID=EM0wHkPS1I0AAHRuuwAAAAAT;domain=casalemedia.com;path=/;expires=Thu, 07 Nov 2013 16:18:14 GMT
CMPS=134;domain=casalemedia.com;path=/;expires=Tue, 05 Feb 2013 16:18:14 GMT
CMPP=008;domain=casalemedia.com;path=/;expires=Tue, 05 Feb 2013 16:18:14 GMT
GET /simgad/15873544467035193344 HTTP/1.1

Host: googleads.g.doubleclick.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/default.aspx?caf=1&amp;vid=caf-test-extra&amp;afdts=1352305094357&amp;afdrid=5725558
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
 
HTTP/1.1 200 OK

Content-Type: text/html

Vary: Accept-Encoding
Last-Modified: Wed, 30 May 2012 19:06:47 GMT
Date: Thu, 01 Nov 2012 14:11:01 GMT
Expires: Fri, 01 Nov 2013 14:11:01 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
Content-Length: 701
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 526033
GET /sd?s=95331&f=1&C=1 HTTP/1.1

Host: as.casalemedia.com
GET /sd?s=95331&amp;f=1&amp;C=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/default.aspx?caf=1&amp;vid=caf-test-extra&amp;afdts=1352305094357&amp;afdrid=5725558
Cookie: CMID=EM0wHkPS1I0AAHRuuwAAAAAT; CMPS=134; CMPP=008
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Server: Apache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Content-Length: 6781
Expires: Wed, 07 Nov 2012 16:18:15 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 07 Nov 2012 16:18:15 GMT
Connection: keep-alive
Set-Cookie: CMID=EM0wHkPS1I0AAHRuuwAAAAAT;domain=casalemedia.com;path=/;expires=Thu, 07 Nov 2013 16:18:14 GMT
CMPS=134;domain=casalemedia.com;path=/;expires=Tue, 05 Feb 2013 16:18:14 GMT
CMPP=008;domain=casalemedia.com;path=/;expires=Tue, 05 Feb 2013 16:18:14 GMT
CMS=95331&amp;1352305094;domain=casalemedia.com;path=/;expires=Fri, 07 Dec 2012 16:18:14 GMT
CMST=UJqJxlCaicYB;domain=casalemedia.com;path=/;expires=Thu, 08 Nov 2012 16:18:14 GMT
CMSC=UJqJxg**;domain=casalemedia.com;path=/;
CMDD=AAF0TAE*;domain=casalemedia.com;path=/;expires=Thu, 08 Nov 2012 16:18:14 GMT
CMD1=AACjiVCaicYAAXRjAAJ00wEAAA**;domain=casalemedia.com;path=/;expires=Fri, 07 Dec 2012 16:18:14 GMT
GET /img.aspx?q=L3MkWGAkYGZ0BQt2ZGV1BQD3ZQDkAGVjZQNyZwMaWGAkZGNkWGV2MFHmpKIaM2ZyZwHmovHlAGWmWGV1ZaAyLaO4qzS0qJ56BGRkYzWyqPHlAGWmozA2YaE2plHlAGV1ZwNgLFHlAz4yZ3RjWGV2LlHmpGNyZwMyMvHmpGNyZwMzWGAkWGV2MJpyZ3RlZQRlZGRjAmN5ZGtkAPHlAzA5WGAkZFHlAaEaWGAkZFHlAatyZ3RyZwMzM3NyZ3RjWGV2oabyZ3RjWGV2MaNyZ3RlAQxyZwMbozpyZ3RkWGV2qTLyZ3R2WGV2pUNyZ3SODvHlAzAbWGAkAt==-1 HTTP/1.1

Host: rockingham911.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/default.aspx?caf=1&amp;vid=caf-test-extra&amp;afdts=1352305094357&amp;afdrid=5725558
Cookie: fc=fcVal=3902773988590807712
 
HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 16:18:14 GMT
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /apps/domainpark/domainpark.cgi?client=dp-godaddy1_xml&channel=caf-test-extra&hl=no&r=m&lines=2&frm=1&domain_name=rockingham911.org&oe=UTF-8&ie=UTF-8&fexp=21404%2C38724&format=p10%7Cs&ad=a10&adrep=3&num=0&output=caf&v=3&preload=true&adext=as1%2Csr1&rurl=http%3A%2F%2Frockingham911.org%2Fdefault.aspx%3Fcaf%3D1%26vid%3Dcaf-test-extra%26afdts%3D1352305094357%26afdrid%3D5725558&ref=http%3A%2F%2Frockingham911.org%2Fapi.gif%2520-n&u_his=1&u_tz=60&dt=1352305094707&u_w=1176&u_h=885&bs=1176,778&ps=1176,0&frm=1&loader=alt HTTP/1.1

Host: googleads.g.doubleclick.net
GET /apps/domainpark/domainpark.cgi?client=dp-godaddy1_xml&amp;channel=caf-test-extra&amp;hl=no&amp;r=m&amp;lines=2&amp;frm=1&amp;domain_name=rockingham911.org&amp;oe=UTF-8&amp;ie=UTF-8&amp;fexp=21404%2C38724&amp;format=p10%7Cs&amp;ad=a10&amp;adrep=3&amp;num=0&amp;output=caf&amp;v=3&amp;preload=true&amp;adext=as1%2Csr1&amp;rurl=http%3A%2F%2Frockingham911.org%2Fdefault.aspx%3Fcaf%3D1%26vid%3Dcaf-test-extra%26afdts%3D1352305094357%26afdrid%3D5725558&amp;ref=http%3A%2F%2Frockingham911.org%2Fapi.gif%2520-n&amp;u_his=1&amp;u_tz=60&amp;dt=1352305094707&amp;u_w=1176&amp;u_h=885&amp;bs=1176,778&amp;ps=1176,0&amp;frm=1&amp;loader=alt HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://rockingham911.org/default.aspx?caf=1&amp;vid=caf-test-extra&amp;afdts=1352305094357&amp;afdrid=5725558
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Wed, 07 Nov 2012 16:18:15 GMT
Server: domainserver
Cache-Control: private
Content-Length: 3906
X-XSS-Protection: 1; mode=block
GET /favicon.ico HTTP/1.1

Host: rockingham911.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: fc=fcVal=3902773988590807712
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 16:18:15 GMT
Content-Length: 136
Age: 0
Connection: keep-alive
GET /favicon.ico HTTP/1.1

Host: rockingham911.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: fc=fcVal=3902773988590807712
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Wed, 07 Nov 2012 16:18:17 GMT
Content-Length: 136
Age: 0
Connection: keep-alive