Overview

URLhttp://www.blogde.info/file.aspx?file=21
IP68.178.232.99
ASNAS26496 GoDaddy.com, LLC
Location United States
Report completed2012-11-06 02:04:31 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-06 02:03:58 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 2
2012-11-06 02:03:58 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 3
2012-11-06 02:03:58 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 2
2012-11-06 02:03:58 urlQuery Client 195.159.219.81ET MALWARE Casalemedia Spyware Reporting URL Visited 3
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 68.178.232.99

Date Alerts / IDS URL IP
2013-02-26 17:16:270 / 0http://68.178.232.9968.178.232.99
2013-02-26 17:12:300 / 0http://68.178.232.9968.178.232.99
2013-02-26 17:08:520 / 0http://68.178.232.9968.178.232.99
2013-02-21 10:56:250 / 0http://68.178.232.9968.178.232.99
2013-02-21 10:54:260 / 0http://68.178.232.9968.178.232.99
2013-02-21 10:53:000 / 0http://68.178.232.9968.178.232.99

Last 6 reports on ASN: AS26496 GoDaddy.com, LLC

Date Alerts / IDS URL IP
2013-03-04 10:21:410 / 4http://zenithconvertingknives.com/twin-occupancy-resid=50.63.202.64
2013-03-04 10:20:570 / 4http://pushot.com/count10.php?485055c850.63.202.71
2013-03-04 10:19:592 / 1http://ntrfanz.com/forum/index.php/calendar/1-comm...=184.168.250.1
2013-03-04 10:17:540 / 4http://falsewi.com/count8.php?646ba848184.168.221.88
2013-03-04 10:17:010 / 4http://maribit.com/count11.php?c49d1b18184.168.221.71
2013-03-04 10:16:440 / 4http://douate.com/count9.php?9881c89850.63.202.89

Last 6 reports on domain: www.blogde.info

Date Alerts / IDS URL IP
2013-02-08 07:59:120 / 2http://www.blogde.info/file.aspx?file=17176.223.126.202
2013-02-08 07:59:100 / 4http://www.blogde.info/file.aspx?file=1055176.223.126.202
2013-01-16 17:52:260 / 3http://www.blogde.info/file.aspx?file=1030176.223.126.202
2013-01-16 17:52:090 / 3http://www.blogde.info/file.aspx?file=13176.223.126.202
2012-11-07 19:39:300 / 4http://www.blogde.info/file.aspx?file=200168.178.232.99
2012-11-06 08:55:500 / 4http://www.blogde.info/file.aspx?file=200468.178.232.99



JavaScript

Executed Scripts (15)


Executed Evals (0)


Executed Writes (5)

#1 JavaScript::Write (size: 44, repeated: 1)

<div style="display:inline" id="oV10"></div>

#2 JavaScript::Write (size: 18658, repeated: 1)

<div style="width:480px;"><div style="font-size:14px;font-weight:bold;color:#000;padding-left:10px;padding-top:5px;padding-bottom:2px;"><a style="text-decoration:none;color:#000;" TARGET="_blank" href="https://www.google.com/adsense/support/bin/request.py?contact=abg_afc&url=http://blogde.info/&hl=no&client=ca-dp-godaddy1_xml&gl=NO" >Ads</a></div><div style="background-color:#ffffff;"><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CF-vT_WGYUMedF8OssQb-_4AwgpqikQTypLWUacCNtwEQASDY97IDKApQ_bqD3_z_____AWDD3KSFmBigAfbs8N4DyAEBqAMBqgRbT9ABkw6zMDjs6snQP-qNTqpglecf4Ub-zWqt79Q8N-t3AGEErUwi1XIMmDymBy6m03FTN98PVAtkgrvk7Lw9ODpblh2MkoopY0xsptgbs7Xko5Z4bHzoMZyhN4gGAQ&num=1&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_1c_5zSXj2i-6LIg2zj3So1pXR5uw&adurl=http://systemtools.winzip.com/ro/registry-cleaner.html%3Ftheme%3Dfixer%26os%3Dwindows%2B7&client=ca-dp-godaddy1_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="registry-repair.winzip.com" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">Registry Repair Windows 7</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CF-vT_WGYUMedF8OssQb-_4AwgpqikQTypLWUacCNtwEQASDY97IDKApQ_bqD3_z_____AWDD3KSFmBigAfbs8N4DyAEBqAMBqgRbT9ABkw6zMDjs6snQP-qNTqpglecf4Ub-zWqt79Q8N-t3AGEErUwi1XIMmDymBy6m03FTN98PVAtkgrvk7Lw9ODpblh2MkoopY0xsptgbs7Xko5Z4bHzoMZyhN4gGAQ&num=1&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_1c_5zSXj2i-6LIg2zj3So1pXR5uw&adurl=http://systemtools.winzip.com/ro/registry-cleaner.html%3Ftheme%3Dfixer%26os%3Dwindows%2B7&client=ca-dp-godaddy1_xml" class="sponsorurl" style="cursor:pointer;"	title="registry-repair.winzip.com" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">registry-repair.winzip.com</a><div style="padding-top:0px;padding-bottom:1px;">(Recommended) Free Download. Repair Windows 7 registry in 2 minutes</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CGaLm_WGYUMedF8OssQb-_4AwjPyA1QK0h9vlNMCNtwEQAiDY97IDKApQmbCBtvz_____AWDD3KSFmBigAdTb2OUDyAEBqQKEgjZfQ3W1PqgDAaoEUk_QMesBszM47OrJ0D_qjU6qYJXnH-FG_s1qre_UPDfrdwBhBK1MItVyDJg8pgcuptNxKzTfZ1X3rWgy6kJ51kEyWT4ed1eXKRm5L_Y4HYPfZbiIBgE&num=2&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_0G6bdKBBJHWybxd3BeWAp8-8yuuw&adurl=http://www.prime-date.no/treg/%3Fsrc%3DNO_SEM_GOOG_CONT_100000_1007_booster_neu&client=ca-dp-godaddy1_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.prime-date.no" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">Damer søker Menn</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CGaLm_WGYUMedF8OssQb-_4AwjPyA1QK0h9vlNMCNtwEQAiDY97IDKApQmbCBtvz_____AWDD3KSFmBigAdTb2OUDyAEBqQKEgjZfQ3W1PqgDAaoEUk_QMesBszM47OrJ0D_qjU6qYJXnH-FG_s1qre_UPDfrdwBhBK1MItVyDJg8pgcuptNxKzTfZ1X3rWgy6kJ51kEyWT4ed1eXKRm5L_Y4HYPfZbiIBgE&num=2&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_0G6bdKBBJHWybxd3BeWAp8-8yuuw&adurl=http://www.prime-date.no/treg/%3Fsrc%3DNO_SEM_GOOG_CONT_100000_1007_booster_neu&client=ca-dp-godaddy1_xml" class="sponsorurl" style="cursor:pointer;"	title="www.prime-date.no" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">www.prime-date.no</a><div style="padding-top:0px;padding-bottom:1px;">Norges nye Datingside. Prøv Oss I dag.</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CyG1L_WGYUMedF8OssQb-_4Awoenc_wL56PKLQuGtsvtUEAMg2PeyAygKUNvt2ZwCYMPcpIWYGKAB37v9_APIAQGpAnEaunJAZYc-qAMBqgRcT9ABy8WtKQPUWHraVuSORqlh3qAY6U8rdmnF9n3nJZBrAGVOuExv23EEmz3tQCmu2jGEttyOlgiqSDPg63X608Snf_Z0aGPCGsOa5Zgbd4QSoJY4PIwO1e_PquqIBgE&num=3&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_3ZqvqHj80MejeM1gCvojwTBqLqww&adurl=http://www.kompletthome.no/k/kcf.aspx%3Fid%3D9132&client=ca-dp-godaddy1_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="KomplettHome.no/kjøkkenutstyr" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">Tilbud Kjøkkenutstyr</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CyG1L_WGYUMedF8OssQb-_4Awoenc_wL56PKLQuGtsvtUEAMg2PeyAygKUNvt2ZwCYMPcpIWYGKAB37v9_APIAQGpAnEaunJAZYc-qAMBqgRcT9ABy8WtKQPUWHraVuSORqlh3qAY6U8rdmnF9n3nJZBrAGVOuExv23EEmz3tQCmu2jGEttyOlgiqSDPg63X608Snf_Z0aGPCGsOa5Zgbd4QSoJY4PIwO1e_PquqIBgE&num=3&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_3ZqvqHj80MejeM1gCvojwTBqLqww&adurl=http://www.kompletthome.no/k/kcf.aspx%3Fid%3D9132&client=ca-dp-godaddy1_xml" class="sponsorurl" style="cursor:pointer;"	title="KomplettHome.no/kjøkkenutstyr" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">KomplettHome.no/kjøkkenutstyr</a><div style="padding-top:0px;padding-bottom:1px;">Rabatt stavmikser, kjøkkenmaskin mm Sjekk utvalget i vÃ¥r nye nettbutikk</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CJtDy_WGYUMedF8OssQb-_4AwpvLBzgKWto_tM9TM140-EAQg2PeyAygKUNq-rLwGYMPcpIWYGKAB94Ge_wPIAQGoAwGqBFFP0HGySrM1OOzqydA_6o1OqmCV5x_hRv7Naq3v1Dw363cAYQStTCLVcgyYPKYHLqbTcSs032dV961oMupCedZBMlk-HndXlykZuS_2OB26uMOIBgE&num=4&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_3MEHNP3zQqYfwWUZzRt5dGjOo9Pg&adurl=http://www.autotask.com/landing/FTS2.htm%3Fsource%3DGG_IK_SERVICEDESKSOFTWARE_FTS2_V1&client=ca-dp-godaddy1_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.Autotask.com" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">Service Desk Software</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CJtDy_WGYUMedF8OssQb-_4AwpvLBzgKWto_tM9TM140-EAQg2PeyAygKUNq-rLwGYMPcpIWYGKAB94Ge_wPIAQGoAwGqBFFP0HGySrM1OOzqydA_6o1OqmCV5x_hRv7Naq3v1Dw363cAYQStTCLVcgyYPKYHLqbTcSs032dV961oMupCedZBMlk-HndXlykZuS_2OB26uMOIBgE&num=4&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_3MEHNP3zQqYfwWUZzRt5dGjOo9Pg&adurl=http://www.autotask.com/landing/FTS2.htm%3Fsource%3DGG_IK_SERVICEDESKSOFTWARE_FTS2_V1&client=ca-dp-godaddy1_xml" class="sponsorurl" style="cursor:pointer;"	title="www.Autotask.com" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">www.Autotask.com</a><div style="padding-top:0px;padding-bottom:1px;">You Can&#39;t Manage What You Can&#39;t See Get Complete Visibility w/ Autotask</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CrZeg_WGYUMedF8OssQb-_4Awqrus7gHijtj0KsCNtwEQBSDY97IDKApQgf3o7ARgw9ykhZgYoAGimIf-A8gBAakCcRq6ckBlhz6oAwGqBFNP0AHJo6MpBdRYetpW5I5GqWHeoBjpTyt2acX2feclkGsAZU64TG_bcQSbPe1AKa7aMYS23I6-CVGB2RK4kD04va99XneTpt8auW-myPtx9F4IlYgGAQ&num=5&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_3C62uCzsE9gl-N9BC36lZcxaVodg&adurl=http://www.proisp.no/cloud-vps-server/&client=ca-dp-godaddy1_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.proisp.no" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">Virtuell server 125,-/mnd</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CrZeg_WGYUMedF8OssQb-_4Awqrus7gHijtj0KsCNtwEQBSDY97IDKApQgf3o7ARgw9ykhZgYoAGimIf-A8gBAakCcRq6ckBlhz6oAwGqBFNP0AHJo6MpBdRYetpW5I5GqWHeoBjpTyt2acX2feclkGsAZU64TG_bcQSbPe1AKa7aMYS23I6-CVGB2RK4kD04va99XneTpt8auW-myPtx9F4IlYgGAQ&num=5&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_3C62uCzsE9gl-N9BC36lZcxaVodg&adurl=http://www.proisp.no/cloud-vps-server/&client=ca-dp-godaddy1_xml" class="sponsorurl" style="cursor:pointer;"	title="www.proisp.no" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">www.proisp.no</a><div style="padding-top:0px;padding-bottom:1px;">Øyeblikkelig tilgang. Gratis IPv6. Ingen binding eller etablering!</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=C28H-_WGYUMedF8OssQb-_4Awgp27lALSpP2JLJD-uZAXEAYg2PeyAygKUPrwx8oGYMPcpIWYGKAB5oG-5QPIAQGpAnEaunJAZYc-qAMBqgRZT9Ax5ZivKQbUWHraVuSORqlh3qAY6U8rdmnF9n3nJZBrAGVOuExv23EEmz3tQCmu2jGE9tyLngh2TZc0q5IoOi9ZhR-fkBjfGvlv5hzudEDn44bYei4IDUOIBgE&num=6&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_1WWypwLojOwA81CLK3dtt030BrrQ&adurl=http://abo.bedrehelse.com/BH120401/gaw/%3Flmad%3Dtekstannonser%26utm_source%3Dgaw%26utm_campaign%3DBH120401%26utm_content%3D96BH_05Helse%26utm_medium%3Dtxt&client=ca-dp-godaddy1_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="bedrehelse.com" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">Bedre Helse - Kun 269</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=C28H-_WGYUMedF8OssQb-_4Awgp27lALSpP2JLJD-uZAXEAYg2PeyAygKUPrwx8oGYMPcpIWYGKAB5oG-5QPIAQGpAnEaunJAZYc-qAMBqgRZT9Ax5ZivKQbUWHraVuSORqlh3qAY6U8rdmnF9n3nJZBrAGVOuExv23EEmz3tQCmu2jGE9tyLngh2TZc0q5IoOi9ZhR-fkBjfGvlv5hzudEDn44bYei4IDUOIBgE&num=6&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_1WWypwLojOwA81CLK3dtt030BrrQ&adurl=http://abo.bedrehelse.com/BH120401/gaw/%3Flmad%3Dtekstannonser%26utm_source%3Dgaw%26utm_campaign%3DBH120401%26utm_content%3D96BH_05Helse%26utm_medium%3Dtxt&client=ca-dp-godaddy1_xml" class="sponsorurl" style="cursor:pointer;"	title="bedrehelse.com" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">bedrehelse.com</a><div style="padding-top:0px;padding-bottom:1px;">9 utgaver kun 269kr. Du sparer 382. FÃ¥ med flott salatspinner i gave!</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://googleads.g.doubleclick.net/aclk?sa=L&ai=CtGxS_WGYUMedF8OssQb-_4Awq667_QLD9oiKLu3NkJ4UEAcg2PeyAygKUJfZ940GYMPcpIWYGMgBAakCcRq6ckBlhz6oAwGqBFxP0FGf96gpB9RYetpW5I5GqWHeoBjpTyt2acX2feclkGsAZU64TG_bcQSbPe1AKa7aMYS23I6WCKhIM6q8HfPTxKd_9nRoY8Iaw5rlmBt3hBKgljg8jA7Vyb6-9A&num=7&sig=AOD64_3n5uobYSiUBRbV_wGVXf5hOaP6QA&adurl=http://www.tassimo.no/oppdag/886&client=ca-dp-godaddy1_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.tassimo.no" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">Tassimo Nettbutikk</a> <a target="_blank" href="http://googleads.g.doubleclick.net/aclk?sa=L&ai=CtGxS_WGYUMedF8OssQb-_4Awq667_QLD9oiKLu3NkJ4UEAcg2PeyAygKUJfZ940GYMPcpIWYGMgBAakCcRq6ckBlhz6oAwGqBFxP0FGf96gpB9RYetpW5I5GqWHeoBjpTyt2acX2feclkGsAZU64TG_bcQSbPe1AKa7aMYS23I6WCKhIM6q8HfPTxKd_9nRoY8Iaw5rlmBt3hBKgljg8jA7Vyb6-9A&num=7&sig=AOD64_3n5uobYSiUBRbV_wGVXf5hOaP6QA&adurl=http://www.tassimo.no/oppdag/886&client=ca-dp-godaddy1_xml" class="sponsorurl" style="cursor:pointer;"	title="www.tassimo.no" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">www.tassimo.no</a><div style="padding-top:0px;padding-bottom:1px;">Kaffe, te og varm sjokolade kapsler Kjøp nÃ¥ i ny nettbutikk!</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CnDxj_WGYUMedF8OssQb-_4AwoMq5XfK4oJ8fwI23ARAIINj3sgMoClD-xfSRA2DD3KSFmBigAd6TyfsDyAEBqQJLhjMbFQOHPqgDAaoEVk_QcZ2dqikI1Fh62lbkjkapYd6gGOlPK3ZpxfZ95yWQawBlTrhMb9txBJs97UAprtoxhP7cBbW7j2gy7EJ51sDGsn1kgpAiKhl9muXYGzdQB6U0_pqfiAYB&num=8&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_30OeRz2_3lafW8Vb586AEPQO-tOQ&adurl=http://www.123hjemmeside.no/pages/receive.aspx%3Fpartnerkey%3Dnogoogle:Search_GenHjem_Website_11W33_B%26target%3Dftp3:crea&client=ca-dp-godaddy1_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.123hjemmeside.no" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">Lag et GRATIS website</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CnDxj_WGYUMedF8OssQb-_4AwoMq5XfK4oJ8fwI23ARAIINj3sgMoClD-xfSRA2DD3KSFmBigAd6TyfsDyAEBqQJLhjMbFQOHPqgDAaoEVk_QcZ2dqikI1Fh62lbkjkapYd6gGOlPK3ZpxfZ95yWQawBlTrhMb9txBJs97UAprtoxhP7cBbW7j2gy7EJ51sDGsn1kgpAiKhl9muXYGzdQB6U0_pqfiAYB&num=8&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_30OeRz2_3lafW8Vb586AEPQO-tOQ&adurl=http://www.123hjemmeside.no/pages/receive.aspx%3Fpartnerkey%3Dnogoogle:Search_GenHjem_Website_11W33_B%26target%3Dftp3:crea&client=ca-dp-godaddy1_xml" class="sponsorurl" style="cursor:pointer;"	title="www.123hjemmeside.no" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">www.123hjemmeside.no</a><div style="padding-top:0px;padding-bottom:1px;">Ingen annonser, uten vanskeligheter og med eget domene. Prøv gratis nÃ¥!</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://googleads.g.doubleclick.net/aclk?sa=L&ai=Cppaw_WGYUMedF8OssQb-_4AwzqWruwKuvfugOM6azbUaEAkg2PeyAygKUNTY8bcEYMPcpIWYGMgBAakChII2X0N1tT6oAwGqBFhP0FGSf7M4OOzqydA_6o1OqmCV5x_hRv7Naq3v1Dw363cAYQStTCLVcgyYPKYHLqbTcWs02kdU5H4HK_lAbNTTxKF_9nTplylZuW8iLRh3QKezdj7qTCDY&num=9&sig=AOD64_1793DvnxFEvAJubHZE1oXKCQbZKg&adurl=http://www.philips.no/c/Lysterapi/simulerer-farget-soloppgang-hf3520_01/prd/%3Forigin%3D%7Cmckv%7C%26pcrid%3D15022296366%7Cplid%7Cblogde.info&client=ca-dp-godaddy1_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.philips.no/wakeuplight" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">Wake-up Designlys</a> <a target="_blank" href="http://googleads.g.doubleclick.net/aclk?sa=L&ai=Cppaw_WGYUMedF8OssQb-_4AwzqWruwKuvfugOM6azbUaEAkg2PeyAygKUNTY8bcEYMPcpIWYGMgBAakChII2X0N1tT6oAwGqBFhP0FGSf7M4OOzqydA_6o1OqmCV5x_hRv7Naq3v1Dw363cAYQStTCLVcgyYPKYHLqbTcWs02kdU5H4HK_lAbNTTxKF_9nTplylZuW8iLRh3QKezdj7qTCDY&num=9&sig=AOD64_1793DvnxFEvAJubHZE1oXKCQbZKg&adurl=http://www.philips.no/c/Lysterapi/simulerer-farget-soloppgang-hf3520_01/prd/%3Forigin%3D%7Cmckv%7C%26pcrid%3D15022296366%7Cplid%7Cblogde.info&client=ca-dp-godaddy1_xml" class="sponsorurl" style="cursor:pointer;"	title="www.philips.no/wakeuplight" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">www.philips.no/wakeuplight</a><div style="padding-top:0px;padding-bottom:1px;">Mykt morgenlys pÃ¥ soverommet! Sjekk Philips offisielle nettsted.</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CizHA_WGYUMedF8OssQb-_4AwiPaciAKwheXMMMCNtwEQCiDY97IDKApQzaeZ3gJgw9ykhZgYoAHg-uvkA8gBAakChII2X0N1tT6oAwGqBFhP0GHjObM7OOzqydA_6o1OqmCV5x_hRv7Naq3v1Dw363cAYQStTCLVcgyYPKYHLqbTcSs030dUwi1WLPlAbNTTxKF_9nTplylZuW8iLRh3QKezdj6Me0DJiAYB&num=10&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_3QJZXbLdoMzIXSPQSpcuAoFkW4_w&adurl=http://ad-server.one.com/click%3Fagency%3Dgoogle-con-txt-no%26locale%3Dno&client=ca-dp-godaddy1_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.one.com" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">Lag din egen hjemmeside</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CizHA_WGYUMedF8OssQb-_4AwiPaciAKwheXMMMCNtwEQCiDY97IDKApQzaeZ3gJgw9ykhZgYoAHg-uvkA8gBAakChII2X0N1tT6oAwGqBFhP0GHjObM7OOzqydA_6o1OqmCV5x_hRv7Naq3v1Dw363cAYQStTCLVcgyYPKYHLqbTcSs030dUwi1WLPlAbNTTxKF_9nTplylZuW8iLRh3QKezdj6Me0DJiAYB&num=10&cid=5GhYzGUCCD4I4SMXb4YYnq2T&sig=AOD64_3QJZXbLdoMzIXSPQSpcuAoFkW4_w&adurl=http://ad-server.one.com/click%3Fagency%3Dgoogle-con-txt-no%26locale%3Dno&client=ca-dp-godaddy1_xml" class="sponsorurl" style="cursor:pointer;"	title="www.one.com" onclick="processClick('Wzp9ZGNkWzD9WzZ9ZPMcCFMyCFMhCFMwqaR9AmpkZmZ0BQNkAwDlAQZlZmH2BPMyMm0lZQRlZGRjAGR4ZQZ1AvMwrG0kWat9WaEaCGRzMzqjCGNzoab9ZPMzpQ0lBGtznT5aCGRzpUN9DHVzqTL9AvMjpm03AmRmZmD4ZQR2AQV0ZmVmAGL4-1');">www.one.com</a><div style="padding-top:0px;padding-bottom:1px;">3klikk - din egen hjemmeside &amp; blog Over 950.000 webhoteller online</div></div><div style="clear:both;"></div></div></div>

#3 JavaScript::Write (size: 109, repeated: 1)

<input style="width:0px; top:0px; position:absolute; visibility:hidden;" id="oV6" onchange="fV8(fV1,5,true)">

#4 JavaScript::Write (size: 433, repeated: 1)

<input type="hidden" name="kot" value="AG06ipAGmzQX78P74syEaSoTFNQKmOCKbgoTCMCU0OmSubMCFcb6zAod-C4AfRgDIAA4DVCqraIBULmqqA5Q9_GoDlCphb8OULnw4g5QzP6YD1De684PUMi63A9QyrrcD1DMutwPULWr9g9Q4oD3D1CEurURULm6tRFQtbzlEVCEnecSULz27hJQwY7OFVC-5ekVULe95RZQwLuQHFCBgv0gUODZkSFQkumRIVCDnK0pULucrSlQv6__Q1CUkJOPAVCytJSVAVDL5oO5AVDJlfPAAVDclvPAAVDR7o7SAVCaiMydA1DFg9OdA1CxhNidA1C0hNidA2iqraIBcVJNOS7-pwRQggETCIeQ0umSubMCFUNWzAod_j8ABpEBJjf6EAz7mIg"/>

#5 JavaScript::Write (size: 320, repeated: 1)

<script src="http://googleads.g.doubleclick.net/apps/domainpark/domainpark.cgi?callback=_google_json_callback&output=js&client=ca-dp-godaddy1_xml&domain_name=www.blogde.info&hl=no&channel=pid-godaddy-split-js1&s=www.blogde.info&num_ads=10&num_radlinks=0&dt=1352163837300&u_tz=60&u_his=1&u_h=885&u_w=1176&frm=0"></script>


HTTP Transactions (15)


Request Response
GET /file.aspx?file=21 HTTP/1.1

Host: www.blogde.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Date: Tue, 06 Nov 2012 01:03:56 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Location: /default.html?aspxerrorpath=/file.aspx
Cache-Control: private
Content-Length: 155
GET /script/jquery-1.3.1.min.js HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.blogde.info/default.html?aspxerrorpath=/file.aspx
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Last-Modified: Tue, 13 Jul 2010 18:55:42 GMT
Etag: &quot;0cbf3fdbc22cb1:316&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Varnish: 972597056 972517225
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=3888000
Date: Tue, 06 Nov 2012 01:03:57 GMT
Content-Length: 19149
Connection: keep-alive
GET /apps/domainpark/show_afd_ads.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.blogde.info/default.html?aspxerrorpath=/file.aspx
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Last-Modified: Wed, 31 Oct 2012 23:10:23 GMT
Date: Mon, 05 Nov 2012 02:05:25 GMT
Expires: Tue, 06 Nov 2012 02:05:25 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Server: domainserver
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
Content-Length: 1932
Age: 82712
Cache-Control: public, max-age=86400
GET /default.html?aspxerrorpath=/file.aspx HTTP/1.1

Host: www.blogde.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Date: Tue, 06 Nov 2012 01:03:56 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: fc=fcVal=7713348016424323568; domain=blogde.info; expires=Fri, 01-Jan-2038 07:00:00 GMT; path=/
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Content-Length: 24488
GET /apps/domainpark/domainpark.cgi?callback=_google_json_callback&output=js&client=ca-dp-godaddy1_xml&domain_name=www.blogde.info&hl=no&channel=pid-godaddy-split-js1&s=www.blogde.info&num_ads=10&num_radlinks=0&dt=1352163837300&u_tz=60&u_his=1&u_h=885&u_w=1176&frm=0 HTTP/1.1

Host: googleads.g.doubleclick.net
GET /apps/domainpark/domainpark.cgi?callback=_google_json_callback&amp;output=js&amp;client=ca-dp-godaddy1_xml&amp;domain_name=www.blogde.info&amp;hl=no&amp;channel=pid-godaddy-split-js1&amp;s=www.blogde.info&amp;num_ads=10&amp;num_radlinks=0&amp;dt=1352163837300&amp;u_tz=60&amp;u_his=1&amp;u_h=885&amp;u_w=1176&amp;frm=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.blogde.info/default.html?aspxerrorpath=/file.aspx
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
HTTP/1.1 200 OK

Content-Type: application/javascript; charset=UTF-8
Content-Disposition: inline
P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 06 Nov 2012 01:03:57 GMT
Server: domainserver
Cache-Control: private
Content-Length: 4797
X-XSS-Protection: 1; mode=block
GET /images/logo_gd3.jpg HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.blogde.info/default.html?aspxerrorpath=/file.aspx
HTTP/1.1 200 OK

Content-Type: image/jpeg
Last-Modified: Wed, 26 Sep 2012 20:33:00 GMT
Etag: &quot;0669e1e269ccd1:311&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 5837
X-Varnish: 597314952 597289102
Cache-Control: max-age=3888000
Date: Tue, 06 Nov 2012 01:03:57 GMT
Connection: keep-alive
GET /images/or2.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.blogde.info/default.html?aspxerrorpath=/file.aspx
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Wed, 26 Sep 2012 21:03:06 GMT
Etag: &quot;02114532a9ccd1:319&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 987
X-Varnish: 594459974 594443862
Cache-Control: max-age=3888000
Date: Tue, 06 Nov 2012 01:03:57 GMT
Connection: keep-alive
GET /images/bul_bluesquare.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.blogde.info/default.html?aspxerrorpath=/file.aspx
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Fri, 25 Jul 2008 21:49:00 GMT
Etag: &quot;02ec3fa0eec81:31d&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 126
X-Varnish: 972599185 972517310
Cache-Control: max-age=3888000
Date: Tue, 06 Nov 2012 01:03:57 GMT
Connection: keep-alive
GET /images/bul_blacksquare.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.blogde.info/default.html?aspxerrorpath=/file.aspx
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Fri, 25 Jul 2008 21:49:00 GMT
Etag: &quot;02ec3fa0eec81:31d&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 126
X-Varnish: 972599184 972517252
Cache-Control: max-age=3888000
Date: Tue, 06 Nov 2012 01:03:57 GMT
Connection: keep-alive
GET /images/GDPPCSprite.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.blogde.info/default.html?aspxerrorpath=/file.aspx
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Wed, 26 Sep 2012 21:18:10 GMT
Etag: &quot;095e76d2c9ccd1:316&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 8912
X-Varnish: 594459976 594443865
Cache-Control: max-age=3888000
Date: Tue, 06 Nov 2012 01:03:57 GMT
Connection: keep-alive
GET /images/spacer.gif?q=L3MkWGAkAmpkZmZ0BQNkAwDlAQZlZmH2BPHlAzpyZ3RkZQRyZwMyWGAkWGV2ovHmpGNyZwMwWGAkZPHlAzIzWGAkZPHlAzLyZ3RyZwMyMlHmpGVjZGVkZGN1ZGtjZmH2WGV2L3xyZ3RkWGV2qTpyZ3RkWGV2rPHmpFHlAzMapPHmpGNyZwMhrvHmpGNyZwMzpPHmpGV5BPHlAzuhMlHmpGRyZwM0MvHmpGLyZwMjpPHmpHSPWGV2L2tyZ3R2-1 HTTP/1.1

Host: www.blogde.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.blogde.info/default.html?aspxerrorpath=/file.aspx
Cookie: fc=fcVal=7713348016424323568
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: no-cache
Content-Length: 43
Last-Modified: Wed, 08 Feb 2006 19:53:54 GMT
Accept-Ranges: bytes
Etag: &quot;0b5cc63e92cc61:6a6&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 01:03:57 GMT
GET /sd?s=95331&f=1 HTTP/1.1

Host: as.casalemedia.com
GET /sd?s=95331&amp;f=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.blogde.info/default.html?aspxerrorpath=/file.aspx
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html; charset=iso-8859-1
Server: Apache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Location: http://as.casalemedia.com/sd?s=95331&amp;f=1&amp;C=1
Content-Length: 236
Expires: Tue, 06 Nov 2012 01:03:58 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 06 Nov 2012 01:03:58 GMT
Connection: keep-alive
Set-Cookie: CMID=LUJ-PkPS1I0AAHNE5sYAAAAT;domain=casalemedia.com;path=/;expires=Wed, 06 Nov 2013 01:03:58 GMT CMPS=134;domain=casalemedia.com;path=/;expires=Mon, 04 Feb 2013 01:03:58 GMT CMPP=008;domain=casalemedia.com;path=/;expires=Mon, 04 Feb 2013 01:03:58 GMT
GET /sd?s=95331&f=1&C=1 HTTP/1.1

Host: as.casalemedia.com
GET /sd?s=95331&amp;f=1&amp;C=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.blogde.info/default.html?aspxerrorpath=/file.aspx
Cookie: CMID=LUJ-PkPS1I0AAHNE5sYAAAAT; CMPS=134; CMPP=008
HTTP/1.1 200 OK

Content-Type: text/javascript
Server: Apache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Content-Length: 6744
Expires: Tue, 06 Nov 2012 01:03:58 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 06 Nov 2012 01:03:58 GMT
Connection: keep-alive
Set-Cookie: CMID=LUJ-PkPS1I0AAHNE5sYAAAAT;domain=casalemedia.com;path=/;expires=Wed, 06 Nov 2013 01:03:58 GMT CMPS=134;domain=casalemedia.com;path=/;expires=Mon, 04 Feb 2013 01:03:58 GMT CMPP=008;domain=casalemedia.com;path=/;expires=Mon, 04 Feb 2013 01:03:58 GMT CMS=95331&amp;1352163838;domain=casalemedia.com;path=/;expires=Thu, 06 Dec 2012 01:03:58 GMT CMST=UJhh-lCYYf4B;domain=casalemedia.com;path=/;expires=Wed, 07 Nov 2012 01:03:58 GMT CMSC=UJhh-g**;domain=casalemedia.com;path=/; CMDD=AAF0TAE*;domain=casalemedia.com;path=/;expires=Wed, 07 Nov 2012 01:03:58 GMT CMD1=AAEtrVCYYf4AAXRjAAKBdAEAAA**;domain=casalemedia.com;path=/;expires=Thu, 06 Dec 2012 01:03:58 GMT
GET /favicon.ico HTTP/1.1

Host: www.blogde.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: fc=fcVal=7713348016424323568
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Date: Tue, 06 Nov 2012 01:03:58 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Content-Length: 26
GET /favicon.ico HTTP/1.1

Host: www.blogde.info

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: fc=fcVal=7713348016424323568
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Date: Tue, 06 Nov 2012 01:04:01 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Content-Length: 26