Overview

URLhttp://traffbucks.biz/progs_traff/rwchcdcjky/trqeiqm.php
IP208.91.197.46
ASNAS40034 Confluence Networks Inc
Location Virgin Islands, British
Report completed2012-11-06 03:48:10 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-06 03:47:35 urlQuery Client 208.91.197.461ET MALWARE CWS Trafcool.biz Related Installer
2012-11-06 03:47:38 urlQuery Client 173.194.69.1541ET MALWARE CWS Trafcool.biz Related Installer
2012-11-06 03:47:38 urlQuery Client 173.194.69.1541ET MALWARE CWS Trafcool.biz Related Installer
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 208.91.197.46

Date Alerts / IDS URL IP
2013-03-18 04:57:330 / 1http://traffsale1.biz/progs_traff/euykfeqmpx/wqugogbw208.91.197.46
2013-03-18 04:57:320 / 1http://traffsale1.biz/progs_traff/euykfeqmpx/xebpqufgtl208.91.197.46
2013-03-18 04:57:320 / 1http://traffsale1.biz/progs_traff/euykfeqmpx/hhgfnk208.91.197.46
2013-03-18 04:57:320 / 1http://traffsale1.biz/progs_traff/euykfeqmpx/niyxats208.91.197.46
2013-03-18 04:57:320 / 1http://traffsale1.biz/progs_traff/euykfeqmpx/twghssxczj208.91.197.46
2013-03-18 04:57:320 / 1http://traffsale1.biz/progs_traff/euykfeqmpx/dpxsyisoh208.91.197.46

Last 6 reports on ASN: AS40034 Confluence Networks Inc

Date Alerts / IDS URL IP
2013-03-19 13:02:430 / 1http://camaltirestorant.com/images/logos.gif?1eb40=1006080141.8.226.5
2013-03-19 13:02:300 / 1http://camaltirestorant.com/images/logos.gif?20670=1194480141.8.226.5
2013-03-19 13:02:190 / 1http://camaltirestorant.com/images/logos.gif?1fb04=908572141.8.226.5
2013-03-19 13:01:360 / 1http://casbygroup.com/images/logos.gif?1b8c0=112832199.79.62.205
2013-03-19 13:01:060 / 1http://casbygroup.com/images/logos.gif?1e02e=122926199.79.62.205
2013-03-19 13:00:580 / 1http://casbygroup.com/images/logos.gif?1cbcd=588545199.79.62.205

Last 6 reports on domain: traffbucks.biz

Date Alerts / IDS URL IP
2013-03-18 00:52:240 / 1http://traffbucks.biz/progs_traff/xggsniscr/rmidl208.91.197.46
2013-03-18 00:52:240 / 1http://traffbucks.biz/progs_traff/xggsniscr/eswzscye208.91.197.46
2013-03-18 00:52:230 / 1http://traffbucks.biz/progs_traff/xggsniscr/ofjmf208.91.197.46
2013-03-18 00:52:190 / 1http://traffbucks.biz/progs_traff/xggsniscr/dytbjiqpgf208.91.197.46
2013-03-18 00:52:190 / 1http://traffbucks.biz/progs_traff/xggsniscr/kmnlhgnv208.91.197.46
2013-03-18 00:52:190 / 1http://traffbucks.biz/progs_traff/xggsniscr/tbsaihpbw208.91.197.46



JavaScript

Executed Scripts (28)


Executed Evals (0)


Executed Writes (79)

#1 JavaScript::Write (size: 0, repeated: 2) 

#2 JavaScript::Write (size: 1, repeated: 1)  
#3 JavaScript::Write (size: 37, repeated: 1)  
   this.ctrH = Math.ceil(height/2); 

#4 JavaScript::Write (size: 50, repeated: 1)  
   this.ctrOfPopHeight = Math.ceil(popHeight/2); 

#5 JavaScript::Write (size: 48, repeated: 1)  
   this.ctrOfPopWidth = Math.ceil(popWidth/2); 

#6 JavaScript::Write (size: 36, repeated: 1)  
   this.ctrW = Math.ceil(width/2); 

#7 JavaScript::Write (size: 45, repeated: 1)  
   this.x = this.ctrW - this.ctrOfPopWidth; 

#8 JavaScript::Write (size: 46, repeated: 1)  
   this.y = this.ctrH - this.ctrOfPopHeight; 

#9 JavaScript::Write (size: 6, repeated: 1)  
   } 

#10 JavaScript::Write (size: 4, repeated: 2)  
");

#11 JavaScript::Write (size: 1, repeated: 36)  
'
#12 JavaScript::Write (size: 46, repeated: 1)  
) OAS_RMF_Bottom_myWindow.document.close (); 

#13 JavaScript::Write (size: 3, repeated: 3)  
);

#14 JavaScript::Write (size: 4, repeated: 6)  
); 

#15 JavaScript::Write (size: 8, repeated: 1)  
); </scr
#16 JavaScript::Write (size: 1, repeated: 1)  
+
#17 JavaScript::Write (size: 8, repeated: 2)  
+cPos.x+
#18 JavaScript::Write (size: 11, repeated: 1)  
+cPos.y); 

#19 JavaScript::Write (size: 8, repeated: 1)  
+cPos.y+
#20 JavaScript::Write (size: 1, repeated: 2)  
,
#21 JavaScript::Write (size: 6, repeated: 1)  
,left=
#22 JavaScript::Write (size: 9, repeated: 1)  
,screenY=
#23 JavaScript::Write (size: 5, repeated: 1)  
,top=
#24 JavaScript::Write (size: 18, repeated: 1)  
/* Rcom300x250 */

#25 JavaScript::Write (size: 17, repeated: 1)  
/* Rcom728x90 */

#26 JavaScript::Write (size: 6, repeated: 2)  
//-->

#27 JavaScript::Write (size: 39, repeated: 1)  
<!-- -- END: POP TYPE CONTROLS -- --> 

#28 JavaScript::Write (size: 41, repeated: 1)  
<!-- -- START: POP TYPE CONTROLS -- --> 

#29 JavaScript::Write (size: 465, repeated: 1)  
<!doctype html><html><body><script>google_ad_client="ca-pub-4039552120145838";google_ad_height=250;google_ad_slot="8124463823";google_ad_width=300;google_show_ads_impl=true;google_unique_id=1;google_async_iframe_id="aswift_0";google_ad_unit_key="3666036948";google_start_time=1352170056961;google_expand_experiment="none";google_bpp=5;</script><script src="http://pagead2.googlesyndication.com/pagead/js/r20121023/r20120730/show_ads_impl.js"></script></body></html>
#30 JavaScript::Write (size: 464, repeated: 1)  
<!doctype html><html><body><script>google_ad_client="ca-pub-4039552120145838";google_ad_height=90;google_ad_slot="5487405013";google_ad_width=728;google_show_ads_impl=true;google_unique_id=2;google_async_iframe_id="aswift_1";google_ad_unit_key="2775209605";google_start_time=1352170057042;google_expand_experiment="none";google_bpp=4;</script><script src="http://pagead2.googlesyndication.com/pagead/js/r20121023/r20120730/show_ads_impl.js"></script></body></html>
#31 JavaScript::Write (size: 14, repeated: 1)  
</body></html>
#32 JavaScript::Write (size: 9, repeated: 3)  
</script>
#33 JavaScript::Write (size: 10, repeated: 2)  
</script>

#34 JavaScript::Write (size: 316, repeated: 1)  
<A HREF="http://oascentral.register.com/RealMedia/ads/click_lx.ads/register.com/skenzo/expired/105874221/Bottom1/default/empty.gif/77352b4d33564359656b674142303766?x" target="_top"><IMG SRC="http://imagec12.247realmedia.com/RealMedia/ads/Creatives/default/empty.gif"  WIDTH=1 HEIGHT=1 ALT="" BORDER=0 BORDER="0"></A>
#35 JavaScript::Write (size: 313, repeated: 1)  
<A HREF="http://oascentral.register.com/RealMedia/ads/click_lx.ads/register.com/skenzo/expired/1131652787/x03/default/empty.gif/77352b4d33564359656b674142303766?x" target="_top"><IMG SRC="http://imagec12.247realmedia.com/RealMedia/ads/Creatives/default/empty.gif"  WIDTH=1 HEIGHT=1 ALT="" BORDER=0 BORDER="0"></A>
#36 JavaScript::Write (size: 313, repeated: 1)  
<A HREF="http://oascentral.register.com/RealMedia/ads/click_lx.ads/register.com/skenzo/expired/1819903662/x05/default/empty.gif/77352b4d33564359656b674142303766?x" target="_top"><IMG SRC="http://imagec12.247realmedia.com/RealMedia/ads/Creatives/default/empty.gif"  WIDTH=1 HEIGHT=1 ALT="" BORDER=0 BORDER="0"></A>
#37 JavaScript::Write (size: 313, repeated: 1)  
<A HREF="http://oascentral.register.com/RealMedia/ads/click_lx.ads/register.com/skenzo/expired/1898555388/x01/default/empty.gif/77352b4d33564359656b674142303766?x" target="_top"><IMG SRC="http://imagec12.247realmedia.com/RealMedia/ads/Creatives/default/empty.gif"  WIDTH=1 HEIGHT=1 ALT="" BORDER=0 BORDER="0"></A>
#38 JavaScript::Write (size: 317, repeated: 1)  
<A HREF="http://oascentral.register.com/RealMedia/ads/click_lx.ads/register.com/skenzo/expired/2075185131/Bottom2/default/empty.gif/77352b4d33564359656b674142303766?x" target="_top"><IMG SRC="http://imagec12.247realmedia.com/RealMedia/ads/Creatives/default/empty.gif"  WIDTH=1 HEIGHT=1 ALT="" BORDER=0 BORDER="0"></A>
#39 JavaScript::Write (size: 312, repeated: 1)  
<A HREF="http://oascentral.register.com/RealMedia/ads/click_lx.ads/register.com/skenzo/expired/885830518/x02/default/empty.gif/77352b4d33564359656b674142303766?x" target="_top"><IMG SRC="http://imagec12.247realmedia.com/RealMedia/ads/Creatives/default/empty.gif"  WIDTH=1 HEIGHT=1 ALT="" BORDER=0 BORDER="0"></A>
#40 JavaScript::Write (size: 312, repeated: 1)  
<A HREF="http://oascentral.register.com/RealMedia/ads/click_lx.ads/register.com/skenzo/expired/925937570/x04/default/empty.gif/77352b4d33564359656b674142303766?x" target="_top"><IMG SRC="http://imagec12.247realmedia.com/RealMedia/ads/Creatives/default/empty.gif"  WIDTH=1 HEIGHT=1 ALT="" BORDER=0 BORDER="0"></A>
#41 JavaScript::Write (size: 211, repeated: 1)  
<SCRIPT LANGUAGE=JavaScript1.1 SRC="http://oascentral.register.com/RealMedia/ads/adstream_mjx.ads/register.com/skenzo/expired/1964787181@Position2,Position3,x01,x02,x03,x04,x05,Bottom,Bottom1,Bottom2?"></SCRIPT>
#42 JavaScript::Write (size: 391, repeated: 1)  
<a href="http://oascentral.register.com/RealMedia/ads/click_lx.ads/register.com/skenzo/expired/L27/1589489361/Bottom/Register/RCOM_Vistaprint_popunder_parked/RCOM_Vistaprint_popunder_parked.html/77352b4d33564359656b674142303766?http://clk.atdmt.com/00F/go/201823105/direct;wi.720;hi.300/01/" target="_blank"><img src="https://view.atdmt.com/00F/view/201823105/direct;wi.720;hi.300/01/"/></a>
#43 JavaScript::Write (size: 84, repeated: 1)  
<body bgcolor="white" topmargin="0" leftmargin="0" marginwidth="0" marginheight="0">
#44 JavaScript::Write (size: 34, repeated: 1)  
<html><head><title></title></head>
#45 JavaScript::Write (size: 1213, repeated: 1)  
<iframe allowtransparency=true frameborder=0 height=250 hspace=0 id=google_ads_frame1 marginheight=0 marginwidth=0 name=google_ads_frame1 scrolling=no src="http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4039552120145838&output=html&h=250&slotname=8124463823&w=300&lmt=1352170056&flash=10.0.45&url=http%3A%2F%2Ftraffbucks.biz%2F%3Ffp%3DcrrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%252Fgi63LB8L%252FvRJDVboJinm99o9PP54q5nYeRg%253D%253D%26prvtof%3DwRNDt6jSjJMjGOSmgA%252Fo8Rse7%252BMGhT7nWP5mK%252Bg0tAM%253D%26poru%3D8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%252Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%252BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%252BNqtRJDsp0xTQ%253D%26&dt=1352170056961&bpp=5&shv=r20121023&jsv=r20110914&correlator=1352170058053&frm=21&adk=3666036948&ga_vid=1564674933.1352170058&ga_sid=1352170058&ga_hid=1977571775&ga_fc=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=16&adx=788&ady=299&biw=1176&bih=749&isw=1176&ish=749&ifk=2877296634&oid=3&ref=http%3A%2F%2Ftraffbucks.biz%2Fprogs_traff%2Frwchcdcjky%2Ftrqeiqm.php&fu=4&ifi=1&dtd=1232&xpc=LtP8jKxsnf&p=http%3A//traffbucks.biz" style="left:0;position:absolute;top:0" vspace=0 width=300></iframe>
#46 JavaScript::Write (size: 1236, repeated: 1)  
<iframe allowtransparency=true frameborder=0 height=90 hspace=0 id=google_ads_frame2 marginheight=0 marginwidth=0 name=google_ads_frame2 scrolling=no src="http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4039552120145838&output=html&h=90&slotname=5487405013&w=728&lmt=1352170056&flash=10.0.45&url=http%3A%2F%2Ftraffbucks.biz%2F%3Ffp%3DcrrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%252Fgi63LB8L%252FvRJDVboJinm99o9PP54q5nYeRg%253D%253D%26prvtof%3DwRNDt6jSjJMjGOSmgA%252Fo8Rse7%252BMGhT7nWP5mK%252Bg0tAM%253D%26poru%3D8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%252Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%252BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%252BNqtRJDsp0xTQ%253D%26&dt=1352170057042&bpp=4&shv=r20121023&jsv=r20110914&prev_slotnames=8124463823&correlator=1352170058053&frm=21&adk=2775209605&ga_vid=1564674933.1352170058&ga_sid=1352170058&ga_hid=1977571775&ga_fc=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=16&adx=88&ady=589&biw=1176&bih=749&isw=1176&ish=749&ifk=2877296634&oid=3&ref=http%3A%2F%2Ftraffbucks.biz%2Fprogs_traff%2Frwchcdcjky%2Ftrqeiqm.php&fu=4&ifi=2&dtd=1251&xpc=lhODvp0OKP&p=http%3A//traffbucks.biz" style="left:0;position:absolute;top:0" vspace=0 width=728></iframe>
#47 JavaScript::Write (size: 301, repeated: 1)  
<iframe src="https://view.atdmt.com/00F/iview/201823105/direct;wi.720;hi.300/01?click=" frameborder="0" scrolling="no" marginheight="0" marginwidth="0" topmargin="0" leftmargin="0" allowtransparency="true" width="720" height="300"> <script language="JavaScript" type="text/javascript"> document.write(
#48 JavaScript::Write (size: 818, repeated: 1)  
<ins style="display:inline-table;border:none;height:250px;margin:0;padding:0;position:relative;visibility:visible;width:300px"><ins id="aswift_0_anchor" style="display:block;border:none;height:250px;margin:0;padding:0;position:relative;visibility:visible;width:300px"><iframe allowtransparency="true" frameborder="0" height="250" hspace="0" marginwidth="0" marginheight="0" onload="var i=this.id,s=window.google_iframe_oncopy,H=s&amp;&amp;s.handlers,h=H&amp;&amp;H[i],w=this.contentWindow,d;try{d=w.document}catch(e){}if(h&amp;&amp;d&amp;&amp;(!d.body||!d.body.firstChild)){if(h.call){i+='.call';setTimeout(h,0)}else if(h.match){i+='.nav';w.location.replace(h)}s.log&amp;&amp;s.log.push(i)}" scrolling="no" vspace="0" width="300" id=aswift_0 name=aswift_0 style="left:0;position:absolute;top:0;" ></iframe></ins></ins>
#49 JavaScript::Write (size: 815, repeated: 1)  
<ins style="display:inline-table;border:none;height:90px;margin:0;padding:0;position:relative;visibility:visible;width:728px"><ins id="aswift_1_anchor" style="display:block;border:none;height:90px;margin:0;padding:0;position:relative;visibility:visible;width:728px"><iframe allowtransparency="true" frameborder="0" height="90" hspace="0" marginwidth="0" marginheight="0" onload="var i=this.id,s=window.google_iframe_oncopy,H=s&amp;&amp;s.handlers,h=H&amp;&amp;H[i],w=this.contentWindow,d;try{d=w.document}catch(e){}if(h&amp;&amp;d&amp;&amp;(!d.body||!d.body.firstChild)){if(h.call){i+='.call';setTimeout(h,0)}else if(h.match){i+='.nav';w.location.replace(h)}s.log&amp;&amp;s.log.push(i)}" scrolling="no" vspace="0" width="728" id=aswift_1 name=aswift_1 style="left:0;position:absolute;top:0;" ></iframe></ins></ins>
#50 JavaScript::Write (size: 51, repeated: 1)  
<script language=javascript type=text/javascript> 

#51 JavaScript::Write (size: 86, repeated: 2)  
<script src="http://pagead2.googlesyndication.com/pagead/expansion_embed.js"></script>
#52 JavaScript::Write (size: 31, repeated: 2)  
<script type="text/javascript"

#53 JavaScript::Write (size: 36, repeated: 2)  
<script type="text/javascript"><!--

#54 JavaScript::Write (size: 105, repeated: 2)  
<script>google_protectAndRun("ads_core.google_render_ad", google_handleError, google_render_ad);</script>
#55 JavaScript::Write (size: 27, repeated: 1)  
Microsoft Internet Explorer
#56 JavaScript::Write (size: 42, repeated: 1)  
OAS_RMF_Bottom_myWindow.document.open(); 

#57 JavaScript::Write (size: 40, repeated: 6)  
OAS_RMF_Bottom_myWindow.document.write (
#58 JavaScript::Write (size: 41, repeated: 2)  
OAS_RMF_Bottom_myWindow.document.write ("
#59 JavaScript::Write (size: 39, repeated: 3)  
OAS_RMF_Bottom_myWindow.document.write(
#60 JavaScript::Write (size: 36, repeated: 1)  
OAS_RMF_Bottom_myWindow=window.open(
#61 JavaScript::Write (size: 1, repeated: 3)  
\
#62 JavaScript::Write (size: 6, repeated: 1)  
_blank
#63 JavaScript::Write (size: 72, repeated: 1)  
function OAS_RMF_Bottom_centeredPop(width,height,popWidth,popHeight) { 

#64 JavaScript::Write (size: 46, repeated: 2)  
google_ad_client = "ca-pub-4039552120145838";

#65 JavaScript::Write (size: 24, repeated: 1)  
google_ad_height = 250;

#66 JavaScript::Write (size: 23, repeated: 1)  
google_ad_height = 90;

#67 JavaScript::Write (size: 31, repeated: 1)  
google_ad_slot = "5487405013";

#68 JavaScript::Write (size: 31, repeated: 1)  
google_ad_slot = "8124463823";

#69 JavaScript::Write (size: 23, repeated: 1)  
google_ad_width = 300;

#70 JavaScript::Write (size: 23, repeated: 1)  
google_ad_width = 728;

#71 JavaScript::Write (size: 45, repeated: 1)  
if (navigator != null && navigator.appName !=
#72 JavaScript::Write (size: 76, repeated: 1)  
if(!OAS_RMF_Bottom_myWindow.opener) OAS_RMF_Bottom_myWindow.opener = self; 

#73 JavaScript::Write (size: 219, repeated: 1)  
ipt><noscript><a href="http://clk.atdmt.com/00F/go/201823105/direct;wi.720;hi.300/01/" target="_blank"><img border="0" src="https://view.atdmt.com/00F/view/201823105/direct;wi.720;hi.300/01/" /></a></noscript></iframe>\
#74 JavaScript::Write (size: 1, repeated: 4)  
n
#75 JavaScript::Write (size: 63, repeated: 2)  
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">

#76 JavaScript::Write (size: 77, repeated: 1)  
toolbar=no,scrollbars=0,status=no,resizable=yes,width=720,height=300,screenX=
#77 JavaScript::Write (size: 104, repeated: 1)  
var cPos = new OAS_RMF_Bottom_centeredPop(window.screen.availWidth,window.screen.availHeight,720,300); 

#78 JavaScript::Write (size: 36, repeated: 1)  
var height = window.screen.height; 

#79 JavaScript::Write (size: 34, repeated: 1)  
var width = window.screen.width; 

      
    

            

            

            
            
HTTP Transactions (27)

               

  
    

      Request Response
    

  
  
    
 
GET /progs_traff/rwchcdcjky/trqeiqm.php HTTP/1.1

Host: traffbucks.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 		 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Tue, 06 Nov 2012 02:47:35 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.3.16
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1158
Keep-Alive: timeout=5, max=128
Connection: Keep-Alive
 
 
GET /__media__/js/min.js?v1.6 HTTP/1.1

Host: i1.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Server: nginx/1.0.4
Last-Modified: Tue, 16 Oct 2012 06:33:22 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=20707
Expires: Tue, 06 Nov 2012 08:32:43 GMT
Date: Tue, 06 Nov 2012 02:47:36 GMT
Content-Length: 3042
Connection: keep-alive
 
 
GET /?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D& HTTP/1.1

Host: traffbucks.biz
GET /?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp; HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/progs_traff/rwchcdcjky/trqeiqm.php
 		 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Tue, 06 Nov 2012 02:47:35 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.3.16
Set-Cookie: vsid=904vr997156557304174; expires=Sun, 05-Nov-2017 02:47:35 GMT; path=/; domain=traffbucks.biz; httponly
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7393
Keep-Alive: timeout=5, max=127
Connection: Keep-Alive
 
 
GET /RealMedia/ads/adstream_mjx.ads/register.com/skenzo/expired/1964787181@Position2,Position3,x01,x02,x03,x04,x05,Bottom,Bottom1,Bottom2? HTTP/1.1

Host: oascentral.register.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Tue, 06 Nov 2012 02:47:36 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: OAX=w5+M3VCYekgAB07f; path=/; expires=Thu, 06-Nov-14 02:47:36 GMT; domain=.register.com
NSC_d12efm_qppm_iuuq=ffffffff09499e2b45525d5f4f58455e445a4a423660;path=/;httponly
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
Cache-Control: no-cache,no-store,private
Content-Length: 8665
Keep-Alive: timeout=60
Connection: Keep-Alive
 
 
GET /__media__/images/262_search-img.gif HTTP/1.1

Host: i1.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/1.0.4
Content-Length: 50762
Last-Modified: Thu, 05 May 2011 12:42:56 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=86319
Expires: Wed, 07 Nov 2012 02:46:15 GMT
Date: Tue, 06 Nov 2012 02:47:36 GMT
Connection: keep-alive
 
 
GET /__media__/images/263_filler-image.gif HTTP/1.1

Host: i1.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/1.0.4
Content-Length: 22692
Last-Modified: Thu, 05 May 2011 12:07:44 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Expires: Wed, 07 Nov 2012 02:47:36 GMT
Date: Tue, 06 Nov 2012 02:47:36 GMT
Connection: keep-alive
 
 
GET /__media__/pics/291/b_renewyourdomainlg.gif HTTP/1.1

Host: i2.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/1.0.4
Content-Length: 2442
Last-Modified: Mon, 09 May 2011 06:14:27 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=21672
Expires: Tue, 06 Nov 2012 08:48:48 GMT
Date: Tue, 06 Nov 2012 02:47:36 GMT
Connection: keep-alive
 
 
GET /__media__/pics/291/b_bidonthisdomainlg.gif HTTP/1.1

Host: i2.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/1.0.4
Content-Length: 2431
Last-Modified: Mon, 09 May 2011 06:14:26 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=21696
Expires: Tue, 06 Nov 2012 08:49:12 GMT
Date: Tue, 06 Nov 2012 02:47:36 GMT
Connection: keep-alive
 
 
GET /__media__/pics/291/register_logo_tagline_new.gif HTTP/1.1

Host: i2.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/1.0.4
Content-Length: 5917
Last-Modified: Mon, 09 May 2011 06:14:27 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=21673
Expires: Tue, 06 Nov 2012 08:48:49 GMT
Date: Tue, 06 Nov 2012 02:47:36 GMT
Connection: keep-alive
 
 
GET /__media__/pics/291/search-field-button.gif HTTP/1.1

Host: i3.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/1.0.4
Content-Length: 1721
Last-Modified: Mon, 09 May 2011 06:14:27 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=21653
Expires: Tue, 06 Nov 2012 08:48:29 GMT
Date: Tue, 06 Nov 2012 02:47:36 GMT
Connection: keep-alive
 
 
GET /__media__/pics/291/sm_faq_icon.gif HTTP/1.1

Host: i3.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/1.0.4
Content-Length: 295
Last-Modified: Mon, 09 May 2011 06:14:27 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=21653
Expires: Tue, 06 Nov 2012 08:48:29 GMT
Date: Tue, 06 Nov 2012 02:47:36 GMT
Connection: keep-alive
 
 
GET /__media__/pics/291/white-arrow.gif HTTP/1.1

Host: i3.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/1.0.4
Content-Length: 53
Last-Modified: Mon, 09 May 2011 06:14:27 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=21653
Expires: Tue, 06 Nov 2012 08:48:29 GMT
Date: Tue, 06 Nov 2012 02:47:36 GMT
Connection: keep-alive
 
 
GET /__media__/pics/291/white-arrow.gif HTTP/1.1

Host: i2.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/1.0.4
Content-Length: 53
Last-Modified: Mon, 09 May 2011 06:14:27 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=21610
Expires: Tue, 06 Nov 2012 08:47:46 GMT
Date: Tue, 06 Nov 2012 02:47:36 GMT
Connection: keep-alive
 
 
GET /__media__/pics/291/gray-arrow.gif HTTP/1.1

Host: i3.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/1.0.4
Content-Length: 53
Last-Modified: Mon, 09 May 2011 06:14:26 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=21653
Expires: Tue, 06 Nov 2012 08:48:29 GMT
Date: Tue, 06 Nov 2012 02:47:36 GMT
Connection: keep-alive
 
 
GET /pagead/show_ads.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
If-None-Match: 15032493890200785914
 		 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 9126965438495742694
Date: Tue, 06 Nov 2012 02:01:06 GMT
Expires: Tue, 06 Nov 2012 03:01:06 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 5351
X-XSS-Protection: 1; mode=block
Age: 2790
Cache-Control: public, max-age=3600
 
 
GET /__media__/pics/291/ad_notice.gif HTTP/1.1

Host: i1.cdn-image.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: nginx/1.0.4
Content-Length: 356
Last-Modified: Mon, 09 May 2011 06:14:28 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=21647
Expires: Tue, 06 Nov 2012 08:48:24 GMT
Date: Tue, 06 Nov 2012 02:47:37 GMT
Connection: keep-alive
 
 
GET /RealMedia/ads/Creatives/default/empty.gif HTTP/1.1

Host: imagec12.247realmedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: image/gif

Server: Apache/2.0.52 (Red Hat)
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Last-Modified: Fri, 20 Mar 2009 21:11:48 GMT
Etag: &quot;f380a7-2b-5d5fcd00&quot;
Accept-Ranges: bytes
Content-Length: 43
Date: Tue, 06 Nov 2012 02:47:37 GMT
Connection: keep-alive
 
 
GET /pagead/js/r20121023/r20120730/show_ads_impl.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 2745567636224848067
Date: Thu, 01 Nov 2012 01:08:55 GMT
Expires: Thu, 15 Nov 2012 01:08:55 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Server: cafe
Content-Length: 54485
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 437922
 
 
GET /sk-pxbrdg.php?rdiu=X55g%3ADD4vV4fY.JvVDQ%3FJPzGb%26UPNfW9f HTTP/1.1

Host: targetedtopic.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Tue, 06 Nov 2012 02:47:37 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.3.16
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 151
Keep-Alive: timeout=5, max=126
Connection: Keep-Alive
 
 
GET /pagead/expansion_embed.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
 		 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 2372832783343406230
Date: Tue, 06 Nov 2012 01:11:43 GMT
Expires: Wed, 07 Nov 2012 01:11:43 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 25450
X-XSS-Protection: 1; mode=block
Age: 5755
Cache-Control: public, max-age=86400
 
 
GET /pagead/osd.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
If-None-Match: 13350759849962699205
 		 
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8

P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Etag: 18259867682941507172
Date: Tue, 06 Nov 2012 02:08:52 GMT
Expires: Tue, 06 Nov 2012 03:08:52 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment
Content-Encoding: gzip
Server: cafe
Content-Length: 5981
X-XSS-Protection: 1; mode=block
Age: 2326
Cache-Control: public, max-age=3600
 
 
GET /pagead/ads?client=ca-pub-4039552120145838&output=html&h=250&slotname=8124463823&w=300&lmt=1352170056&flash=10.0.45&url=http%3A%2F%2Ftraffbucks.biz%2F%3Ffp%3DcrrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%252Fgi63LB8L%252FvRJDVboJinm99o9PP54q5nYeRg%253D%253D%26prvtof%3DwRNDt6jSjJMjGOSmgA%252Fo8Rse7%252BMGhT7nWP5mK%252Bg0tAM%253D%26poru%3D8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%252Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%252BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%252BNqtRJDsp0xTQ%253D%26&dt=1352170056961&bpp=5&shv=r20121023&jsv=r20110914&correlator=1352170058053&frm=21&adk=3666036948&ga_vid=1564674933.1352170058&ga_sid=1352170058&ga_hid=1977571775&ga_fc=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=16&adx=788&ady=299&biw=1176&bih=749&isw=1176&ish=749&ifk=2877296634&oid=3&ref=http%3A%2F%2Ftraffbucks.biz%2Fprogs_traff%2Frwchcdcjky%2Ftrqeiqm.php&fu=4&ifi=1&dtd=1232&xpc=LtP8jKxsnf&p=http%3A//traffbucks.biz HTTP/1.1

Host: googleads.g.doubleclick.net
GET /pagead/ads?client=ca-pub-4039552120145838&amp;output=html&amp;h=250&amp;slotname=8124463823&amp;w=300&amp;lmt=1352170056&amp;flash=10.0.45&amp;url=http%3A%2F%2Ftraffbucks.biz%2F%3Ffp%3DcrrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%252Fgi63LB8L%252FvRJDVboJinm99o9PP54q5nYeRg%253D%253D%26prvtof%3DwRNDt6jSjJMjGOSmgA%252Fo8Rse7%252BMGhT7nWP5mK%252Bg0tAM%253D%26poru%3D8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%252Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%252BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%252BNqtRJDsp0xTQ%253D%26&amp;dt=1352170056961&amp;bpp=5&amp;shv=r20121023&amp;jsv=r20110914&amp;correlator=1352170058053&amp;frm=21&amp;adk=3666036948&amp;ga_vid=1564674933.1352170058&amp;ga_sid=1352170058&amp;ga_hid=1977571775&amp;ga_fc=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=8&amp;u_nmime=54&amp;dff=arial&amp;dfs=16&amp;adx=788&amp;ady=299&amp;biw=1176&amp;bih=749&amp;isw=1176&amp;ish=749&amp;ifk=2877296634&amp;oid=3&amp;ref=http%3A%2F%2Ftraffbucks.biz%2Fprogs_traff%2Frwchcdcjky%2Ftrqeiqm.php&amp;fu=4&amp;ifi=1&amp;dtd=1232&amp;xpc=LtP8jKxsnf&amp;p=http%3A//traffbucks.biz HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/?fp=crrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%2Fgi63LB8L%2FvRJDVboJinm99o9PP54q5nYeRg%3D%3D&amp;prvtof=wRNDt6jSjJMjGOSmgA%2Fo8Rse7%2BMGhT7nWP5mK%2Bg0tAM%3D&amp;poru=8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%2Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%2BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%2BNqtRJDsp0xTQ%3D&amp;
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
 		 
HTTP/1.1 403 Forbidden

Content-Type: text/html; charset=UTF-8

P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 06 Nov 2012 02:47:38 GMT
Server: cafe
Cache-Control: private
Content-Length: 82
X-XSS-Protection: 1; mode=block
 
 
GET /pagead/ads?client=ca-pub-4039552120145838&output=html&h=90&slotname=5487405013&w=728&lmt=1352170056&flash=10.0.45&url=http%3A%2F%2Ftraffbucks.biz%2F%3Ffp%3DcrrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%252Fgi63LB8L%252FvRJDVboJinm99o9PP54q5nYeRg%253D%253D%26prvtof%3DwRNDt6jSjJMjGOSmgA%252Fo8Rse7%252BMGhT7nWP5mK%252Bg0tAM%253D%26poru%3D8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%252Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%252BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%252BNqtRJDsp0xTQ%253D%26&dt=1352170057042&bpp=4&shv=r20121023&jsv=r20110914&prev_slotnames=8124463823&correlator=1352170058053&frm=21&adk=2775209605&ga_vid=1564674933.1352170058&ga_sid=1352170058&ga_hid=1977571775&ga_fc=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=8&u_nmime=54&dff=arial&dfs=16&adx=88&ady=589&biw=1176&bih=749&isw=1176&ish=749&ifk=2877296634&oid=3&ref=http%3A%2F%2Ftraffbucks.biz%2Fprogs_traff%2Frwchcdcjky%2Ftrqeiqm.php&fu=4&ifi=2&dtd=1251&xpc=lhODvp0OKP&p=http%3A//traffbucks.biz HTTP/1.1

Host: googleads.g.doubleclick.net
GET /pagead/ads?client=ca-pub-4039552120145838&amp;output=html&amp;h=90&amp;slotname=5487405013&amp;w=728&amp;lmt=1352170056&amp;flash=10.0.45&amp;url=http%3A%2F%2Ftraffbucks.biz%2F%3Ffp%3DcrrL2qgQCsqYaNJD7nGWLt4S7GDtQFCoGM098tPGdmJUlny5x4%252Fgi63LB8L%252FvRJDVboJinm99o9PP54q5nYeRg%253D%253D%26prvtof%3DwRNDt6jSjJMjGOSmgA%252Fo8Rse7%252BMGhT7nWP5mK%252Bg0tAM%253D%26poru%3D8R0LtBnGneUW5hEW9XepCgKoTfgHjijB%252Fhgk9eEbaqXzurkvx29tUWdr8bBCuP8l%252BYh8X94SXq0GJwJPsHhXoi8qT0mnk3%252BNqtRJDsp0xTQ%253D%26&amp;dt=1352170057042&amp;bpp=4&amp;shv=r20121023&amp;jsv=r20110914&amp;prev_slotnames=8124463823&amp;correlator=1352170058053&amp;frm=21&amp;adk=2775209605&amp;ga_vid=1564674933.1352170058&amp;ga_sid=1352170058&amp;ga_hid=1977571775&amp;ga_fc=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=8&amp;u_nmime=54&amp;dff=arial&amp;dfs=16&amp;adx=88&amp;ady=589&amp;biw=1176&amp;bih=749&amp;isw=1176&amp;ish=749&amp;ifk=2877296634&amp;oid=3&amp;ref=http%3A%2F%2Ftraffbucks.biz%2Fprogs_traff%2Frwchcdcjky%2Ftrqeiqm.php&amp;fu=4&amp;ifi=2&amp;dtd=1251&amp;xpc=lhODvp0OKP&amp;p=http%3A//traffbucks.biz HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://traffbucks.biz/progs_traff/rwchcdcjky/trqeiqm.php
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
 		 
HTTP/1.1 403 Forbidden

Content-Type: text/html; charset=UTF-8

P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 06 Nov 2012 02:47:38 GMT
Server: cafe
Cache-Control: private
Content-Length: 82
X-XSS-Protection: 1; mode=block
 
 
GET /sk-ckpro.php?rdfu=X55g%3ADD4vV4fY.JvVDQ%3FJPzGb%26UPNfW9f HTTP/1.1

Host: www.targetedinfo.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://targetedtopic.com/sk-pxbrdg.php?rdiu=X55g%3ADD4vV4fY.JvVDQ%3FJPzGb%26UPNfW9f
 		 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Tue, 06 Nov 2012 02:47:38 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.3.16
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 95
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
 
 
GET /f?c=120&k=reise HTTP/1.1

Host: domdex.com
GET /f?c=120&amp;k=reise HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.targetedinfo.com/sk-ckpro.php?rdfu=X55g%3ADD4vV4fY.JvVDQ%3FJPzGb%26UPNfW9f
 		 
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Tue, 06 Nov 2012 02:47:38 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Pragma: no-cache
Cache-Control: private, no-cache
Set-Cookie: sp=9f81eba843173b5406ef49316c983781; expires=Sat, 05-Jan-2013 02:47:38 GMT; path=/; domain=.domdex.com
Vary: Accept-Encoding
Content-Encoding: gzip
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;ALL CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Content-Length: 20
Connection: close
 
 
GET /favicon.ico HTTP/1.1

Host: traffbucks.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: vsid=904vr997156557304174
 		 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 02:47:38 GMT
Server: Apache/2.2.3 (Red Hat)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30
Keep-Alive: timeout=5, max=126
Connection: Keep-Alive
 
 
GET /favicon.ico HTTP/1.1

Host: traffbucks.biz

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: vsid=904vr997156557304174
 		 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Date: Tue, 06 Nov 2012 02:47:39 GMT
Server: Apache/2.2.3 (Red Hat)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30
Keep-Alive: timeout=5, max=125
Connection: Keep-Alive