Overview

URLhttp://www.easyregtor.com
IP38.101.213.241
ASNAS174 Cogent/PSI
Location United States
Report completed2012-11-02 03:41:09 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-02 03:40:38 38.101.213.241 urlQuery Client3ET RBN Known Russian Business Network IP (205)
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 38.101.213.241

Date Alerts / IDS URL IP
2013-02-04 10:38:500 / 2http://blackrockconsultants.org/38.101.213.241
2013-02-04 10:38:480 / 2http://blackrockconsultants.us/38.101.213.241
2013-01-19 10:20:060 / 2http://klikadvertising.com38.101.213.241
2013-01-18 23:06:410 / 3http://securityexamination.com/install/ws.zip38.101.213.241
2013-01-16 21:21:400 / 1http://blackrockconsultants.us38.101.213.241
2013-01-16 21:21:050 / 2http://blackrockconsultants.org38.101.213.241

Last 6 reports on ASN: AS174 Cogent/PSI

Date Alerts / IDS URL IP
2013-02-15 00:34:090 / 0http://154.54.28.130154.54.28.130
2013-02-15 00:30:120 / 0http://38.126.51.3438.126.51.34
2013-02-14 23:21:230 / 0http://38.119.86.112/subdivision.php38.119.86.112
2013-02-14 23:03:210 / 0http://www.abujosa.net149.13.20.193
2013-02-14 23:01:420 / 0http://www.brisasport.es/read.html149.13.20.193
2013-02-14 19:11:120 / 2http://techdatabase.biz/38.101.213.239

Last 4 reports on domain: www.easyregtor.com

Date Alerts / IDS URL IP
2012-11-12 21:28:500 / 1http://www.easyregtor.com38.101.213.241
2012-11-02 17:04:110 / 1http://www.easyregtor.com38.101.213.241
2012-11-01 22:55:290 / 1http://www.easyregtor.com38.101.213.241
2012-10-31 22:54:410 / 1http://www.easyregtor.com38.101.213.241



JavaScript

Executed Scripts (22)


Executed Evals (3)

#1 JavaScript::Eval (size: 1024, repeated: 1)

  var widgetJSON = {
      "brandstatic": "static.cpalead.com",
      "brandwwwdomain": "www.cpalead.com",
      "brandcode": "cpalead",
      "datadomain": "data.cpalead.com",
      "trackdomain": "tracking-technology.com",
      "pub": "140412",
      "subid": "195.159.140.222",
      "country": "NO",
      "gateid": "187115",
      "gateid64": "MTg3MTE1",
      "gatetype": "0",
      "gatehash": "d4efe9fce89a048ca545672da54c83a1",
      "iconmaxwidth": "59.25",
      "iconitemwidth": "59.25",
      "protectfile": "0",
      "promptemail": "0",
      "accesstime": "1",
      "fontcolor": "#f5f0f5",
      "backgroundurl": "http://www.cpalead.com/images/gatewaytemplate/cpaleadskin4.gif",
      "download": "MTQwNDEyfDE4NzExNXww",
      "lefttime": "for <strong><u>1</u></strong> hours only",
      "allowance": "1",
      "allowanceunits": "hours",
      "alert": "1",
      "alerttext": "Premium Content Unlocked!",
      "leadtext": "",
      "cacheurl": "aHR0cDovL2ItYm9va3MuaW5mby8%3D",
      "trafficretainer": "1",
      "closebutton": "0",
      "redirectenabled": "0",
      "redirecturl": ""
  };

#2 JavaScript::Eval (size: 7900, repeated: 1)

var has_clicked = 0;
var tried_to_exit = 0;
var ajax_returned = 0;
var checkcounter = 1;

function closeWarning(type) {
    jQuery("#waiting_message").hide();
    jQuery("#" + type + "_page").show()
}
function closeWarningLeadCheck(campid, slot, type) {
    jQuery("#try_different").html('<a onclick="closeWarning(\'' + type + '\'); return false;">try a different survey</a>.');
    leadChecker()
}
function leadChecker() {
    if (checkcounter % 2 == 0) {
        jQuery("#checking").html('Checking for completion...')
    } else {
        jQuery("#checking").html('Not completed yet.')
    }
    checkcounter = checkcounter + 1;
    setTimeout("leadChecker();", 3000)
}
function awaitLead(type, camp) {
    menuCloseAll();
    has_clicked = 1;
    jQuery("#waiting_message").show();
    closeWarningLeadCheck(0, 0, type);
    if (has_clicked == "1" && tried_to_exit == "1") {
        retainer_click(camp)
    }
}
function hideMenus() {
    menuCloseAll();
    jQuery("#completion_div").show()
}
function confirmEmailPrompt() {
    if (jQuery("#email1").val() != jQuery("#email2").val()) {
        alert("Email addresses don't match please re-check")
    } else {
        sendEmailPrompt(jQuery("#email1").val())
    }
}
function sendEmailPrompt(email) {
    jQuery.ajax({
        type: "POST",
        url: '/ajax/widgets/download_sendemail.php',
        data: {
            pub: widgetJSON.pub,
            subid: widgetJSON.subid,
            gateid: widgetJSON.gateid,
            email: email,
            prompt: "1"
        },
        success: function(data, result) {
            if (data == "1") {
                jQuery("#completion_div").html('<br /><br />Here is your download link: <a href="http://' + widgetJSON.brandwwwdomain + '/download.php?id=' + widgetJSON.download + '" target="_blank">Download Now</a><br />This download link is active ' + widgetJSON.lefttime + '.')
            } else {
                alert(data)
            }
        }
    })
}
function confirmEmail() {
    if (jQuery("#email1").val() != jQuery("#email2").val()) {
        alert("Email addresses don't match please re-check")
    } else {
        sendEmail(jQuery("#email1").val())
    }
}
function sendEmail(email) {
    jQuery.ajax({
        type: "POST",
        url: '/ajax/widgets/download_sendemail.php',
        data: {
            pub: widgetJSON.pub,
            subid: widgetJSON.subid,
            gateid: widgetJSON.gateid,
            email: email
        },
        success: function(data, result) {
            if (data == "1") {
                jQuery("#completion_div").html('<br /><br />Your email has been submitted.');
                alert("Your email has been submitted.")
            } else {
                alert(data)
            }
        }
    })
}
function showThankyou() {
    menuCloseAll();
    if (widgetJSON.gatetype == "1") {
        if (widgetJSON.protectfile == "2") {
            if (widgetJSON.alert == "1") {
                alert(widgetJSON.alerttext)
            }
            jQuery("#completion_div").html(widgetJSON.leadtext + '<br /><br />Please enter your email address to receive this file:<br /><table><tr><td align="right" style="color: ' + widgetJSON.fontcolor + ';">Email:</td><td><input type="text" id="email1" name="email1" size="25" maxlength="200"></td></tr><tr><td align="right" style="color: ' + widgetJSON.fontcolor + ';">Confirm:</td><td><input type="text" id="email2" name="email2" size="25" maxlength="200"></td></tr><tr><td colspan="2" align="right"><input type="button" value="Send" onclick="confirmEmail();"></td></tr></table>')
        } else {
            if (widgetJSON.promptemail == "1") {
                jQuery("#completion_div").html(widgetJSON.leadtext + '<br /><br />Please enter your email address to view download link:<br /><table><tr><td align="right" style="color: ' + widgetJSON.fontcolor + ';">Email:</td><td><input type="text" id="email1" name="email1" size="25" maxlength="200"></td></tr><tr><td align="right" style="color: ' + widgetJSON.fontcolor + ';">Confirm:</td><td><input type="text" id="email2" name="email2" size="25" maxlength="200"></td></tr><tr><td colspan="2" align="right"><input type="button" value="Send" onclick="confirmEmailPrompt();"></td></tr></table>')
            } else {
                jQuery("#completion_div").html(widgetJSON.leadtext + '<br /><br />Here is your download link: <a style="color: #5DB0F3; text-decoration: none;" href="http://' + widgetJSON.brandwwwdomain + '/download.php?id=' + widgetJSON.download + '" target="_blank">Download Now</a><br /><font style="font-size: 11px;">This download link is active ' + widgetJSON.lefttime + '.</font>')
            }
        }
    } else {
        if (widgetJSON.alert == "1") {
            alert(widgetJSON.alerttext)
        }
        if (widgetJSON.redirectenabled == "1") {
            jQuery("#completion_div").html(widgetJSON.leadtext + '<br /><br /><a target="_parent" href="' + widgetJSON.redirecturl + '" style="color: #ffffff;"><img src="webicons/accept.png" border="0"> Proceed to Premium Content Area!</a>')
        } else {
            top.location.href = document.referrer
        }
    }
}
function checkLeads() {
    if (ajax_returned == 0) {
        setTimeout("checkLeads();", 30000);
        jQuery.ajax({
            type: "POST",
            url: '/ajax/widgets/gateway_iframe.php',
            data: {
                pub: widgetJSON.pub,
                subid: widgetJSON.subid,
                gateid: widgetJSON.gateid,
                allowance: widgetJSON.allowance,
                allowanceunits: widgetJSON.allowanceunits
            },
            dataType: "script"
        })
    }
}
function menuCloseAll() {
    hide_elements = ["survey_page", "trial_page", "purchase_page", "paypal_page", "waiting_message"];
    for (var x = 0; x < hide_elements.length; x++) {
        jQuery("#" + hide_elements[x]).hide()
    }
}
function menuOpenSurveys() {
    menuCloseAll();
    jQuery("#survey_page").show()
}
function menuOpenTrial() {
    menuCloseAll();
    jQuery("#trial_page").show()
}
function menuOpenPurchase() {
    menuCloseAll();
    jQuery("#purchase_page").show();
    if (document.getElementById('purchase_page')) {
        document.getElementById('purchase_page').style.display = ''
    }
}
function menuOpenPaypal() {
    menuCloseAll();
    jQuery("#paypal_page").show();
    selectPaypal()
}
function menuOpenVideo() {
    menuCloseAll();
    jQuery("#video_page").show()
}
function selectPaypal() {
    jQuery("#pp_checkout").html('Please wait...<br /><img src="http://' + widgetJSON.brandstatic + '/images/bar_load.gif" border="0">');
    jQuery.ajax({
        type: "POST",
        url: '/ajax/widgets/gateway_paypal.php',
        data: {
            pub: widgetJSON.pub,
            subid: widgetJSON.subid,
            gateid: widgetJSON.gateid
        },
        dataType: "script"
    })
}
function retainer_click(camp) {}
function traffic_retainer() {
    tried_to_exit = 1;
    if (ajax_returned == 0) {
        return "Help keep this content free.  Please take one minute to complete a SPAM-free market research survey to gain access to this special content.  Are you sure you want to leave?"
    }
}
function addEvent(a, b, c) {
    if (window.addEventListener) {
        a.addEventListener(b, c, false)
    } else if (window.attachEvent) {
        a.attachEvent('on' + b, c)
    } else {
        a['on' + b] = c
    }
}
if (widgetJSON.trafficretainer == "1" && widgetJSON.closebutton != "1") {
    addEvent(window, 'beforeunload', traffic_retainer);
    window.onbeforeunload = traffic_retainer
}
function showOffer(method, title, url) {
    document.getElementById('offer_iframe').style.visibility = 'hidden';
    document.getElementById('offer_wrap').style.display = 'none';
    $("#offer_wrap").show(method, "", 1000, setTimeout("afterOfferLoaded('" + url + "');", 1000));
    document.getElementById('title').innerHTML = title
}
function afterOfferLoaded(url) {
    if (!url) {
        url = "about:blank"
    }
    document.getElementById('offer_iframe').src = url;
    document.getElementById('offer_iframe').style.visibility = 'visible'
}
function closeOffer(method) {
    document.getElementById('offer_iframe').style.visibility = 'hidden';
    $("#offer_wrap").hide(method, "", 1000)
}
function showHelp(method, title, url) {
    document.getElementById('help_iframe').style.visibility = 'hidden';
    document.getElementById('help_wrap').style.display = 'none';
    $("#help_wrap").show(method, "", 1000, setTimeout("afterHelpLoaded('" + url + "');", 1000));
    document.getElementById('help_title').innerHTML = title
}
function afterHelpLoaded(url) {
    if (!url) {
        url = "about:blank"
    }
    document.getElementById('help_iframe').src = url;
    document.getElementById('help_iframe').style.visibility = 'visible'
}
function closeHelp(method) {
    document.getElementById('help_iframe').style.visibility = 'hidden';
    $("#help_wrap").hide(method, "", 1000)
}
function widgetTip(tipid, tipcontent) {
    jQuery(function() {
        jQuery("#" + tipid).bt({
            contentSelector: "jQuery('#" + tipcontent + "')",
            positions: ['right', 'bottom'],
            fill: '#F8F8F8',
            strokeStyle: '#BEBEBE',
            spikeLength: 10,
            spikeGirth: 15,
            width: 300,
            overlap: 0,
            centerPointY: 1,
            cornerRadius: 10,
            cssStyles: {
                fontFamily: '"Lucida Grande",Helvetica,Arial,Verdana,sans-serif',
                fontSize: '12px',
                padding: '8px 8px'
            },
            hoverIntentOpts: {
                interval: 0,
                timeout: 100
            },
            shadow: true,
            shadowColor: 'rgba(0,0,0,.5)',
            shadowBlur: 8,
            shadowOffsetX: 4,
            shadowOffsetY: 4
        })
    })
}
function clickSurvey(campid, slotid) {
    window.open('http://' + widgetJSON.trackdomain + '/z/' + campid + '/' + widgetJSON.pub + '/' + widgetJSON.gateid + '/' + widgetJSON.subid + '/' + widgetJSON.gatehash + '/' + widgetJSON.cacheurl + '/', '_blank')
}

#3 JavaScript::Eval (size: 10141, repeated: 1)

var popup_delay = '0';
var hasloaded = false;
var hasclosed = false;
var body_existed = false;
var body_load_time = 0;
var ajax_status = 0;
var isloaded = true;
var json_settings = {
    "settings": [{
        "id": "MTgzNTk1",
        "opacity": "98",
        "z": "0"
    }, {
        "id": "MTczMzk0",
        "opacity": "100",
        "z": "0"
    }, {
        "id": "MTc5MjU0",
        "opacity": "0",
        "z": "0"
    }, {
        "id": "MTgwMjYz",
        "opacity": "44",
        "z": "0"
    }, {
        "id": "MTg1OTA4",
        "opacity": "50",
        "z": "0"
    }, {
        "id": "MTg2NzIz",
        "opacity": "95",
        "z": "0"
    }, {
        "id": "MTg2NzMx",
        "opacity": "78",
        "z": "0"
    }, {
        "id": "MTg2NzM1",
        "opacity": "95",
        "z": "0"
    }, {
        "id": "MTg3MTE1",
        "opacity": "100",
        "z": "0"
    }, {
        "id": "MTg3NTU0",
        "opacity": "100",
        "z": "0"
    }, {
        "id": "MTg4OTI4",
        "opacity": "0",
        "z": "0"
    }, {
        "id": "MTk5OTI0",
        "opacity": "80",
        "z": "0"
    }, {
        "id": "MTk5OTUy",
        "opacity": "80",
        "z": "0"
    }, {
        "id": "MjEzOTI5",
        "opacity": "75",
        "z": "0"
    }, {
        "id": "MjEzOTQy",
        "opacity": "0",
        "z": "0"
    }, {
        "id": "MjE0MDEx",
        "opacity": "100",
        "z": "0"
    }, {
        "id": "MjIwOTA2",
        "opacity": "0",
        "z": "0"
    }, {
        "id": "MjMxMTY4",
        "opacity": "95",
        "z": "0"
    }, {
        "id": "NDM2ODcw",
        "opacity": "80",
        "z": "0"
    }, {
        "id": "MjE1OTM2",
        "opacity": "58",
        "z": "0"
    }, {
        "id": "MjE3Mzcy",
        "opacity": "0",
        "z": "0"
    }, {
        "id": "MjE3Mzc0",
        "opacity": "0",
        "z": "0"
    }, {
        "id": "MjE3Mzc5",
        "opacity": "75",
        "z": "0"
    }, {
        "id": "MjE3Mzgx",
        "opacity": "80",
        "z": "0"
    }, {
        "id": "MjE4MzQx",
        "opacity": "0",
        "z": "0"
    }, {
        "id": "MjE3ODU0",
        "opacity": "0",
        "z": "0"
    }, {
        "id": "MjE4MTc2",
        "opacity": "0",
        "z": "0"
    }, {
        "id": "MjE4NTc3",
        "opacity": "0",
        "z": "0"
    }, {
        "id": "MjE4ODIx",
        "opacity": "100",
        "z": "0"
    }, {
        "id": "MjIwOTA3",
        "opacity": "80",
        "z": "0"
    }, {
        "id": "MjMxMTcw",
        "opacity": "80",
        "z": "0"
    }, {
        "id": "MzI3NjE1",
        "opacity": "80",
        "z": "0"
    }, {
        "id": "NDIyMDQ0",
        "opacity": "75",
        "z": "0"
    }, {
        "id": "NDI0NjM5",
        "opacity": "0",
        "z": "0"
    }, {
        "id": "NDI3ODAz",
        "opacity": "50",
        "z": "0"
    }, {
        "id": "NDI3ODA1",
        "opacity": "50",
        "z": "0"
    }, {
        "id": "NDI3ODM5",
        "opacity": "52",
        "z": "0"
    }, {
        "id": "NDU5Njg3",
        "opacity": "80",
        "z": "0"
    }, {
        "id": "NDYwOTc0",
        "opacity": "80",
        "z": "0"
    }]
};

function toggle_visibility(id) {
    var e = document.getElementById(id);
    if (e.style.display == 'block' || e.style.display == '') {
        e.style.display = 'none'
    } else {
        e.style.display = 'block'
    }
}
function get_json_setting(gateid, settingname) {
    for (var x = 0; x < json_settings.settings.length; x++) {
        if (json_settings.settings[x].id == unescape(gateid)) {
            return json_settings.settings[x][settingname]
        }
    }
}
function add_browser_load_event(func) {
    var oldonload = window.onload;
    if (typeof window.onload != 'function') {
        try {
            window.onload = func
        } catch (e) {}
    } else {
        window.onload = function() {
            if (oldonload) {
                try {
                    oldonload()
                } catch (e) {}
            }
            if (func) {
                func()
            }
        }
    }
}
function wait_for_body(gateid) {
    var object_body = document.getElementsByTagName("body").item(0);
    if (object_body == null) {
        body_load_time = body_load_time + 200;
        setTimeout("wait_for_body('" + gateid + "');", 200)
    } else {
        initialize_overlay(gateid)
    }
}
function startGateway(gateid) {
    if (popup_delay > 0) {
        body_load_time = body_load_time + popup_delay + '000';
        setTimeout("wait_for_body('" + gateid + "');", popup_delay + '000')
    } else {
        body_load_time = body_load_time + 200;
        setTimeout("wait_for_body('" + gateid + "');", 200)
    }
}
function iframe_tags(onoroff) {
    iframe_tags = document.getElementsByTagName('iframe');
    for (i = 0; i != iframe_tags.length; i++) {
        if (iframe_tags[i].id != 'overlay_iframe') {
            if (onoroff == 0) {
                iframe_tags[i].style.visibility = 'hidden'
            }
            if (onoroff == 1) {
                iframe_tags[i].style.visibility = 'visible'
            }
        }
    }
}
function embed_tags(onoroff) {
    var embeds = document.getElementsByTagName('embed');
    for (var ems = document.embeds, i = 0, em; em = ems[i]; i++) {
        if (em.id != 'video_controller' && em.id != 'video_bucket') {
            if (onoroff == 0) {
                if (navigator.appName == 'Microsoft Internet Explorer') {
                    em.setAttribute('wmode', 'transparent');
                    em.style.visibility = 'hidden'
                } else {
                    em.setAttribute('wmode', 'transparent');
                    var nx = em.nextSibling,
                        pn = em.parentNode;
                    pn.removeChild(em);
                    pn.insertBefore(em, nx)
                }
            }
            if (onoroff == 1) {
                em.setAttribute('wmode', 'window');
                if (navigator.appName == 'Microsoft Internet Explorer') {
                    em.style.visibility = 'visible'
                }
            }
        }
    }
}
function object_tags(onoroff) {
    objects = document.getElementsByTagName('object');
    for (i = 0; i != objects.length; i++) {
        if (objects[i].id != 'video_controller' && objects[i].id != 'video_bucket') {
            if (onoroff == 0) {
                objects[i].setAttribute('wmode', 'transparent');
                objects[i].style.visibility = 'hidden'
            }
            if (onoroff == 1) {
                objects[i].style.visibility = 'visible';
                objects[i].setAttribute('wmode', 'window')
            }
        }
    }
}
function get_page_size() {
    var c, d;
    if (window.innerHeight && window.scrollMaxY) {
        c = window.innerWidth + window.scrollMaxX;
        d = window.innerHeight + window.scrollMaxY
    } else if (document.body.scrollHeight > document.body.offsetHeight) {
        c = document.body.scrollWidth;
        d = document.body.scrollHeight
    } else {
        c = document.body.offsetWidth;
        d = document.body.offsetHeight
    }
    var a, b;
    if (self.innerHeight) {
        a = document.documentElement.clientWidth ? document.documentElement.clientWidth : self.innerWidth;
        b = self.innerHeight
    } else if (document.documentElement && document.documentElement.clientHeight) {
        a = document.documentElement.clientWidth;
        b = document.documentElement.clientHeight
    } else if (document.body) {
        a = document.body.clientWidth;
        b = document.body.clientHeight
    }
    pageHeight = d < b ? b : d;
    pageWidth = c < a ? c : a;
    return arrayPageSize = new Array(pageWidth, pageHeight, a, b)
}
function dont_scroll() {
    scroll(0, 0);
    var arrayPageSize = get_page_size();
    if (document.getElementById('overlay_div')) {
        if ((arrayPageSize[1] - document.getElementById('overlay_div').style.height.replace("px", "")) > 30) {
            document.getElementById('overlay_div').style.height = (arrayPageSize[1] + 'px')
        }
    }
    if (ajax_status == 0) {
        setTimeout("dont_scroll();", 500)
    }
}
function close_overlay(gateid) {
    var object_overlay = document.getElementById('overlay_div');
    var object_main = document.getElementById('overlay_main_div');
    embed_tags(1);
    object_tags(1);
    ajax_status = 1;
    hasclosed = true;
    object_main.style.display = 'none';
    object_overlay.style.display = 'none';
    document.getElementById('overlay_iframe').src = 'about:blank';
    document.getElementById('overlay_iframe').style.display = 'none';
    return false
}
function load_overlay_iframe(gateid) {
    document.getElementById('overlay_iframe').contentWindow.location.replace('http://www.cpalead.com/mygateway/mygateway_iframe_loader.php?pub=140412&subid=195.159.140.222&gateid=' + gateid + '&ref=' + escape(document.referrer) + '&cacheurl=aHR0cDovL2ItYm9va3MuaW5mby8%3D')
}
function create_overlay(gateid) {
    var arrayPageSize = get_page_size();
    var object_body = document.getElementsByTagName("body").item(0);
    var object_overlay = document.createElement("div");
    object_overlay.setAttribute('id', 'overlay_div');
    object_overlay.style.display = 'none';
    object_overlay.style.position = 'absolute';
    object_overlay.style.top = '0';
    object_overlay.style.left = '0';
    object_overlay.style.zIndex = '9999900';
    object_overlay.style.width = '100%';
    object_body.insertBefore(object_overlay, object_body.firstChild);
    opacity_setting_ie = get_json_setting(gateid, 'opacity');
    opacity_setting_moz = opacity_setting_ie / 100;
    document.getElementById('overlay_div').style.filter = "alpha(opacity=" + opacity_setting_ie + ")";
    document.getElementById('overlay_div').style.opacity = opacity_setting_moz;
    object_overlay.style.height = (arrayPageSize[1] + 'px');
    object_overlay.style.display = 'block';
    object_overlay.style.visibility = 'visible'
}
function initialize_overlay(gateid) {
    var x = get_json_setting(gateid, 'z');
    if (x == '1') {
        return false
    }
    var closebuttons = ['MTc5MjU0', 'MTgwMjYz', 'MjE1OTM2', 'NDI3ODA1'];
    if (!document.getElementById('overlay_div')) {
        create_overlay(gateid)
    } else {
        if (document.getElementById('overlay_div').style.display = 'none') {
            document.getElementById('overlay_div').style.display = 'block';
            opacity_setting_moz = get_json_setting(gateid, 'opacity') / 100;
            document.getElementById('overlay_div').style.filter = "alpha(opacity=" + opacity_setting_moz + ")";
            document.getElementById('overlay_div').style.opacity = opacity_setting_moz
        }
    }
    var arrayPageSize = get_page_size();
    dont_scroll();
    embed_tags(0);
    object_tags(0);
    var object_main = document.getElementById('overlay_main_div');
    object_main.style.display = 'block';
    object_main.style.visibility = 'visible';
    object_main.style.position = 'absolute';
    object_main.style.top = '0';
    object_main.style.left = '0';
    object_main.style.zIndex = '9999910';
    object_main.style.width = '100%';
    var has_closebtn = 0;
    for (var i = 0; i < closebuttons.length; i++) {
        if (closebuttons[i] == gateid || closebuttons[i] == escape(gateid)) {
            document.getElementById('close_button_div').innerHTML = '<div class="overlay_close_button_div"><a onclick="close_overlay(\'MTg3MTE1\');" class="overlay_close_button">Close</a></div>';
            var has_closebtn = 1;
            found = i;
            break
        }
    }
    if (has_closebtn == 0) {
        document.getElementById('close_button_div').innerHTML = ''
    }
    object_main.style.height = (arrayPageSize[1] + 'px');
    setTimeout("load_overlay_iframe('" + gateid + "');", 500);
    document.getElementById('overlay_iframe').style.display = 'block';
    scroll(0, 0);
    hasloaded = true
}
document.write('<style type="text/css">#overlay_div{background-color: #000; filter:alpha(opacity=100); opacity: 100; -moz-opacity: 100;}');
document.write('#overlay_main_div img {border: 0px;}');
document.write('.overlay_close_button_div { float: right; z-index: 9999930 background-color: transparent; }');
document.write('.overlay_close_button { display: block; cursor: pointer; width: 80px; height: 32px; margin: 15px 15px 0 0; background: url(http://www.cpalead.com/images/widget/closebox.png) no-repeat scroll 48px -2px transparent; text-align: left; font-family: "lucida grande",tahoma,verdana,arial,sans-serif; font-size: 16px; font-weight: bold; color: #ffffff; }');
document.write('a.overlay_close_button:hover { text-decoration: underline; }');
document.write('</style>');
document.write('<div id="overlay_main_div" style="display:none; text-align: center; line-height: normal; ">');
document.write('<div id="close_button_div" align="center" style="position: absolute; width: 100%; z-index: 9999930;">');
document.write('<div class="overlay_close_button_div">');
document.write('</div></div>');
document.write('<div style="background: transparent; height: 768px; z-index: 9999915;">');
document.write('<iframe width="100%" height="768" id="overlay_iframe" src="" allowtransparency="true" frameborder="0" style="position: relative; height: 768px; overflow-x: hidden; overflow-y: hidden; background-color: transparent; z-index: 9999920;" scrollbars="NO"></iframe>');
document.write('</div></div>');
var number_of_surveys = 0;
add_browser_load_event(startGateway('MTg3MTE1'));
var ettJsHost = (("https:" == document.location.protocol) ? "https://www." : "http://");
document.write(unescape("%3Cscript src='" + ettJsHost + "cpalead.com/exitpopup.php?pub=140412&gateid=NDM2ODcw' type='text/javascript'%3E%3C/script%3E"));

Executed Writes (14)

#1 JavaScript::Write (size: 36, repeated: 1)

#overlay_main_div img {border: 0px;}

#2 JavaScript::Write (size: 347, repeated: 1)

.overlay_close_button { display: block; cursor: pointer; width: 80px; height: 32px; margin: 15px 15px 0 0; background: url(http://www.cpalead.com/images/widget/closebox.png) no-repeat scroll 48px -2px transparent; text-align: left; font-family: "lucida grande",tahoma,verdana,arial,sans-serif; font-size: 16px; font-weight: bold; color: #ffffff; }

#3 JavaScript::Write (size: 91, repeated: 1)

.overlay_close_button_div { float: right; z-index: 9999930 background-color: transparent; }

#4 JavaScript::Write (size: 12, repeated: 2)

</div></div>

#5 JavaScript::Write (size: 8, repeated: 1)

</style>

#6 JavaScript::Write (size: 38, repeated: 1)

<div class="overlay_close_button_div">

#7 JavaScript::Write (size: 101, repeated: 1)

<div id="close_button_div" align="center" style="position: absolute; width: 100%; z-index: 9999930;">

#8 JavaScript::Write (size: 91, repeated: 1)

<div id="overlay_main_div" style="display:none; text-align: center; line-height: normal; ">

#9 JavaScript::Write (size: 71, repeated: 1)

<div style="background: transparent; height: 768px; z-index: 9999915;">

#10 JavaScript::Write (size: 419, repeated: 1)

<iframe src="http://js01.pixelsnippet.com/pixel_a?rand=0.7489673374351544&subid=976701175171334844&sn=www.cpalead.com&rurl=http%3A%2F%2Fwww.cpalead.com%2Fmygateway%2Fmygateway_iframe_loader.php%3Fpub%3D140412%26subid%3D195.159.140.222%26gateid%3DMTg3MTE1%26ref%3D%26cacheurl%3DaHR0cDovL2ItYm9va3MuaW5mby8%253D&sw=1176&sh=885&domain=null&keywords=null" width="0" height="0" frameborder="0" style="display:none"></iframe>

#11 JavaScript::Write (size: 259, repeated: 1)

<iframe width="100%" height="768" id="overlay_iframe" src="" allowtransparency="true" frameborder="0" style="position: relative; height: 768px; overflow-x: hidden; overflow-y: hidden; background-color: transparent; z-index: 9999920;" scrollbars="NO"></iframe>

#12 JavaScript::Write (size: 106, repeated: 1)

<script src='http://cpalead.com/exitpopup.php?pub=140412&gateid=NDM2ODcw' type='text/javascript'></script>

#13 JavaScript::Write (size: 120, repeated: 1)

<style type="text/css">#overlay_div{background-color: #000; filter:alpha(opacity=100); opacity: 100; -moz-opacity: 100;}

#14 JavaScript::Write (size: 60, repeated: 1)

a.overlay_close_button:hover { text-decoration: underline; }


HTTP Transactions (25)


Request Response
GET / HTTP/1.1

Host: www.easyregtor.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 301 Moved Permanently

Content-Type: text/html
Server: nginx
Date: Fri, 02 Nov 2012 02:40:38 GMT
Connection: keep-alive
Content-Length: 178
Location: http://keygator.com
GET / HTTP/1.1

Host: keygator.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html
Date: Fri, 02 Nov 2012 02:40:39 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2012 04:35:08 GMT
Accept-Ranges: bytes
Content-Length: 120
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: keygator.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: image/x-icon
Date: Fri, 02 Nov 2012 02:40:39 GMT
Server: Apache
Last-Modified: Tue, 03 Apr 2012 07:44:03 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
GET /index.html HTTP/1.1

Host: trackarthy.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html
Date: Fri, 02 Nov 2012 02:40:39 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2012 00:19:22 GMT
Accept-Ranges: bytes
Content-Length: 107
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: trackarthy.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: image/x-icon
Date: Fri, 02 Nov 2012 02:40:40 GMT
Server: Apache
Last-Modified: Tue, 03 Apr 2012 07:44:03 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
GET / HTTP/1.1

Host: b-books.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html
Date: Fri, 02 Nov 2012 02:40:40 GMT
Server: Apache
Last-Modified: Sat, 28 Jul 2012 05:59:48 GMT
Accept-Ranges: bytes
Content-Length: 677
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
GET /exitpopup.php?pub=140412&gateid=MTk5OTI0 HTTP/1.1

Host: www.cpalead.com
GET /exitpopup.php?pub=140412&amp;gateid=MTk5OTI0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://b-books.info/
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Nov 2012 02:40:41 GMT
Server: Apache
X-Powered-By: PHP/5.3.8
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1072
Connection: close
GET /content_locker.php?pub=140412&gateid=MTg3MTE1 HTTP/1.1

Host: www.cpalead.com
GET /content_locker.php?pub=140412&amp;gateid=MTg3MTE1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://b-books.info/
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Nov 2012 02:40:41 GMT
Server: Apache
X-Powered-By: PHP/5.3.8
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3396
Connection: close
GET /exitpopup.php?pub=140412&gateid=NDM2ODcw HTTP/1.1

Host: cpalead.com
GET /exitpopup.php?pub=140412&amp;gateid=NDM2ODcw HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://b-books.info/
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Nov 2012 02:40:41 GMT
Server: Apache
X-Powered-By: PHP/5.3.8
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1069
Connection: close
GET /favicon.ico HTTP/1.1

Host: b-books.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: image/x-icon
Date: Fri, 02 Nov 2012 02:40:41 GMT
Server: Apache
Last-Modified: Tue, 03 Apr 2012 07:44:03 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
GET /mygateway/mygateway_iframe_loader.php?pub=140412&subid=195.159.140.222&gateid=MTg3MTE1&ref=&cacheurl=aHR0cDovL2ItYm9va3MuaW5mby8%3D HTTP/1.1

Host: www.cpalead.com
GET /mygateway/mygateway_iframe_loader.php?pub=140412&amp;subid=195.159.140.222&amp;gateid=MTg3MTE1&amp;ref=&amp;cacheurl=aHR0cDovL2ItYm9va3MuaW5mby8%3D HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://b-books.info/
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Nov 2012 02:40:42 GMT
Server: Apache
X-Powered-By: PHP/5.3.8
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2610
Connection: close
GET /js/jquery/bt/jquery.bt-w-hoverintent.min.js HTTP/1.1

Host: static.cpalead.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.cpalead.com/mygateway/mygateway_iframe_loader.php?pub=140412&amp;subid=195.159.140.222&amp;gateid=MTg3MTE1&amp;ref=&amp;cacheurl=aHR0cDovL2ItYm9va3MuaW5mby8%3D
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Content-Encoding: gzip
Accept-Ranges: bytes
Cache-Control: max-age=86400
Date: Fri, 02 Nov 2012 02:40:43 GMT
Etag: &quot;7b28e7c-5d11-4cb2f7b194e00&quot;
Expires: Sat, 03 Nov 2012 02:40:43 GMT
Last-Modified: Wed, 03 Oct 2012 22:51:36 GMT
Server: ECAcc (arn/46A4)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 5715
GET /ajax/libs/jquery/1.4.4/jquery.min.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.cpalead.com/mygateway/mygateway_iframe_loader.php?pub=140412&amp;subid=195.159.140.222&amp;gateid=MTg3MTE1&amp;ref=&amp;cacheurl=aHR0cDovL2ItYm9va3MuaW5mby8%3D
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Mon, 02 Apr 2012 18:24:28 GMT
Date: Thu, 01 Nov 2012 01:08:56 GMT
Expires: Fri, 01 Nov 2013 01:08:56 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 27106
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 91907
GET /widget/widget-1.5.min.js HTTP/1.1

Host: www.cpalead.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.cpalead.com/mygateway/mygateway_iframe_loader.php?pub=140412&amp;subid=195.159.140.222&amp;gateid=MTg3MTE1&amp;ref=&amp;cacheurl=aHR0cDovL2ItYm9va3MuaW5mby8%3D
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Date: Fri, 02 Nov 2012 02:40:43 GMT
Server: Apache
Last-Modified: Wed, 03 Oct 2012 22:51:36 GMT
Etag: &quot;230a095-17e9-4cb2f7b194e00&quot;
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Sat, 03 Nov 2012 02:40:43 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2955
Connection: close
GET /images/blank7.gif HTTP/1.1

Host: static.cpalead.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.cpalead.com/mygateway/mygateway_iframe_loader.php?pub=140412&amp;subid=195.159.140.222&amp;gateid=MTg3MTE1&amp;ref=&amp;cacheurl=aHR0cDovL2ItYm9va3MuaW5mby8%3D
HTTP/1.1 200 OK

Content-Type: image/gif
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Fri, 02 Nov 2012 02:40:43 GMT
Etag: &quot;230a23e-2f-4cb2f7b194e00&quot;
Expires: Sun, 02 Dec 2012 02:40:43 GMT
Last-Modified: Wed, 03 Oct 2012 22:51:36 GMT
Server: ECAcc (arn/46C6)
X-Cache: HIT
Content-Length: 47
GET /webicons/script_edit.png HTTP/1.1

Host: static.cpalead.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.cpalead.com/mygateway/mygateway_iframe_loader.php?pub=140412&amp;subid=195.159.140.222&amp;gateid=MTg3MTE1&amp;ref=&amp;cacheurl=aHR0cDovL2ItYm9va3MuaW5mby8%3D
HTTP/1.1 200 OK

Content-Type: image/png
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Fri, 02 Nov 2012 02:40:43 GMT
Etag: &quot;23097be-370-4cb2f7b194e00&quot;
Expires: Sun, 02 Dec 2012 02:40:43 GMT
Last-Modified: Wed, 03 Oct 2012 22:51:36 GMT
Server: ECAcc (arn/46BB)
X-Cache: HIT
Content-Length: 880
GET /webicons/phone_sound.png HTTP/1.1

Host: static.cpalead.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.cpalead.com/mygateway/mygateway_iframe_loader.php?pub=140412&amp;subid=195.159.140.222&amp;gateid=MTg3MTE1&amp;ref=&amp;cacheurl=aHR0cDovL2ItYm9va3MuaW5mby8%3D
HTTP/1.1 200 OK

Content-Type: image/png
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Fri, 02 Nov 2012 02:40:43 GMT
Etag: &quot;2309852-2bf-4cb2f7b194e00&quot;
Expires: Sun, 02 Dec 2012 02:40:43 GMT
Last-Modified: Wed, 03 Oct 2012 22:51:36 GMT
Server: ECAcc (arn/46B7)
X-Cache: HIT
Content-Length: 703
GET /images/gatewaytemplate/skin4.gif HTTP/1.1

Host: static.cpalead.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.cpalead.com/mygateway/mygateway_iframe_loader.php?pub=140412&amp;subid=195.159.140.222&amp;gateid=MTg3MTE1&amp;ref=&amp;cacheurl=aHR0cDovL2ItYm9va3MuaW5mby8%3D
HTTP/1.1 200 OK

Content-Type: image/gif
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Date: Fri, 02 Nov 2012 02:40:43 GMT
Etag: &quot;2530b7d-7c1d-4cb2f7b194e00&quot;
Expires: Sun, 02 Dec 2012 02:40:43 GMT
Last-Modified: Wed, 03 Oct 2012 22:51:36 GMT
Server: ECAcc (arn/469E)
X-Cache: HIT
Content-Length: 31773
GET /pixel_static.js HTTP/1.1

Host: js01.pixelsnippet.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.cpalead.com/mygateway/mygateway_iframe_loader.php?pub=140412&amp;subid=195.159.140.222&amp;gateid=MTg3MTE1&amp;ref=&amp;cacheurl=aHR0cDovL2ItYm9va3MuaW5mby8%3D
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=utf-8
Content-Length: 652
Content-Encoding: gzip
Server: Microsoft-IIS/7.5
Date: Fri, 02 Nov 2012 02:40:26 GMT
GET /pixel_a?rand=0.7489673374351544&subid=976701175171334844&sn=www.cpalead.com&rurl=http%3A%2F%2Fwww.cpalead.com%2Fmygateway%2Fmygateway_iframe_loader.php%3Fpub%3D140412%26subid%3D195.159.140.222%26gateid%3DMTg3MTE1%26ref%3D%26cacheurl%3DaHR0cDovL2ItYm9va3MuaW5mby8%253D&sw=1176&sh=885&domain=null&keywords=null HTTP/1.1

Host: js01.pixelsnippet.com
GET /pixel_a?rand=0.7489673374351544&amp;subid=976701175171334844&amp;sn=www.cpalead.com&amp;rurl=http%3A%2F%2Fwww.cpalead.com%2Fmygateway%2Fmygateway_iframe_loader.php%3Fpub%3D140412%26subid%3D195.159.140.222%26gateid%3DMTg3MTE1%26ref%3D%26cacheurl%3DaHR0cDovL2ItYm9va3MuaW5mby8%253D&amp;sw=1176&amp;sh=885&amp;domain=null&amp;keywords=null HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.cpalead.com/mygateway/mygateway_iframe_loader.php?pub=140412&amp;subid=195.159.140.222&amp;gateid=MTg3MTE1&amp;ref=&amp;cacheurl=aHR0cDovL2ItYm9va3MuaW5mby8%3D
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Content-Length: 716
Content-Encoding: gzip
Server: Microsoft-IIS/7.5
Set-Cookie: randomid=86b5fve3hpxuirmw;expires=Sat, 03-Nov-2012 02:40:29 GMT;path=/;domain=.pixelsnippet.com;
Date: Fri, 02 Nov 2012 02:40:28 GMT
GET /static/c.js HTTP/1.1

Host: p.chango.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://js01.pixelsnippet.com/pixel_a?rand=0.7489673374351544&amp;subid=976701175171334844&amp;sn=www.cpalead.com&amp;rurl=http%3A%2F%2Fwww.cpalead.com%2Fmygateway%2Fmygateway_iframe_loader.php%3Fpub%3D140412%26subid%3D195.159.140.222%26gateid%3DMTg3MTE1%26ref%3D%26cacheurl%3DaHR0cDovL2ItYm9va3MuaW5mby8%253D&amp;sw=1176&amp;sh=885&amp;domain=null&amp;keywords=null
HTTP/1.1 200 OK

Content-Type: application/javascript
x-amz-id-2: FFm9IviqhYrCiLbRWCXbVG6eHbeXx5q6eBIxwpT2cziK0liDWL1cJejtkeqgcQz9
x-amz-request-id: 469DA1F0F9727E96
Last-Modified: Wed, 18 Apr 2012 18:17:35 GMT
Etag: &quot;e79296b0213ce2305e06c54bc24a63d5&quot;
Accept-Ranges: bytes
Content-Length: 646
Server: AmazonS3
Cache-Control: max-age=604800
Date: Fri, 02 Nov 2012 02:40:44 GMT
Connection: keep-alive
GET /f?c=436&k=cpalead HTTP/1.1

Host: domdex.com
GET /f?c=436&amp;k=cpalead HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://js01.pixelsnippet.com/pixel_a?rand=0.7489673374351544&amp;subid=976701175171334844&amp;sn=www.cpalead.com&amp;rurl=http%3A%2F%2Fwww.cpalead.com%2Fmygateway%2Fmygateway_iframe_loader.php%3Fpub%3D140412%26subid%3D195.159.140.222%26gateid%3DMTg3MTE1%26ref%3D%26cacheurl%3DaHR0cDovL2ItYm9va3MuaW5mby8%253D&amp;sw=1176&amp;sh=885&amp;domain=null&amp;keywords=null
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Nov 2012 02:40:44 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Pragma: no-cache
Cache-Control: private, no-cache
Set-Cookie: sp=d29f24244dd0dd3e9d977568887f1853; expires=Tue, 01-Jan-2013 02:40:44 GMT; path=/; domain=.domdex.com
Vary: Accept-Encoding
Content-Encoding: gzip
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;ALL CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Content-Length: 20
Connection: close
GET /c/1351824044162/c.js?&t=&p=http%3A%2F%2Fjs01.pixelsnippet.com%2Fpixel_a%3Frand%3D0.7489673374351544%26subid%3D976701175171334844%26sn%3Dwww.cpalead.com%26rurl%3Dhttp%253A%252F%252Fwww.cpalead.com%252Fmygateway%252Fmygateway_iframe_loader.php%253Fpub%253D140412%2526subid%253D195.159.140.222%2526gateid%253DMTg3MTE1%2526ref%253D%2526cacheurl%253DaHR0cDovL2ItYm9va3MuaW5mby8%25253D%26sw%3D1176%26sh%3D885%26domain%3Dnull%26keywords%3Dnull&r=http%3A%2F%2Fwww.cpalead.com%2Fmygateway%2Fmygateway_iframe_loader.php%3Fpub%3D140412%26subid%3D195.159.140.222%26gateid%3DMTg3MTE1%26ref%3D%26cacheurl%3DaHR0cDovL2ItYm9va3MuaW5mby8%253D&aid=10084&chaid=bodis HTTP/1.1

Host: dbodis.d.chango.com
GET /c/1351824044162/c.js?&amp;t=&amp;p=http%3A%2F%2Fjs01.pixelsnippet.com%2Fpixel_a%3Frand%3D0.7489673374351544%26subid%3D976701175171334844%26sn%3Dwww.cpalead.com%26rurl%3Dhttp%253A%252F%252Fwww.cpalead.com%252Fmygateway%252Fmygateway_iframe_loader.php%253Fpub%253D140412%2526subid%253D195.159.140.222%2526gateid%253DMTg3MTE1%2526ref%253D%2526cacheurl%253DaHR0cDovL2ItYm9va3MuaW5mby8%25253D%26sw%3D1176%26sh%3D885%26domain%3Dnull%26keywords%3Dnull&amp;r=http%3A%2F%2Fwww.cpalead.com%2Fmygateway%2Fmygateway_iframe_loader.php%3Fpub%3D140412%26subid%3D195.159.140.222%26gateid%3DMTg3MTE1%26ref%3D%26cacheurl%3DaHR0cDovL2ItYm9va3MuaW5mby8%253D&amp;aid=10084&amp;chaid=bodis HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://js01.pixelsnippet.com/pixel_a?rand=0.7489673374351544&amp;subid=976701175171334844&amp;sn=www.cpalead.com&amp;rurl=http%3A%2F%2Fwww.cpalead.com%2Fmygateway%2Fmygateway_iframe_loader.php%3Fpub%3D140412%26subid%3D195.159.140.222%26gateid%3DMTg3MTE1%26ref%3D%26cacheurl%3DaHR0cDovL2ItYm9va3MuaW5mby8%253D&amp;sw=1176&amp;sh=885&amp;domain=null&amp;keywords=null
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Content-Length: 0
Server: RTB
Location: /c/rt.js?p=http%3A%2F%2Fjs01.pixelsnippet.com%2Fpixel_a%3Frand%3D0.7489673374351544%26subid%3D976701175171334844%26sn%3Dwww.cpalead.com%26rurl%3Dhttp%253A%252F%252Fwww.cpalead.com%252Fmygateway%252Fmygateway_iframe_loader.php%253Fpub%253D140412%2526subid%253D195.159.140.222%2526gateid%253DMTg3MTE1%2526ref%253D%2526cacheurl%253DaHR0cDovL2ItYm9va3MuaW5mby8%25253D%26sw%3D1176%26sh%3D885%26domain%3Dnull%26keywords%3Dnull&amp;r=http%3A%2F%2Fwww.cpalead.com%2Fmygateway%2Fmygateway_iframe_loader.php%3Fpub%3D140412%26subid%3D195.159.140.222%26gateid%3DMTg3MTE1%26ref%3D%26cacheurl%3DaHR0cDovL2ItYm9va3MuaW5mby8%253D&amp;chaid=bodis&amp;aid=10084&amp;is_new_user=true
Pragma: no-cache
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
P3P: policyref=&quot;http://as.chango.com/static/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Set-Cookie: _t=b323f10c-2496-11e2-924a-00259005c7c6; Domain=chango.com; expires=Mon, 31 Oct 2022 02:40:44 GMT; Path=/
Connection: close
GET /c/rt.js?p=http%3A%2F%2Fjs01.pixelsnippet.com%2Fpixel_a%3Frand%3D0.7489673374351544%26subid%3D976701175171334844%26sn%3Dwww.cpalead.com%26rurl%3Dhttp%253A%252F%252Fwww.cpalead.com%252Fmygateway%252Fmygateway_iframe_loader.php%253Fpub%253D140412%2526subid%253D195.159.140.222%2526gateid%253DMTg3MTE1%2526ref%253D%2526cacheurl%253DaHR0cDovL2ItYm9va3MuaW5mby8%25253D%26sw%3D1176%26sh%3D885%26domain%3Dnull%26keywords%3Dnull&r=http%3A%2F%2Fwww.cpalead.com%2Fmygateway%2Fmygateway_iframe_loader.php%3Fpub%3D140412%26subid%3D195.159.140.222%26gateid%3DMTg3MTE1%26ref%3D%26cacheurl%3DaHR0cDovL2ItYm9va3MuaW5mby8%253D&chaid=bodis&aid=10084&is_new_user=true HTTP/1.1

Host: dbodis.d.chango.com
GET /c/rt.js?p=http%3A%2F%2Fjs01.pixelsnippet.com%2Fpixel_a%3Frand%3D0.7489673374351544%26subid%3D976701175171334844%26sn%3Dwww.cpalead.com%26rurl%3Dhttp%253A%252F%252Fwww.cpalead.com%252Fmygateway%252Fmygateway_iframe_loader.php%253Fpub%253D140412%2526subid%253D195.159.140.222%2526gateid%253DMTg3MTE1%2526ref%253D%2526cacheurl%253DaHR0cDovL2ItYm9va3MuaW5mby8%25253D%26sw%3D1176%26sh%3D885%26domain%3Dnull%26keywords%3Dnull&amp;r=http%3A%2F%2Fwww.cpalead.com%2Fmygateway%2Fmygateway_iframe_loader.php%3Fpub%3D140412%26subid%3D195.159.140.222%26gateid%3DMTg3MTE1%26ref%3D%26cacheurl%3DaHR0cDovL2ItYm9va3MuaW5mby8%253D&amp;chaid=bodis&amp;aid=10084&amp;is_new_user=true HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://js01.pixelsnippet.com/pixel_a?rand=0.7489673374351544&amp;subid=976701175171334844&amp;sn=www.cpalead.com&amp;rurl=http%3A%2F%2Fwww.cpalead.com%2Fmygateway%2Fmygateway_iframe_loader.php%3Fpub%3D140412%26subid%3D195.159.140.222%26gateid%3DMTg3MTE1%26ref%3D%26cacheurl%3DaHR0cDovL2ItYm9va3MuaW5mby8%253D&amp;sw=1176&amp;sh=885&amp;domain=null&amp;keywords=null
Cookie: _t=b323f10c-2496-11e2-924a-00259005c7c6
HTTP/1.1 200 OK

Content-Type: text/javascript
Content-Length: 0
Server: RTB
Etag: &quot;da39a3ee5e6b4b0d3255bfef95601890afd80709&quot;
Pragma: no-cache
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
P3P: policyref=&quot;http://as.chango.com/static/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Connection: close
POST /ajax/widgets/gateway_iframe.php HTTP/1.1

Host: www.cpalead.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/javascript, application/javascript, */*; q=0.01
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Referer: http://www.cpalead.com/mygateway/mygateway_iframe_loader.php?pub=140412&amp;subid=195.159.140.222&amp;gateid=MTg3MTE1&amp;ref=&amp;cacheurl=aHR0cDovL2ItYm9va3MuaW5mby8%3D
Content-Length: 79
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Nov 2012 02:40:45 GMT
Server: Apache
X-Powered-By: PHP/5.3.8
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20
Connection: close