Overview

URLhttp://tea-in-turkey.com/
IP68.178.232.100
ASNAS26496 GoDaddy.com, LLC
Location United States
Report completed2012-11-06 03:43:45 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-06 03:43:14 urlQuery Client 195.159.219.101ET MALWARE Casalemedia Spyware Reporting URL Visited 2
2012-11-06 03:43:14 urlQuery Client 195.159.219.101ET MALWARE Casalemedia Spyware Reporting URL Visited 3
2012-11-06 03:43:14 urlQuery Client 195.159.219.101ET MALWARE Casalemedia Spyware Reporting URL Visited 2
2012-11-06 03:43:14 urlQuery Client 195.159.219.101ET MALWARE Casalemedia Spyware Reporting URL Visited 3
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 68.178.232.100

Date Alerts / IDS URL IP
2013-02-02 22:14:190 / 4http://jokerswildmissoula.com/?hg=068.178.232.100
2013-02-01 16:20:300 / 4http://spb.info/mail/ru68.178.232.100
2013-02-01 02:40:590 / 4http://bijscode.com/68.178.232.100
2013-02-01 02:35:310 / 4http://frogupdate.com/68.178.232.100
2013-02-01 02:34:270 / 4http://frogdownload.com/68.178.232.100
2013-01-31 04:01:100 / 4http://www.bestdressedtablecloths.com/chksearch.php68.178.232.100

Last 6 reports on ASN: AS26496 GoDaddy.com, LLC

Date Alerts / IDS URL IP
2013-02-13 12:00:170 / 1http://www.4frnt.com/skis/madonna72.167.201.25
2013-02-13 12:00:100 / 5http://81266966.com/SC50.63.202.76
2013-02-13 11:56:170 / 3http://mkvrpknidkurcrftiqsfjqdxbn.com/lQmFT2XVodhgdj0xLjEmaWQ9MTg2Njk2MTgxJmFpZD0zMDQ5OCZzaWQ9M (...)50.62.12.103
2013-02-13 11:55:040 / 4http://bonjourbijou.com/?hg=050.63.202.43
2013-02-13 11:53:450 / 3http://ieujje239cm.com/282/269.html50.62.12.103
2013-02-13 11:53:440 / 3http://ieujje239cm.com/358/263.html50.62.12.103

Last 1 reports on domain: tea-in-turkey.com

Date Alerts / IDS URL IP
2012-12-09 11:42:540 / 4http://tea-in-turkey.com/68.178.232.100



JavaScript

Executed Scripts (15)


Executed Evals (0)


Executed Writes (5)

#1 JavaScript::Write (size: 44, repeated: 1)

<div style="display:inline" id="oV10"></div>

#2 JavaScript::Write (size: 19084, repeated: 1)

<div style="width:480px;"><div style="font-size:14px;font-weight:bold;color:#000;padding-left:10px;padding-top:5px;padding-bottom:2px;"><a style="text-decoration:none;color:#000;" TARGET="_blank" href="https://www.google.com/adsense/support/bin/request.py?contact=abg_afc&url=http://tea-in-turkey.com/&hl=no&client=ca-dp-godaddy2_xml&gl=NO" >Ads</a></div><div style="background-color:#ffffff;"><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CG8ylQHmYUNzUMYWxsQbJxYHQBNPp3sUEs_2Hwl_AjbcBEAEg9veyAygKUI29_rL6_____wFgw9ykhZgYoAHN6aXdA8gBAakCS4YzGxUDhz6oAwGqBGlP0BeAme1DEDzzG6VCi_Kw2v64PbpHwNwAr34wqF6mTi0dGJ7JQ3hE7VLW5fwdYVnqQHb8RVOKXMn2RWQTVaorwqYrGfqqiR-bVRxfwR_FZBrY9XuvgXD5Qv2lTWEqnLKmKGxX6pNM3tuIBgE&num=1&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_1lcrrUP9lmPp93TSq8d5ihguSc1g&adurl=http://fairbanker.com/no/kredittkort%3Ftrac%3Dgcon45tt&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="FairBanker.com/Sjekk-Topplisten" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">&quot;Et Kredittkort er Ikke</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CG8ylQHmYUNzUMYWxsQbJxYHQBNPp3sUEs_2Hwl_AjbcBEAEg9veyAygKUI29_rL6_____wFgw9ykhZgYoAHN6aXdA8gBAakCS4YzGxUDhz6oAwGqBGlP0BeAme1DEDzzG6VCi_Kw2v64PbpHwNwAr34wqF6mTi0dGJ7JQ3hE7VLW5fwdYVnqQHb8RVOKXMn2RWQTVaorwqYrGfqqiR-bVRxfwR_FZBrY9XuvgXD5Qv2lTWEqnLKmKGxX6pNM3tuIBgE&num=1&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_1lcrrUP9lmPp93TSq8d5ihguSc1g&adurl=http://fairbanker.com/no/kredittkort%3Ftrac%3Dgcon45tt&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="FairBanker.com/Sjekk-Topplisten" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">FairBanker.com/Sjekk-Topplisten</a><div style="padding-top:0px;padding-bottom:1px;">Bare et Kredittkort&quot; Velg billigste Og Beste. Sammenlign TOPPlisten nå!</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=COwzSQHmYUNzUMYWxsQbJxYHQBLmTjJMCiY7tzBfAjbcBEAIg9veyAygKUNK1-uv4_____wFgw9ykhZgYoAHP-uztA8gBAakChII2X0N1tT6oAwGqBGlP0GfZ6t1DEzzzG6VCi_Kw2v64PbpHwNwAr34wqF6mTi0dGJ7JQ3hE7VLW5fwdYVnqQHb8RVOKXMn2RWQTVaorwqYrGajItCObVRxfwR_FZBrY9XuvgXD5Qv2lTWEqnLKmKGxX6o1rl-mIBgE&num=2&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_0PxSzSir0LTLkdxzfU5D73a2iFtQ&adurl=http://www.plus500.no/%3Fid%3D2093%26tags%3Dg_sr%2BNorwayContent_cp%2BCompetitors_ag%2Btea-in-turkey.com_pl%2Bfxcm.se_ks%2BBroad_mt%2Bd_nt%2B%26%25D7%2590&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.Plus500.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">Plus500" Handelsplattform</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=COwzSQHmYUNzUMYWxsQbJxYHQBLmTjJMCiY7tzBfAjbcBEAIg9veyAygKUNK1-uv4_____wFgw9ykhZgYoAHP-uztA8gBAakChII2X0N1tT6oAwGqBGlP0GfZ6t1DEzzzG6VCi_Kw2v64PbpHwNwAr34wqF6mTi0dGJ7JQ3hE7VLW5fwdYVnqQHb8RVOKXMn2RWQTVaorwqYrGajItCObVRxfwR_FZBrY9XuvgXD5Qv2lTWEqnLKmKGxX6o1rl-mIBgE&num=2&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_0PxSzSir0LTLkdxzfU5D73a2iFtQ&adurl=http://www.plus500.no/%3Fid%3D2093%26tags%3Dg_sr%2BNorwayContent_cp%2BCompetitors_ag%2Btea-in-turkey.com_pl%2Bfxcm.se_ks%2BBroad_mt%2Bd_nt%2B%26%25D7%2590&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="www.Plus500.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">www.Plus500.no</a><div style="padding-top:0px;padding-bottom:1px;">CFDs, Forex, aksjer, opsjoner og futures. 200EUR Bonus, Gratis Demo!</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=C7iG9QHmYUNzUMYWxsQbJxYHQBMjU9P0D4J-p0mPAjbcBEAMg9veyAygKUIvP-pYFYMPcpIWYGKABkJ6czwPIAQGoAwGqBGlP0Hen6dtDEjzzG6VCi_Kw2v64PbpHwNwAr34wqF6mTi0dGJ7JQ3hE7VLW5fwdYVnqQHb8RVOKXMn2RWQTVaorwqYrGYGV9w2bVRxfwR_FZBrY9XuvgXD5Qv2lTWEqnLKmKGxX6tgQrcmIBgE&num=3&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_0eOgd1DD-YNmi_mUVpD7pdVEidpA&adurl=http://go.ufxmarkets.com/ReDir.aspx%3FTLID%3D15832%26utm_source%3Dgoogle%26utm_medium%3Dcontent%26utm_term%3Dtea-in-turkey.com%26utm_content%3DInternet%2520Money_04092012_Text%26utm_campaign%3DDK_NO_SE_English_Pro_Text%26ADServer%3D26720589936%26ADData%3Dmake%2520cash%2520online&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.UFXMarkets.com/5000Bonus" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">Get Upto $5000 For Free</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=C7iG9QHmYUNzUMYWxsQbJxYHQBMjU9P0D4J-p0mPAjbcBEAMg9veyAygKUIvP-pYFYMPcpIWYGKABkJ6czwPIAQGoAwGqBGlP0Hen6dtDEjzzG6VCi_Kw2v64PbpHwNwAr34wqF6mTi0dGJ7JQ3hE7VLW5fwdYVnqQHb8RVOKXMn2RWQTVaorwqYrGYGV9w2bVRxfwR_FZBrY9XuvgXD5Qv2lTWEqnLKmKGxX6tgQrcmIBgE&num=3&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_0eOgd1DD-YNmi_mUVpD7pdVEidpA&adurl=http://go.ufxmarkets.com/ReDir.aspx%3FTLID%3D15832%26utm_source%3Dgoogle%26utm_medium%3Dcontent%26utm_term%3Dtea-in-turkey.com%26utm_content%3DInternet%2520Money_04092012_Text%26utm_campaign%3DDK_NO_SE_English_Pro_Text%26ADServer%3D26720589936%26ADData%3Dmake%2520cash%2520online&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="www.UFXMarkets.com/5000Bonus" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">www.UFXMarkets.com/5000Bonus</a><div style="padding-top:0px;padding-bottom:1px;">Start Trading In Forex With UFXMarkets and Get Upto $5000 Free!</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CFB8GQHmYUNzUMYWxsQbJxYHQBIHhp8kCmfO8-jnAjbcBEAQg9veyAygKUI26vpcDYMPcpIWYGKABy929_APIAQGpAkuGMxsVA4c-qAMBqgRmT9AH-c3QQxU88xulQovysNr-uD26R8DcAK9-MKhepk4tHRieyUN4RO1S1uX8HWFZ6kB2_EVTilzJ9kVkE1WqY8I-Lap1rG_UVL7zgCL0Piga2AGSWTExDEF5UE6l39-iRm7deRsMiAYB&num=4&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_3LWslwIEyvThr9aFunWqf1Y3LFdA&adurl=https://www.leasy.no/laan-penger.aspx%3Fcid%3D302201010100&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.leasy.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">Innvilget lån på 24 timer</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CFB8GQHmYUNzUMYWxsQbJxYHQBIHhp8kCmfO8-jnAjbcBEAQg9veyAygKUI26vpcDYMPcpIWYGKABy929_APIAQGpAkuGMxsVA4c-qAMBqgRmT9AH-c3QQxU88xulQovysNr-uD26R8DcAK9-MKhepk4tHRieyUN4RO1S1uX8HWFZ6kB2_EVTilzJ9kVkE1WqY8I-Lap1rG_UVL7zgCL0Piga2AGSWTExDEF5UE6l39-iRm7deRsMiAYB&num=4&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_3LWslwIEyvThr9aFunWqf1Y3LFdA&adurl=https://www.leasy.no/laan-penger.aspx%3Fcid%3D302201010100&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="www.leasy.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">www.leasy.no</a><div style="padding-top:0px;padding-bottom:1px;">Eff.rente 34,68%, 12.500, o/5 år, etabl.geb. 695,-, Totalt: 24.226,-</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://googleads.g.doubleclick.net/aclk?sa=L&ai=ChetWQHmYUNzUMYWxsQbJxYHQBJiykI8C4O_z0CnAjbcBEAUg9veyAygKUKWR7dv9_____wFgw9ykhZgYyAEBqQJxGrpyQGWHPqgDAaoEY0_QR-nG10MUPPMbpUKL8rDa_rg9ukfA3ACvfjCoXqZOLR0YnslDeETtUtbl_B1hWepAdvxFU4pcyfZFZBNVqivCpgsYhWOEO4tdGHtu9D7c8y6x06wytflCvaUNtT-ZWDT8aA&num=5&sig=AOD64_3UblO-DAJx6Hj9Yn9RjWk6Y2jiIQ&adurl=http://www.etera.no&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.etera.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">Etera Online backup</a> <a target="_blank" href="http://googleads.g.doubleclick.net/aclk?sa=L&ai=ChetWQHmYUNzUMYWxsQbJxYHQBJiykI8C4O_z0CnAjbcBEAUg9veyAygKUKWR7dv9_____wFgw9ykhZgYyAEBqQJxGrpyQGWHPqgDAaoEY0_QR-nG10MUPPMbpUKL8rDa_rg9ukfA3ACvfjCoXqZOLR0YnslDeETtUtbl_B1hWepAdvxFU4pcyfZFZBNVqivCpgsYhWOEO4tdGHtu9D7c8y6x06wytflCvaUNtT-ZWDT8aA&num=5&sig=AOD64_3UblO-DAJx6Hj9Yn9RjWk6Y2jiIQ&adurl=http://www.etera.no&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="www.etera.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">www.etera.no</a><div style="padding-top:0px;padding-bottom:1px;">Backup til bedrifter som forstår at ikke alle backupløsninger er lik</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=Cddb6QHmYUNzUMYWxsQbJxYHQBKbm5IIDxpmyiUTAjbcBEAYg9veyAygKUIjhtd78_____wFgw9ykhZgYoAHWwKD4A8gBAakCcRq6ckBlhz6oAwGqBGlP0BeQw9RDFzzzG6VCi_Kw2v64PbpHwNwAr34wqF6mTi0dGJ7JQ3hE7VLW5fwdYVnqQHb8RVOKXMn2RWQTVaorwqYrGe_JhCabVRxfwR_FZBrY9XuvgXD5Qv2lTWEqnLKmKGxX6tok6_6IBgE&num=6&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_2BSjEIB72-12qoHJ972qkLozFalw&adurl=http://www.centum.no/&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="Centum.no/Lån.uten.sikkerhet." onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">Refinansiering Regler</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=Cddb6QHmYUNzUMYWxsQbJxYHQBKbm5IIDxpmyiUTAjbcBEAYg9veyAygKUIjhtd78_____wFgw9ykhZgYoAHWwKD4A8gBAakCcRq6ckBlhz6oAwGqBGlP0BeQw9RDFzzzG6VCi_Kw2v64PbpHwNwAr34wqF6mTi0dGJ7JQ3hE7VLW5fwdYVnqQHb8RVOKXMn2RWQTVaorwqYrGe_JhCabVRxfwR_FZBrY9XuvgXD5Qv2lTWEqnLKmKGxX6tok6_6IBgE&num=6&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_2BSjEIB72-12qoHJ972qkLozFalw&adurl=http://www.centum.no/&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="Centum.no/Lån.uten.sikkerhet." onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">Centum.no/Lån.uten.sikkerhet.</a><div style="padding-top:0px;padding-bottom:1px;">Opptil 350 000 kr fra 7,9%. Eks. 65k o/5 år,14,9% etb950 Tot:90676kr</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://googleads.g.doubleclick.net/aclk?sa=L&ai=C3zVkQHmYUNzUMYWxsQbJxYHQBLPWyKACs_fIgTfAjbcBEAcg9veyAygKUJTeirv4_____wFgw9ykhZgYyAEBqQJxGrpyQGWHPqgDAaoEY0_QV82H3EMWPPMbpUKL8rDa_rg9ukfA3ACvfjCoXqZOLR0YnslDeETtUtbl_B1hWepAdvxFU4pcyfZFZBNVqivCpgsYhWOEO4tdGHtu9D7c8y6x06wytflCvaUNtT-ZbRiTaA&num=7&sig=AOD64_1QQ_k_4dDW3YtTpNo8JO5-o4sXEw&adurl=http://www.frontlineacademy.no&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.frontlineacademy.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">MMA i Oslo</a> <a target="_blank" href="http://googleads.g.doubleclick.net/aclk?sa=L&ai=C3zVkQHmYUNzUMYWxsQbJxYHQBLPWyKACs_fIgTfAjbcBEAcg9veyAygKUJTeirv4_____wFgw9ykhZgYyAEBqQJxGrpyQGWHPqgDAaoEY0_QV82H3EMWPPMbpUKL8rDa_rg9ukfA3ACvfjCoXqZOLR0YnslDeETtUtbl_B1hWepAdvxFU4pcyfZFZBNVqivCpgsYhWOEO4tdGHtu9D7c8y6x06wytflCvaUNtT-ZbRiTaA&num=7&sig=AOD64_1QQ_k_4dDW3YtTpNo8JO5-o4sXEw&adurl=http://www.frontlineacademy.no&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="www.frontlineacademy.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">www.frontlineacademy.no</a><div style="padding-top:0px;padding-bottom:1px;">Norges beste MMA gym Gratis prøvetime!</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=C7RvrQHmYUNzUMYWxsQbJxYHQBNHU1PgB8Y6ypETAjbcBEAgg9veyAygKUOud_8f4_____wFgw9ykhZgYoAH72bP8A8gBAakCS4YzGxUDhz6oAwGqBGZP0CeL-NZDGTzzG6VCi_Kw2v64PbpHwNwAr34wqF6mTi0dGJ7JQ3hE7VLW5fwdYVnqQHb8RVOKXMn2RWQTVapjwlZzr3Wsb9RUvvOAIvQ-KBrYAZJZMTEMQXlQTqXf36JGbvVqbw2IBgE&num=8&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_3B-Jd0yqxTeio0cbHQNfeqej3Lxw&adurl=https://www.thorn.no/forbrukslaan.aspx%3Fcid%3D702201010100&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.thorn.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">Innvilget lån på 24 timer</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=C7RvrQHmYUNzUMYWxsQbJxYHQBNHU1PgB8Y6ypETAjbcBEAgg9veyAygKUOud_8f4_____wFgw9ykhZgYoAH72bP8A8gBAakCS4YzGxUDhz6oAwGqBGZP0CeL-NZDGTzzG6VCi_Kw2v64PbpHwNwAr34wqF6mTi0dGJ7JQ3hE7VLW5fwdYVnqQHb8RVOKXMn2RWQTVapjwlZzr3Wsb9RUvvOAIvQ-KBrYAZJZMTEMQXlQTqXf36JGbvVqbw2IBgE&num=8&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_3B-Jd0yqxTeio0cbHQNfeqej3Lxw&adurl=https://www.thorn.no/forbrukslaan.aspx%3Fcid%3D702201010100&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="www.thorn.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">www.thorn.no</a><div style="padding-top:0px;padding-bottom:1px;">Eff.rente 15,13%, 25.000,-, o/5 år, etabl.geb. 695,-, Totalt: 35.008,-</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CQwpWQHmYUNzUMYWxsQbJxYHQBKH7hcgEgcCAg2DAjbcBEAkg9veyAygKULOAjMz6_____wFgw9ykhZgYoAGPsb_eA8gBAakCcRq6ckBlhz6oAwGqBGlP0GfNwdBDGDzzG6VCi_Kw2v64PbpHwNwAr34wqF6mTi0dGJ7JQ3hE7VLW5fwdYVnqQHb8RVOKXMn2RWQTVaorwqYrGeiMzRObVRxfwR_FZBrY9XuvgXD5Qv2lTWEqnLKmKGxX6ulttNqIBgE&num=9&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_1UNs8iDyO4aIM_KqVi8HSGH3Cyuw&adurl=https://www.banknorwegian.no/Pages/Forbrukslaan.aspx&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.BankNorwegian.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">Forbrukslån - Svar straks</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CQwpWQHmYUNzUMYWxsQbJxYHQBKH7hcgEgcCAg2DAjbcBEAkg9veyAygKULOAjMz6_____wFgw9ykhZgYoAGPsb_eA8gBAakCcRq6ckBlhz6oAwGqBGlP0GfNwdBDGDzzG6VCi_Kw2v64PbpHwNwAr34wqF6mTi0dGJ7JQ3hE7VLW5fwdYVnqQHb8RVOKXMn2RWQTVaorwqYrGeiMzRObVRxfwR_FZBrY9XuvgXD5Qv2lTWEqnLKmKGxX6ulttNqIBgE&num=9&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_1UNs8iDyO4aIM_KqVi8HSGH3Cyuw&adurl=https://www.banknorwegian.no/Pages/Forbrukslaan.aspx&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="www.BankNorwegian.no" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">www.BankNorwegian.no</a><div style="padding-top:0px;padding-bottom:1px;">Lån fra 5.000 til 350.000 kroner. 65k o/5 år,17,8% etb950 Tot:95872kr</div></div><div style="clear:both;"></div><div class="adblock"><a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CvU0PQHmYUNzUMYWxsQbJxYHQBPHAne4C2b2W7z3AjbcBEAog9veyAygKUMq0zDxgw9ykhZgYoAGPkY_yA8gBAakCcRq6ckBlhz6oAwGqBGlP0Afqm9NDGzzzG6VCi_Kw2v64PbpHwNwAr34wqF6mTi0dGJ7JQ3hE7VLW5fwdYVnqQHb8RVOKXMn2RWQTVaorwqYrGeC1pxCbVRxfwR_FZBrY9XuvgXD5Qv2lTWEqnLKmKGxX6vEpkPeIBgE&num=10&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_2Hj01a_aDtGexiQHUGsyBsvoH-Jg&adurl=http://track.adform.net/C/%3Fbn%3D1184682%3Bkw%3Dsamsung%2520galaxy%2520s3%3Bcpdir%3Dhttps://shop.netcom.no/mobil/samsung/galaxy-s-iii-i9300-metallic-blue&client=ca-dp-godaddy2_xml" class="linkhd" style="line-height:22.4px;text-decoration:underline;color:#00F;cursor:pointer;" title="www.NetCom.no/Samsung-Galaxy-S3" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">Samsung Galaxy S III</a> <a target="_blank" href="http://www.googleadservices.com/pagead/aclk?sa=L&ai=CvU0PQHmYUNzUMYWxsQbJxYHQBPHAne4C2b2W7z3AjbcBEAog9veyAygKUMq0zDxgw9ykhZgYoAGPkY_yA8gBAakCcRq6ckBlhz6oAwGqBGlP0Afqm9NDGzzzG6VCi_Kw2v64PbpHwNwAr34wqF6mTi0dGJ7JQ3hE7VLW5fwdYVnqQHb8RVOKXMn2RWQTVaorwqYrGeC1pxCbVRxfwR_FZBrY9XuvgXD5Qv2lTWEqnLKmKGxX6vEpkPeIBgE&num=10&cid=5Gilsa3oZ5EIj2IQmPYht2Rb&sig=AOD64_2Hj01a_aDtGexiQHUGsyBsvoH-Jg&adurl=http://track.adform.net/C/%3Fbn%3D1184682%3Bkw%3Dsamsung%2520galaxy%2520s3%3Bcpdir%3Dhttps://shop.netcom.no/mobil/samsung/galaxy-s-iii-i9300-metallic-blue&client=ca-dp-godaddy2_xml" class="sponsorurl" style="cursor:pointer;"	title="www.NetCom.no/Samsung-Galaxy-S3" onclick="processClick('Wzp9ZwRjZvMxCFMwCGNznG0zMG0zow0zL3MkCGR3AmZkBQp5BGL0BGL3ZGVlAQDzMJp9ZwNkZwRkZQHkBGDmZGRzL3x9ZFM4CFM0Mm0lWzMapQ0jWzuhMm0kWaOjCHSPWaEzCGLzpUZ9ZGp3ZmR4Amx5AwD5AwpkZwV0AN==-1');">www.NetCom.no/Samsung-Galaxy-S3</a><div style="padding-top:0px;padding-bottom:1px;">Kun 499,- med Fastpris L+. Spotify Premium inkludert i prisen!</div></div><div style="clear:both;"></div></div></div>

#3 JavaScript::Write (size: 109, repeated: 1)

<input style="width:0px; top:0px; position:absolute; visibility:hidden;" id="oV6" onchange="fV8(fV1,5,true)">

#4 JavaScript::Write (size: 452, repeated: 1)

<input type="hidden" name="kot" value="AG06ipDP7UACWC0nO6BHi_BqWeDHy6tLkAoTCNz0r4GpubMCFYpSzAodQh8ABRgDIAA4DVDk2sQJULmqqA5Q9_GoDlCphb8OULnw4g5QzP6YD1Chpc4PUL69zg9Q3uvOD1DIutwPUMq63A9QzLrcD1C1q_YPUOOA9w9Q47m1EVCDurURUKy6tRFQtbzlEVC89u4SUNbE3BNQwY7OFVC-5ekVULe95RZQuoPFGFDAu5AcUICuuR1QgYL9IFDC2ZEhUJLpkSFQg5ytKVC7nK0pUL-v_0NQlZCTjwFQsrSUlQFQy-aDuQFQyZXzwAFQ3JbzwAFQm-bImgNQmojMnQNQxYPTnQNQtITYnQNxnJERpI5EZyyCARMI3PS0gam5swIVhVjMCh3JYgBKkQEmN_oQDPuYiA"/>

#5 JavaScript::Write (size: 283, repeated: 1)

<script src="http://googleads.g.doubleclick.net/apps/domainpark/domainpark.cgi?callback=_google_json_callback&output=js&client=ca-dp-godaddy2_xml&domain_name=tea-in-turkey.com&hl=no&s=tea-in-turkey.com&num_radlinks=0&dt=1352169792684&u_tz=60&u_his=1&u_h=885&u_w=1176&frm=0"></script>


HTTP Transactions (14)


Request Response
GET /script/jquery-1.3.1.min.js HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tea-in-turkey.com/
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Last-Modified: Tue, 13 Jul 2010 18:55:42 GMT
Etag: &quot;0cbf3fdbc22cb1:316&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Varnish: 972597056 972517225
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=3888000
Date: Tue, 06 Nov 2012 02:43:12 GMT
Content-Length: 19149
Connection: keep-alive
GET /images/logo_gd3.jpg HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tea-in-turkey.com/
HTTP/1.1 200 OK

Content-Type: image/jpeg
Last-Modified: Wed, 26 Sep 2012 20:33:00 GMT
Etag: &quot;0669e1e269ccd1:311&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 5837
X-Varnish: 597314952 597289102
Cache-Control: max-age=3888000
Date: Tue, 06 Nov 2012 02:43:12 GMT
Connection: keep-alive
GET /apps/domainpark/show_afd_ads.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tea-in-turkey.com/
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Last-Modified: Wed, 31 Oct 2012 23:10:23 GMT
Date: Tue, 06 Nov 2012 02:16:06 GMT
Expires: Wed, 07 Nov 2012 02:16:06 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Server: domainserver
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
Content-Length: 1932
Age: 1626
Cache-Control: public, max-age=86400
GET /images/or2.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tea-in-turkey.com/
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Wed, 26 Sep 2012 21:03:06 GMT
Etag: &quot;02114532a9ccd1:319&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 987
X-Varnish: 594459974 594443862
Cache-Control: max-age=3888000
Date: Tue, 06 Nov 2012 02:43:12 GMT
Connection: keep-alive
GET / HTTP/1.1

Host: tea-in-turkey.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Date: Tue, 06 Nov 2012 02:43:11 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: fc=fcVal=1773187996496712244; domain=tea-in-turkey.com; expires=Fri, 01-Jan-2038 07:00:00 GMT; path=/
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Content-Length: 24157
GET /apps/domainpark/domainpark.cgi?callback=_google_json_callback&output=js&client=ca-dp-godaddy2_xml&domain_name=tea-in-turkey.com&hl=no&s=tea-in-turkey.com&num_radlinks=0&dt=1352169792684&u_tz=60&u_his=1&u_h=885&u_w=1176&frm=0 HTTP/1.1

Host: googleads.g.doubleclick.net
GET /apps/domainpark/domainpark.cgi?callback=_google_json_callback&amp;output=js&amp;client=ca-dp-godaddy2_xml&amp;domain_name=tea-in-turkey.com&amp;hl=no&amp;s=tea-in-turkey.com&amp;num_radlinks=0&amp;dt=1352169792684&amp;u_tz=60&amp;u_his=1&amp;u_h=885&amp;u_w=1176&amp;frm=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tea-in-turkey.com/
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
HTTP/1.1 200 OK

Content-Type: application/javascript; charset=UTF-8
Content-Disposition: inline
P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 06 Nov 2012 02:43:13 GMT
Server: domainserver
Cache-Control: private
Content-Length: 4508
X-XSS-Protection: 1; mode=block
GET /images/bul_blacksquare.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tea-in-turkey.com/
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Fri, 25 Jul 2008 21:49:00 GMT
Etag: &quot;02ec3fa0eec81:31d&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 126
X-Varnish: 972599184 972517252
Cache-Control: max-age=3888000
Date: Tue, 06 Nov 2012 02:43:13 GMT
Connection: keep-alive
GET /images/bul_bluesquare.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tea-in-turkey.com/
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Fri, 25 Jul 2008 21:49:00 GMT
Etag: &quot;02ec3fa0eec81:31d&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 126
X-Varnish: 972599185 972517310
Cache-Control: max-age=3888000
Date: Tue, 06 Nov 2012 02:43:13 GMT
Connection: keep-alive
GET /images/GDPPCSprite.png HTTP/1.1

Host: ak2.imgaft.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tea-in-turkey.com/
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Wed, 26 Sep 2012 21:18:10 GMT
Etag: &quot;095e76d2c9ccd1:316&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 8912
X-Varnish: 594459976 594443865
Cache-Control: max-age=3888000
Date: Tue, 06 Nov 2012 02:43:13 GMT
Connection: keep-alive
GET /sd?s=95331&f=1 HTTP/1.1

Host: as.casalemedia.com
GET /sd?s=95331&amp;f=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tea-in-turkey.com/
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html; charset=iso-8859-1
Server: Apache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Location: http://as.casalemedia.com/sd?s=95331&amp;f=1&amp;C=1
Content-Length: 236
Expires: Tue, 06 Nov 2012 02:43:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 06 Nov 2012 02:43:14 GMT
Connection: keep-alive
Set-Cookie: CMID=kD8ZP0PS1IwAADn9eA0AAABP;domain=casalemedia.com;path=/;expires=Wed, 06 Nov 2013 02:43:13 GMT CMPS=133;domain=casalemedia.com;path=/;expires=Mon, 04 Feb 2013 02:43:13 GMT CMPP=007;domain=casalemedia.com;path=/;expires=Mon, 04 Feb 2013 02:43:13 GMT
GET /images/spacer.gif?q=L3MkWGAkZGp3ZmR4Amx5AwD5AwpkZwV0APHlAzpyZ3RlZGNlWGV2MFHmpFHlAz4yZ3RjWGV2LlHmpGNyZwMyMvHmpGNyZwMzWGAkWGV2MJpyZ3RlZQRlZGRjAGR5AQZkZFHlAzA5WGAkZFHlAaEaWGAkZvHlAatyZ3RyZwMzM3NyZ3RjWGV2nT5aWGAkZFHlAaEzWGAkAvHlAaOjWGAkDHVyZwMwnPHmpGL=-1 HTTP/1.1

Host: tea-in-turkey.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tea-in-turkey.com/
Cookie: fc=fcVal=1773187996496712244
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: no-cache
Content-Length: 43
Last-Modified: Wed, 08 Feb 2006 19:53:54 GMT
Accept-Ranges: bytes
Etag: &quot;0b5cc63e92cc61:65e&quot;
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 06 Nov 2012 02:43:13 GMT
GET /sd?s=95331&f=1&C=1 HTTP/1.1

Host: as.casalemedia.com
GET /sd?s=95331&amp;f=1&amp;C=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tea-in-turkey.com/
Cookie: CMID=kD8ZP0PS1IwAADn9eA0AAABP; CMPS=133; CMPP=007
HTTP/1.1 200 OK

Content-Type: text/javascript
Server: Apache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Content-Length: 6709
Expires: Tue, 06 Nov 2012 02:43:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 06 Nov 2012 02:43:14 GMT
Connection: keep-alive
Set-Cookie: CMID=kD8ZP0PS1IwAADn9eA0AAABP;domain=casalemedia.com;path=/;expires=Wed, 06 Nov 2013 02:43:14 GMT CMPS=133;domain=casalemedia.com;path=/;expires=Mon, 04 Feb 2013 02:43:14 GMT CMPP=007;domain=casalemedia.com;path=/;expires=Mon, 04 Feb 2013 02:43:14 GMT CMS=95331&amp;1352169794;domain=casalemedia.com;path=/;expires=Thu, 06 Dec 2012 02:43:14 GMT CMST=UJh5QlCYeUIB;domain=casalemedia.com;path=/;expires=Wed, 07 Nov 2012 02:43:14 GMT CMSC=UJh5Qg**;domain=casalemedia.com;path=/; CMDD=AAF0TAE*;domain=casalemedia.com;path=/;expires=Wed, 07 Nov 2012 02:43:14 GMT CMD1=AAEtrVCYeUIAAXRjAAKBeAEAAA**;domain=casalemedia.com;path=/;expires=Thu, 06 Dec 2012 02:43:14 GMT
GET /favicon.ico HTTP/1.1

Host: tea-in-turkey.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: fc=fcVal=1773187996496712244
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Date: Tue, 06 Nov 2012 02:43:14 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Content-Length: 26
GET /favicon.ico HTTP/1.1

Host: tea-in-turkey.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: fc=fcVal=1773187996496712244
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Date: Tue, 06 Nov 2012 02:43:17 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Content-Length: 26