Overview

URLhttp://fishinghair.com/
IP69.170.135.92
ASNAS22576 Layered Technologies, Inc.
Location United States
Report completed2012-11-17 10:37:55 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-17 10:37:19 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 3
2012-11-17 10:37:19 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 2
2012-11-17 10:37:19 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 3
2012-11-17 10:37:19 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 2
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 69.170.135.92

Date Alerts / IDS URL IP
2013-02-23 00:40:560 / 6http://propercreditcounseling.com/69.170.135.92
2013-02-22 11:42:550 / 4http://adobesoftware.net/common/check_last.php69.170.135.92
2013-02-22 05:16:060 / 6http://webhostcheap.info/69.170.135.92
2013-02-22 04:38:270 / 6http://www.historycooperative.org/journals/lhr/17.3/schweber.html69.170.135.92
2013-02-20 23:37:340 / 0http://nasqaq.com69.170.135.92
2013-02-20 06:09:210 / 3http://www.habichnich.de/69.170.135.92

Last 6 reports on ASN: AS22576 Layered Technologies, Inc.

Date Alerts / IDS URL IP
2013-02-23 05:53:330 / 1http://boardgamegeek.com/collection/user/watman?own=1&subtype=boardgame&ff=172.233.16.130
2013-02-23 02:49:530 / 0http://boardgamegeek.com72.233.16.130
2013-02-23 00:40:560 / 6http://propercreditcounseling.com/69.170.135.92
2013-02-22 13:40:531 / 3http://wp.me/pTbB6-aI72.233.2.58
2013-02-22 11:42:550 / 4http://adobesoftware.net/common/check_last.php69.170.135.92
2013-02-22 06:40:150 / 1http://compositecode.com72.233.69.6



JavaScript

Executed Scripts (13)


Executed Evals (0)


Executed Writes (5)

#1 JavaScript::Write (size: 16, repeated: 1) 

17 november 2012

#2 JavaScript::Write (size: 44, repeated: 1) 

<div style="display:inline" id="oV10"></div>

#3 JavaScript::Write (size: 256, repeated: 1) 

<frameset rows="100%,*" frameborder="no" border="0" framespacing="0"><frame src="http://11649.bodisparking.com/fishinghair.com?szcp=58&framerequest=1&refurl=http%3A%2F%2F11649.bodisparking.com%2Ffishinghair.com%3Fszcp%3D58" name="landingparent"></frameset>

#4 JavaScript::Write (size: 109, repeated: 1) 

<input style="width:0px; top:0px; position:absolute; visibility:hidden;" id="oV6" onchange="fV8(fV1,5,true)">

#5 JavaScript::Write (size: 143, repeated: 1) 

en <strong>Macbook Pro<sup>®</sup></strong>, en <strong>iPhone 4S<sup>®</sup></strong>, eller en <strong>New iPad<sup>®</sup></strong>


HTTP Transactions (36)


Request Response 
GET / HTTP/1.1

Host: fishinghair.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Sat, 17 Nov 2012 09:37:18 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.2.17
Content-Length: 704
Connection: close
GET /sd?s=84893&f=1 HTTP/1.1

Host: as.casalemedia.com
GET /sd?s=84893&amp;f=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fishinghair.com/
 
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html; charset=iso-8859-1

Server: Apache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Location: http://as.casalemedia.com/sd?s=84893&amp;f=1&amp;C=1
Content-Length: 236
Expires: Sat, 17 Nov 2012 09:37:19 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 17 Nov 2012 09:37:19 GMT
Connection: keep-alive
Set-Cookie: CMID=oWB6wkPS1IwAABdqWeEAAABD;domain=casalemedia.com;path=/;expires=Sun, 17 Nov 2013 09:37:18 GMT
CMPS=133;domain=casalemedia.com;path=/;expires=Fri, 15 Feb 2013 09:37:18 GMT
CMPP=007;domain=casalemedia.com;path=/;expires=Fri, 15 Feb 2013 09:37:18 GMT
GET /sd?s=84893&f=1&C=1 HTTP/1.1

Host: as.casalemedia.com
GET /sd?s=84893&amp;f=1&amp;C=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fishinghair.com/
Cookie: CMID=oWB6wkPS1IwAABdqWeEAAABD; CMPS=133; CMPP=007
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Server: Apache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Content-Length: 6707
Expires: Sat, 17 Nov 2012 09:37:19 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 17 Nov 2012 09:37:19 GMT
Connection: keep-alive
Set-Cookie: CMID=oWB6wkPS1IwAABdqWeEAAABD;domain=casalemedia.com;path=/;expires=Sun, 17 Nov 2013 09:37:19 GMT
CMPS=133;domain=casalemedia.com;path=/;expires=Fri, 15 Feb 2013 09:37:19 GMT
CMPP=007;domain=casalemedia.com;path=/;expires=Fri, 15 Feb 2013 09:37:19 GMT
CMS=84893&amp;1353145039;domain=casalemedia.com;path=/;expires=Mon, 17 Dec 2012 09:37:19 GMT
CMST=UKdaz1CnWs8B;domain=casalemedia.com;path=/;expires=Sun, 18 Nov 2012 09:37:19 GMT
CMSC=UKdazw**;domain=casalemedia.com;path=/;
CMDD=AAFLnQE*;domain=casalemedia.com;path=/;expires=Sun, 18 Nov 2012 09:37:19 GMT
CMD1=AAEtrVCnWs8AAUudAAKBdgEAAA**;domain=casalemedia.com;path=/;expires=Mon, 17 Dec 2012 09:37:19 GMT
GET /d/fishinghair.com HTTP/1.1

Host: digent.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fishinghair.com/
 
HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Sat, 17 Nov 2012 09:37:19 GMT
Server: Apache/2.2.11 (Unix) PHP/5.2.8
X-Powered-By: PHP/5.2.8
P3P: CP=&quot;NOI CURa OUR NOR UNI&quot;
Expires: Mon, 31 Dec 2001 23:59:59 GMT
Pragma: no-cache
Location: http://digent.net/d/f4i6s26406?r=http%3A%2F%2Ffishinghair.com%2F
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
GET /d/f4i6s26406?r=http%3A%2F%2Ffishinghair.com%2F HTTP/1.1

Host: digent.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fishinghair.com/
 
HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Sat, 17 Nov 2012 09:37:19 GMT
Server: Apache/2.2.11 (Unix) PHP/5.2.8
X-Powered-By: PHP/5.2.8
Set-Cookie: tpp_geo=Tk98Tm9yd2F5fE9zbG98T3Nsb3x8NTkuOTE2N3wxMC43NXwxMnw5MDI4fE1NN3wxOTUuMTU5; expires=Mon, 17-Dec-2012 09:37:19 GMT; path=/
tpp_4626406_l=1050%3B1353231439; expires=Mon, 19-Nov-2012 09:37:19 GMT; path=/
tpp_ov=100006%3B1353231439; expires=Mon, 19-Nov-2012 09:37:19 GMT; path=/
tpp_geo=Tk98Tm9yd2F5fDEyfE9zbG98fDU5LjkxNjd8MTAuNzV8MTJ8MHxNTTd8MTk1LjE1OQ%3D%3D; expires=Mon, 17-Dec-2012 09:37:19 GMT; path=/
tpp_oc=100006%3B1353231439; expires=Mon, 19-Nov-2012 09:37:19 GMT; path=/
P3P: CP=&quot;NOI CURa OUR NOR UNI&quot;
Expires: Mon, 31 Dec 2001 23:59:59 GMT
Pragma: no-cache
Location: http://11649.bodisparking.com/fishinghair.com?szcp=58
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
GET /fishinghair.com?szcp=58 HTTP/1.1

Host: 11649.bodisparking.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fishinghair.com/
 
HTTP/1.1 200 OK

Content-Type: text/html

Last-Modified: Thu, 19 Apr 2012 04:23:41 GMT
Accept-Ranges: bytes
Etag: &quot;8044f33e41dcd1:0&quot;
Server: Microsoft-IIS/7.5
Date: Sat, 17 Nov 2012 09:37:23 GMT
Content-Length: 1233
GET /fishinghair.com?szcp=58 HTTP/1.1

Host: 11649.bodisparking.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://11649.bodisparking.com/fishinghair.com?szcp=58
If-Modified-Since: Thu, 19 Apr 2012 04:23:41 GMT
If-None-Match: &quot;8044f33e41dcd1:0&quot;
 
HTTP/1.1 304 Not Modified

HTTP/1.1 304 Not Modified

Last-Modified: Thu, 19 Apr 2012 04:23:41 GMT
Accept-Ranges: bytes
Etag: &quot;8044f33e41dcd1:0&quot;
Server: Microsoft-IIS/7.5
Date: Sat, 17 Nov 2012 09:37:23 GMT
GET /fishinghair.com?szcp=58&framerequest=1&refurl=http%3A%2F%2F11649.bodisparking.com%2Ffishinghair.com%3Fszcp%3D58 HTTP/1.1

Host: 11649.bodisparking.com
GET /fishinghair.com?szcp=58&amp;framerequest=1&amp;refurl=http%3A%2F%2F11649.bodisparking.com%2Ffishinghair.com%3Fszcp%3D58 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://11649.bodisparking.com/fishinghair.com?szcp=58
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Length: 1806
Content-Encoding: gzip
Server: Microsoft-IIS/7.5
Date: Sat, 17 Nov 2012 09:37:24 GMT
GET /favicon.ico HTTP/1.1

Host: 11649.bodisparking.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 404 Not Found

Content-Type: text/html

Server: Microsoft-IIS/7.5
Date: Sat, 17 Nov 2012 09:37:24 GMT
Content-Length: 1245
GET /tracking?method=ZeroClickRequest&enc=cmk9ODY5NzM5JmQ9ZmlzaGluZ2hhaXIuY29tJnM9NHZoMWJzbjFmb2t0a2Z5MiZzcj0mdGFnaWQ9JnpwaWQ9Jml1Zj10cnVlJnVmPTExNjQ5JnNpPTQyJnN0PTM5MCZ6cmk9bWp0ZTJja2FxNW1oOTRobiZwaWQ9ODgmcGI9MC4wMDAyOTQ&sw=1176&sh=885&r=http%3A%2F%2Ffw.dnslink.com%2F%3Fdomainname%3Dfishinghair.com%26seedterm%3DFishing%2520Calendar%26publicid%3D279F8BD6-C89B-40E3-988D-CD403BDEF41D HTTP/1.1

Host: 11649.bodisparking.com
GET /tracking?method=ZeroClickRequest&amp;enc=cmk9ODY5NzM5JmQ9ZmlzaGluZ2hhaXIuY29tJnM9NHZoMWJzbjFmb2t0a2Z5MiZzcj0mdGFnaWQ9JnpwaWQ9Jml1Zj10cnVlJnVmPTExNjQ5JnNpPTQyJnN0PTM5MCZ6cmk9bWp0ZTJja2FxNW1oOTRobiZwaWQ9ODgmcGI9MC4wMDAyOTQ&amp;sw=1176&amp;sh=885&amp;r=http%3A%2F%2Ffw.dnslink.com%2F%3Fdomainname%3Dfishinghair.com%26seedterm%3DFishing%2520Calendar%26publicid%3D279F8BD6-C89B-40E3-988D-CD403BDEF41D HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://11649.bodisparking.com/fishinghair.com?szcp=58&amp;framerequest=1&amp;refurl=http%3A%2F%2F11649.bodisparking.com%2Ffishinghair.com%3Fszcp%3D58
 
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8

Cache-Control: private
Content-Length: 0
Location: http://fw.dnslink.com/?domainname=fishinghair.com&amp;seedterm=Fishing%20Calendar&amp;publicid=279F8BD6-C89B-40E3-988D-CD403BDEF41D
Server: Microsoft-IIS/7.5
Date: Sat, 17 Nov 2012 09:37:24 GMT
GET /?domainname=fishinghair.com&seedterm=Fishing%20Calendar&publicid=279F8BD6-C89B-40E3-988D-CD403BDEF41D HTTP/1.1

Host: fw.dnslink.com
GET /?domainname=fishinghair.com&amp;seedterm=Fishing%20Calendar&amp;publicid=279F8BD6-C89B-40E3-988D-CD403BDEF41D HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://11649.bodisparking.com/fishinghair.com?szcp=58&amp;framerequest=1&amp;refurl=http%3A%2F%2F11649.bodisparking.com%2Ffishinghair.com%3Fszcp%3D58
 
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8

Cache-Control: private
Location: https://www.dntx.com/tr?id=ea90bfa39fcbbb4d0aa8085b00922534ef2d2c06
Server: Microsoft-IIS/7.5
X-AspNetMvc-Version: 3.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sat, 17 Nov 2012 09:37:12 GMT
Content-Length: 184
POST / HTTP/1.1

Host: ocsp.thawte.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 
HTTP/1.0 200 Ok

Content-Type: application/ocsp-response

Last-Modified: Fri, 16 Nov 2012 08:48:35 GMT
Expires: Fri, 23 Nov 2012 08:48:35 GMT
Content-Transfer-Encoding: binary
Content-Length: 1205
Cache-Control: max-age=515473, public, no-transform, must-revalidate
Date: Sat, 17 Nov 2012 09:37:22 GMT
nncoection: close
Connection: Keep-Alive
GET /tr?id=ea90bfa39fcbbb4d0aa8085b00922534ef2d2c06 HTTP/1.1

Host: www.dntx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://11649.bodisparking.com/fishinghair.com?szcp=58&amp;framerequest=1&amp;refurl=http%3A%2F%2F11649.bodisparking.com%2Ffishinghair.com%3Fszcp%3D58
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Server: nginx
Date: Sat, 17 Nov 2012 09:37:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: Express
Content-Encoding: gzip
GET /tr?id=ea90bfa39fcbbb4d0aa8085b00922534ef2d2c06&confirm=3e6428006a3469786a4f46391f0f863b&ref=SNi16WYVhfFKXeBxd898FsLnx4lQbHmiQEQpKAii5cY1DKXSSR387+vAMyQqvcsHUxcDgpXVCB5ZGkszyjpsViXIsBP09CjFG6Vl70ISMDrO4rLo99xq8F43c4XdUYHZ8ASWbCu8wwVOkzgRtgQLf6LFiT13caMlxJQTETeigaD8DlVpnLmJunA0TUFRk2vv HTTP/1.1

Host: www.dntx.com
GET /tr?id=ea90bfa39fcbbb4d0aa8085b00922534ef2d2c06&amp;confirm=3e6428006a3469786a4f46391f0f863b&amp;ref=SNi16WYVhfFKXeBxd898FsLnx4lQbHmiQEQpKAii5cY1DKXSSR387+vAMyQqvcsHUxcDgpXVCB5ZGkszyjpsViXIsBP09CjFG6Vl70ISMDrO4rLo99xq8F43c4XdUYHZ8ASWbCu8wwVOkzgRtgQLf6LFiT13caMlxJQTETeigaD8DlVpnLmJunA0TUFRk2vv HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.dntx.com/tr?id=ea90bfa39fcbbb4d0aa8085b00922534ef2d2c06
 
HTTP/1.1 200 OK

HTTP/1.1 200 OK

Server: nginx
Date: Sat, 17 Nov 2012 09:37:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
GET /favicon.ico HTTP/1.1

Host: www.dntx.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: image/x-icon

Server: nginx
Date: Sat, 17 Nov 2012 09:37:22 GMT
Content-Length: 1150
Last-Modified: Thu, 08 Nov 2012 14:30:53 GMT
Connection: keep-alive
Accept-Ranges: bytes
GET / HTTP/1.1

Host: 7tv.secparked.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8

Date: Sat, 17 Nov 2012 09:37:23 GMT
Location: http://globalpromotions.noraust.com/?sov=135280202&amp;hid=gwkoikgqkgomiq
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Content-Length: 0
Connection: keep-alive
GET /favicon.ico HTTP/1.1

Host: 11649.bodisparking.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 404 Not Found

Content-Type: text/html

Server: Microsoft-IIS/7.5
Date: Sat, 17 Nov 2012 09:37:26 GMT
Content-Length: 1245
GET /favicon.ico HTTP/1.1

Host: fishinghair.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/plain; charset=UTF-8

Date: Sat, 17 Nov 2012 09:37:23 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Wed, 02 Nov 2011 06:24:19 GMT
Etag: &quot;27a0d43-cbe-4b0ba859e6ac0&quot;
Accept-Ranges: bytes
Content-Length: 3262
Connection: close
GET /?sov=135280202&hid=gwkoikgqkgomiq HTTP/1.1

Host: globalpromotions.noraust.com
GET /?sov=135280202&amp;hid=gwkoikgqkgomiq HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

HTTP/1.1 200 OK

Date: Sat, 17 Nov 2012 09:37:23 GMT
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Set-Cookie: ci_session=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%2BA2BUZARuV2YPZ1w%2BAmAANFdkBDcOZ1F1B2haMF5hVSFYIVN8VDBWJgEMUjVVa1IkDTUDd1M%2FAHdSbwc3Vz9UIQB3AGgEfA%3D%3D; expires=Sun, 18-Nov-2012 09:37:23 GMT; path=/; domain=.globalpromotions.noraust.com
ci_session=VmsAOwUxAGgHfwUpAzsBaVA2BmsEIgF1Cm9XdgMnADwEOABrUltbPgM7ASJVbFNyDjdXO1NjDG8Dd1I1BjQANAs8AmlSNVcwWzECZgYzW2ZWbgBgBTMAYgdhBT4DZAE8UDYGNQQ2AT8KPFdgAzYAbQRmADdSNVtnA2oBIlVsU3ION1c5U2EMbwN3UmwGcgBYC2oCNFJhV3BbbQJ0BiNbdVYxAHIFPQBjBzEFYAMjAWlQPwZkBC4BNwo%2FVzwDegBkBGMANVIqW2UDbQExVXVTOg5%2BVzJTYAxlA29SJwZ3AHQLbgIiUlpXY1tvAmIGPlsjVigAOgV0AGgHPQVqAzsBelBLBj4EegFvCmZXaQM1AHoEYgArUjRbdwN3AVdVPlNvDmlXZ1MmDCYDblIlBlcAPAsrAgdSbFdsW2wCaAYnWyRWKgBPBVMAcgcyBXQDMAFjUCYGNARuASsKX1dWA28AdQQlAHNSPltmA3EBOVV5UzMOI1c5U2IMfAN1UkIGZwBkC2ACP1IqVzBbOAI2BmBbZlY4ADEFNAByB0IFMwNzAT1QYAY%2BBHgBKQo5VysDYgB7BGYANlImW2wDLAE6VWZTMg43VypTPQw0AyZScQZdAGYLaAIkUmxXdFthAnMGKVt1VjEAaAU9AGMHNwVvAzIBaVAyBmQEMAEyCjlXPgMnAG8EbgA%2FUiZbIgMsAWVVJVNeDmlXaVMlDDQDd1I%2BBnEAPQs7AmpSJ1cgWzMCdAZqW2RWMAAjBXQAPQdyBXgDOgErUDwGaAQ6ASQKO1c2A2EAZwRvADVSNltnA20BIlVsU3w%3D; expires=Sun, 18-Nov-2012 09:37:23 GMT; path=/; domain=.globalpromotions.noraust.com
ci_session=XGEGPQA1UDhSKgQoWGAOZgZgBGkMKgF1C24FJFN3VmoBPVQ%2FXFVdOAQ8ACMBOFFwDjdWOlRkCGtQJAluDT9TZ1ZhBG8GYQRjVjxRNVVgDDFcZAZmADZQMlI0BD9YPw4zBmAENww%2BAT8LPQUyU2ZWOwFjVGNcO11hBG0AIwE4UXAON1Y4VGYIa1AkCTcNeVMLVjcEMgY1BCNWYFEnVXAMIlw7BnQAOFAzUmQEYVh4DmYGaQRmDCYBNws%2BBW5TKlYyAWZUYVwkXWMEagAwASFROA5%2BVjNUZwhhUDwJfA18UydWMwQkBg4EMFZiUTFVbQx0XCIGPABxUDhSaARrWGAOdQYdBDwMcgFvC2cFO1NlViwBZ1R%2FXDpdcQRwAFYBalFtDmlWZlQhCCJQPQl%2BDVxTb1Z2BAEGOAQ%2FVmFRO1V0DHNcIAZJAFZQIlJnBHVYaw5sBnAENgxmASsLXgUEUz9WIwEgVCdcMF1gBHYAOAEtUTEOI1Y4VGUIeFAmCRkNbFM3Vj0EOQZ%2BBGNWNVFlVTMMMVwyBjcAMVAiUhcEMlgoDjIGNgQ8DHABKQs4BXlTMlYtAWNUYlwoXWoEKwA7ATJRMA43VitUOggwUHUJKg1WUzVWNQQiBjgEJ1ZsUSBVegwiXDsGbgA4UDNSYgRuWGkOZgZkBGYMOAEyCzgFbFN3VjkBa1RrXChdJAQrAGQBcVFcDmlWaFQiCDBQJAllDXpTblZmBGwGcwRzVj5RJ1U5DDNcOgYlAHFQbVInBHlYYQ4kBmoEagwyASQLOgVkUzFWMQFqVGFcOF1hBGoAIwE4UXAON1Y6VGwIc1ByCTENf1N2Vm0EJQZrBGFWP1F2VSEMO1x9; expires=Sun, 18-Nov-2012 09:37:23 GMT; path=/; domain=.globalpromotions.noraust.com
ci_session=VmsBOgQ%2BWzNVLVV5ADgLY107Uj8GIARwVzICIwQgAz9RbVE6U1oJbFRsV3RTagYnVm9VOQU1WTpWIlUyV2UDNwE2UjkBZlI1UjhUMFFkCjdWbgFhBDJbOVUzVW4AZws2XTtSYQY0BDpXYQI1BDEDblEzUWZTNAk1VD1XdFNqBidWb1U7BTdZOlYiVWtXIwNbAWBSZAEyUnVSZFQiUXQKJFYxAXMEPFs4VWNVMAAgC2NdMlIwBiwEMldiAmkEfQNnUTZRZFMrCTdUOldnU3MGb1YmVTAFNlkwVjpVIFcmA3cBZFJyAQlSZlJmVDRRaQpyVigBOwR1WzNVb1U6ADgLcF1GUmoGeARqVzsCPAQyA3lRN1F6UzUJJVQgVwFTOAY6VjFVZQVwWXNWO1UiVwYDPwEhUlcBP1JpUmVUPlFwCnVWKgFOBFJbKVVgVSQAMwtpXStSYAZsBC5XAgIDBGgDdlFwUSJTPwk0VCZXb1N%2FBmZWe1U7BTRZKVYgVUVXNgNnAWpSbwF5UjVSMVRgUTcKN1Y4ATAENVspVRBVYwBwCzddbVJqBnoELFdkAn4EZQN4UTNRZ1MnCT5Ue1dsU2AGZ1ZvVSgFa1lhVnNVdlcMA2UBYlJ0AT9ScVJoVCVRfgokVjEBaQQ8WzhVZVU%2FADELY10%2FUjAGMgQ3V2QCawQgA2xRO1FuUycJcFR7VzNTIwYLVjFVawVzWWFWIlU5VyADPgExUjoBdFIlUjpUIlE9CjVWMAEiBHVbZlUgVSgAOQshXTFSPAY4BCFXZgJjBGYDZFE6UWRTNwk1VDpXdFNqBidWb1U5BT1ZIlZ0VW1XJQMmATpScwFsUjdSO1RzUSUKPVZ5AToENFszVXRVYwBmC3BdMFJ2BjgEN1dtAnIEPQM5UWtRMFMnCT5UdQ%3D%3D; expires=Sun, 18-Nov-2012 09:37:23 GMT; path=/; domain=.globalpromotions.noraust.com
ci_session=XGFXbAkyAWkBeVV5AjoAaF07CWQGIAB0AmdVdFZyBDhQbFE6UltcOQc%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%2FUDJRZ1ImXGsHKFVuVGdQMQU8VitWOFtjV3JTcFcMAGYAYwMlU21ScQY8VCUGKQwiXDtXPwkxAWIBMVU%2FAjMAaF0%2FCWsGMgAzAjFVPFZyBGtQOlFuUiZcJQcoVTFUJFBdBWJWaFYgW2NXI1M%2FVyAAPQAwA2tTJlIlBm5UIgZqDDNcOld0CXgBPAF0VSgCOwAqXTEJZwY4ACUCM1U0VjQEY1A7UWRSNlxgB2lVdlRtUHEFPFY6Vm5bIFd1U2tXJQAlADsDIlM%2BUjcGb1RzBnIMO1xzV2wJOQFpASBVYwJkAHtdMAktBjgAMwI4VSVWbwQ%2BUGpRMFImXGsHKFVuVGFQOAUkVmVWO1tjV2VTW1cnAHQAIgNqU21SPQZkVGIGZQwzXDFXYgk%2BAWMBNlU5AjsAJA%3D%3D; expires=Sun, 18-Nov-2012 09:37:23 GMT; path=/; domain=.globalpromotions.noraust.com
id=noid; expires=Sun, 18-Nov-2012 09:39:03 GMT; path=/; domain=.globalpromotions.noraust.com
SITE_ID=135280202; expires=Sun, 18-Nov-2012 09:39:03 GMT; path=/; domain=.globalpromotions.noraust.com
sov=135280202; expires=Sun, 18-Nov-2012 09:39:03 GMT; path=/; domain=.globalpromotions.noraust.com
tov=deleted; expires=Fri, 18-Nov-2011 09:37:22 GMT; path=/; domain=.globalpromotions.noraust.com
ci_session=BDkHPAIxUDAHPlRwVSQJalUyVzAMMgMmVSYAN1F1CixRawRuVm4IWwE0AGUGJgBpUiIAZVFgDGdTPwZzDDgBMFBjA2YGaABlVTRUaFdgC2QEaQdiAmFQNgc0VG5VMwk1VWdXMAxsAzJVbABkUWMKPVE6BDBWMgg1AW0ANAYmAGlSIgBlUWIMZVM%2FBnMMYQF2UA8DMAY1ADFVdFQ0V3ILdAR6Bz0Cc1A4BzVUPlVtCXJVMlc5DD0DKlVkAGdRPwpxUTMENVYwCCoBbwAzBjUAcFJqACxRaQxkUzUGawwqAXNQIwM0BiMAClVnVDZXZAtpBCwHJAI7UHEHPlQyVWcJalUhV00MZwN%2BVTwAPlFqCj5RLQQ0Vi4INAF9ACkGUwA7Uj8AO1E8DCJTdgZqDCgBU1BrA3EGBgA8VWhUNVduC3AEKwcmAk5QVgckVD1VeQlhVThXIAxtA2pVeAAHUVUKZFEiBHNWdgg%2BAWwALwY9AHxSYwBxUWIMZlMsBnEMTwFjUDMDOgY%2BAHpVNFR
GET /ajax/libs/jquery/1.6/jquery.min.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://globalpromotions.noraust.com/?sov=135280202&amp;hid=gwkoikgqkgomiq
 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT
Date: Sat, 17 Nov 2012 09:08:01 GMT
Expires: Sat, 17 Nov 2012 10:08:01 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 32103
X-XSS-Protection: 1; mode=block
Age: 1762
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=3600
GET /templates/video.mini/big_box_NO_noselect/js/script.js HTTP/1.1

Host: static.globalpromotions.noraust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://globalpromotions.noraust.com/?sov=135280202&amp;hid=gwkoikgqkgomiq
Cookie: ci_session=VWgBOgg7UDEAOVVxBHVbOFE2B2AGOFp%2FVSYPOAAkVnBVb181Bz8BUgA1BGFRcQNqUyMAZVVkC2BUOFciBjJVZAMwUDVTPQBlA2JUaFdgD2BVOAFkCGtQNgAzVW8EYltnUWMHYAZmWmtVbA9rADJWYVU%2BX2sHYwE8AGwEMFFxA2pTIwBlVWYLYlQ4VyIGa1UiA1xQY1NgADEDIlQ0V3IPcFUrATsIeVA4ADJVPwQ8WyBRNgdpBjdac1VkD2gAblYtVTdfbgdhASMAbgQ3UWIDc1NrACxVbQtjVDJXOgYgVScDcFBnU3YACgMxVDZXZA9tVX0BIggxUHEAOVUzBDZbOFElBx0GbVonVTwPMQA7VmJVKV9vB38BPQB8BC1RBAM4Uz4AO1U4CyVUcVc7BiJVBwM4UCJTUwA8Az5UNVduD3RVegEgCERQVgAjVTwEKFszUTwHcAZnWjNVeA8IAARWOFUmXygHJwE3AG0EK1FqA39TYgBxVWYLYVQrVyAGRVU3A2BQaVNrAHoDYlRhVzAPM1U4ATIIOlAxACNVTARvW3BRYgc2Bm1aJVV6D24AeVY1VShfawdiAS8AZwR2UWkDYFNjAGVVdQs%2BVGNXcwZ2VQ0DYlBhU3AAPAMmVDhXdQ96VSsBOwhjUDgAMlU5BDNbMVE2B2QGN1ptVWEPbgBsVnBVPF9jB2sBLwApBHZRNgMjUw8AO1U2CyZUY1ciBjlVIQM5UDJTPgB3A3JUaldyDzlVOgE6CChQcQBsVXwEJFs5UXQHagY7WmdVdw9sAGRWNlU0X2IHYQE%2FAGwEN1FxA2pTIwBlVWQLaFQgV3QGbVUkAyFQOVN3AG8DYFRrVyMPIVUyAXMIMFAwADlVKARvW2ZRJQdrBnFaZ1VhD2cAdVZtVWlfMwc1AS8AZwR2UWkDZlNqAH1VOws9VGNXZAZdVSYDcFAgUz8APANqVGBXMg82VToBMQg%2BUDcAM1U%2BBDVbOVF0B2oGM1ptVW8PfwAjVmZVa18qBz0BbAAoBGBROgM1U3IAZFUkC2hUNlc6BiBVYwMwUDpTMAB3A2tUIlc7DzdVMwEiCHpQYwB3VWIEJFs5UXQHagYzWmRVbw9%2FADVWalVhXwUHMwFiACQEWlEdAx5TDwAxVTgLIVRnV2wGZ1UxA3dQIFM%2FACYDalRmVzsPIVV%2FAWUIeFBxAGpVZQRoWyBRPAcjBjhaa1VvD38AZVYzVT5faQdjATwAfgQ%2BUSADa1NjAGVVdQs%2BVG1XZwYgVWkDalA4UzUAbgMt; id=noid; SITE_ID=135280202; sov=135280202; tags[1384][expand_enable]=-1; tags[1384][alert_enable]=0; tags[1384][audio_enable]=0; tags[1384][pop_enable]=0; content=208321
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Date: Sat, 17 Nov 2012 09:37:23 GMT
Content-Length: 5457
Connection: keep-alive
Last-Modified: Mon, 01 Oct 2012 17:24:06 GMT
Etag: &quot;1b413e-1551-4cb02ac2f5980&quot;
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /templates/video.mini/big_box_NO_noselect/css/style.css HTTP/1.1

Host: static.globalpromotions.noraust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://globalpromotions.noraust.com/?sov=135280202&amp;hid=gwkoikgqkgomiq
Cookie: ci_session=VWgBOgg7UDEAOVVxBHVbOFE2B2AGOFp%2FVSYPOAAkVnBVb181Bz8BUgA1BGFRcQNqUyMAZVVkC2BUOFciBjJVZAMwUDVTPQBlA2JUaFdgD2BVOAFkCGtQNgAzVW8EYltnUWMHYAZmWmtVbA9rADJWYVU%2BX2sHYwE8AGwEMFFxA2pTIwBlVWYLYlQ4VyIGa1UiA1xQY1NgADEDIlQ0V3IPcFUrATsIeVA4ADJVPwQ8WyBRNgdpBjdac1VkD2gAblYtVTdfbgdhASMAbgQ3UWIDc1NrACxVbQtjVDJXOgYgVScDcFBnU3YACgMxVDZXZA9tVX0BIggxUHEAOVUzBDZbOFElBx0GbVonVTwPMQA7VmJVKV9vB38BPQB8BC1RBAM4Uz4AO1U4CyVUcVc7BiJVBwM4UCJTUwA8Az5UNVduD3RVegEgCERQVgAjVTwEKFszUTwHcAZnWjNVeA8IAARWOFUmXygHJwE3AG0EK1FqA39TYgBxVWYLYVQrVyAGRVU3A2BQaVNrAHoDYlRhVzAPM1U4ATIIOlAxACNVTARvW3BRYgc2Bm1aJVV6D24AeVY1VShfawdiAS8AZwR2UWkDYFNjAGVVdQs%2BVGNXcwZ2VQ0DYlBhU3AAPAMmVDhXdQ96VSsBOwhjUDgAMlU5BDNbMVE2B2QGN1ptVWEPbgBsVnBVPF9jB2sBLwApBHZRNgMjUw8AO1U2CyZUY1ciBjlVIQM5UDJTPgB3A3JUaldyDzlVOgE6CChQcQBsVXwEJFs5UXQHagY7WmdVdw9sAGRWNlU0X2IHYQE%2FAGwEN1FxA2pTIwBlVWQLaFQgV3QGbVUkAyFQOVN3AG8DYFRrVyMPIVUyAXMIMFAwADlVKARvW2ZRJQdrBnFaZ1VhD2cAdVZtVWlfMwc1AS8AZwR2UWkDZlNqAH1VOws9VGNXZAZdVSYDcFAgUz8APANqVGBXMg82VToBMQg%2BUDcAM1U%2BBDVbOVF0B2oGM1ptVW8PfwAjVmZVa18qBz0BbAAoBGBROgM1U3IAZFUkC2hUNlc6BiBVYwMwUDpTMAB3A2tUIlc7DzdVMwEiCHpQYwB3VWIEJFs5UXQHagYzWmRVbw9%2FADVWalVhXwUHMwFiACQEWlEdAx5TDwAxVTgLIVRnV2wGZ1UxA3dQIFM%2FACYDalRmVzsPIVV%2FAWUIeFBxAGpVZQRoWyBRPAcjBjhaa1VvD38AZVYzVT5faQdjATwAfgQ%2BUSADa1NjAGVVdQs%2BVG1XZwYgVWkDalA4UzUAbgMt; id=noid; SITE_ID=135280202; sov=135280202; tags[1384][expand_enable]=-1; tags[1384][alert_enable]=0; tags[1384][audio_enable]=0; tags[1384][pop_enable]=0; content=208321
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Sat, 17 Nov 2012 09:37:23 GMT
Content-Length: 7727
Connection: keep-alive
Last-Modified: Mon, 01 Oct 2012 17:11:42 GMT
Etag: &quot;1b413d-1e2f-4cb027fd6cf80&quot;
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /templates/_common/js/date/returnDate.no.js HTTP/1.1

Host: static.globalpromotions.noraust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://globalpromotions.noraust.com/?sov=135280202&amp;hid=gwkoikgqkgomiq
Cookie: ci_session=VWgBOgg7UDEAOVVxBHVbOFE2B2AGOFp%2FVSYPOAAkVnBVb181Bz8BUgA1BGFRcQNqUyMAZVVkC2BUOFciBjJVZAMwUDVTPQBlA2JUaFdgD2BVOAFkCGtQNgAzVW8EYltnUWMHYAZmWmtVbA9rADJWYVU%2BX2sHYwE8AGwEMFFxA2pTIwBlVWYLYlQ4VyIGa1UiA1xQY1NgADEDIlQ0V3IPcFUrATsIeVA4ADJVPwQ8WyBRNgdpBjdac1VkD2gAblYtVTdfbgdhASMAbgQ3UWIDc1NrACxVbQtjVDJXOgYgVScDcFBnU3YACgMxVDZXZA9tVX0BIggxUHEAOVUzBDZbOFElBx0GbVonVTwPMQA7VmJVKV9vB38BPQB8BC1RBAM4Uz4AO1U4CyVUcVc7BiJVBwM4UCJTUwA8Az5UNVduD3RVegEgCERQVgAjVTwEKFszUTwHcAZnWjNVeA8IAARWOFUmXygHJwE3AG0EK1FqA39TYgBxVWYLYVQrVyAGRVU3A2BQaVNrAHoDYlRhVzAPM1U4ATIIOlAxACNVTARvW3BRYgc2Bm1aJVV6D24AeVY1VShfawdiAS8AZwR2UWkDYFNjAGVVdQs%2BVGNXcwZ2VQ0DYlBhU3AAPAMmVDhXdQ96VSsBOwhjUDgAMlU5BDNbMVE2B2QGN1ptVWEPbgBsVnBVPF9jB2sBLwApBHZRNgMjUw8AO1U2CyZUY1ciBjlVIQM5UDJTPgB3A3JUaldyDzlVOgE6CChQcQBsVXwEJFs5UXQHagY7WmdVdw9sAGRWNlU0X2IHYQE%2FAGwEN1FxA2pTIwBlVWQLaFQgV3QGbVUkAyFQOVN3AG8DYFRrVyMPIVUyAXMIMFAwADlVKARvW2ZRJQdrBnFaZ1VhD2cAdVZtVWlfMwc1AS8AZwR2UWkDZlNqAH1VOws9VGNXZAZdVSYDcFAgUz8APANqVGBXMg82VToBMQg%2BUDcAM1U%2BBDVbOVF0B2oGM1ptVW8PfwAjVmZVa18qBz0BbAAoBGBROgM1U3IAZFUkC2hUNlc6BiBVYwMwUDpTMAB3A2tUIlc7DzdVMwEiCHpQYwB3VWIEJFs5UXQHagYzWmRVbw9%2FADVWalVhXwUHMwFiACQEWlEdAx5TDwAxVTgLIVRnV2wGZ1UxA3dQIFM%2FACYDalRmVzsPIVV%2FAWUIeFBxAGpVZQRoWyBRPAcjBjhaa1VvD38AZVYzVT5faQdjATwAfgQ%2BUSADa1NjAGVVdQs%2BVG1XZwYgVWkDalA4UzUAbgMt; id=noid; SITE_ID=135280202; sov=135280202; tags[1384][expand_enable]=-1; tags[1384][alert_enable]=0; tags[1384][audio_enable]=0; tags[1384][pop_enable]=0; content=208321
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Date: Sat, 17 Nov 2012 09:37:23 GMT
Content-Length: 1242
Connection: keep-alive
Last-Modified: Thu, 25 Oct 2012 18:21:39 GMT
Etag: &quot;18b0ff-4da-4cce64630f2c0&quot;
Content-Language: no
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /templates/video.mini/big_box_NO_noselect/images/logo_thankyou.gif HTTP/1.1

Host: static.globalpromotions.noraust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://globalpromotions.noraust.com/?sov=135280202&amp;hid=gwkoikgqkgomiq
Cookie: ci_session=VWgBOgg7UDEAOVVxBHVbOFE2B2AGOFp%2FVSYPOAAkVnBVb181Bz8BUgA1BGFRcQNqUyMAZVVkC2BUOFciBjJVZAMwUDVTPQBlA2JUaFdgD2BVOAFkCGtQNgAzVW8EYltnUWMHYAZmWmtVbA9rADJWYVU%2BX2sHYwE8AGwEMFFxA2pTIwBlVWYLYlQ4VyIGa1UiA1xQY1NgADEDIlQ0V3IPcFUrATsIeVA4ADJVPwQ8WyBRNgdpBjdac1VkD2gAblYtVTdfbgdhASMAbgQ3UWIDc1NrACxVbQtjVDJXOgYgVScDcFBnU3YACgMxVDZXZA9tVX0BIggxUHEAOVUzBDZbOFElBx0GbVonVTwPMQA7VmJVKV9vB38BPQB8BC1RBAM4Uz4AO1U4CyVUcVc7BiJVBwM4UCJTUwA8Az5UNVduD3RVegEgCERQVgAjVTwEKFszUTwHcAZnWjNVeA8IAARWOFUmXygHJwE3AG0EK1FqA39TYgBxVWYLYVQrVyAGRVU3A2BQaVNrAHoDYlRhVzAPM1U4ATIIOlAxACNVTARvW3BRYgc2Bm1aJVV6D24AeVY1VShfawdiAS8AZwR2UWkDYFNjAGVVdQs%2BVGNXcwZ2VQ0DYlBhU3AAPAMmVDhXdQ96VSsBOwhjUDgAMlU5BDNbMVE2B2QGN1ptVWEPbgBsVnBVPF9jB2sBLwApBHZRNgMjUw8AO1U2CyZUY1ciBjlVIQM5UDJTPgB3A3JUaldyDzlVOgE6CChQcQBsVXwEJFs5UXQHagY7WmdVdw9sAGRWNlU0X2IHYQE%2FAGwEN1FxA2pTIwBlVWQLaFQgV3QGbVUkAyFQOVN3AG8DYFRrVyMPIVUyAXMIMFAwADlVKARvW2ZRJQdrBnFaZ1VhD2cAdVZtVWlfMwc1AS8AZwR2UWkDZlNqAH1VOws9VGNXZAZdVSYDcFAgUz8APANqVGBXMg82VToBMQg%2BUDcAM1U%2BBDVbOVF0B2oGM1ptVW8PfwAjVmZVa18qBz0BbAAoBGBROgM1U3IAZFUkC2hUNlc6BiBVYwMwUDpTMAB3A2tUIlc7DzdVMwEiCHpQYwB3VWIEJFs5UXQHagYzWmRVbw9%2FADVWalVhXwUHMwFiACQEWlEdAx5TDwAxVTgLIVRnV2wGZ1UxA3dQIFM%2FACYDalRmVzsPIVV%2FAWUIeFBxAGpVZQRoWyBRPAcjBjhaa1VvD38AZVYzVT5faQdjATwAfgQ%2BUSADa1NjAGVVdQs%2BVG1XZwYgVWkDalA4UzUAbgMt; id=noid; SITE_ID=135280202; sov=135280202; tags[1384][expand_enable]=-1; tags[1384][alert_enable]=0; tags[1384][audio_enable]=0; tags[1384][pop_enable]=0; content=208321
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 17 Nov 2012 09:37:23 GMT
Content-Length: 12469
Connection: keep-alive
Last-Modified: Mon, 01 Oct 2012 17:11:43 GMT
Etag: &quot;97c163-30b5-4cb027fe611c0&quot;
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /templates/video.mini/big_box_NO_noselect/images/prize_iphone.jpg HTTP/1.1

Host: static.globalpromotions.noraust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://globalpromotions.noraust.com/?sov=135280202&amp;hid=gwkoikgqkgomiq
Cookie: ci_session=VWgBOgg7UDEAOVVxBHVbOFE2B2AGOFp%2FVSYPOAAkVnBVb181Bz8BUgA1BGFRcQNqUyMAZVVkC2BUOFciBjJVZAMwUDVTPQBlA2JUaFdgD2BVOAFkCGtQNgAzVW8EYltnUWMHYAZmWmtVbA9rADJWYVU%2BX2sHYwE8AGwEMFFxA2pTIwBlVWYLYlQ4VyIGa1UiA1xQY1NgADEDIlQ0V3IPcFUrATsIeVA4ADJVPwQ8WyBRNgdpBjdac1VkD2gAblYtVTdfbgdhASMAbgQ3UWIDc1NrACxVbQtjVDJXOgYgVScDcFBnU3YACgMxVDZXZA9tVX0BIggxUHEAOVUzBDZbOFElBx0GbVonVTwPMQA7VmJVKV9vB38BPQB8BC1RBAM4Uz4AO1U4CyVUcVc7BiJVBwM4UCJTUwA8Az5UNVduD3RVegEgCERQVgAjVTwEKFszUTwHcAZnWjNVeA8IAARWOFUmXygHJwE3AG0EK1FqA39TYgBxVWYLYVQrVyAGRVU3A2BQaVNrAHoDYlRhVzAPM1U4ATIIOlAxACNVTARvW3BRYgc2Bm1aJVV6D24AeVY1VShfawdiAS8AZwR2UWkDYFNjAGVVdQs%2BVGNXcwZ2VQ0DYlBhU3AAPAMmVDhXdQ96VSsBOwhjUDgAMlU5BDNbMVE2B2QGN1ptVWEPbgBsVnBVPF9jB2sBLwApBHZRNgMjUw8AO1U2CyZUY1ciBjlVIQM5UDJTPgB3A3JUaldyDzlVOgE6CChQcQBsVXwEJFs5UXQHagY7WmdVdw9sAGRWNlU0X2IHYQE%2FAGwEN1FxA2pTIwBlVWQLaFQgV3QGbVUkAyFQOVN3AG8DYFRrVyMPIVUyAXMIMFAwADlVKARvW2ZRJQdrBnFaZ1VhD2cAdVZtVWlfMwc1AS8AZwR2UWkDZlNqAH1VOws9VGNXZAZdVSYDcFAgUz8APANqVGBXMg82VToBMQg%2BUDcAM1U%2BBDVbOVF0B2oGM1ptVW8PfwAjVmZVa18qBz0BbAAoBGBROgM1U3IAZFUkC2hUNlc6BiBVYwMwUDpTMAB3A2tUIlc7DzdVMwEiCHpQYwB3VWIEJFs5UXQHagYzWmRVbw9%2FADVWalVhXwUHMwFiACQEWlEdAx5TDwAxVTgLIVRnV2wGZ1UxA3dQIFM%2FACYDalRmVzsPIVV%2FAWUIeFBxAGpVZQRoWyBRPAcjBjhaa1VvD38AZVYzVT5faQdjATwAfgQ%2BUSADa1NjAGVVdQs%2BVG1XZwYgVWkDalA4UzUAbgMt; id=noid; SITE_ID=135280202; sov=135280202; tags[1384][expand_enable]=-1; tags[1384][alert_enable]=0; tags[1384][audio_enable]=0; tags[1384][pop_enable]=0; content=208321
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 17 Nov 2012 09:37:24 GMT
Content-Length: 10645
Connection: keep-alive
Last-Modified: Mon, 01 Oct 2012 17:11:43 GMT
Etag: &quot;97c167-2995-4cb027fe611c0&quot;
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /templates/video.mini/big_box_NO_noselect/images/prize_ipad.jpg HTTP/1.1

Host: static.globalpromotions.noraust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://globalpromotions.noraust.com/?sov=135280202&amp;hid=gwkoikgqkgomiq
Cookie: ci_session=VWgBOgg7UDEAOVVxBHVbOFE2B2AGOFp%2FVSYPOAAkVnBVb181Bz8BUgA1BGFRcQNqUyMAZVVkC2BUOFciBjJVZAMwUDVTPQBlA2JUaFdgD2BVOAFkCGtQNgAzVW8EYltnUWMHYAZmWmtVbA9rADJWYVU%2BX2sHYwE8AGwEMFFxA2pTIwBlVWYLYlQ4VyIGa1UiA1xQY1NgADEDIlQ0V3IPcFUrATsIeVA4ADJVPwQ8WyBRNgdpBjdac1VkD2gAblYtVTdfbgdhASMAbgQ3UWIDc1NrACxVbQtjVDJXOgYgVScDcFBnU3YACgMxVDZXZA9tVX0BIggxUHEAOVUzBDZbOFElBx0GbVonVTwPMQA7VmJVKV9vB38BPQB8BC1RBAM4Uz4AO1U4CyVUcVc7BiJVBwM4UCJTUwA8Az5UNVduD3RVegEgCERQVgAjVTwEKFszUTwHcAZnWjNVeA8IAARWOFUmXygHJwE3AG0EK1FqA39TYgBxVWYLYVQrVyAGRVU3A2BQaVNrAHoDYlRhVzAPM1U4ATIIOlAxACNVTARvW3BRYgc2Bm1aJVV6D24AeVY1VShfawdiAS8AZwR2UWkDYFNjAGVVdQs%2BVGNXcwZ2VQ0DYlBhU3AAPAMmVDhXdQ96VSsBOwhjUDgAMlU5BDNbMVE2B2QGN1ptVWEPbgBsVnBVPF9jB2sBLwApBHZRNgMjUw8AO1U2CyZUY1ciBjlVIQM5UDJTPgB3A3JUaldyDzlVOgE6CChQcQBsVXwEJFs5UXQHagY7WmdVdw9sAGRWNlU0X2IHYQE%2FAGwEN1FxA2pTIwBlVWQLaFQgV3QGbVUkAyFQOVN3AG8DYFRrVyMPIVUyAXMIMFAwADlVKARvW2ZRJQdrBnFaZ1VhD2cAdVZtVWlfMwc1AS8AZwR2UWkDZlNqAH1VOws9VGNXZAZdVSYDcFAgUz8APANqVGBXMg82VToBMQg%2BUDcAM1U%2BBDVbOVF0B2oGM1ptVW8PfwAjVmZVa18qBz0BbAAoBGBROgM1U3IAZFUkC2hUNlc6BiBVYwMwUDpTMAB3A2tUIlc7DzdVMwEiCHpQYwB3VWIEJFs5UXQHagYzWmRVbw9%2FADVWalVhXwUHMwFiACQEWlEdAx5TDwAxVTgLIVRnV2wGZ1UxA3dQIFM%2FACYDalRmVzsPIVV%2FAWUIeFBxAGpVZQRoWyBRPAcjBjhaa1VvD38AZVYzVT5faQdjATwAfgQ%2BUSADa1NjAGVVdQs%2BVG1XZwYgVWkDalA4UzUAbgMt; id=noid; SITE_ID=135280202; sov=135280202; tags[1384][expand_enable]=-1; tags[1384][alert_enable]=0; tags[1384][audio_enable]=0; tags[1384][pop_enable]=0; content=208321
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 17 Nov 2012 09:37:24 GMT
Content-Length: 9472
Connection: keep-alive
Last-Modified: Mon, 01 Oct 2012 17:11:43 GMT
Etag: &quot;97c166-2500-4cb027fe611c0&quot;
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /templates/video.mini/big_box_NO_noselect/images/prize_macbook.jpg HTTP/1.1

Host: static.globalpromotions.noraust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://globalpromotions.noraust.com/?sov=135280202&amp;hid=gwkoikgqkgomiq
Cookie: ci_session=VWgBOgg7UDEAOVVxBHVbOFE2B2AGOFp%2FVSYPOAAkVnBVb181Bz8BUgA1BGFRcQNqUyMAZVVkC2BUOFciBjJVZAMwUDVTPQBlA2JUaFdgD2BVOAFkCGtQNgAzVW8EYltnUWMHYAZmWmtVbA9rADJWYVU%2BX2sHYwE8AGwEMFFxA2pTIwBlVWYLYlQ4VyIGa1UiA1xQY1NgADEDIlQ0V3IPcFUrATsIeVA4ADJVPwQ8WyBRNgdpBjdac1VkD2gAblYtVTdfbgdhASMAbgQ3UWIDc1NrACxVbQtjVDJXOgYgVScDcFBnU3YACgMxVDZXZA9tVX0BIggxUHEAOVUzBDZbOFElBx0GbVonVTwPMQA7VmJVKV9vB38BPQB8BC1RBAM4Uz4AO1U4CyVUcVc7BiJVBwM4UCJTUwA8Az5UNVduD3RVegEgCERQVgAjVTwEKFszUTwHcAZnWjNVeA8IAARWOFUmXygHJwE3AG0EK1FqA39TYgBxVWYLYVQrVyAGRVU3A2BQaVNrAHoDYlRhVzAPM1U4ATIIOlAxACNVTARvW3BRYgc2Bm1aJVV6D24AeVY1VShfawdiAS8AZwR2UWkDYFNjAGVVdQs%2BVGNXcwZ2VQ0DYlBhU3AAPAMmVDhXdQ96VSsBOwhjUDgAMlU5BDNbMVE2B2QGN1ptVWEPbgBsVnBVPF9jB2sBLwApBHZRNgMjUw8AO1U2CyZUY1ciBjlVIQM5UDJTPgB3A3JUaldyDzlVOgE6CChQcQBsVXwEJFs5UXQHagY7WmdVdw9sAGRWNlU0X2IHYQE%2FAGwEN1FxA2pTIwBlVWQLaFQgV3QGbVUkAyFQOVN3AG8DYFRrVyMPIVUyAXMIMFAwADlVKARvW2ZRJQdrBnFaZ1VhD2cAdVZtVWlfMwc1AS8AZwR2UWkDZlNqAH1VOws9VGNXZAZdVSYDcFAgUz8APANqVGBXMg82VToBMQg%2BUDcAM1U%2BBDVbOVF0B2oGM1ptVW8PfwAjVmZVa18qBz0BbAAoBGBROgM1U3IAZFUkC2hUNlc6BiBVYwMwUDpTMAB3A2tUIlc7DzdVMwEiCHpQYwB3VWIEJFs5UXQHagYzWmRVbw9%2FADVWalVhXwUHMwFiACQEWlEdAx5TDwAxVTgLIVRnV2wGZ1UxA3dQIFM%2FACYDalRmVzsPIVV%2FAWUIeFBxAGpVZQRoWyBRPAcjBjhaa1VvD38AZVYzVT5faQdjATwAfgQ%2BUSADa1NjAGVVdQs%2BVG1XZwYgVWkDalA4UzUAbgMt; id=noid; SITE_ID=135280202; sov=135280202; tags[1384][expand_enable]=-1; tags[1384][alert_enable]=0; tags[1384][audio_enable]=0; tags[1384][pop_enable]=0; content=208321
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 17 Nov 2012 09:37:24 GMT
Content-Length: 5500
Connection: keep-alive
Last-Modified: Mon, 01 Oct 2012 17:11:43 GMT
Etag: &quot;97c168-157c-4cb027fe611c0&quot;
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /templates/video.mini/big_box_NO_noselect/images/ipad2.jpg HTTP/1.1

Host: static.globalpromotions.noraust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://globalpromotions.noraust.com/?sov=135280202&amp;hid=gwkoikgqkgomiq
Cookie: ci_session=VWgBOgg7UDEAOVVxBHVbOFE2B2AGOFp%2FVSYPOAAkVnBVb181Bz8BUgA1BGFRcQNqUyMAZVVkC2BUOFciBjJVZAMwUDVTPQBlA2JUaFdgD2BVOAFkCGtQNgAzVW8EYltnUWMHYAZmWmtVbA9rADJWYVU%2BX2sHYwE8AGwEMFFxA2pTIwBlVWYLYlQ4VyIGa1UiA1xQY1NgADEDIlQ0V3IPcFUrATsIeVA4ADJVPwQ8WyBRNgdpBjdac1VkD2gAblYtVTdfbgdhASMAbgQ3UWIDc1NrACxVbQtjVDJXOgYgVScDcFBnU3YACgMxVDZXZA9tVX0BIggxUHEAOVUzBDZbOFElBx0GbVonVTwPMQA7VmJVKV9vB38BPQB8BC1RBAM4Uz4AO1U4CyVUcVc7BiJVBwM4UCJTUwA8Az5UNVduD3RVegEgCERQVgAjVTwEKFszUTwHcAZnWjNVeA8IAARWOFUmXygHJwE3AG0EK1FqA39TYgBxVWYLYVQrVyAGRVU3A2BQaVNrAHoDYlRhVzAPM1U4ATIIOlAxACNVTARvW3BRYgc2Bm1aJVV6D24AeVY1VShfawdiAS8AZwR2UWkDYFNjAGVVdQs%2BVGNXcwZ2VQ0DYlBhU3AAPAMmVDhXdQ96VSsBOwhjUDgAMlU5BDNbMVE2B2QGN1ptVWEPbgBsVnBVPF9jB2sBLwApBHZRNgMjUw8AO1U2CyZUY1ciBjlVIQM5UDJTPgB3A3JUaldyDzlVOgE6CChQcQBsVXwEJFs5UXQHagY7WmdVdw9sAGRWNlU0X2IHYQE%2FAGwEN1FxA2pTIwBlVWQLaFQgV3QGbVUkAyFQOVN3AG8DYFRrVyMPIVUyAXMIMFAwADlVKARvW2ZRJQdrBnFaZ1VhD2cAdVZtVWlfMwc1AS8AZwR2UWkDZlNqAH1VOws9VGNXZAZdVSYDcFAgUz8APANqVGBXMg82VToBMQg%2BUDcAM1U%2BBDVbOVF0B2oGM1ptVW8PfwAjVmZVa18qBz0BbAAoBGBROgM1U3IAZFUkC2hUNlc6BiBVYwMwUDpTMAB3A2tUIlc7DzdVMwEiCHpQYwB3VWIEJFs5UXQHagYzWmRVbw9%2FADVWalVhXwUHMwFiACQEWlEdAx5TDwAxVTgLIVRnV2wGZ1UxA3dQIFM%2FACYDalRmVzsPIVV%2FAWUIeFBxAGpVZQRoWyBRPAcjBjhaa1VvD38AZVYzVT5faQdjATwAfgQ%2BUSADa1NjAGVVdQs%2BVG1XZwYgVWkDalA4UzUAbgMt; id=noid; SITE_ID=135280202; sov=135280202; tags[1384][expand_enable]=-1; tags[1384][alert_enable]=0; tags[1384][audio_enable]=0; tags[1384][pop_enable]=0; content=208321
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 17 Nov 2012 09:37:24 GMT
Content-Length: 32498
Connection: keep-alive
Last-Modified: Mon, 01 Oct 2012 17:11:42 GMT
Etag: &quot;97c15d-7ef2-4cb027fd6cf80&quot;
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /templates/video.mini/big_box_NO_noselect/images/iphone2.jpg HTTP/1.1

Host: static.globalpromotions.noraust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://globalpromotions.noraust.com/?sov=135280202&amp;hid=gwkoikgqkgomiq
Cookie: ci_session=VWgBOgg7UDEAOVVxBHVbOFE2B2AGOFp%2FVSYPOAAkVnBVb181Bz8BUgA1BGFRcQNqUyMAZVVkC2BUOFciBjJVZAMwUDVTPQBlA2JUaFdgD2BVOAFkCGtQNgAzVW8EYltnUWMHYAZmWmtVbA9rADJWYVU%2BX2sHYwE8AGwEMFFxA2pTIwBlVWYLYlQ4VyIGa1UiA1xQY1NgADEDIlQ0V3IPcFUrATsIeVA4ADJVPwQ8WyBRNgdpBjdac1VkD2gAblYtVTdfbgdhASMAbgQ3UWIDc1NrACxVbQtjVDJXOgYgVScDcFBnU3YACgMxVDZXZA9tVX0BIggxUHEAOVUzBDZbOFElBx0GbVonVTwPMQA7VmJVKV9vB38BPQB8BC1RBAM4Uz4AO1U4CyVUcVc7BiJVBwM4UCJTUwA8Az5UNVduD3RVegEgCERQVgAjVTwEKFszUTwHcAZnWjNVeA8IAARWOFUmXygHJwE3AG0EK1FqA39TYgBxVWYLYVQrVyAGRVU3A2BQaVNrAHoDYlRhVzAPM1U4ATIIOlAxACNVTARvW3BRYgc2Bm1aJVV6D24AeVY1VShfawdiAS8AZwR2UWkDYFNjAGVVdQs%2BVGNXcwZ2VQ0DYlBhU3AAPAMmVDhXdQ96VSsBOwhjUDgAMlU5BDNbMVE2B2QGN1ptVWEPbgBsVnBVPF9jB2sBLwApBHZRNgMjUw8AO1U2CyZUY1ciBjlVIQM5UDJTPgB3A3JUaldyDzlVOgE6CChQcQBsVXwEJFs5UXQHagY7WmdVdw9sAGRWNlU0X2IHYQE%2FAGwEN1FxA2pTIwBlVWQLaFQgV3QGbVUkAyFQOVN3AG8DYFRrVyMPIVUyAXMIMFAwADlVKARvW2ZRJQdrBnFaZ1VhD2cAdVZtVWlfMwc1AS8AZwR2UWkDZlNqAH1VOws9VGNXZAZdVSYDcFAgUz8APANqVGBXMg82VToBMQg%2BUDcAM1U%2BBDVbOVF0B2oGM1ptVW8PfwAjVmZVa18qBz0BbAAoBGBROgM1U3IAZFUkC2hUNlc6BiBVYwMwUDpTMAB3A2tUIlc7DzdVMwEiCHpQYwB3VWIEJFs5UXQHagYzWmRVbw9%2FADVWalVhXwUHMwFiACQEWlEdAx5TDwAxVTgLIVRnV2wGZ1UxA3dQIFM%2FACYDalRmVzsPIVV%2FAWUIeFBxAGpVZQRoWyBRPAcjBjhaa1VvD38AZVYzVT5faQdjATwAfgQ%2BUSADa1NjAGVVdQs%2BVG1XZwYgVWkDalA4UzUAbgMt; id=noid; SITE_ID=135280202; sov=135280202; tags[1384][expand_enable]=-1; tags[1384][alert_enable]=0; tags[1384][audio_enable]=0; tags[1384][pop_enable]=0; content=208321
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 17 Nov 2012 09:37:24 GMT
Content-Length: 15256
Connection: keep-alive
Last-Modified: Mon, 01 Oct 2012 17:11:43 GMT
Etag: &quot;97c15f-3b98-4cb027fe611c0&quot;
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /templates/video.mini/big_box_NO_noselect/images/bg_box.gif HTTP/1.1

Host: static.globalpromotions.noraust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.globalpromotions.noraust.com/templates/video.mini/big_box_NO_noselect/css/style.css
Cookie: ci_session=VWgBOgg7UDEAOVVxBHVbOFE2B2AGOFp%2FVSYPOAAkVnBVb181Bz8BUgA1BGFRcQNqUyMAZVVkC2BUOFciBjJVZAMwUDVTPQBlA2JUaFdgD2BVOAFkCGtQNgAzVW8EYltnUWMHYAZmWmtVbA9rADJWYVU%2BX2sHYwE8AGwEMFFxA2pTIwBlVWYLYlQ4VyIGa1UiA1xQY1NgADEDIlQ0V3IPcFUrATsIeVA4ADJVPwQ8WyBRNgdpBjdac1VkD2gAblYtVTdfbgdhASMAbgQ3UWIDc1NrACxVbQtjVDJXOgYgVScDcFBnU3YACgMxVDZXZA9tVX0BIggxUHEAOVUzBDZbOFElBx0GbVonVTwPMQA7VmJVKV9vB38BPQB8BC1RBAM4Uz4AO1U4CyVUcVc7BiJVBwM4UCJTUwA8Az5UNVduD3RVegEgCERQVgAjVTwEKFszUTwHcAZnWjNVeA8IAARWOFUmXygHJwE3AG0EK1FqA39TYgBxVWYLYVQrVyAGRVU3A2BQaVNrAHoDYlRhVzAPM1U4ATIIOlAxACNVTARvW3BRYgc2Bm1aJVV6D24AeVY1VShfawdiAS8AZwR2UWkDYFNjAGVVdQs%2BVGNXcwZ2VQ0DYlBhU3AAPAMmVDhXdQ96VSsBOwhjUDgAMlU5BDNbMVE2B2QGN1ptVWEPbgBsVnBVPF9jB2sBLwApBHZRNgMjUw8AO1U2CyZUY1ciBjlVIQM5UDJTPgB3A3JUaldyDzlVOgE6CChQcQBsVXwEJFs5UXQHagY7WmdVdw9sAGRWNlU0X2IHYQE%2FAGwEN1FxA2pTIwBlVWQLaFQgV3QGbVUkAyFQOVN3AG8DYFRrVyMPIVUyAXMIMFAwADlVKARvW2ZRJQdrBnFaZ1VhD2cAdVZtVWlfMwc1AS8AZwR2UWkDZlNqAH1VOws9VGNXZAZdVSYDcFAgUz8APANqVGBXMg82VToBMQg%2BUDcAM1U%2BBDVbOVF0B2oGM1ptVW8PfwAjVmZVa18qBz0BbAAoBGBROgM1U3IAZFUkC2hUNlc6BiBVYwMwUDpTMAB3A2tUIlc7DzdVMwEiCHpQYwB3VWIEJFs5UXQHagYzWmRVbw9%2FADVWalVhXwUHMwFiACQEWlEdAx5TDwAxVTgLIVRnV2wGZ1UxA3dQIFM%2FACYDalRmVzsPIVV%2FAWUIeFBxAGpVZQRoWyBRPAcjBjhaa1VvD38AZVYzVT5faQdjATwAfgQ%2BUSADa1NjAGVVdQs%2BVG1XZwYgVWkDalA4UzUAbgMt; id=noid; SITE_ID=135280202; sov=135280202; tags[1384][expand_enable]=-1; tags[1384][alert_enable]=0; tags[1384][audio_enable]=0; tags[1384][pop_enable]=0; content=208321
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 17 Nov 2012 09:37:24 GMT
Content-Length: 9813
Connection: keep-alive
Last-Modified: Mon, 01 Oct 2012 17:11:42 GMT
Etag: &quot;97c159-2655-4cb027fd6cf80&quot;
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /templates/video.mini/big_box_NO_noselect/images/btn_left_blue.gif HTTP/1.1

Host: static.globalpromotions.noraust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.globalpromotions.noraust.com/templates/video.mini/big_box_NO_noselect/css/style.css
Cookie: ci_session=VWgBOgg7UDEAOVVxBHVbOFE2B2AGOFp%2FVSYPOAAkVnBVb181Bz8BUgA1BGFRcQNqUyMAZVVkC2BUOFciBjJVZAMwUDVTPQBlA2JUaFdgD2BVOAFkCGtQNgAzVW8EYltnUWMHYAZmWmtVbA9rADJWYVU%2BX2sHYwE8AGwEMFFxA2pTIwBlVWYLYlQ4VyIGa1UiA1xQY1NgADEDIlQ0V3IPcFUrATsIeVA4ADJVPwQ8WyBRNgdpBjdac1VkD2gAblYtVTdfbgdhASMAbgQ3UWIDc1NrACxVbQtjVDJXOgYgVScDcFBnU3YACgMxVDZXZA9tVX0BIggxUHEAOVUzBDZbOFElBx0GbVonVTwPMQA7VmJVKV9vB38BPQB8BC1RBAM4Uz4AO1U4CyVUcVc7BiJVBwM4UCJTUwA8Az5UNVduD3RVegEgCERQVgAjVTwEKFszUTwHcAZnWjNVeA8IAARWOFUmXygHJwE3AG0EK1FqA39TYgBxVWYLYVQrVyAGRVU3A2BQaVNrAHoDYlRhVzAPM1U4ATIIOlAxACNVTARvW3BRYgc2Bm1aJVV6D24AeVY1VShfawdiAS8AZwR2UWkDYFNjAGVVdQs%2BVGNXcwZ2VQ0DYlBhU3AAPAMmVDhXdQ96VSsBOwhjUDgAMlU5BDNbMVE2B2QGN1ptVWEPbgBsVnBVPF9jB2sBLwApBHZRNgMjUw8AO1U2CyZUY1ciBjlVIQM5UDJTPgB3A3JUaldyDzlVOgE6CChQcQBsVXwEJFs5UXQHagY7WmdVdw9sAGRWNlU0X2IHYQE%2FAGwEN1FxA2pTIwBlVWQLaFQgV3QGbVUkAyFQOVN3AG8DYFRrVyMPIVUyAXMIMFAwADlVKARvW2ZRJQdrBnFaZ1VhD2cAdVZtVWlfMwc1AS8AZwR2UWkDZlNqAH1VOws9VGNXZAZdVSYDcFAgUz8APANqVGBXMg82VToBMQg%2BUDcAM1U%2BBDVbOVF0B2oGM1ptVW8PfwAjVmZVa18qBz0BbAAoBGBROgM1U3IAZFUkC2hUNlc6BiBVYwMwUDpTMAB3A2tUIlc7DzdVMwEiCHpQYwB3VWIEJFs5UXQHagYzWmRVbw9%2FADVWalVhXwUHMwFiACQEWlEdAx5TDwAxVTgLIVRnV2wGZ1UxA3dQIFM%2FACYDalRmVzsPIVV%2FAWUIeFBxAGpVZQRoWyBRPAcjBjhaa1VvD38AZVYzVT5faQdjATwAfgQ%2BUSADa1NjAGVVdQs%2BVG1XZwYgVWkDalA4UzUAbgMt; id=noid; SITE_ID=135280202; sov=135280202; tags[1384][expand_enable]=-1; tags[1384][alert_enable]=0; tags[1384][audio_enable]=0; tags[1384][pop_enable]=0; content=208321
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 17 Nov 2012 09:37:24 GMT
Content-Length: 1406
Connection: keep-alive
Last-Modified: Mon, 01 Oct 2012 17:11:42 GMT
Etag: &quot;97c15c-57e-4cb027fd6cf80&quot;
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /templates/video.mini/big_box_NO_noselect/images/macbook2.jpg HTTP/1.1

Host: static.globalpromotions.noraust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://globalpromotions.noraust.com/?sov=135280202&amp;hid=gwkoikgqkgomiq
Cookie: ci_session=VWgBOgg7UDEAOVVxBHVbOFE2B2AGOFp%2FVSYPOAAkVnBVb181Bz8BUgA1BGFRcQNqUyMAZVVkC2BUOFciBjJVZAMwUDVTPQBlA2JUaFdgD2BVOAFkCGtQNgAzVW8EYltnUWMHYAZmWmtVbA9rADJWYVU%2BX2sHYwE8AGwEMFFxA2pTIwBlVWYLYlQ4VyIGa1UiA1xQY1NgADEDIlQ0V3IPcFUrATsIeVA4ADJVPwQ8WyBRNgdpBjdac1VkD2gAblYtVTdfbgdhASMAbgQ3UWIDc1NrACxVbQtjVDJXOgYgVScDcFBnU3YACgMxVDZXZA9tVX0BIggxUHEAOVUzBDZbOFElBx0GbVonVTwPMQA7VmJVKV9vB38BPQB8BC1RBAM4Uz4AO1U4CyVUcVc7BiJVBwM4UCJTUwA8Az5UNVduD3RVegEgCERQVgAjVTwEKFszUTwHcAZnWjNVeA8IAARWOFUmXygHJwE3AG0EK1FqA39TYgBxVWYLYVQrVyAGRVU3A2BQaVNrAHoDYlRhVzAPM1U4ATIIOlAxACNVTARvW3BRYgc2Bm1aJVV6D24AeVY1VShfawdiAS8AZwR2UWkDYFNjAGVVdQs%2BVGNXcwZ2VQ0DYlBhU3AAPAMmVDhXdQ96VSsBOwhjUDgAMlU5BDNbMVE2B2QGN1ptVWEPbgBsVnBVPF9jB2sBLwApBHZRNgMjUw8AO1U2CyZUY1ciBjlVIQM5UDJTPgB3A3JUaldyDzlVOgE6CChQcQBsVXwEJFs5UXQHagY7WmdVdw9sAGRWNlU0X2IHYQE%2FAGwEN1FxA2pTIwBlVWQLaFQgV3QGbVUkAyFQOVN3AG8DYFRrVyMPIVUyAXMIMFAwADlVKARvW2ZRJQdrBnFaZ1VhD2cAdVZtVWlfMwc1AS8AZwR2UWkDZlNqAH1VOws9VGNXZAZdVSYDcFAgUz8APANqVGBXMg82VToBMQg%2BUDcAM1U%2BBDVbOVF0B2oGM1ptVW8PfwAjVmZVa18qBz0BbAAoBGBROgM1U3IAZFUkC2hUNlc6BiBVYwMwUDpTMAB3A2tUIlc7DzdVMwEiCHpQYwB3VWIEJFs5UXQHagYzWmRVbw9%2FADVWalVhXwUHMwFiACQEWlEdAx5TDwAxVTgLIVRnV2wGZ1UxA3dQIFM%2FACYDalRmVzsPIVV%2FAWUIeFBxAGpVZQRoWyBRPAcjBjhaa1VvD38AZVYzVT5faQdjATwAfgQ%2BUSADa1NjAGVVdQs%2BVG1XZwYgVWkDalA4UzUAbgMt; id=noid; SITE_ID=135280202; sov=135280202; tags[1384][expand_enable]=-1; tags[1384][alert_enable]=0; tags[1384][audio_enable]=0; tags[1384][pop_enable]=0; content=208321
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Sat, 17 Nov 2012 09:37:24 GMT
Content-Length: 16110
Connection: keep-alive
Last-Modified: Mon, 01 Oct 2012 17:11:43 GMT
Etag: &quot;97c164-3eee-4cb027fe611c0&quot;
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /templates/video.mini/big_box_NO_noselect/images/btn_bg_blue.gif HTTP/1.1

Host: static.globalpromotions.noraust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.globalpromotions.noraust.com/templates/video.mini/big_box_NO_noselect/css/style.css
Cookie: ci_session=VWgBOgg7UDEAOVVxBHVbOFE2B2AGOFp%2FVSYPOAAkVnBVb181Bz8BUgA1BGFRcQNqUyMAZVVkC2BUOFciBjJVZAMwUDVTPQBlA2JUaFdgD2BVOAFkCGtQNgAzVW8EYltnUWMHYAZmWmtVbA9rADJWYVU%2BX2sHYwE8AGwEMFFxA2pTIwBlVWYLYlQ4VyIGa1UiA1xQY1NgADEDIlQ0V3IPcFUrATsIeVA4ADJVPwQ8WyBRNgdpBjdac1VkD2gAblYtVTdfbgdhASMAbgQ3UWIDc1NrACxVbQtjVDJXOgYgVScDcFBnU3YACgMxVDZXZA9tVX0BIggxUHEAOVUzBDZbOFElBx0GbVonVTwPMQA7VmJVKV9vB38BPQB8BC1RBAM4Uz4AO1U4CyVUcVc7BiJVBwM4UCJTUwA8Az5UNVduD3RVegEgCERQVgAjVTwEKFszUTwHcAZnWjNVeA8IAARWOFUmXygHJwE3AG0EK1FqA39TYgBxVWYLYVQrVyAGRVU3A2BQaVNrAHoDYlRhVzAPM1U4ATIIOlAxACNVTARvW3BRYgc2Bm1aJVV6D24AeVY1VShfawdiAS8AZwR2UWkDYFNjAGVVdQs%2BVGNXcwZ2VQ0DYlBhU3AAPAMmVDhXdQ96VSsBOwhjUDgAMlU5BDNbMVE2B2QGN1ptVWEPbgBsVnBVPF9jB2sBLwApBHZRNgMjUw8AO1U2CyZUY1ciBjlVIQM5UDJTPgB3A3JUaldyDzlVOgE6CChQcQBsVXwEJFs5UXQHagY7WmdVdw9sAGRWNlU0X2IHYQE%2FAGwEN1FxA2pTIwBlVWQLaFQgV3QGbVUkAyFQOVN3AG8DYFRrVyMPIVUyAXMIMFAwADlVKARvW2ZRJQdrBnFaZ1VhD2cAdVZtVWlfMwc1AS8AZwR2UWkDZlNqAH1VOws9VGNXZAZdVSYDcFAgUz8APANqVGBXMg82VToBMQg%2BUDcAM1U%2BBDVbOVF0B2oGM1ptVW8PfwAjVmZVa18qBz0BbAAoBGBROgM1U3IAZFUkC2hUNlc6BiBVYwMwUDpTMAB3A2tUIlc7DzdVMwEiCHpQYwB3VWIEJFs5UXQHagYzWmRVbw9%2FADVWalVhXwUHMwFiACQEWlEdAx5TDwAxVTgLIVRnV2wGZ1UxA3dQIFM%2FACYDalRmVzsPIVV%2FAWUIeFBxAGpVZQRoWyBRPAcjBjhaa1VvD38AZVYzVT5faQdjATwAfgQ%2BUSADa1NjAGVVdQs%2BVG1XZwYgVWkDalA4UzUAbgMt; id=noid; SITE_ID=135280202; sov=135280202; tags[1384][expand_enable]=-1; tags[1384][alert_enable]=0; tags[1384][audio_enable]=0; tags[1384][pop_enable]=0; content=208321
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 17 Nov 2012 09:37:24 GMT
Content-Length: 3991
Connection: keep-alive
Last-Modified: Mon, 01 Oct 2012 17:11:42 GMT
Etag: &quot;97c15b-f97-4cb027fd6cf80&quot;
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /templates/video.mini/big_box_NO_noselect/images/loader_bar_red.gif HTTP/1.1

Host: static.globalpromotions.noraust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://static.globalpromotions.noraust.com/templates/video.mini/big_box_NO_noselect/css/style.css
Cookie: ci_session=VWgBOgg7UDEAOVVxBHVbOFE2B2AGOFp%2FVSYPOAAkVnBVb181Bz8BUgA1BGFRcQNqUyMAZVVkC2BUOFciBjJVZAMwUDVTPQBlA2JUaFdgD2BVOAFkCGtQNgAzVW8EYltnUWMHYAZmWmtVbA9rADJWYVU%2BX2sHYwE8AGwEMFFxA2pTIwBlVWYLYlQ4VyIGa1UiA1xQY1NgADEDIlQ0V3IPcFUrATsIeVA4ADJVPwQ8WyBRNgdpBjdac1VkD2gAblYtVTdfbgdhASMAbgQ3UWIDc1NrACxVbQtjVDJXOgYgVScDcFBnU3YACgMxVDZXZA9tVX0BIggxUHEAOVUzBDZbOFElBx0GbVonVTwPMQA7VmJVKV9vB38BPQB8BC1RBAM4Uz4AO1U4CyVUcVc7BiJVBwM4UCJTUwA8Az5UNVduD3RVegEgCERQVgAjVTwEKFszUTwHcAZnWjNVeA8IAARWOFUmXygHJwE3AG0EK1FqA39TYgBxVWYLYVQrVyAGRVU3A2BQaVNrAHoDYlRhVzAPM1U4ATIIOlAxACNVTARvW3BRYgc2Bm1aJVV6D24AeVY1VShfawdiAS8AZwR2UWkDYFNjAGVVdQs%2BVGNXcwZ2VQ0DYlBhU3AAPAMmVDhXdQ96VSsBOwhjUDgAMlU5BDNbMVE2B2QGN1ptVWEPbgBsVnBVPF9jB2sBLwApBHZRNgMjUw8AO1U2CyZUY1ciBjlVIQM5UDJTPgB3A3JUaldyDzlVOgE6CChQcQBsVXwEJFs5UXQHagY7WmdVdw9sAGRWNlU0X2IHYQE%2FAGwEN1FxA2pTIwBlVWQLaFQgV3QGbVUkAyFQOVN3AG8DYFRrVyMPIVUyAXMIMFAwADlVKARvW2ZRJQdrBnFaZ1VhD2cAdVZtVWlfMwc1AS8AZwR2UWkDZlNqAH1VOws9VGNXZAZdVSYDcFAgUz8APANqVGBXMg82VToBMQg%2BUDcAM1U%2BBDVbOVF0B2oGM1ptVW8PfwAjVmZVa18qBz0BbAAoBGBROgM1U3IAZFUkC2hUNlc6BiBVYwMwUDpTMAB3A2tUIlc7DzdVMwEiCHpQYwB3VWIEJFs5UXQHagYzWmRVbw9%2FADVWalVhXwUHMwFiACQEWlEdAx5TDwAxVTgLIVRnV2wGZ1UxA3dQIFM%2FACYDalRmVzsPIVV%2FAWUIeFBxAGpVZQRoWyBRPAcjBjhaa1VvD38AZVYzVT5faQdjATwAfgQ%2BUSADa1NjAGVVdQs%2BVG1XZwYgVWkDalA4UzUAbgMt; id=noid; SITE_ID=135280202; sov=135280202; tags[1384][expand_enable]=-1; tags[1384][alert_enable]=0; tags[1384][audio_enable]=0; tags[1384][pop_enable]=0; content=208321
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sat, 17 Nov 2012 09:37:24 GMT
Content-Length: 10819
Connection: keep-alive
Last-Modified: Mon, 01 Oct 2012 17:11:43 GMT
Etag: &quot;97c162-2a43-4cb027fe611c0&quot;
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /favicon.ico HTTP/1.1

Host: globalpromotions.noraust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: ci_session=VWgBOgg7UDEAOVVxBHVbOFE2B2AGOFp%2FVSYPOAAkVnBVb181Bz8BUgA1BGFRcQNqUyMAZVVkC2BUOFciBjJVZAMwUDVTPQBlA2JUaFdgD2BVOAFkCGtQNgAzVW8EYltnUWMHYAZmWmtVbA9rADJWYVU%2BX2sHYwE8AGwEMFFxA2pTIwBlVWYLYlQ4VyIGa1UiA1xQY1NgADEDIlQ0V3IPcFUrATsIeVA4ADJVPwQ8WyBRNgdpBjdac1VkD2gAblYtVTdfbgdhASMAbgQ3UWIDc1NrACxVbQtjVDJXOgYgVScDcFBnU3YACgMxVDZXZA9tVX0BIggxUHEAOVUzBDZbOFElBx0GbVonVTwPMQA7VmJVKV9vB38BPQB8BC1RBAM4Uz4AO1U4CyVUcVc7BiJVBwM4UCJTUwA8Az5UNVduD3RVegEgCERQVgAjVTwEKFszUTwHcAZnWjNVeA8IAARWOFUmXygHJwE3AG0EK1FqA39TYgBxVWYLYVQrVyAGRVU3A2BQaVNrAHoDYlRhVzAPM1U4ATIIOlAxACNVTARvW3BRYgc2Bm1aJVV6D24AeVY1VShfawdiAS8AZwR2UWkDYFNjAGVVdQs%2BVGNXcwZ2VQ0DYlBhU3AAPAMmVDhXdQ96VSsBOwhjUDgAMlU5BDNbMVE2B2QGN1ptVWEPbgBsVnBVPF9jB2sBLwApBHZRNgMjUw8AO1U2CyZUY1ciBjlVIQM5UDJTPgB3A3JUaldyDzlVOgE6CChQcQBsVXwEJFs5UXQHagY7WmdVdw9sAGRWNlU0X2IHYQE%2FAGwEN1FxA2pTIwBlVWQLaFQgV3QGbVUkAyFQOVN3AG8DYFRrVyMPIVUyAXMIMFAwADlVKARvW2ZRJQdrBnFaZ1VhD2cAdVZtVWlfMwc1AS8AZwR2UWkDZlNqAH1VOws9VGNXZAZdVSYDcFAgUz8APANqVGBXMg82VToBMQg%2BUDcAM1U%2BBDVbOVF0B2oGM1ptVW8PfwAjVmZVa18qBz0BbAAoBGBROgM1U3IAZFUkC2hUNlc6BiBVYwMwUDpTMAB3A2tUIlc7DzdVMwEiCHpQYwB3VWIEJFs5UXQHagYzWmRVbw9%2FADVWalVhXwUHMwFiACQEWlEdAx5TDwAxVTgLIVRnV2wGZ1UxA3dQIFM%2FACYDalRmVzsPIVV%2FAWUIeFBxAGpVZQRoWyBRPAcjBjhaa1VvD38AZVYzVT5faQdjATwAfgQ%2BUSADa1NjAGVVdQs%2BVG1XZwYgVWkDalA4UzUAbgMt; id=noid; SITE_ID=135280202; sov=135280202; tags[1384][expand_enable]=-1; tags[1384][alert_enable]=0; tags[1384][audio_enable]=0; tags[1384][pop_enable]=0; content=208321
 
HTTP/1.1 200 OK

Content-Type: image/vnd.microsoft.icon

Date: Sat, 17 Nov 2012 09:37:24 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 20 Jun 2012 15:16:46 GMT
Etag: &quot;80011f-57e-4c2e8e3269380&quot;
Accept-Ranges: bytes
Content-Length: 1406
Connection: close
GET /favicon.ico HTTP/1.1

Host: fishinghair.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive