Overview

URLhttp://15647.bodisparking.com/nudskakosna.cu.cc
IP199.59.241.181
ASNAS53665 Bodis, LLC
Location United States
Report completed2012-11-10 01:54:17 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-10 01:53:49 urlQuery Client 199.59.241.1812ET CURRENT_EVENTS HTTP Request to a *.cu.cc domain
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 199.59.241.181

Date Alerts / IDS URL IP
2013-03-26 05:10:030 / 0http://199.59.241.181199.59.241.181
2013-03-26 04:16:560 / 0http://199.59.241.181199.59.241.181
2013-03-26 04:16:550 / 0http://199.59.241.181199.59.241.181
2013-03-26 03:30:320 / 0http://199.59.241.181199.59.241.181
2013-03-26 03:05:200 / 0http://199.59.241.181199.59.241.181
2013-02-26 17:55:450 / 0http://199.59.241.181199.59.241.181

Last 6 reports on ASN: AS53665 Bodis, LLC

Date Alerts / IDS URL IP
2013-04-03 20:40:030 / 1http://ww25.ctda.org/199.59.243.107
2013-04-03 20:36:410 / 1http://www.jajaan.com/?epl=uy-Y_cNYPuEvXKp-KG-CA3C-vuxBQuEUyV381yUcmrRmcRFlbVSKdLRTgly1PXLZpDSP (...)199.59.243.107
2013-04-03 20:36:380 / 2http://www.jajaan.com/?epl=Ym-FyxVK156m2RN4mXb7MXjqFWGAhMIpkrv4V21XZSJCTGNCVFkg1AXFX-sOmkLPNPHd (...)199.59.243.109
2013-04-03 19:53:040 / 1http://uspo.com/199.59.243.107
2013-04-03 19:52:310 / 1http://antivirusxp08.net/images/1364883925/1f0cd609b43b2f742c597e228e4bc920/9a9f830f-d2fe-4318- (...)199.59.243.108
2013-04-03 19:49:320 / 1http://kn3ng.hdmediastore.com/logo.png?sv=125199.59.243.108

Last 6 reports on domain: 15647.bodisparking.com

Date Alerts / IDS URL IP
2013-04-03 13:32:580 / 3http://15647.bodisparking.com/zahohora.cu.cc199.59.243.107
2013-04-03 12:13:090 / 6http://15647.bodisparking.com/lohersde4.cu.cc199.59.243.106
2013-04-03 10:45:040 / 2http://15647.bodisparking.com/lohersde4.cu.cc199.59.243.109
2013-04-03 08:28:140 / 4http://15647.bodisparking.com/xxbeastiefuckporntube10.cu.cc199.59.243.108
2013-04-02 18:49:560 / 3http://15647.bodisparking.com/orpnrwe.cu.cc199.59.243.107
2013-04-02 18:46:320 / 2http://15647.bodisparking.com/hokgers.cu.cc199.59.243.106



JavaScript

Executed Scripts (15)


Executed Evals (0)


Executed Writes (2)

#1 JavaScript::Write (size: 185, repeated: 1)

<frameset rows="100%,*" frameborder="no" border="0" framespacing="0"><frame src="http://15647.bodisparking.com/nudskakosna.cu.cc?framerequest=1&refurl=" name="landingparent"></frameset>

#2 JavaScript::Write (size: 221, repeated: 1)

<script src='http://23.23.204.218/ct/js/tcode/3/t.js?l='http://search.no.bookmarky.com/?keyword=online+schools&action=search&k=online+schools&i=195.159.140.221&f=6661&a=59435-3493337&m=no' type='text/javascript'></script>


HTTP Transactions (35)


Request Response
GET /nudskakosna.cu.cc HTTP/1.1

Host: 15647.bodisparking.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html
Last-Modified: Thu, 19 Apr 2012 04:23:41 GMT
Accept-Ranges: bytes
Etag: &quot;8044f33e41dcd1:0&quot;
Server: Microsoft-IIS/7.5
Date: Sat, 10 Nov 2012 00:53:38 GMT
Content-Length: 1233
GET /nudskakosna.cu.cc?framerequest=1&refurl= HTTP/1.1

Host: 15647.bodisparking.com
GET /nudskakosna.cu.cc?framerequest=1&amp;refurl= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://15647.bodisparking.com/nudskakosna.cu.cc
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Content-Length: 1738
Content-Encoding: gzip
Server: Microsoft-IIS/7.5
Date: Sat, 10 Nov 2012 00:53:43 GMT
GET /favicon.ico HTTP/1.1

Host: 15647.bodisparking.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: Microsoft-IIS/7.5
Date: Sat, 10 Nov 2012 00:53:43 GMT
Content-Length: 1245
GET /tracking?method=ZeroClickRequest&enc=cmk9NzU5Mjc3JmQ9bnVkc2tha29zbmEuY3UuY2Mmcz04dW5rYjhkemt2eXc1am05JnNyPSZ0YWdpZD0menBpZD0maXVmPXRydWUmdWY9MTU2NDcmc2k9MzYmc3Q9MTUxMyZ6cmk9MXJ6bHpidDY1ZnhxYnhqNSZwaWQ9ODgmcGI9MC4wMDAyOTQ&sw=1176&sh=885&r=http%3A%2F%2Ffw.dnslink.com%2F%3Fdomainname%3Dnudskakosna.cu.cc%26seedterm%3Dnudskakosna.cu.cc%26publicid%3D279F8BD6-C89B-40E3-988D-CD403BDEF41D HTTP/1.1

Host: 15647.bodisparking.com
GET /tracking?method=ZeroClickRequest&amp;enc=cmk9NzU5Mjc3JmQ9bnVkc2tha29zbmEuY3UuY2Mmcz04dW5rYjhkemt2eXc1am05JnNyPSZ0YWdpZD0menBpZD0maXVmPXRydWUmdWY9MTU2NDcmc2k9MzYmc3Q9MTUxMyZ6cmk9MXJ6bHpidDY1ZnhxYnhqNSZwaWQ9ODgmcGI9MC4wMDAyOTQ&amp;sw=1176&amp;sh=885&amp;r=http%3A%2F%2Ffw.dnslink.com%2F%3Fdomainname%3Dnudskakosna.cu.cc%26seedterm%3Dnudskakosna.cu.cc%26publicid%3D279F8BD6-C89B-40E3-988D-CD403BDEF41D HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://15647.bodisparking.com/nudskakosna.cu.cc?framerequest=1&amp;refurl=
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Cache-Control: private
Content-Length: 0
Location: http://fw.dnslink.com/?domainname=nudskakosna.cu.cc&amp;seedterm=nudskakosna.cu.cc&amp;publicid=279F8BD6-C89B-40E3-988D-CD403BDEF41D
Server: Microsoft-IIS/7.5
Date: Sat, 10 Nov 2012 00:53:43 GMT
GET /?domainname=nudskakosna.cu.cc&seedterm=nudskakosna.cu.cc&publicid=279F8BD6-C89B-40E3-988D-CD403BDEF41D HTTP/1.1

Host: fw.dnslink.com
GET /?domainname=nudskakosna.cu.cc&amp;seedterm=nudskakosna.cu.cc&amp;publicid=279F8BD6-C89B-40E3-988D-CD403BDEF41D HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://15647.bodisparking.com/nudskakosna.cu.cc?framerequest=1&amp;refurl=
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Cache-Control: private
Location: http://click.WebQuickFind.com/ads-clicktrack/click/jump1.do?sid=zW9asLA4hqnZwGVt%2FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%3D%3D&amp;affiliate=59435&amp;subid=3493337&amp;rc=0&amp;terms=online+schools&amp;stm=2012-11-09-16-53-49
Server: Microsoft-IIS/7.5
X-AspNetMvc-Version: 3.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sat, 10 Nov 2012 00:54:11 GMT
Content-Length: 343
GET /favicon.ico HTTP/1.1

Host: 15647.bodisparking.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 404 Not Found

Content-Type: text/html
Server: Microsoft-IIS/7.5
Date: Sat, 10 Nov 2012 00:53:46 GMT
Content-Length: 1245
GET /ads-clicktrack/click/jump1.do?sid=zW9asLA4hqnZwGVt%2FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%3D%3D&affiliate=59435&subid=3493337&rc=0&terms=online+schools&stm=2012-11-09-16-53-49 HTTP/1.1

Host: click.webquickfind.com
GET /ads-clicktrack/click/jump1.do?sid=zW9asLA4hqnZwGVt%2FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%3D%3D&amp;affiliate=59435&amp;subid=3493337&amp;rc=0&amp;terms=online+schools&amp;stm=2012-11-09-16-53-49 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://15647.bodisparking.com/nudskakosna.cu.cc?framerequest=1&amp;refurl=
HTTP/1.1 200 OK

Content-Type: text/html;charset=ISO-8859-1
Server: nginx/1.1.12
Date: Sat, 10 Nov 2012 00:53:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: UID=59435&amp;3493337&amp;1352508829733&amp;195.159.140.221; Expires=Sun, 11-Nov-2012 00:53:49 GMT JSESSIONID=D880ECC05C9930D4C14ECB8DBB4E4F8A; Path=/ads-clicktrack
Content-Language: en-US
Content-Encoding: gzip
GET /beacon.js HTTP/1.1

Host: b.scorecardresearch.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://click.webquickfind.com/ads-clicktrack/click/jump1.do?sid=zW9asLA4hqnZwGVt%2FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%3D%3D&amp;affiliate=59435&amp;subid=3493337&amp;rc=0&amp;terms=online+schools&amp;stm=2012-11-09-16-53-49
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Sat, 24 Nov 2012 00:53:49 GMT
Date: Sat, 10 Nov 2012 00:53:49 GMT
Content-Length: 1140
Connection: keep-alive
Cache-Control: private, no-transform, max-age=1209600
GET /b?c1=8&c2=14880924&c3=2345678910111213345&ns__t=1352508829885&ns_c=ISO-8859-1&c8=Redirect&c7=http%3A%2F%2Fclick.webquickfind.com%2Fads-clicktrack%2Fclick%2Fjump1.do%3Fsid%3DzW9asLA4hqnZwGVt%252FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%253D%253D%26affiliate%3D59435%26subid%3D3493337%26rc%3D0%26terms%3Donline%2Bschools%26stm%3D2012-11-09-16-53-49&c9=http%3A%2F%2F15647.bodisparking.com%2Fnudskakosna.cu.cc%3Fframerequest%3D1%26refurl%3D HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=14880924&amp;c3=2345678910111213345&amp;ns__t=1352508829885&amp;ns_c=ISO-8859-1&amp;c8=Redirect&amp;c7=http%3A%2F%2Fclick.webquickfind.com%2Fads-clicktrack%2Fclick%2Fjump1.do%3Fsid%3DzW9asLA4hqnZwGVt%252FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%253D%253D%26affiliate%3D59435%26subid%3D3493337%26rc%3D0%26terms%3Donline%2Bschools%26stm%3D2012-11-09-16-53-49&amp;c9=http%3A%2F%2F15647.bodisparking.com%2Fnudskakosna.cu.cc%3Fframerequest%3D1%26refurl%3D HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://click.webquickfind.com/ads-clicktrack/click/jump1.do?sid=zW9asLA4hqnZwGVt%2FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%3D%3D&amp;affiliate=59435&amp;subid=3493337&amp;rc=0&amp;terms=online+schools&amp;stm=2012-11-09-16-53-49
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: http://b.scorecardresearch.com/b2?c1=8&amp;c2=14880924&amp;c3=2345678910111213345&amp;ns__t=1352508829885&amp;ns_c=ISO-8859-1&amp;c8=Redirect&amp;c7=http%3A%2F%2Fclick.webquickfind.com%2Fads-clicktrack%2Fclick%2Fjump1.do%3Fsid%3DzW9asLA4hqnZwGVt%252FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%253D%253D%26affiliate%3D59435%26subid%3D3493337%26rc%3D0%26terms%3Donline%2Bschools%26stm%3D2012-11-09-16-53-49&amp;c9=http%3A%2F%2F15647.bodisparking.com%2Fnudskakosna.cu.cc%3Fframerequest%3D1%26refurl%3D
Date: Sat, 10 Nov 2012 00:53:49 GMT
Connection: keep-alive
Set-Cookie: UID=4733434-195.159.219.9-1352508829; expires=Fri, 31-Oct-2014 00:53:49 GMT; path=/; domain=.scorecardresearch.com UIDR=1352508829; expires=Fri, 31-Oct-2014 00:53:49 GMT; path=/; domain=.scorecardresearch.com
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b2?c1=8&c2=14880924&c3=2345678910111213345&ns__t=1352508829885&ns_c=ISO-8859-1&c8=Redirect&c7=http%3A%2F%2Fclick.webquickfind.com%2Fads-clicktrack%2Fclick%2Fjump1.do%3Fsid%3DzW9asLA4hqnZwGVt%252FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%253D%253D%26affiliate%3D59435%26subid%3D3493337%26rc%3D0%26terms%3Donline%2Bschools%26stm%3D2012-11-09-16-53-49&c9=http%3A%2F%2F15647.bodisparking.com%2Fnudskakosna.cu.cc%3Fframerequest%3D1%26refurl%3D HTTP/1.1

Host: b.scorecardresearch.com
GET /b2?c1=8&amp;c2=14880924&amp;c3=2345678910111213345&amp;ns__t=1352508829885&amp;ns_c=ISO-8859-1&amp;c8=Redirect&amp;c7=http%3A%2F%2Fclick.webquickfind.com%2Fads-clicktrack%2Fclick%2Fjump1.do%3Fsid%3DzW9asLA4hqnZwGVt%252FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%253D%253D%26affiliate%3D59435%26subid%3D3493337%26rc%3D0%26terms%3Donline%2Bschools%26stm%3D2012-11-09-16-53-49&amp;c9=http%3A%2F%2F15647.bodisparking.com%2Fnudskakosna.cu.cc%3Fframerequest%3D1%26refurl%3D HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://click.webquickfind.com/ads-clicktrack/click/jump1.do?sid=zW9asLA4hqnZwGVt%2FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%3D%3D&amp;affiliate=59435&amp;subid=3493337&amp;rc=0&amp;terms=online+schools&amp;stm=2012-11-09-16-53-49
Cookie: UID=4733434-195.159.219.9-1352508829; UIDR=1352508829
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sat, 10 Nov 2012 00:53:49 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /ads-clicktrack/resources/js/backcookie.js HTTP/1.1

Host: click.webquickfind.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://click.webquickfind.com/ads-clicktrack/click/jump1.do?sid=zW9asLA4hqnZwGVt%2FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%3D%3D&amp;affiliate=59435&amp;subid=3493337&amp;rc=0&amp;terms=online+schools&amp;stm=2012-11-09-16-53-49
Cookie: JSESSIONID=D880ECC05C9930D4C14ECB8DBB4E4F8A
HTTP/1.1 200 OK

Content-Type: text/javascript
Server: nginx/1.1.12
Date: Sat, 10 Nov 2012 00:53:49 GMT
Content-Length: 2347
Connection: keep-alive
Accept-Ranges: bytes
Etag: W/&quot;2347-1350014954000&quot;
Last-Modified: Fri, 12 Oct 2012 04:09:14 GMT
GET /ads-conversiontrack/conversion/set.do?advertiserId=51163&keyword=online%20schools&adgroupId=31200&keywordId=0&affiliateId=59435&subAffiliate=3493337&campaignId=11544&adId=64918&ecnCategoryId=0&ecnSubCategoryId=0&ecnCreativeId=0 HTTP/1.1

Host: www.advconversion.com
GET /ads-conversiontrack/conversion/set.do?advertiserId=51163&amp;keyword=online%20schools&amp;adgroupId=31200&amp;keywordId=0&amp;affiliateId=59435&amp;subAffiliate=3493337&amp;campaignId=11544&amp;adId=64918&amp;ecnCategoryId=0&amp;ecnSubCategoryId=0&amp;ecnCreativeId=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://click.webquickfind.com/ads-clicktrack/click/jump1.do?sid=zW9asLA4hqnZwGVt%2FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%3D%3D&amp;affiliate=59435&amp;subid=3493337&amp;rc=0&amp;terms=online+schools&amp;stm=2012-11-09-16-53-49
HTTP/1.1 200 OK

Content-Type: image/gif;
Server: nginx/0.7.67
Date: Sat, 10 Nov 2012 00:53:50 GMT
Connection: keep-alive
P3P: policyref=\&quot;http://www.advertise.com/w3c/p3p.xml\&quot;,CP=\&quot;NON DSP COR PSAa PSDa NOR IND UNI COM NAV DEM\&quot;
Set-Cookie: saleConversion=&quot;59435||3493337||51163||11544||31200||online schools||0||64918||0||0&quot;; Version=1; Domain=.advconversion.com; Max-Age=2592000; Expires=Mon, 10-Dec-2012 00:53:50 GMT; Path=/
Content-Length: 43
GET /ads-clicktrack/click/jump2.do?affiliate=59435&sid=zW9asLA4hqnZwGVt%2FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%3D%3D&subid=3493337&terms=online+schools&rc=0&tr=YAwt2rqIZBqQe0dxksF5U1DxB6hp5NKMb5bw64ZEAu56a3yjCdmGNZhrbgVZbXhvcP62U361v1x8%250AYD3XV84cByBt1jnmuSGs&stm=2012-11-09-16-53-49&isRTVEnabled=false HTTP/1.1

Host: click.webquickfind.com
GET /ads-clicktrack/click/jump2.do?affiliate=59435&amp;sid=zW9asLA4hqnZwGVt%2FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%3D%3D&amp;subid=3493337&amp;terms=online+schools&amp;rc=0&amp;tr=YAwt2rqIZBqQe0dxksF5U1DxB6hp5NKMb5bw64ZEAu56a3yjCdmGNZhrbgVZbXhvcP62U361v1x8%250AYD3XV84cByBt1jnmuSGs&amp;stm=2012-11-09-16-53-49&amp;isRTVEnabled=false HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://click.webquickfind.com/ads-clicktrack/click/jump1.do?sid=zW9asLA4hqnZwGVt%2FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%3D%3D&amp;affiliate=59435&amp;subid=3493337&amp;rc=0&amp;terms=online+schools&amp;stm=2012-11-09-16-53-49
Cookie: UID=59435&amp;3493337&amp;1352508829733&amp;195.159.140.221; JSESSIONID=D880ECC05C9930D4C14ECB8DBB4E4F8A
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.1.12
Date: Sat, 10 Nov 2012 00:53:50 GMT
Content-Length: 0
Connection: keep-alive
Location: http://search.no.bookmarky.com/view.php?f=6661&amp;keyword=online+schools&amp;affsub=59435-3493337&amp;market=no
Content-Language: en-US
GET /favicon.ico HTTP/1.1

Host: click.webquickfind.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1
Server: nginx/0.7.67
Date: Sat, 10 Nov 2012 00:53:50 GMT
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 246
GET /view.php?f=6661&keyword=online+schools&affsub=59435-3493337&market=no HTTP/1.1

Host: search.no.bookmarky.com
GET /view.php?f=6661&amp;keyword=online+schools&amp;affsub=59435-3493337&amp;market=no HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://click.webquickfind.com/ads-clicktrack/click/jump1.do?sid=zW9asLA4hqnZwGVt%2FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%3D%3D&amp;affiliate=59435&amp;subid=3493337&amp;rc=0&amp;terms=online+schools&amp;stm=2012-11-09-16-53-49
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=&quot;set-cookie&quot;
Date: Sat, 10 Nov 2012 00:53:50 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: /?keyword=online+schools&amp;action=search&amp;k=online+schools&amp;i=195.159.140.221&amp;f=6661&amp;a=59435-3493337&amp;m=no
Pragma: no-cache
Server: Apache/2.2.21 (Amazon) DAV/2 PHP/5.3.10
Set-Cookie: PHPSESSID=gt2jqtnr8e7gtd4fuekb6vd1u5; path=/ AWSELB=C7834FB912E4F71CA544544350EB2AB68BA44245C622302C32E0296A795DEA232F8A718152851AF1E4AF1A45CD80B87C805736C57BEEF8C81AF8AB2D6624F5AA6124EE4C47;PATH=/;MAX-AGE=86400
X-Powered-By: PHP/5.3.10
Content-Length: 0
Connection: keep-alive
GET /?keyword=online+schools&action=search&k=online+schools&i=195.159.140.221&f=6661&a=59435-3493337&m=no HTTP/1.1

Host: search.no.bookmarky.com
GET /?keyword=online+schools&amp;action=search&amp;k=online+schools&amp;i=195.159.140.221&amp;f=6661&amp;a=59435-3493337&amp;m=no HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://click.webquickfind.com/ads-clicktrack/click/jump1.do?sid=zW9asLA4hqnZwGVt%2FAc1CF0PlX8z8MMU4Jtgk5XOXJQj5YN5IdCUmw%3D%3D&amp;affiliate=59435&amp;subid=3493337&amp;rc=0&amp;terms=online+schools&amp;stm=2012-11-09-16-53-49
Cookie: PHPSESSID=gt2jqtnr8e7gtd4fuekb6vd1u5; AWSELB=C7834FB912E4F71CA544544350EB2AB68BA44245C622302C32E0296A795DEA232F8A718152851AF1E4AF1A45CD80B87C805736C57BEEF8C81AF8AB2D6624F5AA6124EE4C47
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Date: Sat, 10 Nov 2012 00:53:51 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: Apache/2.2.21 (Amazon) DAV/2 PHP/5.3.10
X-Powered-By: PHP/5.3.10
Content-Length: 5052
Connection: keep-alive
GET /js/jquery.ui.autocomplete.css?v=1 HTTP/1.1

Host: search.no.bookmarky.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://search.no.bookmarky.com/?keyword=online+schools&amp;action=search&amp;k=online+schools&amp;i=195.159.140.221&amp;f=6661&amp;a=59435-3493337&amp;m=no
Cookie: PHPSESSID=gt2jqtnr8e7gtd4fuekb6vd1u5; AWSELB=C7834FB912E4F71CA544544350EB2AB68BA44245C622302C32E0296A795DEA232F8A718152851AF1E4AF1A45CD80B87C805736C57BEEF8C81AF8AB2D6624F5AA6124EE4C47
HTTP/1.1 200 OK

Content-Type: text/css
Accept-Ranges: bytes
Date: Sat, 10 Nov 2012 00:53:51 GMT
Etag: &quot;20ecd-1f8-4b382f528abd6&quot;
Last-Modified: Wed, 07 Dec 2011 16:22:27 GMT
Server: Apache/2.2.21 (Amazon) DAV/2 PHP/5.3.10
Content-Length: 504
Connection: keep-alive
GET /images/common/favicon/favicon.ico HTTP/1.1

Host: media.bookmarky.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.0 200 OK

Content-Type: image/x-icon
Last-Modified: Thu, 05 Nov 2009 15:03:37 GMT
Accept-Ranges: bytes
Content-Length: 1150
Date: Sat, 10 Nov 2012 00:10:23 GMT
Server: Apache
Etag: &quot;49aa9c-47e-477a108262440&quot;
Expires: Sat, 10 Nov 2012 01:10:23 GMT
Cache-Control: max-age=3600
Age: 2608
X-Cache: HIT from localhost
X-Cache-Lookup: HIT from localhost:80
Via: 1.0 localhost (squid/3.1.6)
Connection: keep-alive
GET /ajax/libs/jquery/1.6.4/jquery.min.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://search.no.bookmarky.com/?keyword=online+schools&amp;action=search&amp;k=online+schools&amp;i=195.159.140.221&amp;f=6661&amp;a=59435-3493337&amp;m=no
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT
Date: Fri, 09 Nov 2012 20:33:30 GMT
Expires: Sat, 09 Nov 2013 20:33:30 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 32103
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 15621
GET /js/jquery-ui-1.8.16.custom.css HTTP/1.1

Host: search.no.bookmarky.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://search.no.bookmarky.com/?keyword=online+schools&amp;action=search&amp;k=online+schools&amp;i=195.159.140.221&amp;f=6661&amp;a=59435-3493337&amp;m=no
Cookie: PHPSESSID=gt2jqtnr8e7gtd4fuekb6vd1u5; AWSELB=C7834FB912E4F71CA544544350EB2AB68BA44245C622302C32E0296A795DEA232F8A718152851AF1E4AF1A45CD80B87C805736C57BEEF8C81AF8AB2D6624F5AA6124EE4C47
HTTP/1.1 200 OK

Content-Type: text/css
Accept-Ranges: bytes
Date: Sat, 10 Nov 2012 00:53:51 GMT
Etag: &quot;22c04-4ec7-4b382f5287cf6&quot;
Last-Modified: Wed, 07 Dec 2011 16:22:27 GMT
Server: Apache/2.2.21 (Amazon) DAV/2 PHP/5.3.10
Content-Length: 20167
Connection: keep-alive
GET /bookmarky/style.css?v1 HTTP/1.1

Host: s3-eu-west-1.amazonaws.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://search.no.bookmarky.com/?keyword=online+schools&amp;action=search&amp;k=online+schools&amp;i=195.159.140.221&amp;f=6661&amp;a=59435-3493337&amp;m=no
HTTP/1.1 200 OK

Content-Type: text/css
x-amz-id-2: c7jXikErdAw72nHVw8o2Bkq2+1R+fVZqCDmsuXqBVF9aOQZ/eVmWXzpQjSodrZu7
x-amz-request-id: 0EAAA32155E85AC5
Date: Sat, 10 Nov 2012 00:53:52 GMT
Last-Modified: Thu, 29 Sep 2011 13:37:04 GMT
Etag: &quot;1bfc17698b3b05a10d494cb9c6f976b1&quot;
Accept-Ranges: bytes
Content-Length: 3091
Server: AmazonS3
GET /bookmarky/logo.gif HTTP/1.1

Host: s3-eu-west-1.amazonaws.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://search.no.bookmarky.com/?keyword=online+schools&amp;action=search&amp;k=online+schools&amp;i=195.159.140.221&amp;f=6661&amp;a=59435-3493337&amp;m=no
HTTP/1.1 200 OK

Content-Type: image/gif
x-amz-id-2: 3X7RP4AruLVSHWJtC2cFFeGGEFBr8wF/l/nBNuRNy7dqYxthSzO/EM8WIHjdIxXt
x-amz-request-id: 5DD5F9FADA3651C7
Date: Sat, 10 Nov 2012 00:53:52 GMT
Last-Modified: Tue, 20 Sep 2011 10:25:33 GMT
Etag: &quot;fda1fa4bb110fec5b602feeca9f67ebb&quot;
Accept-Ranges: bytes
Content-Length: 6271
Server: AmazonS3
GET /bookmarky/jquery.ui.autocomplete.min.js HTTP/1.1

Host: s3-eu-west-1.amazonaws.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://search.no.bookmarky.com/?keyword=online+schools&amp;action=search&amp;k=online+schools&amp;i=195.159.140.221&amp;f=6661&amp;a=59435-3493337&amp;m=no
HTTP/1.1 200 OK

Content-Type: application/x-javascript
x-amz-id-2: RVIzate4GFVfonwbET9Wtu0Fq3FW0ZI0jnzbj/I6pyqq3spZcqrP1mR6RIM5OuPG
x-amz-request-id: 38BFCCB95DC1B771
Date: Sat, 10 Nov 2012 00:53:52 GMT
Last-Modified: Fri, 30 Sep 2011 15:33:54 GMT
Etag: &quot;c9f03ed092e3a4b1a2e7287ebbacabdb&quot;
Accept-Ranges: bytes
Content-Length: 8882
Server: AmazonS3
GET /bookmarky/jquery-ui-1.8.16.custom.min.js HTTP/1.1

Host: s3-eu-west-1.amazonaws.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://search.no.bookmarky.com/?keyword=online+schools&amp;action=search&amp;k=online+schools&amp;i=195.159.140.221&amp;f=6661&amp;a=59435-3493337&amp;m=no
HTTP/1.1 200 OK

Content-Type: application/x-javascript
x-amz-id-2: 1cJ7VAK1fCTeFBEGNW6aC6qfOCzxlvBuE2acnSrjE2StoA9EGTL/Oumer+4oG8gb
x-amz-request-id: 3EB71A2ECD51C3D0
Date: Sat, 10 Nov 2012 00:53:52 GMT
Last-Modified: Fri, 30 Sep 2011 15:33:53 GMT
Etag: &quot;45e9ece56cb35f81d3c82987f7e0c813&quot;
Accept-Ranges: bytes
Content-Length: 11288
Server: AmazonS3
GET /bookmarky/header-left.gif HTTP/1.1

Host: s3-eu-west-1.amazonaws.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s3-eu-west-1.amazonaws.com/bookmarky/style.css?v1
HTTP/1.1 200 OK

Content-Type: image/gif
x-amz-id-2: ucMqeuD6ZkTYjM7YGBL0pHDbF7Hna32YUegiJ7vmVYXiCIpUoOT6S3LCnLZru43k
x-amz-request-id: 039FEDBB5250FFE8
Date: Sat, 10 Nov 2012 00:53:53 GMT
Last-Modified: Tue, 20 Sep 2011 10:25:32 GMT
Etag: &quot;b20d36c9128b05080f1e588e4f5bb563&quot;
Accept-Ranges: bytes
Content-Length: 498
Server: AmazonS3
GET /bookmarky/back.gif HTTP/1.1

Host: s3-eu-west-1.amazonaws.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s3-eu-west-1.amazonaws.com/bookmarky/style.css?v1
HTTP/1.1 200 OK

Content-Type: image/gif
x-amz-id-2: 7YoUH6pP6Vb20ZRjcBJUwk8MRxoEH/IebfvPzzd28M6eQ6KlwIDM2wR2yXqNHhYX
x-amz-request-id: 5323A60F503F43CC
Date: Sat, 10 Nov 2012 00:53:53 GMT
Last-Modified: Tue, 20 Sep 2011 10:25:29 GMT
Etag: &quot;5ddda9be1112245aa765dcd06e8cabdd&quot;
Accept-Ranges: bytes
Content-Length: 753
Server: AmazonS3
GET /bookmarky/header-back.gif HTTP/1.1

Host: s3-eu-west-1.amazonaws.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s3-eu-west-1.amazonaws.com/bookmarky/style.css?v1
HTTP/1.1 200 OK

Content-Type: image/gif
x-amz-id-2: udzvLfptNM97ATFNFWtyb8kxWKFvRAjCp45HQ4RhrzPcPKiQ0y+mAjdy3eVDI4k6
x-amz-request-id: E3D0336B288F4E06
Date: Sat, 10 Nov 2012 00:53:53 GMT
Last-Modified: Tue, 20 Sep 2011 10:25:32 GMT
Etag: &quot;6c0aa566b833e85eaaa8b5a1285ac434&quot;
Accept-Ranges: bytes
Content-Length: 293
Server: AmazonS3
GET /bookmarky/bg-text.png HTTP/1.1

Host: s3-eu-west-1.amazonaws.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s3-eu-west-1.amazonaws.com/bookmarky/style.css?v1
HTTP/1.1 200 OK

Content-Type: image/png
x-amz-id-2: ajyxDrOsFda82DfrQeUBC2gGbymQdaTv4P361zd0XkTS1lTY6G0rsoezvm+lAY1m
x-amz-request-id: 7BA41BD3DF61D6FA
Date: Sat, 10 Nov 2012 00:53:53 GMT
Last-Modified: Tue, 20 Sep 2011 10:25:31 GMT
Etag: &quot;1f1d8c07bfaf65e377c0cca94e5573c1&quot;
Accept-Ranges: bytes
Content-Length: 692
Server: AmazonS3
GET /images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1

Host: search.no.bookmarky.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://search.no.bookmarky.com/js/jquery-ui-1.8.16.custom.css
Cookie: PHPSESSID=gt2jqtnr8e7gtd4fuekb6vd1u5; AWSELB=C7834FB912E4F71CA544544350EB2AB68BA44245C622302C32E0296A795DEA232F8A718152851AF1E4AF1A45CD80B87C805736C57BEEF8C81AF8AB2D6624F5AA6124EE4C47
HTTP/1.1 200 OK

Content-Type: image/png
Accept-Ranges: bytes
Date: Sat, 10 Nov 2012 00:53:52 GMT
Etag: &quot;20d18-58-4b382f5299a1f&quot;
Last-Modified: Wed, 07 Dec 2011 16:22:27 GMT
Server: Apache/2.2.21 (Amazon) DAV/2 PHP/5.3.10
Content-Length: 88
Connection: keep-alive
GET /bookmarky/header-right.gif HTTP/1.1

Host: s3-eu-west-1.amazonaws.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s3-eu-west-1.amazonaws.com/bookmarky/style.css?v1
HTTP/1.1 200 OK

Content-Type: image/gif
x-amz-id-2: XQPSR4IbzwV1qFWqMYF9ZpTaKpnQU/MB+uMPyCjhFGP73J42YPgxmThlUshpBlBN
x-amz-request-id: 9CA8930D3E33E441
Date: Sat, 10 Nov 2012 00:53:53 GMT
Last-Modified: Tue, 20 Sep 2011 10:25:32 GMT
Etag: &quot;03f03599436d915484f0965bf95be8dd&quot;
Accept-Ranges: bytes
Content-Length: 497
Server: AmazonS3
GET /bookmarky/bg-search.png HTTP/1.1

Host: s3-eu-west-1.amazonaws.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s3-eu-west-1.amazonaws.com/bookmarky/style.css?v1
HTTP/1.1 200 OK

Content-Type: image/png
x-amz-id-2: jla1br//cVpRJClv7TkC97bNQ1nZ1r10tukSIRk0YvbPF+zuqgJBVvaoQLI57iUK
x-amz-request-id: 13AB9EC9ADBA8A31
Date: Sat, 10 Nov 2012 00:53:53 GMT
Last-Modified: Tue, 20 Sep 2011 10:25:31 GMT
Etag: &quot;c5f3fe13c549de61765a54be3273924e&quot;
Accept-Ranges: bytes
Content-Length: 814
Server: AmazonS3
GET /bookmarky/whitecont-foot.png HTTP/1.1

Host: s3-eu-west-1.amazonaws.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s3-eu-west-1.amazonaws.com/bookmarky/style.css?v1
HTTP/1.1 200 OK

Content-Type: image/png
x-amz-id-2: 1rW1uUOzLqM6yAphCz1cqkGtfjEZK7Z2e2/7Vanl6gQ1LWzNrah/juVieFytv4ax
x-amz-request-id: F106F859C468B859
Date: Sat, 10 Nov 2012 00:53:53 GMT
Last-Modified: Tue, 20 Sep 2011 10:25:34 GMT
Etag: &quot;18e098fb5b138702da9200b25792ba9b&quot;
Accept-Ranges: bytes
Content-Length: 3313
Server: AmazonS3
GET /bookmarky/whitecont-head.gif HTTP/1.1

Host: s3-eu-west-1.amazonaws.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s3-eu-west-1.amazonaws.com/bookmarky/style.css?v1
HTTP/1.1 200 OK

Content-Type: image/gif
x-amz-id-2: TI4Qpzmeu6dD+tHSmQdKbanOCM4ZjjPHETYjmif/ridvnQqfVuON9Zflxjbutio9
x-amz-request-id: 22E96D8BF131B63B
Date: Sat, 10 Nov 2012 00:53:53 GMT
Last-Modified: Tue, 20 Sep 2011 10:25:35 GMT
Etag: &quot;dd23af5f32530ceca03d73ba4e80d824&quot;
Accept-Ranges: bytes
Content-Length: 198
Server: AmazonS3
GET /ct/js/tcode/3/t.js?l= HTTP/1.1

Host: 23.23.204.218

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://search.no.bookmarky.com/?keyword=online+schools&amp;action=search&amp;k=online+schools&amp;i=195.159.140.221&amp;f=6661&amp;a=59435-3493337&amp;m=no
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Nov 2012 00:53:52 GMT
Server: Apache/2.2.22 (Amazon)
X-Powered-By: PHP/5.3.14
Connection: close
Content-Length: 3845
GET /favicon.ico HTTP/1.1

Host: click.webquickfind.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1
Server: nginx/1.1.12
Date: Sat, 10 Nov 2012 00:53:53 GMT
Content-Length: 245
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip