Overview

URLbolins.al-mubaarak.com/index.html.htm
IP62.100.204.33
ASNUnknown
Location United Kingdom
Report completed2017-01-12 06:16:05 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Referer
Pool
Access Levelpublic


Intrusion Detection Systems

Snort /w Sourcefire VRT No alerts detected
Suricata /w Emerging Threats Pro No alerts detected


Blacklists

Fortinet's Web Filter / fortiguard.com
Added / Verified Severity Host Comment
2017-01-122bolins.al-mubaarak.com/index.html.htmPhishing
2017-01-122bolins.al-mubaarak.com/js/FS.swfPhishing
2017-01-122bolins.al-mubaarak.com/js/FS.swfPhishing
MDL / malwaredomainlist.com No alerts detected
DNS-BH / malwaredomains.com No alerts detected
mnemonic secure DNS / mnemonic.no No alerts detected
OpenPhish / openphish.com No alerts detected
PhishTank / phishtank.com No alerts detected
Spamhaus DBL / spamhaus.org No alerts detected


Files Captured



Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 62.100.204.33

Date UQ / IDS / BL URL IP
2017-02-10 15:01:140 - 0 - 1www.creativelegal.com.ng/wp-includes/images/bnpparibas-new.zip62.100.204.33
2017-02-03 16:58:390 - 0 - 2businesseye.com.ng/wp-includes/nacios/update/nato/email2.php62.100.204.33
2017-02-03 16:54:500 - 0 - 2idovahospitality.com/drive/62.100.204.33
2017-02-02 19:59:520 - 0 - 1www.creativelegal.com.ng/wp-includes/images/bnpparibas-new.zip62.100.204.33
2017-02-02 14:37:360 - 0 - 1www.creativelegal.com.ng/wp-includes/images/bnpparibas-new.zip62.100.204.33
2017-02-01 23:38:300 - 0 - 10kyragroup.net/wp-inc/all/mi/2015alldomain/index.php?email=attorney@saccounty.org62.100.204.33

Last 6 reports on ASN: Unknown

Date UQ / IDS / BL URL IP
2017-02-21 08:44:400 - 0 - 1upgradelive.upgradepcsafesystemset4now.info/?pcl=7a--wJTk8omhhyZLHpMQk1JNg4t-9ge0N3KpBxTxVkI.51.15.145.148
2017-02-21 08:42:060 - 0 - 1stats.devmaxcloud.com/apps.gif?action=update52.216.0.202
2017-02-21 08:41:020 - 0 - 0www.facebook.comhttps:///Fifty-Shades-Darker-Online-2017-Movie-405373773148064/157.240.2.35
2017-02-21 08:41:020 - 0 - 0www.facebook.comhttps:///Fifty-Shades-Darker-Online-2017-Movie-405373773148064/157.240.2.35
2017-02-21 08:40:020 - 0 - 0newsindustryde.com/login/link.php?M=61716&N=84&L=22&F=H138.68.53.233
2017-02-21 08:38:080 - 0 - 11baixargamestorrent.biz/173.212.208.249

Last 1 reports on domain: bolins.al-mubaarak.com

Date UQ / IDS / BL URL IP
2017-01-18 00:18:050 - 0 - 6bolins.al-mubaarak.com/index.html.htm62.100.204.33



JavaScript

Executed Scripts (35)


Executed Evals (3)

#1 JavaScript::Eval (size: 41, repeated: 1)

unescape(document.referrer).toLowerCase()

#2 JavaScript::Eval (size: 64, repeated: 1)

unescape(document.referrer + document.location.href).toLowerCase()

#3 JavaScript::Eval (size: 101, repeated: 1)

unescape(isSocialNetworkShared() + document.referrer + document.location.href + tacLogRef5()).toLowerCase()

Executed Writes (70)

#1 JavaScript::Write (size: 6, repeated: 1)

* -->

#2 JavaScript::Write (size: 5, repeated: 4)

*-->

#3 JavaScript::Write (size: 7, repeated: 1)

<!-- *

#4 JavaScript::Write (size: 6, repeated: 4)

<!--*

#5 JavaScript::Write (size: 7, repeated: 1)

</map>

#6 JavaScript::Write (size: 282, repeated: 1)

<BR><a id="adsF0EANA" style="position:absolute;left:1223px;z-index:4999;margin:0 auto;width:77px;height:15px" href="http://adinfo.aol.com/" target="_blank"><img src="//o.aolcdn.com/ads/adchoices.png" style="border:none;width:77px;height:15px;vertical-align:top" alt="AdChoices"></a>

#7 JavaScript::Write (size: 282, repeated: 1)

<BR><a id="adsF1EANA" style="position:absolute;left:-16px;z-index:4999;margin:0 auto;width:19px;height:15px" href="http://adinfo.aol.com/" target="_blank"><img src="//o.aolcdn.com/ads/adchoicesi.png" style="border:none;width:19px;height:15px;vertical-align:top" alt="AdChoices"></a>

#8 JavaScript::Write (size: 90, repeated: 1)

<IMG SRC="http://ar.atwola.com/atd" STYLE="display: none" height="1" width="1" border="0">

#9 JavaScript::Write (size: 55, repeated: 1)

<SCRIPT LANGUAGE="JavaScript">var tcdacmd="dt"</SCRIPT>

#10 JavaScript::Write (size: 82, repeated: 1)

<SCRIPT SRC="http://an.tacoda.net/an/17840/slf.js" LANGUAGE="JavaScript"></SCRIPT>

#11 JavaScript::Write (size: 375, repeated: 1)

<SCRIPT SRC="http://tacoda.at.atwola.com/rtx/r.js?cmd=OTH&amp;si=17840&amp;pi=-&amp;xs=3&amp;pu=http%253A%2F%2Fcdn.at.atwola.com%2F_media%2Fuac%2Ftcode3.html%253Fifu%253Dhttp%25253A%2F%2Fbolins.al-mubaarak.com%2Findex.html.htm&amp;r=&amp;df=1&amp;atsync=-1&amp;atsyncinterval=-1&amp;bf=1&amp;acf=1&amp;btf=1&amp;adf=1&amp;v=6.5.0&amp;cb=37225" LANGUAGE="JavaScript"></SCRIPT>

#12 JavaScript::Write (size: 273, repeated: 1)

<area shape="rect" coords="60,50,810,700" href="https://at.atwola.com/adlink/5113/1999841/0/4156/AdId=3623961;BnId=1163;itime=198128986;nodecode=yes;impref=14841981282232395915;imprefseq=149465454691249075;imprefts=1484198128;link=" target="_blank" style="outline: none;">

#13 JavaScript::Write (size: 270, repeated: 1)

<embed src="/js/FS.swf" width="0%" height="0%" align="middle" id="FS" quality="high" bgcolor="#869ca7" name="/js/FS" flashvars="cn=dp&p=/" allowScriptAccess="sameDomain" pluginspage="http://www.adobe.com/go/getflashplayer" type="application/x-shockwave-flash" > </embed>

#14 JavaScript::Write (size: 394, repeated: 1)

<iframe title='Ad' name='adsF0' id='adsF0' src='https://at.atwola.com/adiframe/3.0/5113.1/221794/0/-1/size=1300x800;noperf=1;alias=93313514;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313514;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=60;grp=198126608' width='1300' height='800'  scrolling=no frameborder=0 marginheight=0 marginwidth=0></iframe>

#15 JavaScript::Write (size: 396, repeated: 1)

<iframe title='Ad' name='adsF1' id='adsF1' src='https://at.atwola.com/adiframe/3.0/5113.1/221794/0/-1/size=3x2;noperf=1;alias=93313476;noaddonpl=y;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313476;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=2;target=_blank;aduho=60;grp=198126608' width='3' height='2'  scrolling=no frameborder=0 marginheight=0 marginwidth=0></iframe>

#16 JavaScript::Write (size: 194, repeated: 1)

<img src="https://aka-cdn.adtechus.com/apps/309/Ad0St3Sz4156Sq0V2Id23960373/AHPR_MailSignIn_110514.jpg" border="0" width="1300" height="800" alt="Advertisement" usemap="#EmailLogin1300x800Map">

#17 JavaScript::Write (size: 35, repeated: 1)

<map name="EmailLogin1300x800Map">

#18 JavaScript::Write (size: 106, repeated: 1)

<script language='JavaScript' type='text/javascript' src='http://an.tacoda.net/an/g10000/slf.js'></script>

#19 JavaScript::Write (size: 95, repeated: 1)

<script type='text/javascript' src='https://s.aolcdn.com/os/moat/prod/moat_mnwl_s.js'></script>

#20 JavaScript::Write (size: 27, repeated: 1)

AOL - HTML - Blank HTML Ad

#21 JavaScript::Write (size: 24, repeated: 1)

O&O - HTML - Blank HTML

#22 JavaScript::Write (size: 43, repeated: 1)

O&O - HTML - SEC - Mail Sign In (1300x800)

#23 JavaScript::Write (size: 25, repeated: 1)

var aolAdId="1639351|1";

#24 JavaScript::Write (size: 32, repeated: 1)

var aolAdId="3623961|23960373";

#25 JavaScript::Write (size: 22, repeated: 1)

var aolFormat="HTML";

#26 JavaScript::Write (size: 24, repeated: 1)

var aolSize="1300|800";

#27 JavaScript::Write (size: 19, repeated: 1)

var aolSize="3|2";

#28 JavaScript::Write (size: 23, repeated: 1)

var ibwTemplateId=173;

#29 JavaScript::Write (size: 26, repeated: 2)

var moatClientLevel1=5113

#30 JavaScript::Write (size: 26, repeated: 1)

var moatClientLevel2=1569

#31 JavaScript::Write (size: 27, repeated: 1)

var moatClientLevel2=27014

#32 JavaScript::Write (size: 23, repeated: 2)

var moatClientLevel3=0

#33 JavaScript::Write (size: 29, repeated: 1)

var moatClientLevel4=1987960

#34 JavaScript::Write (size: 29, repeated: 1)

var moatClientLevel4=1999841

#35 JavaScript::Write (size: 22, repeated: 1)

var zMoatAdId=1639351

#36 JavaScript::Write (size: 22, repeated: 1)

var zMoatAdId=3623961

#37 JavaScript::Write (size: 24, repeated: 1)

var zMoatAlias=93313476

#38 JavaScript::Write (size: 24, repeated: 1)

var zMoatAlias=93313514

#39 JavaScript::Write (size: 25, repeated: 1)

var zMoatBanner=20193200

#40 JavaScript::Write (size: 25, repeated: 1)

var zMoatBanner=23960373

#41 JavaScript::Write (size: 20, repeated: 1)

var zMoatBannerID=1

#42 JavaScript::Write (size: 23, repeated: 1)

var zMoatBannerID=1163

#43 JavaScript::Write (size: 20, repeated: 2)

var zMoatCreative=0

#44 JavaScript::Write (size: 22, repeated: 2)

var zMoatCustomVisp=0

#45 JavaScript::Write (size: 22, repeated: 2)

var zMoatCustomVist=0

#46 JavaScript::Write (size: 19, repeated: 2)

var zMoatEventUrl=

#47 JavaScript::Write (size: 24, repeated: 1)

var zMoatFlight=1639351

#48 JavaScript::Write (size: 24, repeated: 1)

var zMoatFlight=3623961

#49 JavaScript::Write (size: 29, repeated: 2)

var zMoatImpRefTs=1484198128

#50 JavaScript::Write (size: 23, repeated: 2)

var zMoatIsAdvisGoal=0

#51 JavaScript::Write (size: 23, repeated: 1)

var zMoatMaster=123871

#52 JavaScript::Write (size: 23, repeated: 1)

var zMoatMaster=200063

#53 JavaScript::Write (size: 33, repeated: 1)

var zMoatPlacementExtId=93313514

#54 JavaScript::Write (size: 32, repeated: 1)

var zMoatPlacementExtId=p221794

#55 JavaScript::Write (size: 29, repeated: 1)

var zMoatPlacementId=1987960

#56 JavaScript::Write (size: 29, repeated: 1)

var zMoatPlacementId=1999841

#57 JavaScript::Write (size: 30, repeated: 1)

var zMoatRefSeqId=iaJQFIgAgLA

#58 JavaScript::Write (size: 30, repeated: 1)

var zMoatRefSeqId=zuGEFogATIA

#59 JavaScript::Write (size: 25, repeated: 2)

var zMoatSamplingRate=23

#60 JavaScript::Write (size: 19, repeated: 1)

var zMoatSize=1944

#61 JavaScript::Write (size: 19, repeated: 1)

var zMoatSize=4156

#62 JavaScript::Write (size: 20, repeated: 2)

var zMoatSubNetID=1

#63 JavaScript::Write (size: 15, repeated: 2)

var zMoatVert=

#64 JavaScript::Write (size: 24, repeated: 1)

var zMoatWebsiteID=1569

#65 JavaScript::Write (size: 25, repeated: 1)

var zMoatWebsiteID=27014

#66 JavaScript::Write (size: 32, repeated: 2)

var zMoatadServer=at.atwola.com

#67 JavaScript::Write (size: 22, repeated: 2)

var zMoatadVisServer=

#68 JavaScript::Write (size: 22, repeated: 2)

var zMoatisSelected=0

#69 JavaScript::Write (size: 25, repeated: 2)

var zMoatliveTestCookie=

#70 JavaScript::Write (size: 15, repeated: 2)

var zURL=https


HTTP Transactions (54)


Request Response
GET /index.html.htm HTTP/1.1

Host: bolins.al-mubaarak.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 62.100.204.33
HTTP/1.1 200 OK
Content-Type: text/html
Date: Thu, 12 Jan 2017 05:13:17 GMT
Server: Apache
Last-Modified: Wed, 11 Jan 2017 06:34:51 GMT
Accept-Ranges: bytes
Content-Length: 16604
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=498256
Date: Thu, 12 Jan 2017 05:15:24 GMT
Etag: &quot;587693a4-1d7&quot;
Expires: Wed, 18 Jan 2017 17:15:24 GMT
Last-Modified: Wed, 11 Jan 2017 20:20:52 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=500871
Date: Thu, 12 Jan 2017 05:15:24 GMT
Etag: &quot;5876c008-1d7&quot;
Expires: Wed, 18 Jan 2017 17:15:24 GMT
Last-Modified: Wed, 11 Jan 2017 23:30:16 GMT
Server: ECS (arn/45E4)
X-Cache: HIT
Content-Length: 471
GET /os/landingpages/css/sns_v11r11_1/snslanding.css HTTP/1.1

Host: s.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 192.229.221.24
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Accept-Ranges: bytes
Cache-Control: public, max-age=604800
Cteonnt-Length: 5403
Date: Thu, 12 Jan 2017 05:15:24 GMT
Edge-Control: downstream-ttl=604800
Expires: Thu, 19 Jan 2017 05:15:24 GMT
Last-Modified: Tue, 29 Jul 2014 21:14:39 GMT
Server: ECAcc (arn/45F7)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 1752
GET /os/landingpages/js/sns_v11r11_1/jquery-1.4.2.min.js HTTP/1.1

Host: s.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 192.229.221.24
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
Cache-Control: public, max-age=604800
Cteonnt-Length: 72174
Date: Thu, 12 Jan 2017 05:15:24 GMT
Edge-Control: downstream-ttl=604800
Expires: Thu, 19 Jan 2017 05:15:24 GMT
Last-Modified: Wed, 30 Nov 2011 03:24:27 GMT
ntCoent-Length: 72174
Server: ECAcc (arn/4588)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 30336
GET /os/landingpages/js/sns_v11r11_1/snslanding.js HTTP/1.1

Host: s.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 192.229.221.24
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
Cache-Control: public, max-age=604800
Cteonnt-Length: 1549
Date: Thu, 12 Jan 2017 05:15:24 GMT
Edge-Control: downstream-ttl=604800
Expires: Thu, 19 Jan 2017 05:15:24 GMT
Last-Modified: Wed, 30 Nov 2011 04:25:34 GMT
Server: ECAcc (arn/45CE)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 821
POST / HTTP/1.1

Host: ocsp.entrust.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request
 23.43.133.231
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Transfer-Encoding: Binary
Content-Length: 2117
Last-Modified: Wed, 11 Jan 2017 16:52:42 GMT
Etag: &quot;32FAB414810E07D3F657EBC1CFDBC681FB02AB42&quot;
Cache-Control: public, no-transform, must-revalidate, max-age=1350
Expires: Thu, 12 Jan 2017 05:37:54 GMT
Date: Thu, 12 Jan 2017 05:15:24 GMT
Connection: keep-alive
GET /ads/adsWrapper.js HTTP/1.1

Host: s.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 192.229.221.24
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Cteonnt-Length: 46905
Date: Thu, 12 Jan 2017 05:15:24 GMT
Edge-Control: downstream-ttl=86400
Expires: Fri, 13 Jan 2017 05:15:20 GMT
Last-Modified: Wed, 30 Nov 2016 15:03:10 GMT
Server: ECAcc (arn/45BE)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 17619
GET /os/landingpages/css/sns_v11r11_1/newmail-dvl-ad.css HTTP/1.1

Host: s.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 192.229.221.24
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Accept-Ranges: bytes
Cache-Control: public, max-age=604800
Cteonnt-Length: 1429
Date: Thu, 12 Jan 2017 05:15:24 GMT
Edge-Control: downstream-ttl=604800
Expires: Thu, 19 Jan 2017 05:15:24 GMT
Last-Modified: Wed, 30 Nov 2011 21:19:26 GMT
Server: ECAcc (arn/4590)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 706
GET /os/landingpages/css/hdr_err.css HTTP/1.1

Host: s.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 192.229.221.24
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Cache-Control: public, max-age=604800
Date: Thu, 12 Jan 2017 05:15:24 GMT
Edge-Control: downstream-ttl=604800
Expires: Thu, 19 Jan 2017 05:15:23 GMT
Last-Modified: Tue, 20 Mar 2012 19:37:59 GMT
Server: ECAcc (arn/46C6)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 344
GET /os/landingpages/images/error.gif HTTP/1.1

Host: s.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 192.229.221.24
HTTP/1.1 200 OK
Content-Type: image/gif
Accept-Ranges: bytes
Cache-Control: public, max-age=604800
Date: Thu, 12 Jan 2017 05:15:24 GMT
Edge-Control: downstream-ttl=604800
Expires: Thu, 19 Jan 2017 05:15:24 GMT
Last-Modified: Wed, 02 Feb 2011 05:01:07 GMT
Server: ECAcc (arn/45D8)
X-Cache: HIT
Content-Length: 1021
GET /sns.v13r4/style/lpUiStyles.css HTTP/1.1

Host: sns-static.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 195.93.85.179
HTTP/1.1 200 OK
Content-Type: text/css
Age: 1035012
Date: Sat, 31 Dec 2016 05:46:34 GMT
Expires: Mon, 30 Jan 2017 05:46:34 GMT
Cache-Control: max-age=2592000
Connection: Keep-Alive
Via: AOL-CACHE
Etag: &quot;KXNHCHCHLER&quot;
Server: Auth_Server
Accept-Ranges: bytes
Cteonnt-Length: 12482
Access-Control-Allow-Origin: *
Keep-Alive: timeout=15, max=957
Content-Encoding: gzip
Content-Length: 3433
GET /os/landingpages/images/aol_logo_new_sm.gif HTTP/1.1

Host: s.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://s.aolcdn.com/os/landingpages/css/sns_v11r11_1/newmail-dvl-ad.css
 192.229.221.24
HTTP/1.1 200 OK
Content-Type: image/gif
Accept-Ranges: bytes
Cache-Control: public, max-age=604800
Date: Thu, 12 Jan 2017 05:15:26 GMT
Edge-Control: downstream-ttl=604800
Expires: Thu, 19 Jan 2017 05:15:26 GMT
Last-Modified: Fri, 21 Jan 2011 04:26:37 GMT
Server: ECAcc (arn/45B7)
X-Cache: HIT
Content-Length: 989
GET /sns.v13r4/js/lpUi.js HTTP/1.1

Host: sns-static.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 195.93.85.179
HTTP/1.1 200 OK
Content-Type: application/javascript
Age: 1035014
Date: Sat, 31 Dec 2016 05:46:34 GMT
Expires: Mon, 30 Jan 2017 05:46:34 GMT
Cache-Control: max-age=2592000
Connection: Keep-Alive
Via: AOL-CACHE
Etag: &quot;KXNHCHCHLEQ&quot;
Server: Auth_Server
Accept-Ranges: bytes
Cteonnt-Length: 19831
Access-Control-Allow-Origin: *
Keep-Alive: timeout=15, max=957
Content-Encoding: gzip
Content-Length: 5892
GET /ads/adchoices.png HTTP/1.1

Host: o.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 192.229.221.24
HTTP/1.1 200 OK
Content-Type: image/png
Accept-Ranges: bytes
Cache-Control: public, max-age=604800
Date: Thu, 12 Jan 2017 05:15:26 GMT
Edge-Control: downstream-ttl=604800
Expires: Thu, 19 Jan 2017 05:15:26 GMT
Last-Modified: Wed, 29 Jul 2015 18:58:24 GMT
Server: ECAcc (arn/45F0)
X-Cache: HIT
Content-Length: 1308
GET /ads/adchoicesi.png HTTP/1.1

Host: o.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 192.229.221.24
HTTP/1.1 200 OK
Content-Type: image/png
Accept-Ranges: bytes
Cache-Control: public, max-age=604800
Date: Thu, 12 Jan 2017 05:15:26 GMT
Edge-Control: downstream-ttl=604800
Expires: Thu, 19 Jan 2017 05:14:12 GMT
Last-Modified: Thu, 10 Sep 2015 17:51:24 GMT
Server: ECAcc (arn/4689)
X-Cache: HIT
Content-Length: 565
GET /sns.v13r4/js/AC_OETags.js HTTP/1.1

Host: sns-static.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 195.93.85.179
HTTP/1.1 200 OK
Content-Type: application/javascript
Age: 1035014
Date: Sat, 31 Dec 2016 05:46:33 GMT
Expires: Mon, 30 Jan 2017 05:46:34 GMT
Cache-Control: max-age=2592000
Connection: Keep-Alive
Via: AOL-CACHE
Etag: &quot;KXNHCHCHLEM&quot;
Server: Auth_Server
Accept-Ranges: bytes
Cteonnt-Length: 4336
Access-Control-Allow-Origin: *
Keep-Alive: timeout=15, max=976
Content-Encoding: gzip
Content-Length: 1744
GET /sns.v13r4/js/fs.js HTTP/1.1

Host: sns-static.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 195.93.85.179
HTTP/1.1 200 OK
Content-Type: application/javascript
Age: 1035014
Date: Sat, 31 Dec 2016 05:46:34 GMT
Expires: Mon, 30 Jan 2017 05:46:34 GMT
Cache-Control: max-age=2592000
Connection: Keep-Alive
Via: AOL-CACHE
Etag: &quot;KXNHCHCHLEQ&quot;
Server: Auth_Server
Accept-Ranges: bytes
Cteonnt-Length: 1329
Access-Control-Allow-Origin: *
Keep-Alive: timeout=15, max=992
Content-Encoding: gzip
Content-Length: 796
POST / HTTP/1.1

Host: ocsp.entrust.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request
 23.43.133.231
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Transfer-Encoding: Binary
Content-Length: 2116
Last-Modified: Wed, 11 Jan 2017 16:52:42 GMT
Etag: &quot;021D93185560177BEDB79233D29274DF5564EA6A&quot;
Cache-Control: public, no-transform, must-revalidate, max-age=727
Expires: Thu, 12 Jan 2017 05:27:34 GMT
Date: Thu, 12 Jan 2017 05:15:27 GMT
Connection: keep-alive
GET /os_merge/?file=/aol/beacon.min.js&file=/aol/omniture.min.js HTTP/1.1

Host: s.aolcdn.com
GET /os_merge/?file=/aol/beacon.min.js&amp;file=/aol/omniture.min.js HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 192.229.221.24
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Date: Thu, 12 Jan 2017 05:15:28 GMT
Edge-Control: downstream-ttl=86400
Expires: Fri, 13 Jan 2017 05:15:24 GMT
Last-Modified: Tue, 10 Jan 2017 17:48:09 GMT
Server: ECAcc (arn/46B9)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 35765
GET /js/FS.swf HTTP/1.1

Host: bolins.al-mubaarak.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
Cookie: testcookie
 62.100.204.33
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=iso-8859-1
Date: Thu, 12 Jan 2017 05:13:22 GMT
Server: Apache
Content-Length: 676
Connection: close
GET /id?d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B25357E519160E40A490D44%40AdobeOrg&d_cb=s_c_il%5B1%5D._setMarketingCloudFields HTTP/1.1

Host: dpm.demdex.net
GET /id?d_rtbd=json&amp;d_ver=2&amp;d_verify=1&amp;d_orgid=6B25357E519160E40A490D44%40AdobeOrg&amp;d_cb=s_c_il%5B1%5D._setMarketingCloudFields HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 54.229.75.228
HTTP/1.1 302 Found
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
Date: Thu, 12 Jan 2017 05:15:28 GMT
Expires: Thu, 01 Jan 2009 00:00:00 GMT
Location: http://dpm.demdex.net/id/rd?d_rtbd=json&amp;d_ver=2&amp;d_verify=1&amp;d_orgid=6B25357E519160E40A490D44%40AdobeOrg&amp;d_cb=s_c_il%5B1%5D._setMarketingCloudFields
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT&quot;
Pragma: no-cache
Set-Cookie: demdex=02778337179774018172618960082939949333;Path=/;Domain=.demdex.net;Expires=Tue, 11-Jul-2017 05:15:28 GMT
Content-Length: 0
Connection: keep-alive
GET /adiframe/3.0/5113.1/221794/0/-1/size=3x2;noperf=1;alias=93313476;noaddonpl=y;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313476;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=2;target=_blank;aduho=60;grp=198126608 HTTP/1.1

Host: at.atwola.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 152.163.56.3
HTTP/1.0 200 OK
Content-Type: text/html
Connection: keep-alive
Expires: Mon, 15 Jun 1998 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache
Content-Length: 993
GET /js/FS.swf HTTP/1.1

Host: bolins.al-mubaarak.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
Cookie: testcookie; _vdl=1; AMCV_6B25357E519160E40A490D44%40AdobeOrg=T
 62.100.204.33
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=iso-8859-1
Date: Thu, 12 Jan 2017 05:13:22 GMT
Server: Apache
Content-Length: 676
Connection: close
GET /id/rd?d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B25357E519160E40A490D44%40AdobeOrg&d_cb=s_c_il%5B1%5D._setMarketingCloudFields HTTP/1.1

Host: dpm.demdex.net
GET /id/rd?d_rtbd=json&amp;d_ver=2&amp;d_verify=1&amp;d_orgid=6B25357E519160E40A490D44%40AdobeOrg&amp;d_cb=s_c_il%5B1%5D._setMarketingCloudFields HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
Cookie: demdex=02778337179774018172618960082939949333
 54.229.75.228
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
Content-Encoding: gzip
Date: Thu, 12 Jan 2017 05:15:28 GMT
DCS: irl1-prod-dcs-411f80ca.edge-irl1.demdex.com master-5.3.1.20170110.165756 2ms
Expires: Thu, 01 Jan 2009 00:00:00 GMT
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT&quot;
Pragma: no-cache
Set-Cookie: demdex=02778337179774018172618960082939949333;Path=/;Domain=.demdex.net;Expires=Tue, 11-Jul-2017 05:15:28 GMT
Vary: Accept-Encoding, User-Agent
Content-Length: 188
Connection: keep-alive
GET /id?callback=s_c_il%5B1%5D._setAnalyticsFields&mcorgid=6B25357E519160E40A490D44%40AdobeOrg&mid=07846156308531611853269888039471790125 HTTP/1.1

Host: o.sa.aol.com
GET /id?callback=s_c_il%5B1%5D._setAnalyticsFields&amp;mcorgid=6B25357E519160E40A490D44%40AdobeOrg&amp;mid=07846156308531611853269888039471790125 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 66.117.29.35
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Date: Thu, 12 Jan 2017 05:15:28 GMT
Server: Omniture DC/2.0.0
Access-Control-Allow-Origin: *
X-C: ms-5.0.0
Vary: Origin
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID PSA OUR IND COM NAV STA&quot;
xserver: www54
Content-Length: 114
Keep-Alive: timeout=15
Connection: Keep-Alive
GET /adiframe/3.0/5113.1/221794/0/-1/size=1300x800;noperf=1;alias=93313514;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313514;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=60;grp=198126608 HTTP/1.1

Host: at.atwola.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 152.163.56.3
HTTP/1.0 200 OK
Content-Type: text/html
Connection: keep-alive
Expires: Mon, 15 Jun 1998 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache
Content-Length: 972
GET /addyn/3.0/5113.1/221794/0/-1/size=3x2;noperf=1;alias=93313476;noaddonpl=y;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313476;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=2;target=_blank;aduho=60;grp=198126608;adiframe=y HTTP/1.1

Host: at.atwola.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://at.atwola.com/adiframe/3.0/5113.1/221794/0/-1/size=3x2;noperf=1;alias=93313476;noaddonpl=y;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313476;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=2;target=_blank;aduho=60;grp=198126608
 152.163.56.3
HTTP/1.0 302 Moved Temporarily
HTTP/1.0 302 Moved Temporarily
Connection: keep-alive
Expires: Mon, 15 Jun 1998 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache
Location: https://at.atwola.com/addyn/3.0/5113.1/221794/0/-1/size=3x2;cfp=1;rndc=1484198127;noperf=1;alias=93313476;noaddonpl=y;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313476;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=2;target=_blank;aduho=60;grp=198126608;adiframe=y
Content-Length: 0
P3P: CP=&quot;NOI DSP DEVa OUR BUS UNI COM NAV INT&quot;
Set-Cookie: CfP=1;domain=atwola.com;path=/
GET /b/ss/aolsnssignin/1/JS-1.4.3/s59358973526086?AQB=1&ndh=1&pf=1&t=12%2F0%2F2017%206%3A15%3A28%204%20-60&mid=07846156308531611853269888039471790125&aamlh=6&ce=UTF-8&ns=aolllc&cl=63072000&pageName=sso%20%3A%20login&g=http%3A%2F%2Fbolins.al-mubaarak.com%2Findex.html.htm&c.&aol.&sAccount=aolsnssignin%20%3A%20aolsnssignin&trackingServer=o.sa.aol.com&adblk=bN_cfg%3A0&.aol&.c&cc=USD&ch=us.snssignin&server=my.screenname.aol.com&events=event10%2Cevent12&aamb=NRX38WO0n5BH8Th-nqAG_A&c1=sso%20%3A%20ssologin&c2=sso%20%3A%20&c3=gmt_5&c7=D%3DDNT&c10=external%20web%20browser&c12=%2FsnsUiDriver.jsp&c13=non-authenticated&c14=no%20referrer&c15=unavailable&c16=sns.webmail.aol.com&c17=lp&c18=0&c19=wa3&c20=en-us&c21=AOLPortal&c22=.aol.com&c23=newmail-en-us-v2&c24=D%3Dv52&c49=AM-JS.1.4.3-Oct2016%7Cmmx_0&v52=uaid_na&c55=198126608&c56=bolins.al-mubaarak.com&c61=D%3Dpccr&s=1176x885&c=24&j=1.8.2&v=Y&k=Y&bw=1176&bh=754&AQE=1 HTTP/1.1

Host: o.sa.aol.com
GET /b/ss/aolsnssignin/1/JS-1.4.3/s59358973526086?AQB=1&amp;ndh=1&amp;pf=1&amp;t=12%2F0%2F2017%206%3A15%3A28%204%20-60&amp;mid=07846156308531611853269888039471790125&amp;aamlh=6&amp;ce=UTF-8&amp;ns=aolllc&amp;cl=63072000&amp;pageName=sso%20%3A%20login&amp;g=http%3A%2F%2Fbolins.al-mubaarak.com%2Findex.html.htm&amp;c.&amp;aol.&amp;sAccount=aolsnssignin%20%3A%20aolsnssignin&amp;trackingServer=o.sa.aol.com&amp;adblk=bN_cfg%3A0&amp;.aol&amp;.c&amp;cc=USD&amp;ch=us.snssignin&amp;server=my.screenname.aol.com&amp;events=event10%2Cevent12&amp;aamb=NRX38WO0n5BH8Th-nqAG_A&amp;c1=sso%20%3A%20ssologin&amp;c2=sso%20%3A%20&amp;c3=gmt_5&amp;c7=D%3DDNT&amp;c10=external%20web%20browser&amp;c12=%2FsnsUiDriver.jsp&amp;c13=non-authenticated&amp;c14=no%20referrer&amp;c15=unavailable&amp;c16=sns.webmail.aol.com&amp;c17=lp&amp;c18=0&amp;c19=wa3&amp;c20=en-us&amp;c21=AOLPortal&amp;c22=.aol.com&amp;c23=newmail-en-us-v2&amp;c24=D%3Dv52&amp;c49=AM-JS.1.4.3-Oct2016%7Cmmx_0&amp;v52=uaid_na&amp;c55=198126608&amp;c56=bolins.al-mubaarak.com&amp;c61=D%3Dpccr&amp;s=1176x885&amp;c=24&amp;j=1.8.2&amp;v=Y&amp;k=Y&amp;bw=1176&amp;bh=754&amp;AQE=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 66.117.29.35
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Thu, 12 Jan 2017 05:15:28 GMT
Server: Omniture DC/2.0.0
Access-Control-Allow-Origin: *
X-C: ms-5.0.0
Expires: Wed, 11 Jan 2017 05:15:28 GMT
Last-Modified: Fri, 13 Jan 2017 05:15:28 GMT
Cache-Control: no-cache, no-store, max-age=0, no-transform, private
Pragma: no-cache
Etag: &quot;587710F0-B58C-0661904F&quot;
Vary: *
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID PSA OUR IND COM NAV STA&quot;
xserver: www51
Content-Length: 43
Keep-Alive: timeout=15
Connection: Keep-Alive
GET /b?rn=73724702&C1=2&C2=1000009&C4=http%3A%2F%2Fbolins.al-mubaarak.com%2Findex.html.htm&C5=us.snssignin&C7=http%3A%2F%2Fbolins.al-mubaarak.com%2Findex.html.htm&C8=AOL%20Mail%3A%20Simple%2C%20Free%2C%20Fun HTTP/1.1

Host: b.scorecardresearch.com
GET /b?rn=73724702&amp;C1=2&amp;C2=1000009&amp;C4=http%3A%2F%2Fbolins.al-mubaarak.com%2Findex.html.htm&amp;C5=us.snssignin&amp;C7=http%3A%2F%2Fbolins.al-mubaarak.com%2Findex.html.htm&amp;C8=AOL%20Mail%3A%20Simple%2C%20Free%2C%20Fun HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
 195.159.219.9
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: http://b.scorecardresearch.com/b2?rn=73724702&amp;C1=2&amp;C2=1000009&amp;C4=http%3A%2F%2Fbolins.al-mubaarak.com%2Findex.html.htm&amp;C5=us.snssignin&amp;C7=http%3A%2F%2Fbolins.al-mubaarak.com%2Findex.html.htm&amp;C8=AOL%20Mail%3A%20Simple%2C%20Free%2C%20Fun
Date: Thu, 12 Jan 2017 05:15:28 GMT
Connection: keep-alive
Set-Cookie: UID=12D1951592195aa343f684g1484198128; expires=Wed, 02-Jan-2019 05:15:28 GMT; path=/; domain=.scorecardresearch.com UIDR=1484198128; expires=Wed, 02-Jan-2019 05:15:28 GMT; path=/; domain=.scorecardresearch.com
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b2?rn=73724702&C1=2&C2=1000009&C4=http%3A%2F%2Fbolins.al-mubaarak.com%2Findex.html.htm&C5=us.snssignin&C7=http%3A%2F%2Fbolins.al-mubaarak.com%2Findex.html.htm&C8=AOL%20Mail%3A%20Simple%2C%20Free%2C%20Fun HTTP/1.1

Host: b.scorecardresearch.com
GET /b2?rn=73724702&amp;C1=2&amp;C2=1000009&amp;C4=http%3A%2F%2Fbolins.al-mubaarak.com%2Findex.html.htm&amp;C5=us.snssignin&amp;C7=http%3A%2F%2Fbolins.al-mubaarak.com%2Findex.html.htm&amp;C8=AOL%20Mail%3A%20Simple%2C%20Free%2C%20Fun HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
Cookie: UID=12D1951592195aa343f684g1484198128; UIDR=1484198128
 195.159.219.9
HTTP/1.1 204 No Content
HTTP/1.1 204 No Content
Content-Length: 0
Date: Thu, 12 Jan 2017 05:15:28 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /addyn/3.0/5113.1/221794/0/-1/size=1300x800;noperf=1;alias=93313514;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313514;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=60;grp=198126608;adiframe=y HTTP/1.1

Host: at.atwola.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://at.atwola.com/adiframe/3.0/5113.1/221794/0/-1/size=1300x800;noperf=1;alias=93313514;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313514;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=60;grp=198126608
 152.163.56.3
HTTP/1.0 302 Moved Temporarily
HTTP/1.0 302 Moved Temporarily
Connection: keep-alive
Expires: Mon, 15 Jun 1998 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache
Location: https://at.atwola.com/addyn/3.0/5113.1/221794/0/-1/size=1300x800;cfp=1;rndc=1484198128;noperf=1;alias=93313514;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313514;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=60;grp=198126608;adiframe=y
Content-Length: 0
P3P: CP=&quot;NOI DSP DEVa OUR BUS UNI COM NAV INT&quot;
Set-Cookie: CfP=1;domain=atwola.com;path=/
GET /addyn/3.0/5113.1/221794/0/-1/size=3x2;cfp=1;rndc=1484198127;noperf=1;alias=93313476;noaddonpl=y;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313476;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=2;target=_blank;aduho=60;grp=198126608;adiframe=y HTTP/1.1

Host: at.atwola.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://at.atwola.com/adiframe/3.0/5113.1/221794/0/-1/size=3x2;noperf=1;alias=93313476;noaddonpl=y;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313476;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=2;target=_blank;aduho=60;grp=198126608
Cookie: CfP=1
 152.163.56.3
HTTP/1.0 200 OK
Content-Type: application/x-javascript
Expires: Mon, 15 Jun 1998 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache
Server: Adtech Adserver
Content-Length: 1651
P3P: CP=&quot;NOI DSP DEVa OUR BUS UNI COM NAV INT&quot;
Set-Cookie: JEB2=58770D5F6E651774E0324050F0000621;expires=Sat, 12 Jan 2019 5:15:28 GMT;domain=atwola.com;path=/
Connection: keep-alive
Accept-Ranges: bytes
GET /addyn/3.0/5113.1/221794/0/-1/size=1300x800;cfp=1;rndc=1484198128;noperf=1;alias=93313514;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313514;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=60;grp=198126608;adiframe=y HTTP/1.1

Host: at.atwola.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://at.atwola.com/adiframe/3.0/5113.1/221794/0/-1/size=1300x800;noperf=1;alias=93313514;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313514;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=60;grp=198126608
Cookie: CfP=1
 152.163.56.3
HTTP/1.0 200 OK
Content-Type: application/x-javascript
Connection: keep-alive
Content-Encoding: gzip
Expires: Mon, 15 Jun 1998 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache
Server: Adtech Adserver
Content-Length: 900
P3P: CP=&quot;NOI DSP DEVa OUR BUS UNI COM NAV INT&quot;
Set-Cookie: JEB2=58770D5F6E651774E0324050F0006986;expires=Sat, 12 Jan 2019 5:15:27 GMT;domain=atwola.com;path=/
GET /os/moat/prod/moat_mnwl_s.js HTTP/1.1

Host: s.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://at.atwola.com/adiframe/3.0/5113.1/221794/0/-1/size=1300x800;noperf=1;alias=93313514;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313514;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=60;grp=198126608
 192.229.221.24
HTTP/1.1 200 OK
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: public, max-age=3600
Date: Thu, 12 Jan 2017 05:15:29 GMT
Edge-Control: downstream-ttl=3600
Expires: Thu, 12 Jan 2017 06:15:29 GMT
Last-Modified: Fri, 29 Apr 2016 15:17:06 GMT
Server: ECAcc (arn/46D6)
X-Cache: HIT
Content-Length: 72
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=514572
Date: Thu, 12 Jan 2017 05:15:29 GMT
Etag: &quot;5876d5a7-1d7&quot;
Expires: Wed, 18 Jan 2017 17:15:29 GMT
Last-Modified: Thu, 12 Jan 2017 01:02:31 GMT
Server: ECS (arn/459D)
X-Cache: HIT
Content-Length: 471
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=514224
Date: Thu, 12 Jan 2017 05:15:29 GMT
Etag: &quot;5876d819-1d7&quot;
Expires: Wed, 18 Jan 2017 17:15:29 GMT
Last-Modified: Thu, 12 Jan 2017 01:12:57 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471
GET /os/landingpages/prototype/images/aol-canvas1.jpg HTTP/1.1

Host: s.aolcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://sns-static.aolcdn.com/sns.v13r4/style/lpUiStyles.css
 192.229.221.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
Cache-Control: public, max-age=604800
Date: Thu, 12 Jan 2017 05:15:29 GMT
Edge-Control: downstream-ttl=604800
Expires: Thu, 19 Jan 2017 05:15:29 GMT
Last-Modified: Fri, 19 Aug 2011 20:26:22 GMT
Server: nginx
Content-Length: 4963
GET /apps/309/Ad0St3Sz4156Sq0V2Id23960373/AHPR_MailSignIn_110514.jpg HTTP/1.1

Host: aka-cdn.adtechus.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://at.atwola.com/adiframe/3.0/5113.1/221794/0/-1/size=1300x800;noperf=1;alias=93313514;kvpg=bolins.al-mubaarak%2Findex.html.htm;kvugc=0;kvh5lsid=0;kvmn=93313514;kvgrp=198126608;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=60;grp=198126608
 192.229.233.248
HTTP/1.1 200 OK
Content-Type: image/jpeg
Accept-Ranges: bytes
Cache-Control: max-age=604800
Date: Thu, 12 Jan 2017 05:15:29 GMT
Expires: Thu, 19 Jan 2017 05:15:29 GMT
Last-Modified: Sat, 07 Jan 2017 02:54:33 GMT
Server: ECS (arn/45E9)
X-Cache: HIT
Content-Length: 112644
GET /favicon.ico HTTP/1.1

Host: bolins.al-mubaarak.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: testcookie; _vdl=1; AMCV_6B25357E519160E40A490D44%40AdobeOrg=1256414278%7CMCMID%7C07846156308531611853269888039471790125%7CMCAAMLH-1484802928%7C6%7CMCAAMB-1484802928%7CNRX38WO0n5BH8Th-nqAG_A%7CMCAID%7CNONE; s_pers=%20s_getnr%3D1484198128743-New%7C1547270128743%3B%20s_nrgvo%3DNew%7C1547270128744%3B; s_cc=true
 62.100.204.33
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=iso-8859-1
Date: Thu, 12 Jan 2017 05:13:23 GMT
Server: Apache
Content-Length: 676
Connection: close
GET /_media/uac/guid.html HTTP/1.1

Host: cdn.at.atwola.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
Cookie: CfP=1; JEB2=58770D5F6E651774E0324050F0006986
 95.100.0.165
HTTP/1.1 200 OK
Content-Type: text/html
Server: nginx
Last-Modified: Thu, 22 Sep 2016 15:13:04 GMT
P3P: CP=&quot;NON DSP COR NID CURa ADMo DEVo TAIo PSAo PSDo OUR DELa IND PHY ONL UNI COM NAV DEM&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 494
Cache-Control: public, max-age=86400
Expires: Fri, 13 Jan 2017 05:15:29 GMT
Date: Thu, 12 Jan 2017 05:15:29 GMT
Connection: keep-alive
GET /_media/uac/tcode3.html HTTP/1.1

Host: cdn.at.atwola.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm
Cookie: CfP=1; JEB2=58770D5F6E651774E0324050F0006986
 95.100.0.165
HTTP/1.1 200 OK
Content-Type: text/html
Server: nginx
Last-Modified: Fri, 06 Jan 2017 19:43:26 GMT
P3P: CP=
Cteonnt-Length: 4635
Content-Encoding: gzip
Content-Length: 2187
Vary: Accept-Encoding
Cache-Control: public, max-age=86400
Expires: Fri, 13 Jan 2017 05:15:29 GMT
Date: Thu, 12 Jan 2017 05:15:29 GMT
Connection: keep-alive
GET /an/g10000/slf.js HTTP/1.1

Host: an.tacoda.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.at.atwola.com/_media/uac/tcode3.html
 195.159.219.9
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Server: Apache
Etag: &quot;276e0da9bd273c04b085350da6294e5f:1443626307&quot;
Last-Modified: Wed, 30 Sep 2015 15:18:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Date: Thu, 12 Jan 2017 05:15:29 GMT
Content-Length: 3911
Connection: keep-alive
P3P: policyref=&quot;http://www.tacoda.com/w3c/p3p.xml&quot;, CP=&quot;NON DSP COR NID CURa ADMo DEVo TAIo PSAo PSDo OUR DELa IND PHY ONL UNI COM NAV DEM&quot;
GET /916f392e-1af6-43dd-bc12-239421d8b718.js HTTP/1.1

Host: dtm.advertising.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.at.atwola.com/_media/uac/tcode3.html
 2.17.161.137
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 15 Nov 2016 14:31:04 GMT
ntCoent-Length: 49373
Content-Encoding: gzip
Content-Length: 7335
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=300, s-maxage=300
Expires: Thu, 12 Jan 2017 05:20:29 GMT
Date: Thu, 12 Jan 2017 05:15:29 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET /an/17840/slf.js HTTP/1.1

Host: an.tacoda.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.at.atwola.com/_media/uac/tcode3.html
 195.159.219.9
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Server: Apache
Etag: &quot;aa42796595292e1cb4741824677b39c5:1453736296&quot;
Last-Modified: Mon, 25 Jan 2016 15:38:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=900
Date: Thu, 12 Jan 2017 05:15:29 GMT
Content-Length: 4385
Connection: keep-alive
P3P: policyref=&quot;http://www.tacoda.com/w3c/p3p.xml&quot;, CP=&quot;NON DSP COR NID CURa ADMo DEVo TAIo PSAo PSDo OUR DELa IND PHY ONL UNI COM NAV DEM&quot;
GET /ids/916f392e-1af6-43dd-bc12-239421d8b718 HTTP/1.1

Host: dtm.advertising.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.at.atwola.com/_media/uac/tcode3.html
 2.17.161.137
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Last-Modified: Tue, 15 Nov 2016 14:31:04 GMT
Cteonnt-Length: 9976
Content-Encoding: gzip
Content-Length: 4370
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=300, s-maxage=300
Expires: Thu, 12 Jan 2017 05:20:29 GMT
Date: Thu, 12 Jan 2017 05:15:29 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET /favicon.ico HTTP/1.1

Host: bolins.al-mubaarak.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: testcookie; _vdl=1; AMCV_6B25357E519160E40A490D44%40AdobeOrg=1256414278%7CMCMID%7C07846156308531611853269888039471790125%7CMCAAMLH-1484802928%7C6%7CMCAAMB-1484802928%7CNRX38WO0n5BH8Th-nqAG_A%7CMCAID%7CNONE; s_pers=%20s_getnr%3D1484198128743-New%7C1547270128743%3B%20s_nrgvo%3DNew%7C1547270128744%3B; s_cc=true
 62.100.204.33
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=iso-8859-1
Date: Thu, 12 Jan 2017 05:13:23 GMT
Server: Apache
Content-Length: 676
Connection: close
GET /sn_sync.html HTTP/1.1

Host: asvcs.aol.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.at.atwola.com/_media/uac/tcode3.html
 54.192.11.18
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 414
Connection: keep-alive
Date: Thu, 22 Sep 2016 06:07:41 GMT
Last-Modified: Wed, 27 Jan 2016 19:46:08 GMT
Etag: &quot;f81fbb71a64896ccf091a1bc841eb6f0&quot;
Accept-Ranges: bytes
Server: AmazonS3
Age: 42991
X-Cache: Hit from cloudfront
Via: 1.1 bf16c73ec621c935d5b8f6c85097580f.cloudfront.net (CloudFront)
X-Amz-Cf-Id: f0hJoX-1oUd3SOlEZesVXdz3RUeOcozVh6siCeGrov-BfHXwT3r_Dw==
GET /asvcs.aol.com/include/sn_sync-built.js HTTP/1.1

Host: s.blogsmithmedia.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://asvcs.aol.com/sn_sync.html
 23.43.142.55
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Wed, 27 Jan 2016 19:47:50 GMT
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Amz-Cf-Id: 9hMsOvucnT2J_lk1iI3r7tCbG6hH4RhjEP8qkipEzNRV9iT_C0SXRQ==
Date: Thu, 12 Jan 2017 05:15:29 GMT
Content-Length: 8805
Connection: keep-alive
GET /rtx/r.js?cmd=OTH&si=17840&pi=-&xs=3&pu=http%253A%2F%2Fcdn.at.atwola.com%2F_media%2Fuac%2Ftcode3.html%253Fifu%253Dhttp%25253A%2F%2Fbolins.al-mubaarak.com%2Findex.html.htm&r=&df=1&atsync=-1&atsyncinterval=-1&bf=1&acf=1&btf=1&adf=1&v=6.5.0&cb=37225 HTTP/1.1

Host: tacoda.at.atwola.com
GET /rtx/r.js?cmd=OTH&amp;si=17840&amp;pi=-&amp;xs=3&amp;pu=http%253A%2F%2Fcdn.at.atwola.com%2F_media%2Fuac%2Ftcode3.html%253Fifu%253Dhttp%25253A%2F%2Fbolins.al-mubaarak.com%2Findex.html.htm&amp;r=&amp;df=1&amp;atsync=-1&amp;atsyncinterval=-1&amp;bf=1&amp;acf=1&amp;btf=1&amp;adf=1&amp;v=6.5.0&amp;cb=37225 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.at.atwola.com/_media/uac/tcode3.html
Cookie: CfP=1; JEB2=58770D5F6E651774E0324050F0006986
 64.12.235.98
HTTP/1.1 200 OK
Content-Type: application/javascript
Server: Apache-Coyote/1.1
Connection: close
P3P: CP=&quot;NON DSP COR NID CURa ADMo DEVo TAIo PSAo PSDo OUR DELa IND PHY ONL UNI COM NAV DEM&quot;
Cache-Control: no-cache
Set-Cookie: ATTACID=a3Z0aWQ9VFIyMmEyNTVjYS1kODg2LTExZTYtOTZmMi0wMDE2M2U3MTA5ZTU=;Version=1;Domain=.at.atwola.com;Path=/;Max-Age=31622400;Expires=Sat, 13 Jan 2018 05:15:29 UTC; ATTAC=;Version=1;Domain=.at.atwola.com;Path=/;Max-Age=31622400;Expires=Sat, 13 Jan 2018 05:15:29 UTC; TData=;Version=1;Domain=tacoda.at.atwola.com;Path=/;Max-Age=31622400;Expires=Sat, 13 Jan 2018 05:15:29 UTC; N=2:d41d8cd98f00b204e9800998ecf8427e;Version=1;Domain=tacoda.at.atwola.com;Path=/;Max-Age=31622400;Expires=Sat, 13 Jan 2018 05:15:29 UTC; Tsid=0^1484198129^1484198309|17840^1484198129^1484198309;Version=1;Domain=.tacoda.at.atwola.com;Path=/;Max-Age=180;Expires=Thu, 12 Jan 2017 05:18:29 UTC; eadx=x;Version=1;Domain=tacoda.at.atwola.com;Path=/;Max-Age=86400;Expires=Fri, 13 Jan 2017 05:15:29 UTC;
Date: Thu, 12 Jan 2017 05:15:29 GMT
Content-Encoding: gzip
Content-Length: 111
GET /atd HTTP/1.1

Host: ar.atwola.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.at.atwola.com/_media/uac/tcode3.html
Cookie: CfP=1; JEB2=58770D5F6E651774E0324050F0006986; AxData=1#; Axxd=1
 64.12.228.13
HTTP/1.1 204 No Content
Content-Type: text/plain
Date: Thu, 12 Jan 2017 05:15:30 GMT
Server: Apache/2.2.3 (CentOS) DAV/2
Expires: Thu, 12 Jan 2017 05:15:30 GMT
Cache-Control: no-cache
Pragma: no-cache
P3P: CP=&quot;CURo DEVo TAIo PSAo IVAo IVDo LOC ONL UNI COM NAV INT STA DEM OUR&quot;
Content-Length: 0
Keep-Alive: timeout=5, max=2
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: bolins.al-mubaarak.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: testcookie; _vdl=1; AMCV_6B25357E519160E40A490D44%40AdobeOrg=1256414278%7CMCMID%7C07846156308531611853269888039471790125%7CMCAAMLH-1484802928%7C6%7CMCAAMB-1484802928%7CNRX38WO0n5BH8Th-nqAG_A%7CMCAID%7CNONE; s_pers=%20s_getnr%3D1484198128743-New%7C1547270128743%3B%20s_nrgvo%3DNew%7C1547270128744%3B; s_cc=true
 62.100.204.33
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=iso-8859-1
Date: Thu, 12 Jan 2017 05:13:24 GMT
Server: Apache
Content-Length: 676
Connection: close
GET /favicon.ico HTTP/1.1

Host: bolins.al-mubaarak.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: testcookie; _vdl=1; AMCV_6B25357E519160E40A490D44%40AdobeOrg=1256414278%7CMCMID%7C07846156308531611853269888039471790125%7CMCAAMLH-1484802928%7C6%7CMCAAMB-1484802928%7CNRX38WO0n5BH8Th-nqAG_A%7CMCAID%7CNONE; s_pers=%20s_getnr%3D1484198128743-New%7C1547270128743%3B%20s_nrgvo%3DNew%7C1547270128744%3B; s_cc=true
 62.100.204.33
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=iso-8859-1
Date: Thu, 12 Jan 2017 05:13:25 GMT
Server: Apache
Content-Length: 676
Connection: close
GET /resources/core/css/sns_module.css HTTP/1.1

Host: cdn.webmail.aol.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bolins.al-mubaarak.com/index.html.htm