Overview

URLhttp://gpil.org/download/flvplayer_v3.exe?c0eca2c0
IP108.162.198.93
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2012-11-12 22:37:02 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-12 22:36:27 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 2
2012-11-12 22:36:28 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 3
2012-11-12 22:36:28 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 2
2012-11-12 22:36:28 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 3
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 108.162.198.93

Date Alerts / IDS URL IP
2013-03-26 05:45:530 / 2http://88nsm.com108.162.198.93
2013-01-07 15:54:050 / 0http://jacaro.es/refer.php?r=xGold108.162.198.93
2013-01-02 22:32:050 / 0http://r57-c99-shell.org/shell/r57.txt108.162.198.93
2013-01-02 22:27:460 / 0http://r57-c99-shell.org108.162.198.93
2012-12-29 05:57:510 / 2http://pinayxcandal.com/108.162.198.93
2012-10-29 17:41:550 / 4http://gpil.org/download/flvplayer_v3.exe?27c81fc0?5eb48620108.162.198.93

Last 6 reports on ASN: AS13335 CloudFlare, Inc.

Date Alerts / IDS URL IP
2013-04-08 19:46:150 / 2http://www.coolutils.com/download/TotalOutlookConverterPro.exe108.162.207.68
2013-04-08 19:45:050 / 2http://www.coolutils.com/download/MP3EmSee.exe108.162.207.68
2013-04-08 18:59:480 / 0http://108.162.205.83108.162.205.83
2013-04-08 18:49:180 / 0http://echelon2.org141.101.117.134
2013-04-08 18:41:280 / 0http://108.162.199.23108.162.199.23
2013-04-08 18:29:180 / 0http://wikileaks.org/plusd/190.93.240.19

Last 6 reports on domain: gpil.org

Date Alerts / IDS URL IP
2013-01-30 23:21:210 / 4http://gpil.org/?hg=0141.101.117.120
2013-01-20 06:06:540 / 4http://gpil.org/download/VideoConverter_v2.exe141.101.116.120
2013-01-18 05:27:150 / 4http://gpil.org/download/VideoConverter_v2.exe141.101.116.120
2013-01-17 21:36:490 / 4http://gpil.org/download/VideoConverter_v2.exe141.101.117.120
2013-01-13 13:55:480 / 4http://gpil.org/download/VideoConverter_v4.exe141.101.116.120
2013-01-10 06:03:370 / 4http://gpil.org/download/VideoConverter_v4.exe108.162.195.193



JavaScript

Executed Scripts (15)


Executed Evals (0)


Executed Writes (5)

#1 JavaScript::Write (size: 44, repeated: 1)

<div style="display:inline" id="oV10"></div>

#2 JavaScript::Write (size: 17951, repeated: 1)

<div style="width:480px;"><div style="font-size:14px;font-weight:bold;color:#000;padding-left:10px;padding-top:5px;padding-bottom:2px;"><a style="text-decoration:none;color:#000;" TARGET="_blank" href="https://www.google.com/adsense/support/bin/request.py?contact=abg_afc&url=http://gpil.org/&hl=en&client=ca-dp-godaddy2_xml&gl=NO" >Ads</a></div><div style="background-color:#ffffff;"><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CIlt92muhUO3IMMynsQak7IGYC7L6k5UD2pfR7jvAjbcBEAEg9veyAygKUOPtgwhgw_ShhZAYoAGWtJv1A8gBAakC1E1JMQrhhj6oAwGqBFNP0NO6MSj74zTjIEd28FBLrhEuzQLkHWFSMyLv5dEGdqG5i2eQzcDk4eHYQQ58NkvBN5y9siB5nYuNyFCiez35FBOY2YIfsCVhgytnoU3WPUmaWYgGAQ&num=1&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_3TtUe2epfzCVJY7okJEFJsvy8fEg&adurl=http://momondo.no/Default.aspx%3Faw%3Dno%26source%3Dgoogle%26%26d%3DBKK%26h%3DFinn%2Bdin%2BBillige%2Bflybillet%2Btil%2BBangkok%26mkwid%3DcdoO80yTP%26pcrid%3D15977516362%26kword%3Dbangkok%26match%3D%26plid%3Dgpil.org&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.momondo.no/Fly-Billig-Bangkok" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">Billige fly til Bangkok</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CIlt92muhUO3IMMynsQak7IGYC7L6k5UD2pfR7jvAjbcBEAEg9veyAygKUOPtgwhgw_ShhZAYoAGWtJv1A8gBAakC1E1JMQrhhj6oAwGqBFNP0NO6MSj74zTjIEd28FBLrhEuzQLkHWFSMyLv5dEGdqG5i2eQzcDk4eHYQQ58NkvBN5y9siB5nYuNyFCiez35FBOY2YIfsCVhgytnoU3WPUmaWYgGAQ&num=1&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_3TtUe2epfzCVJY7okJEFJsvy8fEg&adurl=http://momondo.no/Default.aspx%3Faw%3Dno%26source%3Dgoogle%26%26d%3DBKK%26h%3DFinn%2Bdin%2BBillige%2Bflybillet%2Btil%2BBangkok%26mkwid%3DcdoO80yTP%26pcrid%3D15977516362%26kword%3Dbangkok%26match%3D%26plid%3Dgpil.org&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="www.momondo.no/Fly-Billig-Bangkok" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">www.momondo.no/Fly-Billig-Bangkok</a><div style="padding-top:0px;padding-bottom:1px;">Book billige fly raskt og enkelt til Bangkok- her og nu!</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=C9bXw2muhUO3IMMynsQak7IGYC8mglNgC2abNnDfAjbcBEAIg9veyAygKUPj--sX______wFgw_ShhZAYoAHXseH8A8gBAakCpUnuOZ9ahz6oAwGqBFNP0KPIFC374DTjIEd28FBLrhEuzQLkHWFSMyLv5dEGdqG5i2eQzcDk4eHYQQ58NkvBN-eVhTJ5nYuNyFCiez35FBOY2YIfsCVhgytnoU3WCjLyV4gGAQ&num=2&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_2mid0R_4pMYpsMAr02XBsSmWVQpQ&adurl=http://iflirt.no/%3Faf%3DMNNZO5WjOBDMZOxY&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.iFlirt.no/dating" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">iFlirt.no - Gratis Dating</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=C9bXw2muhUO3IMMynsQak7IGYC8mglNgC2abNnDfAjbcBEAIg9veyAygKUPj--sX______wFgw_ShhZAYoAHXseH8A8gBAakCpUnuOZ9ahz6oAwGqBFNP0KPIFC374DTjIEd28FBLrhEuzQLkHWFSMyLv5dEGdqG5i2eQzcDk4eHYQQ58NkvBN-eVhTJ5nYuNyFCiez35FBOY2YIfsCVhgytnoU3WCjLyV4gGAQ&num=2&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_2mid0R_4pMYpsMAr02XBsSmWVQpQ&adurl=http://iflirt.no/%3Faf%3DMNNZO5WjOBDMZOxY&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="www.iFlirt.no/dating" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">www.iFlirt.no/dating</a><div style="padding-top:0px;padding-bottom:1px;">Dating, høstflørt eller har du bare lyst til å kline litt?</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CkrTQ2muhUO3IMMynsQak7IGYC_Hk4cUC49-q2A3AjbcBEAMg9veyAygKUOGiot39_____wFgw_ShhZAYoAGKoY3_A8gBAagDAaoES0_Qg6W5MeDaDFGTThnnSU7sUDPY318eCUua-f6dzQZy66yLL4fUxaag_M0Jof41ogrgAeBztph2XanVUHty1T7i5Zubwg-U1tBWHogGAQ&num=3&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_0l12rp193DdBEXoG5gnblVgdStww&adurl=http://www.rbrides.com/onlinewomen.php%3Fpage%3D1%26a_aid%3Dgoogle&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.RBrides.com" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">Russian Brides For Norway</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CkrTQ2muhUO3IMMynsQak7IGYC_Hk4cUC49-q2A3AjbcBEAMg9veyAygKUOGiot39_____wFgw_ShhZAYoAGKoY3_A8gBAagDAaoES0_Qg6W5MeDaDFGTThnnSU7sUDPY318eCUua-f6dzQZy66yLL4fUxaag_M0Jof41ogrgAeBztph2XanVUHty1T7i5Zubwg-U1tBWHogGAQ&num=3&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_0l12rp193DdBEXoG5gnblVgdStww&adurl=http://www.rbrides.com/onlinewomen.php%3Fpage%3D1%26a_aid%3Dgoogle&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="www.RBrides.com" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">www.RBrides.com</a><div style="padding-top:0px;padding-bottom:1px;">Single Russian Brides for Norwegian for marriage. Video Chats. $17/m</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CvApx2muhUO3IMMynsQak7IGYC_i8g_kCkoCruA7AjbcBEAQg9veyAygKUJ-nu-MBYMP0oYWQGKAB3Njt-gPIAQGoAwGqBExP0MPDjTHn2gxRk04Z50lO7FAz2N9fHglLmvn-nc0Gcuusiy-H1MWmoPzNCaH-NaIK4AHgc7aYdl2p1VB7ctU-4uWbm8IPlNa6cOojiAYB&num=4&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_1oYIFwyI7CXaoVg6GocoxNYnmuzA&adurl=http://www.amolatina.com/%3Fafid%3D339&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="AmoLatina.com" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">Hottest Mexican Women</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CvApx2muhUO3IMMynsQak7IGYC_i8g_kCkoCruA7AjbcBEAQg9veyAygKUJ-nu-MBYMP0oYWQGKAB3Njt-gPIAQGoAwGqBExP0MPDjTHn2gxRk04Z50lO7FAz2N9fHglLmvn-nc0Gcuusiy-H1MWmoPzNCaH-NaIK4AHgc7aYdl2p1VB7ctU-4uWbm8IPlNa6cOojiAYB&num=4&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_1oYIFwyI7CXaoVg6GocoxNYnmuzA&adurl=http://www.amolatina.com/%3Fafid%3D339&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="AmoLatina.com" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">AmoLatina.com</a><div style="padding-top:0px;padding-bottom:1px;">Browse 100s Photo &amp; Video profiles. Find Your Sweetheart in Mexico!</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://googleads.g.doubleclick.net/aclk?sa=L&ai=Cs8SL2muhUO3IMMynsQak7IGYC8XY6tsC1a7R3kfAjbcBEAUg9veyAygKUN7gg5MCYMP0oYWQGMgBAakCpUnuOZ9ahz6oAwGqBFBP0JOOFSv75zTjIEd28FBLrhEuzQLkHWFSMyLv5dEGdqG5i2eQzcDk4eHYQQ40Nq_k8QDgc_i2dl0xKbs6cSD5VeabX3ccdNAik8shDBwsmw&num=5&sig=AOD64_35A21aPErFq6mppK_Fsox4N1cKQQ&adurl=http://www.toppdating.no&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.toppdating.no/" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">#1 Norges dating på nette</a> <a target="_blank" href="http://googleads.g.doubleclick.net/aclk?sa=L&ai=Cs8SL2muhUO3IMMynsQak7IGYC8XY6tsC1a7R3kfAjbcBEAUg9veyAygKUN7gg5MCYMP0oYWQGMgBAakCpUnuOZ9ahz6oAwGqBFBP0JOOFSv75zTjIEd28FBLrhEuzQLkHWFSMyLv5dEGdqG5i2eQzcDk4eHYQQ40Nq_k8QDgc_i2dl0xKbs6cSD5VeabX3ccdNAik8shDBwsmw&num=5&sig=AOD64_35A21aPErFq6mppK_Fsox4N1cKQQ&adurl=http://www.toppdating.no&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="www.toppdating.no/" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">www.toppdating.no/</a><div style="padding-top:0px;padding-bottom:1px;">Finn kjærligheten, eller ny venner Prøv nå - Gratis Medlemskap!</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://googleads.g.doubleclick.net/aclk?sa=L&ai=CEQEq2muhUO3IMMynsQak7IGYC7mD8dwDscqu01nAjbcBEAYg9veyAygKUPHf5Gdgw_ShhZAYyAEBqQKlSe45n1qHPqgDAaoESk_Qg5MEKPvkNOMgR3bwUEuuES7NAuQdYVIzIu_l0QZ2obmLZ5DNwOTh4dhBDhQ3ny7dJZN5xZKdq6liUzm2IPkX5tuLYhnFG8a-&num=6&sig=AOD64_2LU_YUaW6Jx_ymmAy4bQ8z_SOfqA&adurl=http://learnnorwegian.no&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.learnnorwegian.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">Norwegian language course</a> <a target="_blank" href="http://googleads.g.doubleclick.net/aclk?sa=L&ai=CEQEq2muhUO3IMMynsQak7IGYC7mD8dwDscqu01nAjbcBEAYg9veyAygKUPHf5Gdgw_ShhZAYyAEBqQKlSe45n1qHPqgDAaoESk_Qg5MEKPvkNOMgR3bwUEuuES7NAuQdYVIzIu_l0QZ2obmLZ5DNwOTh4dhBDhQ3ny7dJZN5xZKdq6liUzm2IPkX5tuLYhnFG8a-&num=6&sig=AOD64_2LU_YUaW6Jx_ymmAy4bQ8z_SOfqA&adurl=http://learnnorwegian.no&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="www.learnnorwegian.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">www.learnnorwegian.no</a><div style="padding-top:0px;padding-bottom:1px;">Small classes,experienced teachers. Beginners,intermediate,advanced.</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CSeDM2muhUO3IMMynsQak7IGYC8a8-ZsE3uHfkT_AjbcBEAcg9veyAygKUIST4ZH7_____wFgw_ShhZAYoAGqt6XQA8gBAakCpUnuOZ9ahz6oAwGqBE1P0MP-Ty775TTjIEd28FBLrhEuzQLkHWFSMyLv5dEGdqG5i2eQzcDk4eHYQQ58NkvhNvMvmC4Kl7apI6Y6MNX60xOYm4JfZDBkZauUgYgGAQ&num=7&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_3NbhDA-E121OoEjUWSVlEIzkVrmg&adurl=https://kurs.iterate.no/nb/courses/71/&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="kurs.iterate.no/git" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">Effektiv versjonskontroll</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CSeDM2muhUO3IMMynsQak7IGYC8a8-ZsE3uHfkT_AjbcBEAcg9veyAygKUIST4ZH7_____wFgw_ShhZAYoAGqt6XQA8gBAakCpUnuOZ9ahz6oAwGqBE1P0MP-Ty775TTjIEd28FBLrhEuzQLkHWFSMyLv5dEGdqG5i2eQzcDk4eHYQQ58NkvhNvMvmC4Kl7apI6Y6MNX60xOYm4JfZDBkZauUgYgGAQ&num=7&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_3NbhDA-E121OoEjUWSVlEIzkVrmg&adurl=https://kurs.iterate.no/nb/courses/71/&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="kurs.iterate.no/git" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">kurs.iterate.no/git</a><div style="padding-top:0px;padding-bottom:1px;">Lær å mestre Git, og ta tilbake kontrollen og flyten i arbeidet.</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=Cs8SH2muhUO3IMMynsQak7IGYC4ePupcDt92hnk3AjbcBEAgg9veyAygKUMSc-uH4_____wFgw_ShhZAYoAH58IzcA8gBAagDAaoET0_Qw8ONMevaDFGTThnnSU7sUDPY318eCUua-f6dzQZy66yLL4fUxaag_M0J6f6DmcYSzgulCnmdxaPIUDqH1rgX5l9ugR90kHJjLfghcPKIBgE&num=8&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_0YGEbWAu9PD8KY5AydEi7H_n7dEg&adurl=https://signup.netflix.com/%3Fca_source%3Dgaw%26ca_pos%3Dnone%26ca_cid%3D19522711%26ca_agid%3D5619741663%26ca_adid%3D20652994743%26ca_chid%3D2001747%26mqso%3D81000003&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="Netflix.com/Norge" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">Full Movie</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=Cs8SH2muhUO3IMMynsQak7IGYC4ePupcDt92hnk3AjbcBEAgg9veyAygKUMSc-uH4_____wFgw_ShhZAYoAH58IzcA8gBAagDAaoET0_Qw8ONMevaDFGTThnnSU7sUDPY318eCUua-f6dzQZy66yLL4fUxaag_M0J6f6DmcYSzgulCnmdxaPIUDqH1rgX5l9ugR90kHJjLfghcPKIBgE&num=8&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_0YGEbWAu9PD8KY5AydEi7H_n7dEg&adurl=https://signup.netflix.com/%3Fca_source%3Dgaw%26ca_pos%3Dnone%26ca_cid%3D19522711%26ca_agid%3D5619741663%26ca_adid%3D20652994743%26ca_chid%3D2001747%26mqso%3D81000003&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="Netflix.com/Norge" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">Netflix.com/Norge</a><div style="padding-top:0px;padding-bottom:1px;">Prøv én Måned Gratis. Spill av direkte. Stort utvalg!</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CQ6ym2muhUO3IMMynsQak7IGYC4qUkkiQwsiFCcCNtwEQCSD297IDKApQ8aGHh_r_____AWDD9KGFkBigAZb5uP4DyAEBqQKlSe45n1qHPqgDAaoEU0_Qo-5SKPvrNOMgR3bwUEuuES7NAuQdYVIzIu_l0QZ2obmLZ5DNwOTh4dhBDnw2S8E3lIn2DXmdi43IUKJ7PfkUE5jZgh-wJWGDK2ehTdY7Kv1SiAYB&num=9&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_257SU_OyDSxPHjZEUFomvnnNC5mw&adurl=http://www.reisbillig.no/flybilletter/2-TH-BKK/Asia/Thailand/Bangkok.aspx&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.reisbillig.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">Fly til Bangkok</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CQ6ym2muhUO3IMMynsQak7IGYC4qUkkiQwsiFCcCNtwEQCSD297IDKApQ8aGHh_r_____AWDD9KGFkBigAZb5uP4DyAEBqQKlSe45n1qHPqgDAaoEU0_Qo-5SKPvrNOMgR3bwUEuuES7NAuQdYVIzIu_l0QZ2obmLZ5DNwOTh4dhBDnw2S8E3lIn2DXmdi43IUKJ7PfkUE5jZgh-wJWGDK2ehTdY7Kv1SiAYB&num=9&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_257SU_OyDSxPHjZEUFomvnnNC5mw&adurl=http://www.reisbillig.no/flybilletter/2-TH-BKK/Asia/Thailand/Bangkok.aspx&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="www.reisbillig.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">www.reisbillig.no</a><div style="padding-top:0px;padding-bottom:1px;">Sammenlign priser på flybilletter og finn det billigste alternativet</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=Cd4Ib2muhUO3IMMynsQak7IGYC9CcvIYD-K3KuTvAjbcBEAog9veyAygKUIXiyur8_____wFgw_ShhZAYoAHespDpA8gBAakCpUnuOZ9ahz6oAwGqBFNP0NPWZC_76DTjIEd28FBLrhEuzQLkHWFSMyLv5dEGdqG5i2eQzcDk4eHYQQ58NkvBN77IuAV5nYuNyFCiez35FBOY2YIfsCVhgytnoU3WfVimRIgGAQ&num=10&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_1LYacdKVHnpAa2oVTEIm0qNbbuKw&adurl=http://www.prince2.no&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="Prince2.no/Sertifisering" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">Skal du styre prosjekter?</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=Cd4Ib2muhUO3IMMynsQak7IGYC9CcvIYD-K3KuTvAjbcBEAog9veyAygKUIXiyur8_____wFgw_ShhZAYoAHespDpA8gBAakCpUnuOZ9ahz6oAwGqBFNP0NPWZC_76DTjIEd28FBLrhEuzQLkHWFSMyLv5dEGdqG5i2eQzcDk4eHYQQ58NkvBN77IuAV5nYuNyFCiez35FBOY2YIfsCVhgytnoU3WfVimRIgGAQ&num=10&cid=5GhqASOmrxDlJvleTD3X7tKu&sig=AOD64_1LYacdKVHnpAa2oVTEIm0qNbbuKw&adurl=http://www.prince2.no&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="Prince2.no/Sertifisering" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGV3AQD4ZGR0ZmV4ZwV2Awp1AGtzMJp9ZwNkZwRkZGVkAQZ2ZwHzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9Zwp0AQtkZGDmZwtlZwL2AmH1BN==-1');">Prince2.no/Sertifisering</a><div style="padding-top:0px;padding-bottom:1px;">Ta sertifisering i prosjektledelse. Og føl trygghet i prosjektrollen!</div></div><div style="clear:both;"></div></div></div>

#3 JavaScript::Write (size: 109, repeated: 1)

<input style="width:0px; top:0px; position:absolute; visibility:hidden;" id="oV6" onchange="fV8(fV1,5,true)">

#4 JavaScript::Write (size: 481, repeated: 1)

<input type="hidden" name="kot" value="AG06ipDvKi4J2eN9zO7uHJxtoOjnIb0YGQoTCNyE6b-xyrMCFYpSzAodpyQAxhgDIAA4MEC3strxoqWhmZUBUN3RoAFQq4-iAVDblKICULr7nQdQuaqoDlD38agOULnw4g5QzvDiDlDM_pgPUNWsrw9Q3uvOD1DKutwPUMy63A9QsY2vEFCi_ecQUPLxihFQ882WEVCCopsRUIO6tRFQlLq1EVC1vOURULz27hJQ0fbuElDUxNwTUMGOzhVQvuXpFVCBgv0gUIOcrSlQu5ytKVDTsa0pUJiCySxQsrSUlQFQgbz9oAFQy-aDuQFQyZXzwAFQ3JbzwAFQ-tiFxwJQxYPTnQNQ6PvXnQNQ2_7XnQNQsJTYnQNo3dGgAWirj6IBcXEZ574Fqsf6ggETCO2d7b-xyrMCFcxTzAodJHYAs5EBJjf6EAz7mIg"/>

#5 JavaScript::Write (size: 265, repeated: 1)

<script src="http://googleads.g.doubleclick.net/apps/domainpark/domainpark.cgi?callback=_google_json_callback&output=js&client=ca-dp-godaddy2_xml&domain_name=gpil.org&hl=no&s=gpil.org&num_radlinks=0&dt=1352756186673&u_tz=60&u_his=1&u_h=885&u_w=1176&frm=0"></script>


HTTP Transactions (16)


Request Response
GET /download/flvplayer_v3.exe?c0eca2c0 HTTP/1.1

Host: gpil.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Server: cloudflare-nginx
Date: Mon, 12 Nov 2012 21:36:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
CF-Cache-Status: MISS
Vary: Accept-Encoding
Set-Cookie: __cfduid=d875b2a5f968828d9bd11059636a442e41352756185; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.gpil.org
Content-Encoding: gzip
GET /script/jquery-1.3.1.min.js HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gpil.org/download/flvplayer_v3.exe?c0eca2c0
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Last-Modified: Tue, 13 Jul 2010 18:55:42 GMT
Etag: &quot;0cbf3fdbc22cb1:316&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Varnish: 972597056 972517225
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=3888000
Date: Mon, 12 Nov 2012 21:36:26 GMT
Content-Length: 19149
Connection: keep-alive
GET /images/soc_1.jpg HTTP/1.1

Host: ak3.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gpil.org/download/flvplayer_v3.exe?c0eca2c0
HTTP/1.1 200 OK

Content-Type: image/jpeg
Last-Modified: Tue, 06 Nov 2012 22:10:16 GMT
Etag: &quot;01415806bbccd1:312&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 3278
X-Varnish: 605309869 605231466
Cache-Control: max-age=3888000
Date: Mon, 12 Nov 2012 21:36:26 GMT
Connection: keep-alive
GET /images/or2.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gpil.org/download/flvplayer_v3.exe?c0eca2c0
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Wed, 26 Sep 2012 21:03:06 GMT
Etag: &quot;02114532a9ccd1:319&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 987
X-Varnish: 594459974 594443862
Cache-Control: max-age=3888000
Date: Mon, 12 Nov 2012 21:36:26 GMT
Connection: keep-alive
GET /images/logo_gd3.jpg HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gpil.org/download/flvplayer_v3.exe?c0eca2c0
HTTP/1.1 200 OK

Content-Type: image/jpeg
Last-Modified: Wed, 26 Sep 2012 20:33:00 GMT
Etag: &quot;0669e1e269ccd1:311&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 5837
X-Varnish: 597314952 597289102
Cache-Control: max-age=3888000
Date: Mon, 12 Nov 2012 21:36:26 GMT
Connection: keep-alive
GET /apps/domainpark/show_afd_ads.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gpil.org/download/flvplayer_v3.exe?c0eca2c0
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Last-Modified: Thu, 08 Nov 2012 02:46:10 GMT
Date: Mon, 12 Nov 2012 20:33:48 GMT
Expires: Tue, 13 Nov 2012 20:33:48 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Server: domainserver
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
Content-Length: 1932
Age: 3758
Cache-Control: public, max-age=86400
GET /images/SemperFi.jpg HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gpil.org/download/flvplayer_v3.exe?c0eca2c0
HTTP/1.1 200 OK

Content-Type: image/jpeg
Last-Modified: Tue, 06 Nov 2012 21:53:14 GMT
Etag: &quot;041ec1e69bccd1:30d&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 26177
X-Varnish: 1431757540 1431675026
Cache-Control: max-age=3888000
Date: Mon, 12 Nov 2012 21:36:26 GMT
Connection: keep-alive
GET /images/bul_bluesquare.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gpil.org/download/flvplayer_v3.exe?c0eca2c0
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Fri, 25 Jul 2008 21:49:00 GMT
Etag: &quot;02ec3fa0eec81:31d&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 126
X-Varnish: 972599185 972517310
Cache-Control: max-age=3888000
Date: Mon, 12 Nov 2012 21:36:26 GMT
Connection: keep-alive
GET /images/bul_blacksquare.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gpil.org/download/flvplayer_v3.exe?c0eca2c0
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Fri, 25 Jul 2008 21:49:00 GMT
Etag: &quot;02ec3fa0eec81:31d&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 126
X-Varnish: 972599184 972517252
Cache-Control: max-age=3888000
Date: Mon, 12 Nov 2012 21:36:26 GMT
Connection: keep-alive
GET /apps/domainpark/domainpark.cgi?callback=_google_json_callback&output=js&client=ca-dp-godaddy2_xml&domain_name=gpil.org&hl=no&s=gpil.org&num_radlinks=0&dt=1352756186673&u_tz=60&u_his=1&u_h=885&u_w=1176&frm=0 HTTP/1.1

Host: googleads.g.doubleclick.net
GET /apps/domainpark/domainpark.cgi?callback=_google_json_callback&amp;output=js&amp;client=ca-dp-godaddy2_xml&amp;domain_name=gpil.org&amp;hl=no&amp;s=gpil.org&amp;num_radlinks=0&amp;dt=1352756186673&amp;u_tz=60&amp;u_his=1&amp;u_h=885&amp;u_w=1176&amp;frm=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gpil.org/download/flvplayer_v3.exe?c0eca2c0
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
HTTP/1.1 200 OK

Content-Type: application/javascript; charset=UTF-8
Content-Disposition: inline
P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Mon, 12 Nov 2012 21:36:27 GMT
Server: domainserver
Cache-Control: private
Content-Length: 4472
X-XSS-Protection: 1; mode=block
GET /images/GDPPCSprite.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gpil.org/download/flvplayer_v3.exe?c0eca2c0
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Wed, 26 Sep 2012 21:18:10 GMT
Etag: &quot;095e76d2c9ccd1:316&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 8912
X-Varnish: 594459976 594443865
Cache-Control: max-age=3888000
Date: Mon, 12 Nov 2012 21:36:27 GMT
Connection: keep-alive
GET /sd?s=95331&f=1 HTTP/1.1

Host: as.casalemedia.com
GET /sd?s=95331&amp;f=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gpil.org/download/flvplayer_v3.exe?c0eca2c0
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html; charset=iso-8859-1
Server: Apache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Location: http://as.casalemedia.com/sd?s=95331&amp;f=1&amp;C=1
Content-Length: 236
Expires: Mon, 12 Nov 2012 21:36:27 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 12 Nov 2012 21:36:27 GMT
Connection: keep-alive
Set-Cookie: CMID=GAvi5UPS1IwAAAcN79IAAAA2;domain=casalemedia.com;path=/;expires=Tue, 12 Nov 2013 21:36:27 GMT CMPS=133;domain=casalemedia.com;path=/;expires=Sun, 10 Feb 2013 21:36:27 GMT CMPP=007;domain=casalemedia.com;path=/;expires=Sun, 10 Feb 2013 21:36:27 GMT
GET /sd?s=95331&f=1&C=1 HTTP/1.1

Host: as.casalemedia.com
GET /sd?s=95331&amp;f=1&amp;C=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gpil.org/download/flvplayer_v3.exe?c0eca2c0
Cookie: CMID=GAvi5UPS1IwAAAcN79IAAAA2; CMPS=133; CMPP=007
HTTP/1.1 200 OK

Content-Type: text/javascript
Server: Apache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Content-Length: 6734
Expires: Mon, 12 Nov 2012 21:36:28 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 12 Nov 2012 21:36:28 GMT
Connection: keep-alive
Set-Cookie: CMID=GAvi5UPS1IwAAAcN79IAAAA2;domain=casalemedia.com;path=/;expires=Tue, 12 Nov 2013 21:36:28 GMT CMPS=133;domain=casalemedia.com;path=/;expires=Sun, 10 Feb 2013 21:36:28 GMT CMPP=007;domain=casalemedia.com;path=/;expires=Sun, 10 Feb 2013 21:36:28 GMT CMS=95331&amp;1352756188;domain=casalemedia.com;path=/;expires=Wed, 12 Dec 2012 21:36:28 GMT CMST=UKFr3FCha9wB;domain=casalemedia.com;path=/;expires=Tue, 13 Nov 2012 21:36:28 GMT CMSC=UKFr3A**;domain=casalemedia.com;path=/; CMDD=AAF0TAE*;domain=casalemedia.com;path=/;expires=Tue, 13 Nov 2012 21:36:28 GMT CMD1=AACjiVCha9wAAXRjAAJ00wEAAA**;domain=casalemedia.com;path=/;expires=Wed, 12 Dec 2012 21:36:28 GMT
GET /images/spacer.gif?q=L3MkWGAkZwp0AQtkZGDmZwtlZwL2AmH1BPHlAzpyZ3RlZGNlWGV2MFHmpFHlAz4yZ3RjWGV2LlHmpGNyZwMyMvHmpGNyZwMzWGAkWGV2MJpyZ3RlZQRlZGRkZwR0ZmLlAFHlAzA5WGAkZFHlAaEaWGAkZvHlAatyZ3RyZwMzM3NyZ3RjWGV2nT5aWGAkZFHlAaEzWGAkAvHlAaOjWGAkDHVyZwMwnPHmpGL=-1 HTTP/1.1

Host: gpil.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://gpil.org/download/flvplayer_v3.exe?c0eca2c0
Cookie: __cfduid=d875b2a5f968828d9bd11059636a442e41352756185
HTTP/1.1 200 OK

Content-Type: image/gif
Server: cloudflare-nginx
Date: Mon, 12 Nov 2012 21:36:28 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Wed, 08 Feb 2006 19:53:54 GMT
Accept-Ranges: bytes
Etag: &quot;0b5cc63e92cc61:31d&quot;
X-Powered-By: ASP.NET
CF-Cache-Status: MISS
Vary: Accept-Encoding
GET /favicon.ico HTTP/1.1

Host: gpil.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d875b2a5f968828d9bd11059636a442e41352756185
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Server: cloudflare-nginx
Date: Mon, 12 Nov 2012 21:36:28 GMT
Content-Length: 26
Connection: keep-alive
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
CF-Cache-Status: MISS
Vary: Accept-Encoding
GET /favicon.ico HTTP/1.1

Host: gpil.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d875b2a5f968828d9bd11059636a442e41352756185
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Server: cloudflare-nginx
Date: Mon, 12 Nov 2012 21:36:31 GMT
Content-Length: 26
Connection: keep-alive
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
CF-Cache-Status: MISS
Vary: Accept-Encoding