Overview

URLhttp://thepiratebay.se/top/all
IP194.71.107.15
ASNAS51040 Piratpartiet
Location Sweden
Report completed2012-11-10 23:34:12 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-10 23:33:26 194.71.107.15 urlQuery Client3ET RBN Known Russian Business Network IP (87)
2012-11-10 23:33:27 194.71.107.18 urlQuery Client3ET RBN Known Russian Business Network IP (87)
2012-11-10 23:33:33 93.184.220.20 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-10 23:33:40 93.184.220.103 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 194.71.107.15

Date Alerts / IDS URL IP
2013-03-31 01:52:360 / 2http://thepiratebay.se194.71.107.15
2013-03-31 00:08:550 / 2http://thepiratebay.se194.71.107.15
2013-03-29 21:14:480 / 5http://thepiratebay.se/torrent/8178598/GTA__San_Andreas_(WORKING_TORRENT)194.71.107.15
2013-03-28 23:36:480 / 0http://194.71.107.15194.71.107.15
2013-03-12 19:30:220 / 2http://thepiratebay.se194.71.107.15
2013-03-12 19:26:050 / 2http://www.thepiratebay.se194.71.107.15

Last 6 reports on ASN: AS51040 Piratpartiet

Date Alerts / IDS URL IP
2013-03-31 01:52:360 / 2http://thepiratebay.se194.71.107.15
2013-03-31 00:08:550 / 2http://thepiratebay.se194.71.107.15
2013-03-29 21:14:480 / 5http://thepiratebay.se/torrent/8178598/GTA__San_Andreas_(WORKING_TORRENT)194.71.107.15
2013-03-28 23:36:480 / 0http://194.71.107.15194.71.107.15
2013-03-12 19:30:220 / 2http://thepiratebay.se194.71.107.15
2013-03-12 19:26:050 / 2http://www.thepiratebay.se194.71.107.15

Last 6 reports on domain: thepiratebay.se

Date Alerts / IDS URL IP
2013-03-31 01:52:360 / 2http://thepiratebay.se194.71.107.15
2013-03-31 00:08:550 / 2http://thepiratebay.se194.71.107.15
2013-03-29 21:14:480 / 5http://thepiratebay.se/torrent/8178598/GTA__San_Andreas_(WORKING_TORRENT)194.71.107.15
2013-03-12 19:30:220 / 2http://thepiratebay.se194.71.107.15
2013-03-07 16:57:200 / 2http://thepiratebay.se194.71.107.15
2013-03-05 21:38:560 / 2http://thepiratebay.se/194.71.107.15



JavaScript

Executed Scripts (21)


Executed Evals (0)


Executed Writes (7)

#1 JavaScript::Write (size: 81, repeated: 1)

<script src='http://clkads.com/script/baypop.js' type='text/javascript'></script>

#2 JavaScript::Write (size: 84, repeated: 1)

<script src='http://www.google-analytics.com/ga.js' type='text/javascript'></script>

#3 JavaScript::Write (size: 205, repeated: 1)

<script type='text/javascript'>pb_cid='BAYBANNER120X600_1';pb_aid='9';pb_type='banner_120x600';</script><script src='http://clkads.com/banners/script/include_ext_banner.js' type='text/javascript'></script>

#4 JavaScript::Write (size: 205, repeated: 1)

<script type='text/javascript'>pb_cid='BAYBANNER160X600_1';pb_aid='9';pb_type='banner_160x600';</script><script src='http://clkads.com/banners/script/include_ext_banner.js' type='text/javascript'></script>

#5 JavaScript::Write (size: 203, repeated: 1)

<script type='text/javascript'>pb_cid='BAYBANNER468X60_1';pb_aid='9';pb_type='banner_468x60';</script><script src='http://clkads.com/banners/script/include_ext_banner.js' type='text/javascript'></script>

#6 JavaScript::Write (size: 203, repeated: 1)

<script type='text/javascript'>pb_cid='BAYBANNER728X90_1';pb_aid='9';pb_type='banner_728x90';</script><script src='http://clkads.com/banners/script/include_ext_banner.js' type='text/javascript'></script>

#7 JavaScript::Write (size: 203, repeated: 1)

<script type='text/javascript'>pb_cid='BAYBANNER728X90_2';pb_aid='9';pb_type='banner_728x90';</script><script src='http://clkads.com/banners/script/include_ext_banner.js' type='text/javascript'></script>


HTTP Transactions (56)


Request Response
GET /top/all HTTP/1.1

Host: thepiratebay.se

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
X-Powered-By: PHP/5.4.8
Set-Cookie: PHPSESSID=72da6eb8674f666ad3b6deaeea1434eb; path=/; domain=.thepiratebay.se language=en_EN; expires=Sun, 10-Nov-2013 22:33:27 GMT; path=/; domain=.thepiratebay.se
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Sat, 10 Nov 2012 22:33:27 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked
Date: Sat, 10 Nov 2012 22:33:27 GMT
Server: lighttpd
GET /js/tpb.js HTTP/1.1

Host: static.thepiratebay.se

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
Cookie: PHPSESSID=72da6eb8674f666ad3b6deaeea1434eb; language=en_EN
HTTP/1.1 200 OK

Content-Type: text/javascript
Etag: &quot;2603801598&quot;
Accept-Ranges: bytes
Last-Modified: Tue, 16 Oct 2012 09:58:41 GMT
Expires: Sat, 17 Nov 2012 22:33:26 GMT
Cache-Control: max-age=604800
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 147
Date: Sat, 10 Nov 2012 22:33:26 GMT
Server: lighttpd
GET /img/icon-magnet.gif HTTP/1.1

Host: static.thepiratebay.se

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
Cookie: PHPSESSID=72da6eb8674f666ad3b6deaeea1434eb; language=en_EN
HTTP/1.1 200 OK

Content-Type: image/gif
Etag: &quot;4017720220&quot;
Accept-Ranges: bytes
Last-Modified: Tue, 16 Oct 2012 09:58:39 GMT
Expires: Fri, 08 Feb 2013 22:33:26 GMT
Cache-Control: max-age=7776000
Content-Length: 148
Date: Sat, 10 Nov 2012 22:33:26 GMT
Server: lighttpd
GET /img/icon_image.gif HTTP/1.1

Host: static.thepiratebay.se

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
Cookie: PHPSESSID=72da6eb8674f666ad3b6deaeea1434eb; language=en_EN
HTTP/1.1 200 OK

Content-Type: image/gif
Etag: &quot;2415444883&quot;
Accept-Ranges: bytes
Last-Modified: Tue, 16 Oct 2012 09:58:32 GMT
Expires: Fri, 08 Feb 2013 22:33:26 GMT
Cache-Control: max-age=7776000
Content-Length: 329
Date: Sat, 10 Nov 2012 22:33:26 GMT
Server: lighttpd
GET /img/icon_comment.gif HTTP/1.1

Host: static.thepiratebay.se

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
Cookie: PHPSESSID=72da6eb8674f666ad3b6deaeea1434eb; language=en_EN
HTTP/1.1 200 OK

Content-Type: image/gif
Etag: &quot;135847588&quot;
Accept-Ranges: bytes
Last-Modified: Tue, 16 Oct 2012 09:58:39 GMT
Expires: Fri, 08 Feb 2013 22:33:26 GMT
Cache-Control: max-age=7776000
Content-Length: 77
Date: Sat, 10 Nov 2012 22:33:26 GMT
Server: lighttpd
GET /css/pirate6.css HTTP/1.1

Host: static.thepiratebay.se

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
Cookie: PHPSESSID=72da6eb8674f666ad3b6deaeea1434eb; language=en_EN
HTTP/1.1 200 OK

Content-Type: text/css
Etag: &quot;3114749735&quot;
Accept-Ranges: bytes
Last-Modified: Mon, 22 Oct 2012 10:35:40 GMT
Expires: Wed, 14 Nov 2012 22:33:26 GMT
Cache-Control: max-age=345600
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4875
Date: Sat, 10 Nov 2012 22:33:26 GMT
Server: lighttpd
GET /img/vip.gif HTTP/1.1

Host: static.thepiratebay.se

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
Cookie: PHPSESSID=72da6eb8674f666ad3b6deaeea1434eb; language=en_EN
HTTP/1.1 200 OK

Content-Type: image/gif
Etag: &quot;4017341317&quot;
Accept-Ranges: bytes
Last-Modified: Tue, 16 Oct 2012 09:58:32 GMT
Expires: Fri, 08 Feb 2013 22:33:26 GMT
Cache-Control: max-age=7776000
Content-Length: 848
Date: Sat, 10 Nov 2012 22:33:26 GMT
Server: lighttpd
GET /img/tpblogo_sm_ny.gif HTTP/1.1

Host: static.thepiratebay.se

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
Cookie: PHPSESSID=72da6eb8674f666ad3b6deaeea1434eb; language=en_EN
HTTP/1.1 200 OK

Content-Type: image/gif
Etag: &quot;3547997571&quot;
Accept-Ranges: bytes
Last-Modified: Tue, 16 Oct 2012 09:58:38 GMT
Expires: Fri, 08 Feb 2013 22:33:26 GMT
Cache-Control: max-age=7776000
Content-Length: 5369
Date: Sat, 10 Nov 2012 22:33:26 GMT
Server: lighttpd
GET /img/helper.png HTTP/1.1

Host: static.thepiratebay.se

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
Cookie: PHPSESSID=72da6eb8674f666ad3b6deaeea1434eb; language=en_EN
HTTP/1.1 200 OK

Content-Type: image/png
Etag: &quot;3917073309&quot;
Accept-Ranges: bytes
Last-Modified: Tue, 16 Oct 2012 09:58:38 GMT
Expires: Fri, 08 Feb 2013 22:33:26 GMT
Cache-Control: max-age=7776000
Content-Length: 144
Date: Sat, 10 Nov 2012 22:33:26 GMT
Server: lighttpd
GET /img/trusted.png HTTP/1.1

Host: static.thepiratebay.se

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
Cookie: PHPSESSID=72da6eb8674f666ad3b6deaeea1434eb; language=en_EN
HTTP/1.1 200 OK

Content-Type: image/png
Etag: &quot;3959221148&quot;
Accept-Ranges: bytes
Last-Modified: Tue, 16 Oct 2012 09:58:39 GMT
Expires: Fri, 08 Feb 2013 22:33:26 GMT
Cache-Control: max-age=7776000
Content-Length: 141
Date: Sat, 10 Nov 2012 22:33:26 GMT
Server: lighttpd
GET /img/rss_small.gif HTTP/1.1

Host: static.thepiratebay.se

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
Cookie: PHPSESSID=72da6eb8674f666ad3b6deaeea1434eb; language=en_EN
HTTP/1.1 200 OK

Content-Type: image/gif
Etag: &quot;796851099&quot;
Accept-Ranges: bytes
Last-Modified: Tue, 16 Oct 2012 09:58:38 GMT
Expires: Fri, 08 Feb 2013 22:33:26 GMT
Cache-Control: max-age=7776000
Content-Length: 288
Date: Sat, 10 Nov 2012 22:33:26 GMT
Server: lighttpd
GET /clkads/sky2.html HTTP/1.1

Host: cdn2.adexprt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx
Date: Sat, 10 Nov 2012 22:33:27 GMT
Last-Modified: Thu, 08 Nov 2012 19:11:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sun, 11 Nov 2012 22:33:27 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
GET /clkads/pop.js HTTP/1.1

Host: cdn1.adexprt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Server: nginx
Date: Sat, 10 Nov 2012 22:33:27 GMT
Content-Length: 175
Last-Modified: Tue, 06 Nov 2012 19:55:10 GMT
Connection: keep-alive
Expires: Sun, 11 Nov 2012 22:33:27 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
GET /clkads/center.html HTTP/1.1

Host: cdn2.adexprt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx
Date: Sat, 10 Nov 2012 22:33:27 GMT
Last-Modified: Thu, 08 Nov 2012 19:11:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sun, 11 Nov 2012 22:33:27 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
GET /clkads/top.html HTTP/1.1

Host: cdn1.adexprt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx
Date: Sat, 10 Nov 2012 22:33:27 GMT
Last-Modified: Thu, 01 Nov 2012 13:23:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sun, 11 Nov 2012 22:33:27 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
GET /clkads/sky1.html HTTP/1.1

Host: cdn1.adexprt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx
Date: Sat, 10 Nov 2012 22:33:27 GMT
Last-Modified: Thu, 01 Nov 2012 13:24:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sun, 11 Nov 2012 22:33:27 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
GET /clkads/bottom.html HTTP/1.1

Host: cdn1.adexprt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
HTTP/1.1 200 OK

Content-Type: text/html
Server: nginx
Date: Sat, 10 Nov 2012 22:33:27 GMT
Last-Modified: Thu, 01 Nov 2012 13:23:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sun, 11 Nov 2012 22:33:27 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
GET /adServe/banners?tid=BAYBANNER728X90_2&size=728x90 HTTP/1.1

Host: clkads.com
GET /adServe/banners?tid=BAYBANNER728X90_2&amp;size=728x90 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn2.adexprt.com/clkads/center.html
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Nov 2012 22:33:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
GET /script/baypop.js HTTP/1.1

Host: clkads.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://thepiratebay.se/top/all
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Server: nginx
Date: Sat, 10 Nov 2012 22:33:28 GMT
Last-Modified: Tue, 06 Nov 2012 10:48:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
Vary: Accept-Encoding
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
GET /adServe/banners?tid=BAYBANNER160X600_1&size=160x600 HTTP/1.1

Host: clkads.com
GET /adServe/banners?tid=BAYBANNER160X600_1&amp;size=160x600 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn2.adexprt.com/clkads/sky2.html
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Nov 2012 22:33:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
GET /adServe/banners?tid=BAYBANNER728X90_1&size=728x90 HTTP/1.1

Host: clkads.com
GET /adServe/banners?tid=BAYBANNER728X90_1&amp;size=728x90 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn1.adexprt.com/clkads/bottom.html
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Nov 2012 22:33:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
GET /banners/script/include_ext_banner.js HTTP/1.1

Host: clkads.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn2.adexprt.com/clkads/center.html
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Server: nginx
Date: Sat, 10 Nov 2012 22:33:28 GMT
Last-Modified: Thu, 13 Sep 2012 14:24:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
Vary: Accept-Encoding
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
GET /adServe/banners/getIframe?tid=BAYBANNER728X90_2&aid=9&size=728x90 HTTP/1.1

Host: clkads.com
GET /adServe/banners/getIframe?tid=BAYBANNER728X90_2&amp;aid=9&amp;size=728x90 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn2.adexprt.com/clkads/center.html
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Nov 2012 22:33:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
GET /adServe/banners/getIframe?tid=BAYBANNER160X600_1&aid=9&size=160x600 HTTP/1.1

Host: clkads.com
GET /adServe/banners/getIframe?tid=BAYBANNER160X600_1&amp;aid=9&amp;size=160x600 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn2.adexprt.com/clkads/sky2.html
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Nov 2012 22:33:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
GET /adServe/banners/getIframe?tid=BAYBANNER728X90_1&aid=9&size=728x90 HTTP/1.1

Host: clkads.com
GET /adServe/banners/getIframe?tid=BAYBANNER728X90_1&amp;aid=9&amp;size=728x90 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn1.adexprt.com/clkads/bottom.html
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Nov 2012 22:33:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
GET /www/delivery/afr.php?zoneid=1&cb=91685779 HTTP/1.1

Host: 5.150.195.131
GET /www/delivery/afr.php?zoneid=1&amp;cb=91685779 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clkads.com/adServe/banners/getIframe?tid=BAYBANNER728X90_2&amp;aid=9&amp;size=728x90
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Server: nginx
Date: Sat, 10 Nov 2012 22:26:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.17-1~dotdeb.0
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Set-Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; path=/ OAID=4619deaecf1f0197b2784cdf1602fc1d; expires=Sun, 10-Nov-2013 22:26:37 GMT; path=/
GET /www/delivery/afr.php?zoneid=2&cb=987123123512 HTTP/1.1

Host: 5.150.195.131
GET /www/delivery/afr.php?zoneid=2&amp;cb=987123123512 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clkads.com/adServe/banners/getIframe?tid=BAYBANNER728X90_1&amp;aid=9&amp;size=728x90
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Server: nginx
Date: Sat, 10 Nov 2012 22:26:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.17-1~dotdeb.0
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Set-Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; path=/ OAID=26dc626a9a1967ad6dd1dd1d09ea1a52; expires=Sun, 10-Nov-2013 22:26:37 GMT; path=/
GET /www/delivery/afr.php?zoneid=5&cb=561543213215 HTTP/1.1

Host: 5.150.195.131
GET /www/delivery/afr.php?zoneid=5&amp;cb=561543213215 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clkads.com/adServe/banners/getIframe?tid=BAYBANNER160X600_1&amp;aid=9&amp;size=160x600
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Server: nginx
Date: Sat, 10 Nov 2012 22:26:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.17-1~dotdeb.0
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Set-Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; path=/ OAID=7644875f3f26a619cc85bae713a0878c; expires=Sun, 10-Nov-2013 22:26:37 GMT; path=/
GET /www/images/1816860034ea487ff134414eeccaf523.jpg HTTP/1.1

Host: 5.150.195.131

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5.150.195.131/www/delivery/afr.php?zoneid=1&amp;cb=91685779
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=4619deaecf1f0197b2784cdf1602fc1d
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx
Date: Sat, 10 Nov 2012 22:26:37 GMT
Content-Length: 26645
Last-Modified: Fri, 09 Nov 2012 01:13:15 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
GET /www/delivery/lg.php?bannerid=310&campaignid=69&zoneid=1&source={obfs:}&OXLIA=1&loc=http%3A%2F%2Fclkads.com%2FadServe%2Fbanners%2FgetIframe%3Ftid%3DBAYBANNER728X90_2%26aid%3D9%26size%3D728x90&cb=4c6134836e HTTP/1.1

Host: 5.150.195.131
GET /www/delivery/lg.php?bannerid=310&amp;campaignid=69&amp;zoneid=1&amp;source={obfs:}&amp;OXLIA=1&amp;loc=http%3A%2F%2Fclkads.com%2FadServe%2Fbanners%2FgetIframe%3Ftid%3DBAYBANNER728X90_2%26aid%3D9%26size%3D728x90&amp;cb=4c6134836e HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5.150.195.131/www/delivery/afr.php?zoneid=1&amp;cb=91685779
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=4619deaecf1f0197b2784cdf1602fc1d
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx
Date: Sat, 10 Nov 2012 22:26:37 GMT
Content-Length: 43
Connection: keep-alive
X-Powered-By: PHP/5.3.17-1~dotdeb.0
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Set-Cookie: OAID=4619deaecf1f0197b2784cdf1602fc1d; expires=Sun, 10-Nov-2013 22:26:37 GMT; path=/ _OXLIA[310]=mdamcd-1; expires=Mon, 10-Dec-2012 22:26:37 GMT; path=/
GET /www/delivery/lg.php?bannerid=101&campaignid=32&zoneid=5&source={obfs:}&loc=http%3A%2F%2Fclkads.com%2FadServe%2Fbanners%2FgetIframe%3Ftid%3DBAYBANNER160X600_1%26aid%3D9%26size%3D160x600&cb=3e6ee88b09 HTTP/1.1

Host: 5.150.195.131
GET /www/delivery/lg.php?bannerid=101&amp;campaignid=32&amp;zoneid=5&amp;source={obfs:}&amp;loc=http%3A%2F%2Fclkads.com%2FadServe%2Fbanners%2FgetIframe%3Ftid%3DBAYBANNER160X600_1%26aid%3D9%26size%3D160x600&amp;cb=3e6ee88b09 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5.150.195.131/www/delivery/afr.php?zoneid=5&amp;cb=561543213215
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=7644875f3f26a619cc85bae713a0878c
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx
Date: Sat, 10 Nov 2012 22:26:37 GMT
Content-Length: 43
Connection: keep-alive
X-Powered-By: PHP/5.3.17-1~dotdeb.0
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Set-Cookie: OAID=7644875f3f26a619cc85bae713a0878c; expires=Sun, 10-Nov-2013 22:26:37 GMT; path=/
GET /www/delivery/lg.php?bannerid=195&campaignid=32&zoneid=2&source={obfs:}&loc=http%3A%2F%2Fclkads.com%2FadServe%2Fbanners%2FgetIframe%3Ftid%3DBAYBANNER728X90_1%26aid%3D9%26size%3D728x90&cb=e9fcd63710 HTTP/1.1

Host: 5.150.195.131
GET /www/delivery/lg.php?bannerid=195&amp;campaignid=32&amp;zoneid=2&amp;source={obfs:}&amp;loc=http%3A%2F%2Fclkads.com%2FadServe%2Fbanners%2FgetIframe%3Ftid%3DBAYBANNER728X90_1%26aid%3D9%26size%3D728x90&amp;cb=e9fcd63710 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5.150.195.131/www/delivery/afr.php?zoneid=2&amp;cb=987123123512
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=26dc626a9a1967ad6dd1dd1d09ea1a52
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx
Date: Sat, 10 Nov 2012 22:26:37 GMT
Content-Length: 43
Connection: keep-alive
X-Powered-By: PHP/5.3.17-1~dotdeb.0
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Set-Cookie: OAID=26dc626a9a1967ad6dd1dd1d09ea1a52; expires=Sun, 10-Nov-2013 22:26:37 GMT; path=/
GET /www/images/5b434aaeb70a99377c565262b181c7c3.png HTTP/1.1

Host: 5.150.195.131

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5.150.195.131/www/delivery/afr.php?zoneid=5&amp;cb=561543213215
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=7644875f3f26a619cc85bae713a0878c
HTTP/1.1 200 OK

Content-Type: image/png
Server: nginx
Date: Sat, 10 Nov 2012 22:26:37 GMT
Content-Length: 41514
Last-Modified: Sun, 07 Oct 2012 18:40:30 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
GET /www/images/fb88e281018687bab7a9ad699efe1640.gif HTTP/1.1

Host: 5.150.195.131

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5.150.195.131/www/delivery/afr.php?zoneid=2&amp;cb=987123123512
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=26dc626a9a1967ad6dd1dd1d09ea1a52
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx
Date: Sat, 10 Nov 2012 22:26:37 GMT
Content-Length: 366965
Last-Modified: Sun, 07 Oct 2012 18:40:26 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
GET /adServe/banners?tid=BAYBANNER120X600_1&size=120x600 HTTP/1.1

Host: clkads.com
GET /adServe/banners?tid=BAYBANNER120X600_1&amp;size=120x600 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn1.adexprt.com/clkads/sky1.html
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Nov 2012 22:33:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
GET /adServe/banners?tid=BAYBANNER468X60_1&size=468x60 HTTP/1.1

Host: clkads.com
GET /adServe/banners?tid=BAYBANNER468X60_1&amp;size=468x60 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn1.adexprt.com/clkads/top.html
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Nov 2012 22:33:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
GET /adServe/banners/getIframe?tid=BAYBANNER120X600_1&aid=9&size=120x600 HTTP/1.1

Host: clkads.com
GET /adServe/banners/getIframe?tid=BAYBANNER120X600_1&amp;aid=9&amp;size=120x600 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn1.adexprt.com/clkads/sky1.html
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Nov 2012 22:33:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
GET /adServe/banners/getIframe?tid=BAYBANNER468X60_1&aid=9&size=468x60 HTTP/1.1

Host: clkads.com
GET /adServe/banners/getIframe?tid=BAYBANNER468X60_1&amp;aid=9&amp;size=468x60 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn1.adexprt.com/clkads/top.html
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Nov 2012 22:33:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
GET /www/delivery/afr.php?zoneid=10&cb=9432132184246 HTTP/1.1

Host: 5.150.195.131
GET /www/delivery/afr.php?zoneid=10&amp;cb=9432132184246 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clkads.com/adServe/banners/getIframe?tid=BAYBANNER120X600_1&amp;aid=9&amp;size=120x600
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=26dc626a9a1967ad6dd1dd1d09ea1a52; _OXLIA[310]=mdamcd-1
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Server: nginx
Date: Sat, 10 Nov 2012 22:26:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.17-1~dotdeb.0
Set-Cookie: _OXLIA[310]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ %5FOXLIA%5B310%5D=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ OAID=26dc626a9a1967ad6dd1dd1d09ea1a52; expires=Sun, 10-Nov-2013 22:26:40 GMT; path=/ OXLIA=310.mdamcd-1; expires=Sun, 10-Nov-2013 22:26:40 GMT; path=/
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
GET /www/delivery/afr.php?zoneid=4&cb=216348792454 HTTP/1.1

Host: 5.150.195.131
GET /www/delivery/afr.php?zoneid=4&amp;cb=216348792454 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://clkads.com/adServe/banners/getIframe?tid=BAYBANNER468X60_1&amp;aid=9&amp;size=468x60
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=26dc626a9a1967ad6dd1dd1d09ea1a52; _OXLIA[310]=mdamcd-1
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Server: nginx
Date: Sat, 10 Nov 2012 22:26:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.17-1~dotdeb.0
Set-Cookie: _OXLIA[310]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ %5FOXLIA%5B310%5D=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ OAID=26dc626a9a1967ad6dd1dd1d09ea1a52; expires=Sun, 10-Nov-2013 22:26:40 GMT; path=/ OXLIA=310.mdamcd-1; expires=Sun, 10-Nov-2013 22:26:40 GMT; path=/
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
GET /www/delivery/lg.php?bannerid=303&campaignid=70&zoneid=10&source={obfs:}&OACBLOCK=86400&OASCCAP=2&loc=1&referer=http%3A%2F%2Fclkads.com%2FadServe%2Fbanners%2FgetIframe%3Ftid%3DBAYBANNER120X600_1%26aid%3D9%26size%3D120x600&cb=b798eb4b23 HTTP/1.1

Host: 5.150.195.131
GET /www/delivery/lg.php?bannerid=303&amp;campaignid=70&amp;zoneid=10&amp;source={obfs:}&amp;OACBLOCK=86400&amp;OASCCAP=2&amp;loc=1&amp;referer=http%3A%2F%2Fclkads.com%2FadServe%2Fbanners%2FgetIframe%3Ftid%3DBAYBANNER120X600_1%26aid%3D9%26size%3D120x600&amp;cb=b798eb4b23 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5.150.195.131/www/delivery/afr.php?zoneid=10&amp;cb=9432132184246
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=26dc626a9a1967ad6dd1dd1d09ea1a52; OXLIA=310.mdamcd-1
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx
Date: Sat, 10 Nov 2012 22:26:40 GMT
Content-Length: 43
Connection: keep-alive
X-Powered-By: PHP/5.3.17-1~dotdeb.0
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Set-Cookie: OAID=26dc626a9a1967ad6dd1dd1d09ea1a52; expires=Sun, 10-Nov-2013 22:26:40 GMT; path=/ _OASCCAP[70]=1; path=/ _OACBLOCK[70]=1352586400; expires=Mon, 10-Dec-2012 22:26:40 GMT; path=/
GET /getad.php HTTP/1.1

Host: 5.150.195.130

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5.150.195.131/www/delivery/afr.php?zoneid=4&amp;cb=216348792454
HTTP/1.1 200 OK

Content-Type: application/javascript
Server: nginx
Date: Sat, 10 Nov 2012 22:33:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.10-1ubuntu3.4
GET /www/delivery/lg.php?bannerid=220&campaignid=19&zoneid=4&source={obfs:}&loc=1&referer=http%3A%2F%2Fclkads.com%2FadServe%2Fbanners%2FgetIframe%3Ftid%3DBAYBANNER468X60_1%26aid%3D9%26size%3D468x60&cb=ec03a04b34 HTTP/1.1

Host: 5.150.195.131
GET /www/delivery/lg.php?bannerid=220&amp;campaignid=19&amp;zoneid=4&amp;source={obfs:}&amp;loc=1&amp;referer=http%3A%2F%2Fclkads.com%2FadServe%2Fbanners%2FgetIframe%3Ftid%3DBAYBANNER468X60_1%26aid%3D9%26size%3D468x60&amp;cb=ec03a04b34 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5.150.195.131/www/delivery/afr.php?zoneid=4&amp;cb=216348792454
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=26dc626a9a1967ad6dd1dd1d09ea1a52; OXLIA=310.mdamcd-1
HTTP/1.1 200 OK

Content-Type: image/gif
Server: nginx
Date: Sat, 10 Nov 2012 22:26:41 GMT
Content-Length: 43
Connection: keep-alive
X-Powered-By: PHP/5.3.17-1~dotdeb.0
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Set-Cookie: OAID=26dc626a9a1967ad6dd1dd1d09ea1a52; expires=Sun, 10-Nov-2013 22:26:41 GMT; path=/
GET /spot/15512.html HTTP/1.1

Host: medleyads.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5.150.195.131/www/delivery/afr.php?zoneid=4&amp;cb=216348792454
HTTP/1.1 200 OK

Content-Type: text/html
Date: Sat, 10 Nov 2012 22:33:33 GMT
Server: Apache
P3P: CP=&quot;DSP LAW&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
X-ApacheServer: ii102-32.friendfinderinc.com
Content-Length: 698
Keep-Alive: timeout=5, max=105
Connection: Keep-Alive
GET /processing/impressions.asp?btag=a_2379b_426 HTTP/1.1

Host: affiliates.livecasinopartners.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5.150.195.131/www/delivery/afr.php?zoneid=10&amp;cb=9432132184246
HTTP/1.1 301 Moved Permanently

Content-Type: text/html
Date: Sat, 10 Nov 2012 22:33:49 GMT
Server: Microsoft-IIS/6.0
X-EcomAccess-ClusterID: IA-iis2
X-Powered-By: ASP.NET
Location: http://smedia.livecasinopartners.com/lucky/llc_girlPurple_120x600-swedish.swf
Content-Length: 0
Set-Cookie: a2379b426=a2379b426=http%3A%2F%2Fsmedia%2Elivecasinopartners%2Ecom%2Flucky%2Fllc%5FgirlPurple%5F120x600%2Dswedish%2Eswf; expires=Sat, 10-Nov-2012 23:33:48 GMT; path=/ btag=a%5F2379b%5F426; expires=Fri, 08-Feb-2013 22:33:48 GMT; domain=affiliates.livecasinopartners.com; path=/ ASPSESSIONIDCSBCTQBT=EKMNFJEDOKMLHDNBBNLEILNM; path=/
Cache-Control: private
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://medleyads.com/spot/15512.html
If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT
HTTP/1.1 200 OK

Content-Type: text/javascript
Content-Length: 14888
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Sat, 10 Nov 2012 20:33:27 GMT
Expires: Sun, 11 Nov 2012 08:33:27 GMT
Vary: Accept-Encoding
Age: 7206
Cache-Control: max-age=43200, public
Server: GFE/2.0
GET /piclist?age=18-35&background_color=transparent&border_color=transparent&display=horizontal&find_sex=2&link_color=%230000FF&looking_for_person=1&niche=0&page=search&photo=2&pic_border_color=%23000000&pic_border_width=0&pid=p1964355.submad_218675_c578_l3_s15512&madirect=http://medleyads.com/spot/c/1352586813/1505528670/34908.html&race=0&rollover_header_color=%23FFEE80&rows=1&show_join_link=0&show_profile=0&show_title=0&size=5&target=_blank&text_color=%23000000&thumb=thumb&title_color=%23000000&width=468&iframe=1 HTTP/1.1

Host: banners.adultfriendfinder.com
GET /piclist?age=18-35&amp;background_color=transparent&amp;border_color=transparent&amp;display=horizontal&amp;find_sex=2&amp;link_color=%230000FF&amp;looking_for_person=1&amp;niche=0&amp;page=search&amp;photo=2&amp;pic_border_color=%23000000&amp;pic_border_width=0&amp;pid=p1964355.submad_218675_c578_l3_s15512&amp;madirect=http://medleyads.com/spot/c/1352586813/1505528670/34908.html&amp;race=0&amp;rollover_header_color=%23FFEE80&amp;rows=1&amp;show_join_link=0&amp;show_profile=0&amp;show_title=0&amp;size=5&amp;target=_blank&amp;text_color=%23000000&amp;thumb=thumb&amp;title_color=%23000000&amp;width=468&amp;iframe=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://medleyads.com/spot/15512.html
HTTP/1.1 200 OK

Content-Type: text/html;charset=UTF-8
Date: Sat, 10 Nov 2012 22:33:33 GMT
Server: Apache
Set-Cookie: ffadult_who=r,q2Qes9FXFYkQSLnj4oVDuCxnxbPV0Dzq2hMElEzVz5Tg/LRvJBrv56sepNO0qbKauHVeepAzV5ugEP44akjnYvtStIYqa5w1q4kdaEIt8/wZGZ1xQyc/x6vzaYvWCahvITdRAPBB3MYSdHXRAmAEPUI_Kx7F_gRcM2CuKHTLCMCL_914qrxY4TrTdXk8Co_6; path=/; domain=.adultfriendfinder.com v_hash=_english_0; path=/; domain=.adultfriendfinder.com; expires=Mon, 10-Dec-2012 22:33:33 GMT IP_COUNTRY=Norway; path=/; domain=.adultfriendfinder.com; expires=Mon, 10-Dec-2012 22:33:33 GMT ffadult_tr=r,42eE5p1Z8Wutpwc7ZOpUJP5lkXYWp44INq_OQxTxSq6CG93JkVb0RiQj9YGhBnpX; path=/; domain=.adultfriendfinder.com; expires=Mon, 10-Dec-2012 22:33:33 GMT LOCATION_FROM_IP=country&amp;Norway&amp;area_code&amp;0&amp;longitude&amp;10.7500&amp;country_name&amp;Norway&amp;lat&amp;59.9167&amp;region_name&amp;Oslo&amp;country_code&amp;NO&amp;region&amp;12&amp;state&amp;&amp;city&amp;Oslo&amp;postal_code&amp;&amp;latitude&amp;59.9167&amp;lon&amp;10.7500&amp;dma_code&amp;0&amp;country_code3&amp;NOR; path=/; domain=.adultfriendfinder.com; expires=Mon, 10-Dec-2012 22:33:33 GMT HISTORY=20121110-1-Dk; path=/; domain=.adultfriendfinder.com; expires=Mon, 10-Dec-2012 22:33:33 GMT AB_TRACKING=zBZ1wHtrW712Hx6GSvgWU5; path=/; domain=.adultfriendfinder.com; expires=Mon, 10-Dec-2012 22:33:33 GMT
P3P: CP=&quot;DSP LAW&quot;
X-ApacheServer: ki51-40.friendfinderinc.com
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3664
Keep-Alive: timeout=5, max=10
Connection: Keep-Alive
GET /lucky/llc_girlPurple_120x600-swedish.swf HTTP/1.1

Host: smedia.livecasinopartners.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5.150.195.131/www/delivery/afr.php?zoneid=10&amp;cb=9432132184246
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Accept-Ranges: bytes
Cache-Control: max-age=604800
Date: Sat, 10 Nov 2012 22:33:33 GMT
Etag: &quot;2304375711&quot;
Expires: Sat, 17 Nov 2012 22:33:33 GMT
Last-Modified: Mon, 15 Oct 2012 17:19:24 GMT
Server: ECS (arn/46E6)
X-Cache: HIT
Content-Length: 40018
GET /ffadult/featured/external/photos/RI/X9RiCCaXwwZMbpBYEql8gw.jpg HTTP/1.1

Host: photos.pop6.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://banners.adultfriendfinder.com/piclist?age=18-35&amp;background_color=transparent&amp;border_color=transparent&amp;display=horizontal&amp;find_sex=2&amp;link_color=%230000FF&amp;looking_for_person=1&amp;niche=0&amp;page=search&amp;photo=2&amp;pic_border_color=%23000000&amp;pic_border_width=0&amp;pid=p1964355.submad_218675_c578_l3_s15512&amp;madirect=http://medleyads.com/spot/c/1352586813/1505528670/34908.html&amp;race=0&amp;rollover_header_color=%23FFEE80&amp;rows=1&amp;show_join_link=0&amp;show_profile=0&amp;show_title=0&amp;size=5&amp;target=_blank&amp;text_color=%23000000&amp;thumb=thumb&amp;title_color=%23000000&amp;width=468&amp;iframe=1
HTTP/1.1 200 OK

Content-Type: image/jpeg
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 22:33:33 GMT
Etag: &quot;d5b6559-5b7-4767b4a183cc0&quot;
Expires: Mon, 10 Dec 2012 22:33:33 GMT
Last-Modified: Thu, 22 Oct 2009 00:36:43 GMT
Server: ECS (arn/46F5)
Via: 1.0 origin.friendfinderinc.com:3128 (squid/2.7.STABLE9)
X-Cache: HIT
X-Cache-Lookup: HIT from origin.friendfinderinc.com:3128
Content-Length: 1463
GET /ffadult/featured/external/photos/9K/9b9kaoXSQsQE0Ki5qvp7qA.jpg HTTP/1.1

Host: graphics.pop6.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://banners.adultfriendfinder.com/piclist?age=18-35&amp;background_color=transparent&amp;border_color=transparent&amp;display=horizontal&amp;find_sex=2&amp;link_color=%230000FF&amp;looking_for_person=1&amp;niche=0&amp;page=search&amp;photo=2&amp;pic_border_color=%23000000&amp;pic_border_width=0&amp;pid=p1964355.submad_218675_c578_l3_s15512&amp;madirect=http://medleyads.com/spot/c/1352586813/1505528670/34908.html&amp;race=0&amp;rollover_header_color=%23FFEE80&amp;rows=1&amp;show_join_link=0&amp;show_profile=0&amp;show_title=0&amp;size=5&amp;target=_blank&amp;text_color=%23000000&amp;thumb=thumb&amp;title_color=%23000000&amp;width=468&amp;iframe=1
HTTP/1.1 200 OK

Content-Type: image/jpeg
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 22:33:33 GMT
Etag: &quot;1edb4d16-a3e-4ad7b8fb76d97&quot;
Expires: Mon, 10 Dec 2012 22:33:33 GMT
Last-Modified: Wed, 21 Sep 2011 23:01:50 GMT
Server: ECS (arn/46FE)
Via: 1.1 origin.friendfinderinc.com:3128 (squid/2.7.STABLE9)
X-Cache: HIT
X-Cache-Lookup: HIT from origin.friendfinderinc.com:3128
Content-Length: 2622
GET /ffadult/featured/external/photos/LW/kSLWQZSPiP8vnTU5Wo4eVSP1g.jpg HTTP/1.1

Host: photos.pop6.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://banners.adultfriendfinder.com/piclist?age=18-35&amp;background_color=transparent&amp;border_color=transparent&amp;display=horizontal&amp;find_sex=2&amp;link_color=%230000FF&amp;looking_for_person=1&amp;niche=0&amp;page=search&amp;photo=2&amp;pic_border_color=%23000000&amp;pic_border_width=0&amp;pid=p1964355.submad_218675_c578_l3_s15512&amp;madirect=http://medleyads.com/spot/c/1352586813/1505528670/34908.html&amp;race=0&amp;rollover_header_color=%23FFEE80&amp;rows=1&amp;show_join_link=0&amp;show_profile=0&amp;show_title=0&amp;size=5&amp;target=_blank&amp;text_color=%23000000&amp;thumb=thumb&amp;title_color=%23000000&amp;width=468&amp;iframe=1
HTTP/1.1 200 OK

Content-Type: image/jpeg
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 22:33:33 GMT
Etag: &quot;1e99d4cf-a52-4ae1602808557&quot;
Expires: Mon, 10 Dec 2012 22:33:33 GMT
Last-Modified: Thu, 29 Sep 2011 15:17:41 GMT
Server: ECS (arn/46EC)
Via: 1.1 origin.friendfinderinc.com:3128 (squid/2.7.STABLE9)
X-Cache: HIT
X-Cache-Lookup: HIT from origin.friendfinderinc.com:3128
Content-Length: 2642
GET /ffadult/featured/external/photos/RO/iqRoeh7DHhi9E3vHKxLDaw.jpg HTTP/1.1

Host: graphics.pop6.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://banners.adultfriendfinder.com/piclist?age=18-35&amp;background_color=transparent&amp;border_color=transparent&amp;display=horizontal&amp;find_sex=2&amp;link_color=%230000FF&amp;looking_for_person=1&amp;niche=0&amp;page=search&amp;photo=2&amp;pic_border_color=%23000000&amp;pic_border_width=0&amp;pid=p1964355.submad_218675_c578_l3_s15512&amp;madirect=http://medleyads.com/spot/c/1352586813/1505528670/34908.html&amp;race=0&amp;rollover_header_color=%23FFEE80&amp;rows=1&amp;show_join_link=0&amp;show_profile=0&amp;show_title=0&amp;size=5&amp;target=_blank&amp;text_color=%23000000&amp;thumb=thumb&amp;title_color=%23000000&amp;width=468&amp;iframe=1
HTTP/1.1 200 OK

Content-Type: image/jpeg
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 22:33:33 GMT
Etag: &quot;1a9bde21-bad-49f3e6a583bde&quot;
Expires: Mon, 10 Dec 2012 22:33:33 GMT
Last-Modified: Thu, 24 Mar 2011 18:12:07 GMT
Server: ECS (arn/4667)
Via: 1.1 origin.friendfinderinc.com:3128 (squid/2.7.STABLE9)
X-Cache: HIT
X-Cache-Lookup: HIT from origin.friendfinderinc.com:3128
Content-Length: 2989
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/xml
Server: Apache
Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT
Etag: &quot;87de33-256-4cd617ed12480&quot;
Accept-Ranges: bytes
Content-Length: 598
Date: Sat, 10 Nov 2012 22:33:33 GMT
Connection: keep-alive
GET /banners/aff/28303/carlasquirt1_1_pg_47x62.swf HTTP/1.1

Host: content.pop6.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://banners.adultfriendfinder.com/piclist?age=18-35&amp;background_color=transparent&amp;border_color=transparent&amp;display=horizontal&amp;find_sex=2&amp;link_color=%230000FF&amp;looking_for_person=1&amp;niche=0&amp;page=search&amp;photo=2&amp;pic_border_color=%23000000&amp;pic_border_width=0&amp;pid=p1964355.submad_218675_c578_l3_s15512&amp;madirect=http://medleyads.com/spot/c/1352586813/1505528670/34908.html&amp;race=0&amp;rollover_header_color=%23FFEE80&amp;rows=1&amp;show_join_link=0&amp;show_profile=0&amp;show_title=0&amp;size=5&amp;target=_blank&amp;text_color=%23000000&amp;thumb=thumb&amp;title_color=%23000000&amp;width=468&amp;iframe=1
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 22:33:34 GMT
Etag: &quot;115be6bd-8cc-49c48a88627c7&quot;
Expires: Mon, 10 Dec 2012 22:33:34 GMT
Last-Modified: Tue, 15 Feb 2011 02:09:45 GMT
Server: ECS (arn/46EC)
Via: 1.1 origin.friendfinderinc.com:3128 (squid/2.7.STABLE9)
X-Cache: HIT
X-Cache-Lookup: HIT from origin.friendfinderinc.com:3128
Content-Length: 2252
GET /banners/aff/28303/carlasquirt1_1_pg_47x62.flv HTTP/1.1

Host: graphics.pop6.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/plain; charset=UTF-8
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 22:33:34 GMT
Etag: &quot;dcf6fb9-9d01-455f2f1156380&quot;
Expires: Mon, 10 Dec 2012 22:33:34 GMT
Last-Modified: Wed, 03 Sep 2008 00:30:22 GMT
Server: ECS (arn/46F3)
Via: 1.1 origin.friendfinderinc.com:3128 (squid/2.7.STABLE9)
X-Cache: HIT
X-Cache-Lookup: MISS from origin.friendfinderinc.com:3128
Content-Length: 40193
GET /favicon.ico HTTP/1.1

Host: thepiratebay.se

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: PHPSESSID=72da6eb8674f666ad3b6deaeea1434eb; language=en_EN
HTTP/1.1 200 OK

Content-Type: application/octet-stream
Etag: &quot;30008134&quot;
Accept-Ranges: bytes
Last-Modified: Thu, 26 May 2011 07:32:48 GMT
Content-Length: 824
Date: Sat, 10 Nov 2012 22:33:34 GMT
Server: lighttpd