Overview

URLhttp://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&mktid=122&mpid=3834892&fpid=-1&rnd=8226957123979688418&nu=n&sp=n&ctid=1
IP195.159.219.10
ASNAS5381 PowerTech Information Systems AS
Location Norway
Report completed2012-11-07 19:34:02 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro No alerts detected
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-07 19:33:25 urlQuery Client 173.241.240.71MALWARE-CNC Win32.Delf outbound connection
2012-11-07 19:33:25 urlQuery Client 173.241.240.71MALWARE-CNC Win32.Delf outbound connection


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 195.159.219.10

Date Alerts / IDS URL IP
2013-02-14 19:04:020 / 4http://www.latimes.com/195.159.219.10
2013-02-14 18:41:080 / 1http://apnmedia.ask.com/media/toolbar/supertoolbar/apnpartners/AD5/stub2.0/5.2.1.0/Ap (...)195.159.219.10
2013-02-14 18:37:560 / 0http://new.evite.com/I/TBE4UB5I7C195.159.219.10
2013-02-14 18:25:150 / 2http://aihdownload.adobe.com/bin/live/install_flashplayer11x32ax_gtbd_chrd_dn_aih.exe195.159.219.10
2013-02-14 17:10:410 / 0http://cdn.flashtalking.com195.159.219.10
2013-02-14 15:14:410 / 1http://admin.brightcove.com/viewer/us20130212.1339/federatedVideoUI/BrightcovePlayer. (...)195.159.219.10

Last 6 reports on ASN: AS5381 PowerTech Information Systems AS

Date Alerts / IDS URL IP
2013-02-14 20:48:130 / 1http://www.independent.co.uk/news/world/middle-east/saudi-royal-family-intervenes-over-preacher (...)195.159.219.9
2013-02-14 20:40:570 / 0http://platformdl.adobe.com/SSN/AIH/meta/reader11_en_11001.solidpkg195.159.219.8
2013-02-14 20:18:080 / 0http://www.yum.com195.159.219.8
2013-02-14 19:04:020 / 4http://www.latimes.com/195.159.219.10
2013-02-14 19:01:230 / 0http://www.axis.com195.159.219.9
2013-02-14 18:59:270 / 0http://edge.quantserve.com195.159.219.8

Last 6 reports on domain: cdn.turn.com

Date Alerts / IDS URL IP
2013-01-10 21:16:070 / 0http://cdn.turn.com195.159.219.8
2012-12-10 21:03:190 / 0http://cdn.turn.com/server/ddc.htm195.159.219.8
2012-12-03 20:34:170 / 0http://cdn.turn.com/server/ddc.htm?uid=3700645553644005315&rnd=3801671451595681883&fpid (...)195.159.219.10
2012-11-09 12:25:470 / 2http://cdn.turn.com/server/ddc.htm?uid=7339173340225985296195.159.219.8
2012-11-08 18:55:080 / 2http://cdn.turn.com/server/ddc.htm?uid=7480481441680018304195.159.219.8
2012-11-08 15:35:250 / 2http://cdn.turn.com/server/ddc.htm?uid=7852535879130848068195.159.219.8



JavaScript

Executed Scripts (3)


Executed Evals (0)


Executed Writes (2)

#1 JavaScript::Write (size: 0, repeated: 1)

#2 JavaScript::Write (size: 96, repeated: 1)

<script type='text/javascript' src='http://adadvisor.net/adscores/g.js?sid=9201023828'></script>


HTTP Transactions (38)


Request Response
GET /server/ddc.htm?uid=8128333894062405443&mktid=122&mpid=3834892&fpid=-1&rnd=8226957123979688418&nu=n&sp=n&ctid=1 HTTP/1.1

Host: cdn.turn.com
GET /server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html;charset=UTF-8
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Pragma: no-cache
Content-Encoding: gzip
Cache-Control: private, no-cache, no-store, must-revalidate
Date: Wed, 07 Nov 2012 18:33:24 GMT
Content-Length: 4142
Connection: keep-alive
Vary: Accept-Encoding
GET /match?admeld_adprovider_id=24&external_user_id=8128333894062405443 HTTP/1.1

Host: tag.admeld.com
GET /match?admeld_adprovider_id=24&amp;external_user_id=8128333894062405443 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
Cookie: meld_sess=bbeaaa1b-8eda-4510-8721-df07b3f95b13
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache
P3P: policyref=&quot;http://tag.admeld.com/w3c/p3p.xml&quot;, CP=&quot;PSAo PSDo OUR SAM OTR BUS DSP ALL COR&quot;
Pragma: no-cache
Cache-Control: no-store
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Content-Length: 35
Date: Wed, 07 Nov 2012 18:33:25 GMT
Connection: keep-alive
GET /getuid?http://r.turn.com/r/bd?ddc=1&pid=54&cver=1&uid=$UID HTTP/1.1

Host: ib.adnxs.com
GET /getuid?http://r.turn.com/r/bd?ddc=1&amp;pid=54&amp;cver=1&amp;uid=$UID HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(G*axlrk5.$WN_]Dl5M7G(nDS'6pnU
HTTP/1.1 302 Moved

Content-Type: text/html; charset=ISO-8859-1
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Tue, 05-Feb-2013 18:33:25 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Thu, 08-Nov-2012 18:33:25 GMT; domain=.adnxs.com; HttpOnly
Location: http://r.turn.com/r/bd?ddc=1&amp;pid=54&amp;cver=1&amp;uid=5858721859426781856
Date: Wed, 07 Nov 2012 18:33:25 GMT
Content-Length: 0
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=pcv:1|uid:8128333894062405443 HTTP/1.1

Host: image2.pubmatic.com
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&amp;piggybackCookie=pcv:1|uid:8128333894062405443 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 200 OK

Content-Type: text/html
Date: Wed, 07 Nov 2012 18:33:25 GMT
Server: Apache/2.2.4 (Unix) DAV/2 mod_ssl/2.2.4 OpenSSL/0.9.8e-fips-rhel5 mod_fastcgi/2.4.2
Set-Cookie: KRTBCOOKIE_22=488-pcv:1|uid:8128333894062405443; domain=pubmatic.com; expires=Fri, 07-Nov-2014 18:33:25 GMT; path=/ PUBRETARGET=82_1446921205; domain=pubmatic.com; expires=Sat, 07-Nov-2015 18:33:25 GMT; path=/
Content-Length: 1
P3P: CP=&quot;NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC&quot;
Connection: close
GET /pixel?google_nid=turn1&google_cm&google_hm=ODEyODMzMzg5NDA2MjQwNTQ0Mw== HTTP/1.1

Host: cm.g.doubleclick.net
GET /pixel?google_nid=turn1&amp;google_cm&amp;google_hm=ODEyODMzMzg5NDA2MjQwNTQ0Mw== HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Location: http://r.turn.com/r/cms/id/0/ddc/1/pid/18/uid/?google_gid=CAESED7yEyqvwHaZ756lIOe7tfw&amp;google_cver=1
Date: Wed, 07 Nov 2012 18:33:25 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: Cookie Matcher
Content-Length: 300
X-XSS-Protection: 1; mode=block
GET /set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=8128333894062405443 HTTP/1.1

Host: r.openx.net
GET /set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&amp;rtb=8128333894062405443 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Wed, 07 Nov 2012 18:33:25 GMT
Server: Apache
Cache-Control: no-cache, must-revalidate
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Set-Cookie: i=8f1a2734-570b-478d-a714-0544003946ba; expires=Fri, 07-Nov-2014 18:33:25 GMT; path=/; domain=.openx.net
Location: /set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&amp;rtb=8128333894062405443&amp;cc=1
Content-Length: 0
Connection: close
GET /r/pu?&pid=4&tuid=8128333894062405443 HTTP/1.1

Host: turn.nexac.com
GET /r/pu?&amp;pid=4&amp;tuid=8128333894062405443 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Content-Length: 43
Date: Wed, 07 Nov 2012 18:33:24 GMT
GET /r/dm/mkt/4/mpid//mpuid/8128333894062405443 HTTP/1.1

Host: d.p-td.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Set-Cookie: uid=3411610235098404598; Domain=.p-td.com; Expires=Mon, 06-May-2013 18:33:25 GMT; Path=/
Content-Length: 43
Date: Wed, 07 Nov 2012 18:33:24 GMT
GET /r/du/id/L2NzaWQvMS9zcGlkLzQ/url/http%3A%2F%2Ftags.bluekai.com%2Fsite%2F4499%3Fid%3DPARTNER_UUID HTTP/1.1

Host: r.turn.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Set-Cookie: uid=9184832959799407074; Domain=.turn.com; Expires=Mon, 06-May-2013 18:33:25 GMT; Path=/
Location: http://tags.bluekai.com/site/4499?id=9184832959799407074
Transfer-Encoding: chunked
Date: Wed, 07 Nov 2012 18:33:24 GMT
GET /r/du/id/L2NzaWQvMS9zcGlkLzU/url/http%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D375%26dpuuid%3DPARTNER_UUID HTTP/1.1

Host: r.turn.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Set-Cookie: uid=4489304839486132371; Domain=.turn.com; Expires=Mon, 06-May-2013 18:33:25 GMT; Path=/
Location: http://dpm.demdex.net/ibs:dpid=375&amp;dpuuid=4489304839486132371
Transfer-Encoding: chunked
Date: Wed, 07 Nov 2012 18:33:24 GMT
GET /r/du/id/L2NzaWQvMS9tcGlkLzE5MjQyNjEy HTTP/1.1

Host: d.turn.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Set-Cookie: uid=3737481839875590250; Domain=.turn.com; Expires=Mon, 06-May-2013 18:33:25 GMT; Path=/
Location: http://segment-pixel.invitemedia.com/set_partner_uid?partnerID=402&amp;sscs_active=1&amp;partnerUID=3737481839875590250
Transfer-Encoding: chunked
Date: Wed, 07 Nov 2012 18:33:24 GMT
GET /r/dd/id/L2NzaWQvMS9jaWQvMjM2NTYzMjkvdC8y/url/http%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D470%26dpuuid%3D%24!%7BTURN_UUID%7D HTTP/1.1

Host: d.turn.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Set-Cookie: uid=7204520365174943856; Domain=.turn.com; Expires=Mon, 06-May-2013 18:33:25 GMT; Path=/
Location: http://dpm.demdex.net/ibs:dpid=470&amp;dpuuid=7204520365174943856
Transfer-Encoding: chunked
Date: Wed, 07 Nov 2012 18:33:24 GMT
GET /r/bd?ddc=1&pid=54&cver=1&uid=5858721859426781856 HTTP/1.1

Host: r.turn.com
GET /r/bd?ddc=1&amp;pid=54&amp;cver=1&amp;uid=5858721859426781856 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
Cookie: rrs=1%7C2%7C3%7C4%7C5%7C6%7C7%7C9%7C1001%7C1002%7Cundefined%7C10%7C1004%7Cundefined%7C12%7Cundefined%7Cundefined%7C1008%7C13%7Cundefined%7Cundefined%7Cundefined%7Cundefined%7C16%7C18%7C21%7C1010%7Cundefined%7C1011%7Cundefined%7Cundefined%7C27%7C1013%7C1014; rds=15652%7C15652%7C15652%7C15652%7C15652%7C15652%7C15652%7C15652%7C15652%7C15652%7Cundefined%7C15652%7C15652%7Cundefined%7C15652%7Cundefined%7Cundefined%7C15652%7C15652%7Cundefined%7Cundefined%7Cundefined%7Cundefined%7C15652%7C15652%7C15652%7C15652%7Cundefined%7C15652%7Cundefined%7Cundefined%7C15652%7C15652%7C15652; rv=1
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Set-Cookie: uid=8016643382969899837; Domain=.turn.com; Expires=Mon, 06-May-2013 18:33:25 GMT; Path=/
Content-Length: 43
Date: Wed, 07 Nov 2012 18:33:25 GMT
GET /merge?pid=1&3pid=8128333894062405443 HTTP/1.1

Host: ce.lijit.com
GET /merge?pid=1&amp;3pid=8128333894062405443 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 18:33:25 GMT
Server: Apache/2.2.14 (Ubuntu)
X-Powered-By: PHP/5.3.2-1ubuntu4.9
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache, max-age=86400, must-revalidate
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Set-Cookie: ljtrtb=eJyrVjJUslKyMDSyMDY2trA0MTAzMjEwNTExVqoFAE%2F0Bck%3D; expires=Thu, 07-Nov-2013 18:33:25 GMT; path=/; domain=.lijit.com
Content-Length: 43
Expires: Thu, 08 Nov 2012 18:33:25 GMT
Connection: close
GET /r/cms/id/0/ddc/1/pid/18/uid/?google_gid=CAESED7yEyqvwHaZ756lIOe7tfw&google_cver=1 HTTP/1.1

Host: r.turn.com
GET /r/cms/id/0/ddc/1/pid/18/uid/?google_gid=CAESED7yEyqvwHaZ756lIOe7tfw&amp;google_cver=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
Cookie: rrs=1%7C2%7C3%7C4%7C5%7C6%7C7%7C9%7C1001%7C1002%7Cundefined%7C10%7C1004%7Cundefined%7C12%7Cundefined%7Cundefined%7C1008%7C13%7Cundefined%7Cundefined%7Cundefined%7Cundefined%7C16%7C18%7C21%7C1010%7Cundefined%7C1011%7Cundefined%7Cundefined%7C27%7C1013%7C1014; rds=15652%7C15652%7C15652%7C15652%7C15652%7C15652%7C15652%7C15652%7C15652%7C15652%7Cundefined%7C15652%7C15652%7Cundefined%7C15652%7Cundefined%7Cundefined%7C15652%7C15652%7Cundefined%7Cundefined%7Cundefined%7Cundefined%7C15652%7C15652%7C15652%7C15652%7Cundefined%7C15652%7Cundefined%7Cundefined%7C15652%7C15652%7C15652; rv=1
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Set-Cookie: uid=3274659763004859171; Domain=.turn.com; Expires=Mon, 06-May-2013 18:33:25 GMT; Path=/
Content-Length: 43
Date: Wed, 07 Nov 2012 18:33:25 GMT
GET /set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&rtb=8128333894062405443&cc=1 HTTP/1.1

Host: r.openx.net
GET /set?pid=21a19823-5de3-4917-bc81-a4edea5127ff&amp;rtb=8128333894062405443&amp;cc=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
Cookie: i=8f1a2734-570b-478d-a714-0544003946ba
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 18:33:25 GMT
Server: Apache
Cache-Control: public, max-age=30, proxy-revalidate
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Set-Cookie: i=8f1a2734-570b-478d-a714-0544003946ba; expires=Fri, 07-Nov-2014 18:33:25 GMT; path=/; domain=.openx.net
Content-Length: 43
Connection: close
GET /tap.php?v=4212&nid=1185&put=8128333894062405443&expires=60 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=4212&amp;nid=1185&amp;put=8128333894062405443&amp;expires=60 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 18:33:25 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%264212%3D1; expires=Fri, 07-Dec-2012 18:33:25 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264212%3D24994%2C0%2C1%2C%2C; expires=Fri, 07-Dec-2012 18:33:25 GMT; path=/; domain=.pixel.rubiconproject.com put_1185=8128333894062405443; expires=Sun, 06-Jan-2013 18:33:25 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9880
Connection: Keep-Alive
GET /adserver/vdi/742697?d=8128333894062405443 HTTP/1.1

Host: ads.adbrite.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 200 OK

Content-Type: image/gif
Content-Encoding: gzip
Accept-Ranges: none
Cache-Control: no-cache, no-store, must-revalidate
Date: Wed, 07 Nov 2012 18:33:25 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: policyref=&quot;http://files.adbrite.com/w3c/p3p.xml&quot;,CP=&quot;NOI PSA PSD OUR IND UNI NAV DEM STA OTC&quot;
Server: XPEHb/1.2
Set-Cookie: Apache=&quot;168362103x0.222+1352313205x-959594144&quot;; path=/; domain=.adbrite.com; expires=Tue, 02-Nov-2032 18:33:25 GMT rb2=CiQKBjc0MjY5Nxjmh52owQEiEzgxMjgzMzM4OTQwNjI0MDU0NDMQAQ; path=/; domain=.adbrite.com; expires=Tue, 05-Feb-2013 18:33:25 GMT
Content-Length: 59
GET /adserver/vdi/1113874?d=8128333894062405443 HTTP/1.1

Host: ads.adbrite.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 200 OK

Content-Type: image/gif
Content-Encoding: gzip
Accept-Ranges: none
Cache-Control: no-cache, no-store, must-revalidate
Date: Wed, 07 Nov 2012 18:33:25 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: policyref=&quot;http://files.adbrite.com/w3c/p3p.xml&quot;,CP=&quot;NOI PSA PSD OUR IND UNI NAV DEM STA OTC&quot;
Server: XPEHb/1.2
Set-Cookie: Apache=&quot;168362160x0.222+1352313205x2143894022&quot;; path=/; domain=.adbrite.com; expires=Tue, 02-Nov-2032 18:33:25 GMT rb2=CiUKBzExMTM4NzQY5oedqMEBIhM4MTI4MzMzODk0MDYyNDA1NDQzEAE; path=/; domain=.adbrite.com; expires=Tue, 05-Feb-2013 18:33:25 GMT
Content-Length: 59
GET /set_partner_uid?partnerID=402&sscs_active=1&partnerUID=3737481839875590250 HTTP/1.1

Host: segment-pixel.invitemedia.com
GET /set_partner_uid?partnerID=402&amp;sscs_active=1&amp;partnerUID=3737481839875590250 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Wed, 07 Nov 2012 18:33:25 GMT
Set-Cookie: uid=6b439977-0a8d-46ad-af7e-da7e1c7b879d;Path=/;Domain=invitemedia.com;Expires=Thu, 07-Nov-2013 18:33:25 GMT partnerUID=eyI0MDIiOlsiMzczNzQ4MTgzOTg3NTU5MDI1MCIsdHJ1ZV19;Path=/;Domain=invitemedia.com;Expires=Thu, 07-Nov-2013 18:33:25 GMT impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC&quot;
Cache-Control: no-cache
Location: http://cm.g.doubleclick.net/pixel?google_sc&amp;google_nid=invitemedia&amp;google_cm&amp;google_hm=a0OZdwqNRq2vftp-HHuHnQ==
Content-Length: 0
Connection: close
Server: Jetty(7.3.1.v20110307)
GET /ad?mode=7&publisher_dsp_id=2&external_user_id=8128333894062405443 HTTP/1.1

Host: ad.afy11.net
GET /ad?mode=7&amp;publisher_dsp_id=2&amp;external_user_id=8128333894062405443 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.0 200 OK

Content-Type: image/gif
Connection: close
Cache-Control: private, max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
Expires: Sat, 1 Jan 2000 01:01:00 GMT
Last-Modified: Sat, 1 Jan 2000 01:01:00 GMT
Pragma: no-cache
Server: AdifyServer
Content-Length: 45
Set-Cookie: a=t6paL1RWTUGA3TmeeJ9dXA; path=/; expires=Fri, 07-Nov-2014 18:33:25 GMT; domain=afy11.net; s=1,2*509aa975*QQ99h8uuQA*ItIEPdX8DTkZPvlH3LbGJL6gvw==*; path=/; expires=Fri, 07-Nov-2014 18:33:25 GMT; domain=afy11.net;
P3P: policyref=&quot;http://ad.afy11.net/privacy.xml&quot;, CP=&quot; NOI DSP NID ADMa DEVa PSAa PSDa OUR OTRa IND COM NAV STA OTC&quot;
GET /fr/u.php?p=328546547221502&m=8128333894062405443&t=2592000 HTTP/1.1

Host: www.facebook.com
GET /fr/u.php?p=328546547221502&amp;m=8128333894062405443&amp;t=2592000 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: public, max-age=0
Date: Wed, 07 Nov 2012 10:33:25 PST
Expires: Wed, 07 Nov 2012 10:33:25 PST
Pragma: public
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
X-FB-Debug: TTVAmCTJQzjnmWU95y8c7qbZItUsnL3zwSli2nJuro0=
Transfer-Encoding: chunked
Connection: keep-alive
GET /rum?cm_dsp_id=4&external_user_id=8128333894062405443 HTTP/1.1

Host: r.casalemedia.com
GET /rum?cm_dsp_id=4&amp;external_user_id=8128333894062405443 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Expires: Wed, 07 Nov 2012 18:33:25 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 07 Nov 2012 18:33:25 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: CMID=9Dohmq3LtdAAAB50PhMAAABk;domain=casalemedia.com;path=/;expires=Thu, 07 Nov 2013 18:33:25 GMT CMPS=066;domain=casalemedia.com;path=/;expires=Tue, 05 Feb 2013 18:33:25 GMT CMPP=013;domain=casalemedia.com;path=/;expires=Tue, 05 Feb 2013 18:33:25 GMT CMRUM2=04000000008128333894062405443;domain=casalemedia.com;path=/;expires=Thu, 07 Nov 2013 18:33:25 GMT CMST=UJqpdVCaqXUA;domain=casalemedia.com;path=/;expires=Thu, 08 Nov 2012 18:33:25 GMT CMSC=UJqpdQ**;domain=casalemedia.com;path=/; CMDD=;domain=casalemedia.com;path=/;expires=Thu, 08 Nov 2012 18:33:25 GMT
GET /pixel?google_sc&google_nid=invitemedia&google_cm&google_hm=a0OZdwqNRq2vftp-HHuHnQ== HTTP/1.1

Host: cm.g.doubleclick.net
GET /pixel?google_sc&amp;google_nid=invitemedia&amp;google_cm&amp;google_hm=a0OZdwqNRq2vftp-HHuHnQ== HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Location: http://g-pixel.invitemedia.com/gmatcher?google_gid=CAESEE5Cd4RhtyLOx5zauejuLUM&amp;google_cver=1
Date: Wed, 07 Nov 2012 18:33:25 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: Cookie Matcher
Content-Length: 293
X-XSS-Protection: 1; mode=block
GET /r/dm/mkt/44/mpid//mpuid/8128333894062405443 HTTP/1.1

Host: d.audienceiq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Set-Cookie: uid=8138400829299661067; Domain=.audienceiq.com; Expires=Mon, 06-May-2013 18:33:25 GMT; Path=/
Content-Length: 43
Date: Wed, 07 Nov 2012 18:33:24 GMT
GET /cms/v1?esig=1~862d802dd86fb59368388ad078a7f298ddbbd0b7&nwid=10000424978&sigv=1 HTTP/1.1

Host: ad.yieldmanager.com
GET /cms/v1?esig=1~862d802dd86fb59368388ad078a7f298ddbbd0b7&amp;nwid=10000424978&amp;sigv=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 302 Found

Content-Type: text/plain; charset=utf-8
Date: Wed, 07 Nov 2012 18:33:25 GMT
P3P: policyref=&quot;http://p3p.yahoo.com/w3c/p3p.xml&quot;, CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV&quot;
Location: http://r.turn.com/r/cms/id/0/ddc/1/pid/43/uid/?xid=E0
Cache-Control: private
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: YTS/1.20.13
GET /r/dm/mkt/73/mpid//mpuid/8128333894062405443 HTTP/1.1

Host: d.audienceiq.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Set-Cookie: uid=3180647120783500067; Domain=.audienceiq.com; Expires=Mon, 06-May-2013 18:33:25 GMT; Path=/
Content-Length: 43
Date: Wed, 07 Nov 2012 18:33:25 GMT
GET /adscores/g.js?sid=9201023828 HTTP/1.1

Host: adadvisor.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed,  07 Nov 2012 18:33:25 GMT
Connection: close
Server: AAWebServer
P3P: policyref=&quot;http://www.adadvisor.net/w3c/p3p.xml&quot;,CP=&quot;NOI NID&quot;
Content-Length: 21
GET /ibs:dpid=375&dpuuid=4489304839486132371 HTTP/1.1

Host: dpm.demdex.net
GET /ibs:dpid=375&amp;dpuuid=4489304839486132371 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 302 Found

HTTP/1.1 302 Found
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT&quot;
DCS: ny-dcs-3-1.internal.demdex.com 1.9.12
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
Pragma: no-cache
Expires: Thu, 01 Jan 2009 00:00:00 GMT
Set-Cookie: demdex=39973291967358102743925482327034851277;Path=/;Domain=.demdex.net;Expires=Tue, 08-Nov-2022 04:41:05 GMT
Location: http://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=375&amp;dpuuid=4489304839486132371
Content-Length: 0
Server: Jetty(7.2.2.v20101205)
GET /site/4499?id=9184832959799407074 HTTP/1.1

Host: tags.bluekai.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 18:33:25 GMT
Server: Apache/2.2.3 (CentOS)
P3P: CP=&quot;NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV&quot;, policyref=&quot;http://tags.bluekai.com/w3c/p3p.xml&quot;
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Set-Cookie: bkc=KJpM8sJQteK5QSa68Sy9OieQOwJnobn0W2eTM9y/dZHOOGS+5DyGdnK03wpUSwyRaGHI9/v+sC6=; expires=Mon, 06-May-2013 18:33:25 GMT; path=/; domain=.bluekai.com bko=; expires=Mon, 06-May-2013 18:33:25 GMT; path=/; domain=.bluekai.com bkou=KJ0qn1M9y1jxDk3Dk8AipsOoSsaiRVhASVooqZkoRZOrRs8u0MRM99Y4M9iy; expires=Mon, 06-May-2013 18:33:25 GMT; path=/; domain=.bluekai.com bkp1=; expires=Mon, 06-May-2013 18:33:25 GMT; path=/; domain=.bluekai.com bkst=KJhMRjQL019QpsOoSsaiRVhASVooqZkoRZOrRs8ur7JV99OusQS2; expires=Mon, 06-May-2013 18:33:25 GMT; path=/; domain=.bluekai.com bku=AhW99cVoZk9LKkaF; expires=Mon, 06-May-2013 18:33:25 GMT; path=/; domain=.bluekai.com bkw5=; expires=Mon, 06-May-2013 18:33:25 GMT; path=/; domain=.bluekai.com bkdc=wdc; expires=Fri, 07-Dec-2012 18:33:25 GMT; path=/; domain=.bluekai.com
BK-Server: 838b
Content-Length: 62
nnCoection: close
GET /sync?type=gif&key=turn&uid=8128333894062405443 HTTP/1.1

Host: sync.adap.tv
GET /sync?type=gif&amp;key=turn&amp;uid=8128333894062405443 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 200 OK

Content-Type: image/gif
Server: adaptv/1.0
Connection: Keep-Alive
Set-Cookie: rtbData0=&quot;key=turn:value=8128333894062405443:expiresAt=Wed+Nov+14+10%3A33%3A25+PST+2012:32-Compatible=true&quot;;Path=/;Domain=.adap.tv;Expires=Fri, 07-Nov-2014 18:33:25 GMT
Content-Length: 42
GET /ibs:dpid=470&dpuuid=7204520365174943856 HTTP/1.1

Host: dpm.demdex.net
GET /ibs:dpid=470&amp;dpuuid=7204520365174943856 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 302 Found

HTTP/1.1 302 Found
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT&quot;
DCS: ny-dcs-7-2.internal.demdex.com 1.9.12
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
Pragma: no-cache
Expires: Thu, 01 Jan 2009 00:00:00 GMT
Set-Cookie: demdex=08784500818953690784334189020439714979;Path=/;Domain=.demdex.net;Expires=Tue, 08-Nov-2022 04:41:05 GMT
Location: http://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=470&amp;dpuuid=7204520365174943856
Content-Length: 0
Server: Jetty(7.2.2.v20101205)
GET /r/cms/id/0/ddc/1/pid/43/uid/?xid=E0 HTTP/1.1

Host: r.turn.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
Cookie: rrs=1%7C2%7C3%7C4%7C5%7C6%7C7%7C9%7C1001%7C1002%7Cundefined%7C10%7C1004%7Cundefined%7C12%7Cundefined%7Cundefined%7C1008%7C13%7Cundefined%7Cundefined%7Cundefined%7Cundefined%7C16%7C18%7C21%7C1010%7Cundefined%7C1011%7Cundefined%7Cundefined%7C27%7C1013%7C1014; rds=15652%7C15652%7C15652%7C15652%7C15652%7C15652%7C15652%7C15652%7C15652%7C15652%7Cundefined%7C15652%7C15652%7Cundefined%7C15652%7Cundefined%7Cundefined%7C15652%7C15652%7Cundefined%7Cundefined%7Cundefined%7Cundefined%7C15652%7C15652%7C15652%7C15652%7Cundefined%7C15652%7Cundefined%7Cundefined%7C15652%7C15652%7C15652; rv=1; uid=3274659763004859171
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Set-Cookie: uid=3274659763004859171; Domain=.turn.com; Expires=Mon, 06-May-2013 18:33:25 GMT; Path=/
Content-Length: 43
Date: Wed, 07 Nov 2012 18:33:24 GMT
GET /gmatcher?google_gid=CAESEE5Cd4RhtyLOx5zauejuLUM&google_cver=1 HTTP/1.1

Host: g-pixel.invitemedia.com
GET /gmatcher?google_gid=CAESEE5Cd4RhtyLOx5zauejuLUM&amp;google_cver=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
Cookie: uid=6b439977-0a8d-46ad-af7e-da7e1c7b879d; partnerUID=eyI0MDIiOlsiMzczNzQ4MTgzOTg3NTU5MDI1MCIsdHJ1ZV19
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 18:33:25 GMT
Set-Cookie: exchange_uid=&quot;eyI0IjpbIkNBRVNFRTVDZDRSaHR5TE94NXphdWVqdUxVTSIsNzM0ODE0XX0=&quot;;Version=1;Path=/;Domain=invitemedia.com;Expires=Thu, 07-Nov-2013 18:33:25 GMT;Max-Age=31536000 impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC&quot;
Cache-Control: no-cache
Content-Length: 43
Connection: close
Server: Jetty(7.3.1.v20110307)
GET /demconf.jpg?et:ibs%7cdata:dpid=375&dpuuid=4489304839486132371 HTTP/1.1

Host: dpm.demdex.net
GET /demconf.jpg?et:ibs%7cdata:dpid=375&amp;dpuuid=4489304839486132371 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
Cookie: demdex=39973291967358102743925482327034851277
HTTP/1.1 200 OK

Content-Type: image/jpeg
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT&quot;
DCS: ny-dcs-10-1.internal.demdex.com 1.9.12
Set-Cookie: dpm=39973291967358102743925482327034851277;Path=/;Domain=.dpm.demdex.net;Expires=Tue, 08-Nov-2022 04:41:05 GMT
Expires: Thu, 01 Jan 2009 00:00:00 GMT
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
Pragma: no-cache
STS: OK
Content-Length: 308
Server: Jetty(7.2.2.v20101205)
GET /demconf.jpg?et:ibs%7cdata:dpid=470&dpuuid=7204520365174943856 HTTP/1.1

Host: dpm.demdex.net
GET /demconf.jpg?et:ibs%7cdata:dpid=470&amp;dpuuid=7204520365174943856 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
Cookie: demdex=08784500818953690784334189020439714979
HTTP/1.1 200 OK

Content-Type: image/jpeg
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT&quot;
DCS: ny-dcs-2-1.internal.demdex.com 1.9.12
Set-Cookie: dpm=08784500818953690784334189020439714979;Path=/;Domain=.dpm.demdex.net;Expires=Tue, 08-Nov-2022 04:41:05 GMT
Expires: Thu, 01 Jan 2009 00:00:00 GMT
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
Pragma: no-cache
STS: OK
Content-Length: 308
Server: Jetty(7.2.2.v20101205)
GET /bh/rtset?do=add&pid=535461&ev=8128333894062405443 HTTP/1.1

Host: bh.contextweb.com
GET /bh/rtset?do=add&amp;pid=535461&amp;ev=8128333894062405443 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1
HTTP/1.1 200 OK

Content-Type: image/gif;charset=ISO-8859-1
Server: GlassFish v3
P3P: policyref=&quot;/bh/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT&quot;
Set-Cookie: V=VQ9eesxD4XLY; Domain=.contextweb.com; Expires=Sat, 02-Nov-2013 18:33:27 GMT; Path=/ pb_rtb_ev=2-535461.8128333894062405443.0.0.1352313207822; Domain=.contextweb.com; Expires=Thu, 07-Nov-2013 18:33:27 GMT; Path=/
CW-Server: lga-app604
Cache-Control: private, max-age=0, no-cache, no-store
Expires: -1
Content-Language: en-US
Transfer-Encoding: chunked
Date: Wed, 07 Nov 2012 18:33:27 GMT
GET /partner?adv_id=6481&img=1&uid=8128333894062405443 HTTP/1.1

Host: sync.search.spotxchange.com
GET /partner?adv_id=6481&amp;img=1&amp;uid=8128333894062405443 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=8128333894062405443&amp;mktid=122&amp;mpid=3834892&amp;fpid=-1&amp;rnd=8226957123979688418&amp;nu=n&amp;sp=n&amp;ctid=1