Overview

URLhttp://www.redetotal.com/
IP79.143.177.226
ASNAS51167 Giga-Hosting GmbH
Location Germany
Report completed2012-11-08 00:06:58 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-08 00:06:27 79.143.177.226 urlQuery Client3ET RBN Known Russian Business Network IP (353)
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 5 reports on IP: 79.143.177.226

Date Alerts / IDS URL IP
2013-02-06 21:47:410 / 0http://www.forma-te.com/79.143.177.226
2012-11-08 00:08:210 / 1http://www.redetotal.com/79.143.177.226
2012-11-08 00:05:212 / 3http://www.informa-te.pt/79.143.177.226
2012-11-08 00:03:560 / 2http://www.forma-te.com/79.143.177.226
2012-11-07 23:53:571 / 2http://www.redetotal.com/79.143.177.226

Last 6 reports on ASN: AS51167 Giga-Hosting GmbH

Date Alerts / IDS URL IP
2013-02-12 18:41:170 / 1http://79.143.177.19279.143.177.192
2013-02-11 23:23:230 / 2http://dymethyl.com/VLCDemo/index.html79.143.177.192
2013-02-11 18:18:310 / 0http://colexity777.com79.143.186.54
2013-02-11 14:15:280 / 0http://www.team-task.de91.194.90.95
2013-02-11 09:29:140 / 0http://team-task.de91.194.90.95
2013-02-11 08:50:391 / 2http://www.tweak.dk/80.241.217.45

Last 2 reports on domain: www.redetotal.com

Date Alerts / IDS URL IP
2012-11-08 00:08:210 / 1http://www.redetotal.com/79.143.177.226
2012-11-07 23:53:571 / 2http://www.redetotal.com/79.143.177.226



JavaScript

Executed Scripts (29)


Executed Evals (43)

#1 JavaScript::Eval (size: 11, repeated: 2)

+new Date()

#2 JavaScript::Eval (size: 31, repeated: 1)

/([\s{};()]|[-+]{2}|default)+/g

#3 JavaScript::Eval (size: 19, repeated: 2)

0, (function() {})

#4 JavaScript::Eval (size: 84, repeated: 1)

0, (function(a) {
    var b = C(a),
        c = b.K.apply(b.self, b.z);
    s(a, b.L, c);
})

#5 JavaScript::Eval (size: 422, repeated: 1)

0, (function(a) {
    var b = C(a),
        c = b.z,
        d = b.self,
        e = b.K,
        g = "";
    switch (c.length) {
    case 0:
        g = new(d[e]);
        break;
    case 1:
        g = new(d[e])(c[0]);
        break;
    case 2:
        g = new(d[e])(c[0], c[1]);
        break;
    case 3:
        g = new(d[e])(c[0], c[1], c[2]);
        break;
    default:
        u(a, a.u);
        return;
    }
    s(a, b.L, g);
})

#6 JavaScript::Eval (size: 227, repeated: 1)

0, (function(a) {
    var b = a.G.pop();
    if (b) {
        for (var c = x(a); 0 < c; c--) {
            var d = x(a);
            b[d] = a.c[d];
        }
        a.c = b;
    } else {
        s(a, a.b, a.d.length);
    }
})

#7 JavaScript::Eval (size: 134, repeated: 1)

0, (function(a) {
    var b = a.a(x(a)),
        c = a.a(x(a)),
        d = a.a(x(a)),
        e = a.a(x(a));
    b.addEventListener(c, D(a, d, e), false);
})

#8 JavaScript::Eval (size: 91, repeated: 1)

0, (function(a) {
    var b = a.a(x(a)),
        c = a.a(x(a));
    a = a.a(x(a));
    b[c] = a;
})

#9 JavaScript::Eval (size: 106, repeated: 1)

0, (function(a) {
    var b = a.a(x(a));
    a.G.push(a.c.slice());
    a.c[a.b] = f;
    s(a, a.b, b);
})

#10 JavaScript::Eval (size: 93, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = a.a(x(a)),
        d = a.a(x(a));
    s(a, b, D(a, c, d));
})

#11 JavaScript::Eval (size: 79, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a),
        b = a.a(b);
    s(a, c, p(b));
})

#12 JavaScript::Eval (size: 238, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a),
        d = a.a(b),
        b = y(a, b),
        e = y(a, c);
    e == a.g || e == a.l ? (d = "" + d) : 0 < b && (1 == b ? (d &= 255) : 2 == b ? (d &= 65535) : 4 == b && (d &= 4294967295));
    s(a, c, d);
})

#13 JavaScript::Eval (size: 667, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a),
        d = a.a(b);
    y(a, b) == a.g && (d = r(d));
    b = d;
    for (d = 0; 12 > d; d++) {
        b.push(0);
    }
    for (var e = 2654435769, g = 2654435769, h = 314159265, d = 0; d < b.length - 11; d += 12) {
        e += z(b, d), g += z(b, d + 4), h += z(b, d + 8), e -= g, e -= h, e ^= h >>> 13, g -= h, g -= e, g ^= e << 8, h -= e, h -= g, h ^= g >>> 13, -1 > d && alert(e + g + h), e -= g, e -= h, e ^= h >>> 12, g -= h, g -= e, g ^= e << 16, h -= e, h -= g, h ^= g >>> 5, -1 > d && alert(e + g + h), e -= g, e -= h, e ^= h >>> 3, g -= h, g -= e, g ^= e << 10, h -= e, h -= g, h ^= g >>> 15;
    }
    s(a, c, h);
})

#14 JavaScript::Eval (size: 101, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a),
        d = x(a),
        b = a.a(b),
        c = a.a(c);
    s(a, d, b[c]);
})

#15 JavaScript::Eval (size: 103, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a),
        d = x(a);
    a.a(b) == a.a(c) && s(a, d, a.a(d) + 1);
})

#16 JavaScript::Eval (size: 102, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a),
        d = x(a);
    a.a(b) > a.a(c) && s(a, d, a.a(d) + 1);
})

#17 JavaScript::Eval (size: 95, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a),
        d = x(a);
    s(a, d, (a.a(b) in a.a(c)) + 0);
})

#18 JavaScript::Eval (size: 84, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a),
        d = x(a);
    s(a, d, a.a(b) << c);
})

#19 JavaScript::Eval (size: 84, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a),
        d = x(a);
    s(a, d, a.a(b) >> c);
})

#20 JavaScript::Eval (size: 88, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a),
        d = x(a);
    s(a, d, a.a(b) | a.a(c));
})

#21 JavaScript::Eval (size: 89, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a),
        d = x(a);
    s(a, d, a.a(b) || a.a(c));
})

#22 JavaScript::Eval (size: 348, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a),
        d = y(a, b),
        e = y(a, c);
    d == a.g && e == a.g ? (a.c[c] == f && s(a, c, ""), s(a, c, a.a(c) + a.a(b))) : e == a.l && (0 > d ? (b = a.a(b), d == a.g && (b = r("" + b)), (c == a.f || c == a.h || c == a.m) && A(a, c, B(b.length, 2)), A(a, c, b)) : 0 < d && (b = a.a(b), A(a, c, B(b, d))));
})

#23 JavaScript::Eval (size: 86, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a);
    0 != a.a(b) && s(a, a.b, a.a(c));
})

#24 JavaScript::Eval (size: 78, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a);
    s(a, c, a.a(c) % a.a(b));
})

#25 JavaScript::Eval (size: 78, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a);
    s(a, c, a.a(c) * a.a(b));
})

#26 JavaScript::Eval (size: 78, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a);
    s(a, c, a.a(c) + a.a(b));
})

#27 JavaScript::Eval (size: 78, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a);
    s(a, c, a.a(c) - a.a(b));
})

#28 JavaScript::Eval (size: 75, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = x(a);
    s(a, c, eval(a.a(b)));
})

#29 JavaScript::Eval (size: 1371, repeated: 1)

0, (function(a) {
    var b = x(a),
        c = y(a, b);
    if (0 < c) {
        for (var d = 0, e = 0; e < c; e++) {
            d = d << 8 | x(a);
        }
        s(a, b, d);
    } else if (c != a.r) {
        d = x(a) << 8 | x(a);
        if (c == a.g) {
            if (c = "", a.c[a.s] != f) {
                for (var g = a.a(a.s), e = 0; e < d; e++) {
                    var h = g[x(a) << 8 | x(a)],
                        c = c + h;
                }
            } else {
                c = Array(d);
                for (e = 0; e < d; e++) {
                    c[e] = x(a);
                }
                e = c;
                d = [];
                for (g = c = 0; c < e.length;) {
                    if (h = e[c++], 128 > h) {
                        d[g++] = String.fromCharCode(h);
                    } else if (191 < h && 224 > h) {
                        var m = e[c++];
                        d[g++] = String.fromCharCode((h & 31) << 6 | m & 63);
                    } else {
                        var m = e[c++],
                            l = e[c++];
                        d[g++] = String.fromCharCode((h & 15) << 12 | (m & 63) << 6 | l & 63);
                    }
                }
                c = d.join("");
            }
        } else {
            c = Array(d);
            for (e = 0; e < d; e++) {
                c[e] = x(a);
            }
        }
        s(a, b, c);
    }
})

#30 JavaScript::Eval (size: 30, repeated: 1)

0, (function(a) {
    x(a);
})

#31 JavaScript::Eval (size: 1, repeated: 1)

C

#32 JavaScript::Eval (size: 1, repeated: 1)

D

#33 JavaScript::Eval (size: 1, repeated: 1)

E

#34 JavaScript::Eval (size: 2, repeated: 1)

[]

#35 JavaScript::Eval (size: 29, repeated: 1)

document.createElement('img')

#36 JavaScript::Eval (size: 35, repeated: 1)

document.createEvent('MouseEvents')

#37 JavaScript::Eval (size: 1, repeated: 1)

r

#38 JavaScript::Eval (size: 1, repeated: 1)

s

#39 JavaScript::Eval (size: 1, repeated: 1)

u

#40 JavaScript::Eval (size: 8335, repeated: 1)

var f = void 0,
    j, k = this,
    n = function(a, b) {
        var c = a.split("."),
            d = k;
        !(c[0] in d) && d.execScript && d.execScript("var " + c[0]);
        for (var e; c.length && (e = c.shift());)!c.length && b !== f ? d[e] = b : d = d[e] ? d[e] : d[e] = {}
    },
    p = function(a) {
        var b = typeof a;
        if ("object" == b) if (a) {
            if (a instanceof Array) return "array";
            if (a instanceof Object) return b;
            var c = Object.prototype.toString.call(a);
            if ("[object Window]" == c) return "object";
            if ("[object Array]" == c || "number" == typeof a.length && "undefined" != typeof a.splice && "undefined" != typeof a.propertyIsEnumerable && !a.propertyIsEnumerable("splice")) return "array";
            if ("[object Function]" == c || "undefined" != typeof a.call && "undefined" != typeof a.propertyIsEnumerable && !a.propertyIsEnumerable("call")) return "function"
        } else return "null";
        else if ("function" == b && "undefined" == typeof a.call) return "object";
        return b
    },
    q = Date.now ||
function() {
    return +new Date
};
new function() {
    q()
};
var r = function(a) {
        a = a.replace(/\r\n/g, "\n");
        for (var b = [], c = 0, d = 0; d < a.length; d++) {
            var e = a.charCodeAt(d);
            128 > e ? b[c++] = e : (2048 > e ? b[c++] = e >> 6 | 192 : (b[c++] = e >> 12 | 224, b[c++] = e >> 6 & 63 | 128), b[c++] = e & 63 | 128)
        }
        return b
    };
var w = function(a) {
        try {
            if (this.c = [], s(this, this.b, 0), s(this, this.j, 0), s(this, this.n, 0), s(this, this.i, []), s(this, this.f, []), s(this, this.D, {}), s(this, this.C, "object" == typeof window ? window : k), s(this, this.F, this), s(this, this.p, 0), s(this, this.A, 0), s(this, this.B, 0), s(this, this.h, [t(), t(), t(), t()]), s(this, this.m, []), s(this, this.k, {}), a && "!" == a[0]) this.e = a;
            else {
                var b;
                if (window.atob) {
                    var c = window.atob(a);
                    a = [];
                    for (var d = 0, e = 0; e < c.length; e++) {
                        for (var g = c.charCodeAt(e); 255 < g;) a[d++] = g & 255, g >>= 8;
                        a[d++] = g
                    }
                    b = a
                } else b = null;
                this.d = b;
                !this.d || !this.d.length ? u(this, this.O) : this.o()
            }
        } catch (h) {
            v(this, h)
        }
    };
j = w.prototype;
j.N = [function() {}, function(a) {
    var b = x(a),
        c = x(a),
        d = a.a(b),
        b = y(a, b),
        e = y(a, c);
    e == a.g || e == a.l ? d = "" + d : 0 < b && (1 == b ? d &= 255 : 2 == b ? d &= 65535 : 4 == b && (d &= 4294967295));
    s(a, c, d)
}, function(a) {
    var b = x(a),
        c = y(a, b);
    if (0 < c) {
        for (var d = 0, e = 0; e < c; e++) d = d << 8 | x(a);
        s(a, b, d)
    } else if (c != a.r) {
        d = x(a) << 8 | x(a);
        if (c == a.g) if (c = "", a.c[a.s] != f) for (var g = a.a(a.s), e = 0; e < d; e++) var h = g[x(a) << 8 | x(a)],
            c = c + h;
        else {
            c = Array(d);
            for (e = 0; e < d; e++) c[e] = x(a);
            e = c;
            d = [];
            for (g = c = 0; c < e.length;) if (h = e[c++], 128 > h) d[g++] = String.fromCharCode(h);
            else if (191 < h && 224 > h) {
                var m = e[c++];
                d[g++] = String.fromCharCode((h & 31) << 6 | m & 63)
            } else {
                var m = e[c++],
                    l = e[c++];
                d[g++] = String.fromCharCode((h & 15) << 12 | (m & 63) << 6 | l & 63)
            }
            c = d.join("")
        } else {
            c = Array(d);
            for (e = 0; e < d; e++) c[e] = x(a)
        }
        s(a, b, c)
    }
}, function(a) {
    x(a)
}, function(a) {
    var b = x(a),
        c = x(a),
        d = x(a),
        b = a.a(b),
        c = a.a(c);
    s(a, d, b[c])
}, function(a) {
    var b = x(a),
        c = x(a),
        b = a.a(b);
    s(a, c, p(b))
}, function(a) {
    var b = x(a),
        c = x(a),
        d = a.a(b);
    y(a, b) == a.g && (d = r(d));
    b = d;
    for (d = 0; 12 > d; d++) b.push(0);
    for (var e = 2654435769, g = 2654435769, h = 314159265, d = 0; d < b.length - 11; d += 12) e += z(b, d), g += z(b, d + 4), h += z(b, d + 8), e -= g, e -= h, e ^= h >>> 13, g -= h, g -= e, g ^= e << 8, h -= e, h -= g, h ^= g >>> 13, -1 > d && alert(e + g + h), e -= g, e -= h, e ^= h >>> 12, g -= h, g -= e, g ^= e << 16, h -= e, h -= g, h ^= g >>> 5, -1 > d && alert(e + g + h), e -= g, e -= h, e ^= h >>> 3, g -= h, g -= e, g ^= e << 10, h -= e, h -= g, h ^= g >>> 15;
    s(a, c, h)
}, function(a) {
    var b = x(a),
        c = x(a),
        d = y(a, b),
        e = y(a, c);
    d == a.g && e == a.g ? (a.c[c] == f && s(a, c, ""), s(a, c, a.a(c) + a.a(b))) : e == a.l && (0 > d ? (b = a.a(b), d == a.g && (b = r("" + b)), (c == a.f || c == a.h || c == a.m) && A(a, c, B(b.length, 2)), A(a, c, b)) : 0 < d && (b = a.a(b), A(a, c, B(b, d))))
}, function(a) {
    var b = x(a),
        c = x(a);
    s(a, c, eval(a.a(b)))
}, function(a) {
    var b = x(a),
        c = x(a);
    s(a, c, a.a(c) - a.a(b))
}, function(a) {
    var b = C(a),
        c = b.K.apply(b.self, b.z);
    s(a, b.L, c)
}, function(a) {
    var b = x(a),
        c = x(a);
    s(a, c, a.a(c) % a.a(b))
}, function(a) {
    var b = a.a(x(a)),
        c = a.a(x(a)),
        d = a.a(x(a)),
        e = a.a(x(a));
    b.addEventListener(c, D(a, d, e), false)
}, function(a) {
    var b = a.a(x(a)),
        c = a.a(x(a));
    a = a.a(x(a));
    b[c] = a
}, function() {}, function(a) {
    var b = x(a),
        c = x(a);
    s(a, c, a.a(c) + a.a(b))
}, function(a) {
    var b = x(a),
        c = x(a);
    0 != a.a(b) && s(a, a.b, a.a(c))
}, function(a) {
    var b = x(a),
        c = x(a),
        d = x(a);
    a.a(b) == a.a(c) && s(a, d, a.a(d) + 1)
}, function(a) {
    var b = x(a),
        c = x(a),
        d = x(a);
    a.a(b) > a.a(c) && s(a, d, a.a(d) + 1)
}, function(a) {
    var b = x(a),
        c = x(a),
        d = x(a);
    s(a, d, a.a(b) << c)
}, function(a) {
    var b = x(a),
        c = x(a),
        d = x(a);
    s(a, d, a.a(b) | a.a(c))
}, function(a) {
    var b = a.a(x(a));
    a.G.push(a.c.slice());
    a.c[a.b] = f;
    s(a, a.b, b)
}, function(a) {
    var b = a.G.pop();
    if (b) {
        for (var c = x(a); 0 < c; c--) {
            var d = x(a);
            b[d] = a.c[d]
        }
        a.c = b
    } else s(a, a.b, a.d.length)
}, function(a) {
    var b = x(a),
        c = x(a),
        d = x(a);
    s(a, d, (a.a(b) in a.a(c)) + 0)
}, function(a) {
    var b = x(a),
        c = a.a(x(a)),
        d = a.a(x(a));
    s(a, b, D(a, c, d))
}, function(a) {
    var b = x(a),
        c = x(a);
    s(a, c, a.a(c) * a.a(b))
}, function(a) {
    var b = x(a),
        c = x(a),
        d = x(a);
    s(a, d, a.a(b) >> c)
}, function(a) {
    var b = x(a),
        c = x(a),
        d = x(a);
    s(a, d, a.a(b) || a.a(c))
}, function(a) {
    var b = C(a),
        c = b.z,
        d = b.self,
        e = b.K,
        g = "";
    switch (c.length) {
    case 0:
        g = new d[e];
        break;
    case 1:
        g = new d[e](c[0]);
        break;
    case 2:
        g = new d[e](c[0], c[1]);
        break;
    case 3:
        g = new d[e](c[0], c[1], c[2]);
        break;
    default:
        u(a, a.u);
        return
    }
    s(a, b.L, g)
}];
j.b = 0;
j.n = 1;
j.i = 2;
j.j = 3;
j.f = 4;
j.s = 5;
j.J = 6;
j.D = 7;
j.H = 8;
j.C = 9;
j.F = 10;
j.p = 11;
j.A = 12;
j.B = 13;
j.h = 14;
j.m = 15;
j.k = 16;
j.Y = 17;
j.P = 15;
j.W = 12;
j.Q = 10;
j.R = 42;
j.aa = 0;
j.Z = 1;
j.$ = 2;
j.ba = 3;
j.da = 5;
j.ca = 6;
j.g = -1;
j.l = -2;
j.r = -3;
j.O = 17;
j.M = 21;
j.u = 22;
j.fa = 30;
j.U = 31;
j.X = 32;
j.q = {};
j.v = "caller";
j.S = 0;
var v = function(a, b) {
        a.e = ("E:" + b.message + ":" + b.stack).substring(0, 2048)
    },
    t = function() {
        return 255 * Math.random() | 0
    },
    E = function(a, b, c) {
        for (var d = 0; 84941944608 != d;) a += (b << 4 ^ b >>> 5) + b ^ d + c[d & 3], d += 2654435769, b += (a << 4 ^ a >>> 5) + a ^ d + c[d >>> 11 & 3];
        return [a >>> 24, a >> 16 & 255, a >> 8 & 255, a & 255, b >>> 24, b >> 16 & 255, b >> 8 & 255, b & 255]
    },
    z = function(a, b) {
        return a[b] << 24 | a[b + 1] << 16 | a[b + 2] << 8 | a[b + 3]
    },
    B = function(a, b) {
        for (var c = [], d = b - 1; 0 <= d; d--) c[b - 1 - d] = a >> 8 * d & 255;
        return c
    },
    A = function(a, b, c, d) {
        var e = a.a(b);
        b = b == a.h ?
        function(b) {
            var c = e.length,
                d = c & 7;
            if (4 == d) {
                var l = [0, 0, 0, a.a(a.B)];
                e.ea = E(z(e, c - 8), z(e, c - 4), l)
            }
            e.push(e.ea[d] ^ b)
        } : function(a) {
            e.push(a)
        };
        d && b(d & 255);
        for (d = 0; d < c.length; d++) b(c[d])
    },
    s = function(a, b, c) {
        if (b == a.b || b == a.j) if (a.c[b]) a.c[b].T(c);
        else {
            var d = c;
            c = function() {
                return e()
            };
            var e = function() {
                    return d
                };
            c.T = function(a) {
                d = a
            };
            a.c[b] = c
        } else {
            var g = a.a,
                h = function() {
                    for (var a = m[l.v], b = a === g, a = a && a[l.v], c = 0; a && a != l.o && a != l.I && a != w && 20 > c;) c++, a = a[l.v];
                    return h[!b + !a + (c >> 2)]
                },
                m = function() {
                    return h()
                },
                l = w.prototype;
            h[l.S] = c;
            a.c[b] = m
        }
        b == a.n && (a.t = f, s(a, a.b, a.a(a.b) + 4))
    };
w.prototype.a = function(a) {
    var b = this.c[a];
    if (b === f) throw u(this, this.fa, 0, a), this.q;
    return b()
};
var u = function(a, b, c, d) {
        var e = a.a(a.j);
        b = [b, e >> 8 & 255, e & 255];
        d != f && b.push(d);
        s(a, a.i, b);
        a.d && s(a, a.b, a.d.length);
        c && (d = "", c.message && (d = c.message.toString()), c.stack != f && (d += ": " + c.stack), d = d.substring(0, 2048), d = r(d), A(a, a.h, B(d.length, 2).concat(d), a.W))
    },
    x = function(a) {
        var b = a.a(a.b);
        if (b >= a.d.length) throw u(a, a.U, 0, b), a.q;
        a.t == f && (a.t = z(a.d, b - 4), a.w = f);
        if (a.w != b >> 3) {
            a.w = b >> 3;
            var c = [0, 0, 0, a.a(a.n)];
            a.V = E(a.t, a.w, c)
        }
        s(a, a.b, b + 1);
        return a.d[b] ^ a.V[b % 8]
    },
    y = function(a, b) {
        if (b <= a.Y) return b == a.i || b == a.f || b == a.h || b == a.m ? a.l : b == a.J || b == a.D || b == a.C || b == a.F || b == a.k ? a.r : b == a.s ? a.g : 4;
        var c = b % a.ca;
        return c == a.aa ? 1 : c == a.Z ? 2 : c == a.$ ? 4 : c == a.da ? a.g : c == a.ba ? a.l : a.r
    },
    C = function(a) {
        var b = {};
        b.K = a.a(x(a));
        b.L = x(a);
        var c = x(a) - 1;
        b.self = a.a(x(a));
        for (b.z = []; 0 < c;) c--, b.z.push(a.a(x(a)));
        return b
    },
    D = function(a, b, c) {
        return function() {
            s(a, a.J, arguments);
            s(a, a.k, c);
            return F(a, b)
        }
    },
    F = function(a, b) {
        var c = a.a(a.b);
        a.d && c < a.d.length && (s(a, a.j, c), u(a, a.X));
        s(a, a.b, b);
        return a.o()
    };
w.prototype.o = function() {
    this.G = [];
    try {
        var a = this.d.length;
        0 < this.a(this.i).length && s(this, this.b, a);
        for (var b = null, c = 0;
        (c = this.a(this.b)) < a;) try {
            s(this, this.j, c);
            var d = x(this);
            (b = this.N[d]) ? b(this) : u(this, this.M, 0, d)
        } catch (e) {
            if (e != this.q) {
                var g = this.a(this.p);
                g ? (s(this, g, e), s(this, this.p, 0)) : u(this, this.u, e)
            }
        }
    } catch (h) {
        try {
            u(this, this.u, h)
        } catch (m) {
            v(this, m)
        }
    }
    return this.a(this.k)
};
w.prototype.I = function() {
    if (this.e) return this.e;
    try {
        this.c[this.H] && F(this, this.a(this.H));
        var a = this.a(this.i);
        0 < a.length && A(this, this.f, B(a.length, 2).concat(a), this.P);
        var b = this.a(this.A),
            b = b - (this.a(this.f).length + 4),
            c = this.a(this.h);
        4 < c.length && (b -= c.length + 3);
        if (0 < b) {
            for (var d = Array(b), e = 0; e < b; e++) d[e] = t();
            A(this, this.f, B(b, 2).concat(d), this.Q)
        }
        4 < c.length && A(this, this.f, B(c.length, 2).concat(c), this.R);
        var g = [3].concat(this.a(this.f)),
            h;
        var m;
        window.btoa ? (m = window.btoa(String.fromCharCode.apply(null, g)), h = m = m.replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")) : h = null;
        if (this.e = h) this.e = "!" + this.e;
        else {
            this.e = "";
            for (e = 0; e < g.length; e++) {
                var l = g[e].toString(16);
                1 == l.length && (l = "0" + l);
                this.e += l
            }
        }
    } catch (G) {
        v(this, G)
    }
    return this.e
};
w.prototype.ga = function(a) {
    a(this.I())
};
try {
    window.addEventListener("unload", function() {}, false)
} catch (H) {}
n("botguard.bg", w);
n("botguard.bg.prototype.invoke", w.prototype.ga);

#41 JavaScript::Eval (size: 1, repeated: 1)

w

#42 JavaScript::Eval (size: 1, repeated: 1)

x

#43 JavaScript::Eval (size: 1, repeated: 1)

z

Executed Writes (6)

#1 JavaScript::Write (size: 466, repeated: 1)

<!doctype html><html><body><script>google_ad_client="ca-pub-3897683088838810";google_ad_height=150;google_ad_slot="4326421549";google_ad_width=180;google_show_ads_impl=true;google_unique_id=1;google_async_iframe_id="aswift_0";google_ad_unit_key="1077646021";google_start_time=1352329584468;google_expand_experiment="none";google_bpp=12;</script><script src="http://pagead2.googlesyndication.com/pagead/js/r20121031/r20120730/show_ads_impl.js"></script></body></html>

#2 JavaScript::Write (size: 54, repeated: 1)

<!doctype html><html><head></head><body></body></html>

#3 JavaScript::Write (size: 795, repeated: 1)

<iframe allowtransparency=true frameborder=0 height=150 hspace=0 id=google_ads_frame1 marginheight=0 marginwidth=0 name=google_ads_frame1 scrolling=no src="http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3897683088838810&output=html&h=150&slotname=4326421549&w=180&lmt=1352329583&flash=10.0.45&url=http%3A%2F%2Fwww.redetotal.com%2F&dt=1352329584468&bpp=12&shv=r20121031&jsv=r20110914&correlator=1352329584614&frm=20&adk=1077646021&ga_vid=533050827.1352329584&ga_sid=1352329584&ga_hid=557474866&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=pt%20sans&dfs=13&adx=845&ady=515&biw=1159&bih=778&oid=3&fu=0&ifi=1&dtd=260&xpc=maOCrqGb0R&p=http%3A//www.redetotal.com" style="left:0;position:absolute;top:0" vspace=0 width=180></iframe>

#4 JavaScript::Write (size: 769, repeated: 1)

<ins style="display:inline-table;border:none;height:150px;margin:0;padding:0;position:relative;visibility:visible;width:180px"><ins id="aswift_0_anchor" style="display:block;border:none;height:150px;margin:0;padding:0;position:relative;visibility:visible;width:180px"><iframe allowtransparency="true" frameborder="0" height="150" hspace="0" marginwidth="0" marginheight="0" onload="var i=this.id,s=window.google_iframe_oncopy,H=s&amp;&amp;s.handlers,h=H&amp;&amp;H[i],w=this.contentWindow,d;try{d=w.document}catch(e){}if(h&amp;&amp;d&amp;&amp;(!d.body||!d.body.firstChild)){if(h.call){setTimeout(h,0)}else if(h.match){w.location.replace(h)}}" scrolling="no" vspace="0" width="180" id=aswift_0 name=aswift_0 style="left:0;position:absolute;top:0;" ></iframe></ins></ins>

#5 JavaScript::Write (size: 86, repeated: 1)

<script src="http://pagead2.googlesyndication.com/pagead/expansion_embed.js"></script>

#6 JavaScript::Write (size: 105, repeated: 1)

<script>google_protectAndRun("ads_core.google_render_ad", google_handleError, google_render_ad);</script>


HTTP Transactions (61)


Request Response
GET / HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
X-Powered-By: PHP/5.3.10
X-Pingback: http://www.redetotal.com/xmlrpc.php
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /wp-content/themes/doover/css/ui/jquery.ui.all.css?ver=2.1.1 HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: text/css
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d405cc-12e-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 302
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /wp-content/themes/doover/style.css HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: text/css
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d40644-329-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 809
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /wp-content/themes/doover/js/cycle/jquery.easing.1.3.js?ver=2.1.1 HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d40609-206d-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 8301
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /css?family=PT+Sans:r,b,i,r,b,b,b,r,r,b HTTP/1.1

Host: fonts.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: text/css
Expires: Wed, 07 Nov 2012 23:06:23 GMT
Date: Wed, 07 Nov 2012 23:06:23 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Content-Length: 321
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
GET /wp-content/themes/doover/css/themes/blue/blue_theme.css?ver=2.1.1 HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: text/css
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404ba-40d5-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 16597
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /wp-content/themes/doover/js/jquery.easing.compatibility.js?ver=2.1.1 HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d40627-6f7-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 1783
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /wp-content/themes/doover/js/ui/jquery.ui.core.js?ver=2.1.1 HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d4062d-2171-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 8561
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /wp-content/themes/doover/js/ui/jquery.ui.widget.js?ver=2.1.1 HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d40631-1c6b-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 7275
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /wp-content/themes/doover/js/muffingroup_menu.js?ver=2.1.1 HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d40629-559-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 1369
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /wp-content/themes/doover/js/ui/jquery.ui.tabs.js?ver=2.1.1 HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d40630-55f3-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 22003
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /wp-content/themes/doover/js/ui/jquery.ui.accordion.js?ver=2.1.1 HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d4062c-41d5-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 16853
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /wp-content/themes/doover/js/jquery-1.7.1.min.js?ver=2.1.1 HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d40625-16eaf-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 93871
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.3.4 HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Wed, 07 Nov 2012 23:01:23 GMT
Etag: &quot;de13e8-3a3-4cdefb291dfaa&quot;
Accept-Ranges: bytes
Content-Length: 931
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /wp-content/themes/doover/js/custom.js?ver=2.1.1 HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Wed, 11 Jul 2012 15:30:56 GMT
Etag: &quot;d40604-10a7-4c48f887b6c00&quot;
Accept-Ranges: bytes
Content-Length: 4263
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
GET /wp-content/themes/doover/js/jquery.form.js?ver=2.1.1 HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d40628-90f7-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 37111
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /wp-content/themes/doover/css/ui/jquery.ui.base.css HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/ui/jquery.ui.all.css?ver=2.1.1
HTTP/1.1 200 OK

Content-Type: text/css
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d405cd-6f-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 111
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
GET /wp-content/themes/doover/css/ui/jquery.ui.theme.css HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/ui/jquery.ui.all.css?ver=2.1.1
HTTP/1.1 200 OK

Content-Type: text/css
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d405d0-4544-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 17732
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /wp-content/themes/doover/css/reset.css HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/style.css
HTTP/1.1 200 OK

Content-Type: text/css
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404b5-4eb-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 1259
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
GET /wp-content/themes/doover/css/shortcodes.css HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/style.css
HTTP/1.1 200 OK

Content-Type: text/css
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Thu, 12 Jul 2012 17:22:11 GMT
Etag: &quot;d404b7-1ab6-4c4a5342f36c0&quot;
Accept-Ranges: bytes
Content-Length: 6838
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
GET /wp-content/themes/doover/css/buttons.css HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/style.css
HTTP/1.1 200 OK

Content-Type: text/css
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404b0-3080-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 12416
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
GET /wp-content/themes/doover/css/custom.css HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/style.css
HTTP/1.1 200 OK

Content-Type: text/css
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404b2-1663-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 5731
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
GET /wp-content/themes/doover/css/ui/jquery.ui.accordion.css HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/ui/jquery.ui.base.css
HTTP/1.1 200 OK

Content-Type: text/css
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d405cb-592-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 1426
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
GET /wp-content/themes/doover/css/ui/jquery.ui.core.css HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/ui/jquery.ui.base.css
HTTP/1.1 200 OK

Content-Type: text/css
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d405ce-54b-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 1355
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
GET /wp-content/themes/doover/css/ui/jquery.ui.tabs.css HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/ui/jquery.ui.base.css
HTTP/1.1 200 OK

Content-Type: text/css
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d405cf-647-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 1607
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
GET /wp-content/uploads/jw-player-plugin-for-wordpress/player/jwplayer.js?ver=3.4.2 HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Sun, 22 Jul 2012 21:44:25 GMT
Etag: &quot;d40203-26022-4c57208778464&quot;
Accept-Ranges: bytes
Content-Length: 155682
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /wp-content/themes/doover/css/main.css HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/style.css
HTTP/1.1 200 OK

Content-Type: text/css
Date: Wed, 07 Nov 2012 23:06:21 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Wed, 11 Jul 2012 20:20:49 GMT
Etag: &quot;d404b4-86c0-4c493952f8a40&quot;
Accept-Ranges: bytes
Content-Length: 34496
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
GET /wp-content/themes/doover/css/themes/blue/images/top_links.png HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/themes/blue/blue_theme.css?ver=2.1.1
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 23:06:22 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404f7-2fef-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 12271
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
GET /wp-content/themes/doover/css/themes/blue/images/header_bg.png HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/themes/blue/blue_theme.css?ver=2.1.1
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 23:06:22 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404d0-6128-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 24872
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
GET /wp-content/themes/doover/css/themes/blue/images/bg_year.png HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/themes/blue/blue_theme.css?ver=2.1.1
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 23:06:22 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404c1-c4a-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 3146
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /wp-content/themes/doover/css/themes/blue/images/icons/ico_time.png HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/themes/blue/blue_theme.css?ver=2.1.1
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 23:06:22 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404de-b7e-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 2942
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
GET /wp-content/themes/doover/css/themes/blue/images/icons/ico_cat.png HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/themes/blue/blue_theme.css?ver=2.1.1
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 23:06:22 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404d7-afd-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 2813
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
GET /wp-content/themes/doover/css/themes/blue/images/texture_dark_strips.png HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/themes/blue/blue_theme.css?ver=2.1.1
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 23:06:22 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404f5-b0a-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 2826
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /pagead/show_ads.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
If-None-Match: 15032493890200785914
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 11458789474174950078
Date: Wed, 07 Nov 2012 22:35:01 GMT
Expires: Wed, 07 Nov 2012 23:35:01 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 5118
X-XSS-Protection: 1; mode=block
Age: 1883
Cache-Control: public, max-age=3600
GET /wp-content/themes/doover/css/themes/blue/images/icons/ico_tags.png HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/themes/blue/blue_theme.css?ver=2.1.1
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 23:06:22 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404dd-bf4-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 3060
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
GET /wp-content/themes/doover/css/themes/blue/images/search.png HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/themes/blue/blue_theme.css?ver=2.1.1
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 23:06:22 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404f0-fa5-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 4005
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT
HTTP/1.1 200 OK

Content-Type: text/javascript
Content-Length: 14888
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Wed, 07 Nov 2012 20:35:01 GMT
Expires: Thu, 08 Nov 2012 08:35:01 GMT
Vary: Accept-Encoding
Cache-Control: max-age=43200, public
Age: 9083
Server: GFE/2.0
GET /wp-content/themes/doover/images/buttons/sprite_buttons.png HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/buttons.css
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 23:06:22 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d405f6-5a7b-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 23163
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
GET /wp-content/themes/doover/images/buttons/sprite_buttons_span.png HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/buttons.css
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 23:06:22 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:32 GMT
Etag: &quot;d405f7-81c8-4c46ce1e16600&quot;
Accept-Ranges: bytes
Content-Length: 33224
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
GET /wp-content/themes/doover/css/themes/blue/images/icons/ico_doc_small.png HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/themes/blue/blue_theme.css?ver=2.1.1
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 23:06:22 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404d9-cca-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 3274
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
GET /static/fonts/ptsans/v4/LKf8nhXsWg5ybwEGXk8UBQ.woff HTTP/1.1

Host: themes.googleusercontent.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=PT+Sans:r,b,i,r,b,b,b,r,r,b
Origin: http://www.redetotal.com
HTTP/1.1 200 OK

Content-Type: font/woff
Last-Modified: Tue, 20 Mar 2012 19:55:31 GMT
Date: Wed, 07 Nov 2012 20:35:36 GMT
Expires: Thu, 07 Nov 2013 20:35:36 GMT
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 60332
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 9048
GET /static/fonts/ptsans/v4/0XxGQsSc1g4rdRdjJKZrNBsxEYwM7FgeyaSgU71cLG0.woff HTTP/1.1

Host: themes.googleusercontent.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=PT+Sans:r,b,i,r,b,b,b,r,r,b
Origin: http://www.redetotal.com
HTTP/1.1 200 OK

Content-Type: font/woff
Last-Modified: Tue, 20 Mar 2012 19:55:31 GMT
Date: Wed, 07 Nov 2012 20:35:42 GMT
Expires: Thu, 07 Nov 2013 20:35:42 GMT
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 62916
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 9042
GET /wp-content/themes/doover/css/themes/blue/images/header_overlay.png HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/themes/blue/blue_theme.css?ver=2.1.1
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 23:06:22 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Wed, 11 Jul 2012 19:05:00 GMT
Etag: &quot;d4024a-1cdfd-4c492860b4f00&quot;
Accept-Ranges: bytes
Content-Length: 118269
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=1623605285&utmhn=www.redetotal.com&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=RedeTotal%20-&utmhid=557474866&utmr=-&utmp=%2F&utmac=UA-33339857-1&utmdid=i9k95&utmcc=__utma%3D126891534.533050827.1352329584.1352329584.1352329584.1%3B%2B__utmz%3D126891534.1352329584.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=q~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.7&amp;utms=1&amp;utmn=1623605285&amp;utmhn=www.redetotal.com&amp;utmcs=UTF-8&amp;utmsr=1176x885&amp;utmvp=1159x778&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=RedeTotal%20-&amp;utmhid=557474866&amp;utmr=-&amp;utmp=%2F&amp;utmac=UA-33339857-1&amp;utmdid=i9k95&amp;utmcc=__utma%3D126891534.533050827.1352329584.1352329584.1352329584.1%3B%2B__utmz%3D126891534.1352329584.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmu=q~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Wed, 07 Nov 2012 20:41:45 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 8679
Server: GFE/2.0
GET /pagead/js/r20121031/r20120730/show_ads_impl.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 14655871875321016899
Date: Wed, 07 Nov 2012 20:35:01 GMT
Expires: Wed, 21 Nov 2012 20:35:01 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 19222
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 9083
GET /wp-content/themes/doover/css/themes/blue/images/lists/li.png HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/themes/blue/blue_theme.css?ver=2.1.1
Cookie: __utma=126891534.533050827.1352329584.1352329584.1352329584.1; __utmb=126891534.1.10.1352329584; __utmc=126891534; __utmz=126891534.1352329584.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 23:06:22 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404e4-d48-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 3400
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
GET /wp-content/themes/doover/css/themes/blue/images/footer_bg.png HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/themes/blue/blue_theme.css?ver=2.1.1
Cookie: __utma=126891534.533050827.1352329584.1352329584.1352329584.1; __utmb=126891534.1.10.1352329584; __utmc=126891534; __utmz=126891534.1352329584.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 23:06:22 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404ce-b6c-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 2924
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
GET /wp-content/themes/doover/css/themes/blue/images/back_top_top.png HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/wp-content/themes/doover/css/themes/blue/blue_theme.css?ver=2.1.1
Cookie: __utma=126891534.533050827.1352329584.1352329584.1352329584.1; __utmb=126891534.1.10.1352329584; __utmc=126891534; __utmz=126891534.1352329584.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Date: Wed, 07 Nov 2012 23:06:22 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
Last-Modified: Mon, 09 Jul 2012 22:10:31 GMT
Etag: &quot;d404bc-eda-4c46ce1d223c0&quot;
Accept-Ranges: bytes
Content-Length: 3802
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
GET /pagead/expansion_embed.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 2372832783343406230
Date: Wed, 07 Nov 2012 20:35:03 GMT
Expires: Thu, 08 Nov 2012 20:35:03 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 25450
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 9081
GET /pagead/osd.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
If-None-Match: 13350759849962699205
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 6549576333968007708
Date: Wed, 07 Nov 2012 22:35:02 GMT
Expires: Wed, 07 Nov 2012 23:35:02 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 5986
X-XSS-Protection: 1; mode=block
Age: 1882
Cache-Control: public, max-age=3600
POST / HTTP/1.1

Host: ocsp.thawte.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
HTTP/1.0 200 Ok

Content-Type: application/ocsp-response
Last-Modified: Tue, 06 Nov 2012 19:03:43 GMT
Expires: Tue, 13 Nov 2012 19:03:43 GMT
Content-Transfer-Encoding: binary
Content-Length: 1165
Cache-Control: max-age=503839, public, no-transform, must-revalidate
Date: Wed, 07 Nov 2012 23:06:24 GMT
nncoection: close
Connection: Keep-Alive
GET /pagead/ads?client=ca-pub-3897683088838810&output=html&h=150&slotname=4326421549&w=180&lmt=1352329583&flash=10.0.45&url=http%3A%2F%2Fwww.redetotal.com%2F&dt=1352329584468&bpp=12&shv=r20121031&jsv=r20110914&correlator=1352329584614&frm=20&adk=1077646021&ga_vid=533050827.1352329584&ga_sid=1352329584&ga_hid=557474866&ga_fc=1&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=pt%20sans&dfs=13&adx=845&ady=515&biw=1159&bih=778&oid=3&fu=0&ifi=1&dtd=260&xpc=maOCrqGb0R&p=http%3A//www.redetotal.com HTTP/1.1

Host: googleads.g.doubleclick.net
GET /pagead/ads?client=ca-pub-3897683088838810&amp;output=html&amp;h=150&amp;slotname=4326421549&amp;w=180&amp;lmt=1352329583&amp;flash=10.0.45&amp;url=http%3A%2F%2Fwww.redetotal.com%2F&amp;dt=1352329584468&amp;bpp=12&amp;shv=r20121031&amp;jsv=r20110914&amp;correlator=1352329584614&amp;frm=20&amp;adk=1077646021&amp;ga_vid=533050827.1352329584&amp;ga_sid=1352329584&amp;ga_hid=557474866&amp;ga_fc=1&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=8&amp;u_nmime=54&amp;dff=pt%20sans&amp;dfs=13&amp;adx=845&amp;ady=515&amp;biw=1159&amp;bih=778&amp;oid=3&amp;fu=0&amp;ifi=1&amp;dtd=260&amp;xpc=maOCrqGb0R&amp;p=http%3A//www.redetotal.com HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Wed, 07 Nov 2012 23:06:25 GMT
Server: cafe
Cache-Control: private
Content-Length: 8118
X-XSS-Protection: 1; mode=block
GET /pagead/images/adchoices/pt-000000.png HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3897683088838810&amp;output=html&amp;h=150&amp;slotname=4326421549&amp;w=180&amp;lmt=1352329583&amp;flash=10.0.45&amp;url=http%3A%2F%2Fwww.redetotal.com%2F&amp;dt=1352329584468&amp;bpp=12&amp;shv=r20121031&amp;jsv=r20110914&amp;correlator=1352329584614&amp;frm=20&amp;adk=1077646021&amp;ga_vid=533050827.1352329584&amp;ga_sid=1352329584&amp;ga_hid=557474866&amp;ga_fc=1&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=8&amp;u_nmime=54&amp;dff=pt%20sans&amp;dfs=13&amp;adx=845&amp;ady=515&amp;biw=1159&amp;bih=778&amp;oid=3&amp;fu=0&amp;ifi=1&amp;dtd=260&amp;xpc=maOCrqGb0R&amp;p=http%3A//www.redetotal.com
HTTP/1.1 200 OK

Content-Type: image/png
P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 18279353533856781039
Date: Wed, 07 Nov 2012 20:24:46 GMT
Expires: Thu, 08 Nov 2012 20:24:46 GMT
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 797
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 9699
GET /pagead/js/graphics.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3897683088838810&amp;output=html&amp;h=150&amp;slotname=4326421549&amp;w=180&amp;lmt=1352329583&amp;flash=10.0.45&amp;url=http%3A%2F%2Fwww.redetotal.com%2F&amp;dt=1352329584468&amp;bpp=12&amp;shv=r20121031&amp;jsv=r20110914&amp;correlator=1352329584614&amp;frm=20&amp;adk=1077646021&amp;ga_vid=533050827.1352329584&amp;ga_sid=1352329584&amp;ga_hid=557474866&amp;ga_fc=1&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=8&amp;u_nmime=54&amp;dff=pt%20sans&amp;dfs=13&amp;adx=845&amp;ady=515&amp;biw=1159&amp;bih=778&amp;oid=3&amp;fu=0&amp;ifi=1&amp;dtd=260&amp;xpc=maOCrqGb0R&amp;p=http%3A//www.redetotal.com
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 13356400148562476899
Date: Wed, 07 Nov 2012 20:35:06 GMT
Expires: Thu, 08 Nov 2012 20:35:06 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 2380
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=86400
Age: 9079
GET /pagead/drt/s?v=r20120211 HTTP/1.1

Host: googleads.g.doubleclick.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3897683088838810&amp;output=html&amp;h=150&amp;slotname=4326421549&amp;w=180&amp;lmt=1352329583&amp;flash=10.0.45&amp;url=http%3A%2F%2Fwww.redetotal.com%2F&amp;dt=1352329584468&amp;bpp=12&amp;shv=r20121031&amp;jsv=r20110914&amp;correlator=1352329584614&amp;frm=20&amp;adk=1077646021&amp;ga_vid=533050827.1352329584&amp;ga_sid=1352329584&amp;ga_hid=557474866&amp;ga_fc=1&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=8&amp;u_nmime=54&amp;dff=pt%20sans&amp;dfs=13&amp;adx=845&amp;ady=515&amp;biw=1159&amp;bih=778&amp;oid=3&amp;fu=0&amp;ifi=1&amp;dtd=260&amp;xpc=maOCrqGb0R&amp;p=http%3A//www.redetotal.com
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
X-Frame-Options: ALLOWALL
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Wed, 07 Nov 2012 22:35:05 GMT
Server: safe
Content-Length: 141
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 1880
GET /pagead/drt/ui HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Location: https://googleads.g.doubleclick.net/pagead/drt/si?p=CAA&amp;ut=AFAKxlQAAAAAUJrs9Y5hbaOa4FZQ34x1OiBjp5cCvvhO
Cache-Control: private
X-Frame-Options: ALLOWALL
X-Content-Type-Options: nosniff
Date: Wed, 07 Nov 2012 23:06:25 GMT
Server: safe
Content-Length: 304
X-XSS-Protection: 1; mode=block
GET /u/1576975/redelogo.png HTTP/1.1

Host: dl.dropbox.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.redetotal.com/
HTTP/1.1 404 NOT FOUND

Content-Type: text/html; charset=utf-8
Server: nginx/1.2.3
Date: Wed, 07 Nov 2012 23:06:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
Content-Encoding: gzip
GET /bg/chVL4ii63HO8PHZ862lFB7RQHpSvg33s68eDUue2RxM.js HTTP/1.1

Host: www.gstatic.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3897683088838810&amp;output=html&amp;h=150&amp;slotname=4326421549&amp;w=180&amp;lmt=1352329583&amp;flash=10.0.45&amp;url=http%3A%2F%2Fwww.redetotal.com%2F&amp;dt=1352329584468&amp;bpp=12&amp;shv=r20121031&amp;jsv=r20110914&amp;correlator=1352329584614&amp;frm=20&amp;adk=1077646021&amp;ga_vid=533050827.1352329584&amp;ga_sid=1352329584&amp;ga_hid=557474866&amp;ga_fc=1&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=8&amp;u_nmime=54&amp;dff=pt%20sans&amp;dfs=13&amp;adx=845&amp;ady=515&amp;biw=1159&amp;bih=778&amp;oid=3&amp;fu=0&amp;ifi=1&amp;dtd=260&amp;xpc=maOCrqGb0R&amp;p=http%3A//www.redetotal.com
HTTP/1.1 200 OK

Content-Type: text/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Wed, 31 Oct 2012 16:20:27 GMT
Date: Wed, 07 Nov 2012 20:35:01 GMT
Expires: Thu, 15 Nov 2012 20:35:01 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 3254
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=691200
Age: 9084
GET /favicon.ico HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __utma=126891534.533050827.1352329584.1352329584.1352329584.1; __utmb=126891534.1.10.1352329584; __utmc=126891534; __utmz=126891534.1352329584.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/vnd.microsoft.icon
Date: Wed, 07 Nov 2012 23:06:23 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
X-Powered-By: PHP/5.3.10
Content-Length: 0
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
GET /pagead/drt/si?p=CAA&ut=AFAKxlQAAAAAUJrs9Y5hbaOa4FZQ34x1OiBjp5cCvvhO HTTP/1.1

Host: googleads.g.doubleclick.net
GET /pagead/drt/si?p=CAA&amp;ut=AFAKxlQAAAAAUJrs9Y5hbaOa4FZQ34x1OiBjp5cCvvhO HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
P3P: policyref=&quot;https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Set-Cookie: _drt_=NO_DATA; expires=Thu, 08-Nov-2012 11:06:25 GMT; path=/; domain=.doubleclick.net; HttpOnly
X-Frame-Options: ALLOWALL
X-Content-Type-Options: nosniff
Date: Wed, 07 Nov 2012 23:06:25 GMT
Server: safe
Content-Length: 0
X-XSS-Protection: 1; mode=block
Expires: Wed, 07 Nov 2012 23:06:25 GMT
Cache-Control: private
GET /favicon.ico HTTP/1.1

Host: www.redetotal.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __utma=126891534.533050827.1352329584.1352329584.1352329584.1; __utmb=126891534.1.10.1352329584; __utmc=126891534; __utmz=126891534.1352329584.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/vnd.microsoft.icon
Date: Wed, 07 Nov 2012 23:06:25 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.10
X-Powered-By: PHP/5.3.10
Content-Length: 0
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive