GET / HTTP/1.1 Host: www.travelocity.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive HTTP/1.0 302 Moved Temporarily Content-Length: 0 Location: http://www.travelocity.com/?mcenabled=1 Set-Cookie: m123gz23523bs=3; domain=www.travelocity.com; path=/ Date: Fri May 23 17:24:20 2014 Server: Apache Cache-Control: no-cache, no-store Pragma: no-cache Connection: close GET /?mcenabled=1 HTTP/1.1 Host: www.travelocity.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cookie: m123gz23523bs=3 Connection: keep-alive HTTP/1.0 302 Moved Temporarily Content-Length: 0 Location: http://0.finder.aspiralabs.com/?d=www.travelocity.com/&q=mcenabled%3D1 Date: Fri May 23 19:25:56 2014 Server: Apache Cache-Control: no-cache, no-store Pragma: no-cache Connection: close GET /?d=www.travelocity.com/&q=mcenabled%3D1 HTTP/1.1 Host: 0.finder.aspiralabs.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive HTTP/1.1 302 Moved Temporarily Server: nginx/1.1.19 Date: Fri, 23 May 2014 19:50:01 GMT Content-Type: text/html Content-Length: 161 Connection: keep-alive Location: http://1.finder.aspiralabs.com?s=h%3dkWPzcJ63IX2xLll%2bcp9ilCeDQ6I%3d%3bv%3dMTAwMw%3d%3d%3b&d=www.travelocity.com/&q=mcenabled%3D1 302 Found

302 Found

nginx/1.1.19
GET /?s=h%3dkWPzcJ63IX2xLll%2bcp9ilCeDQ6I%3d%3bv%3dMTAwMw%3d%3d%3b&d=www.travelocity.com/&q=mcenabled%3D1 HTTP/1.1 Host: 1.finder.aspiralabs.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive HTTP/1.1 302 Moved Temporarily Server: nginx/1.1.19 Date: Fri, 23 May 2014 19:50:01 GMT Content-Type: text/html Content-Length: 161 Connection: keep-alive Location: http://2.finder.aspiralabs.com?s=h%3dLoYZDz6f6Aj9I1KbSgY75XMvrmk%3d%3bv%3dMTAyMw%3d%3d%3b&d=www.travelocity.com/&q=mcenabled%3D1 302 Found

302 Found

nginx/1.1.19
GET /?s=h%3dLoYZDz6f6Aj9I1KbSgY75XMvrmk%3d%3bv%3dMTAyMw%3d%3d%3b&d=www.travelocity.com/&q=mcenabled%3D1 HTTP/1.1 Host: 2.finder.aspiralabs.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive HTTP/1.1 302 Moved Temporarily Server: nginx/1.1.19 Date: Fri, 23 May 2014 19:50:01 GMT Content-Type: text/html Content-Length: 161 Connection: keep-alive Location: http://3.finder.aspiralabs.com?s=h%3dHWeRDyL7e6ofKAPPbyQ%2fGgjo5hw%3d%3bv%3dMTEyMw%3d%3d%3b&d=www.travelocity.com/&q=mcenabled%3D1 302 Found

302 Found

nginx/1.1.19
GET /?s=h%3dHWeRDyL7e6ofKAPPbyQ%2fGgjo5hw%3d%3bv%3dMTEyMw%3d%3d%3b&d=www.travelocity.com/&q=mcenabled%3D1 HTTP/1.1 Host: 3.finder.aspiralabs.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive HTTP/1.1 302 Moved Temporarily Server: nginx/1.1.19 Date: Fri, 23 May 2014 19:50:02 GMT Content-Type: text/html Content-Length: 161 Connection: keep-alive Set-Cookie: _AF=h%3dUb%2b6NPQ47PeSp3fpxDcaznNBiUE%3d%3bl%3dMTI0OA%3d%3d%3b; Domain=.finder.aspiralabs.com; Path=/; Expires=Sun, 22-Jun-14 19:50:02 GMT Location: http://www.travelocity.com/?loc=1248&mcenabled=1 302 Found

302 Found

nginx/1.1.19
GET /?loc=1248&mcenabled=1 HTTP/1.1 Host: www.travelocity.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cookie: m123gz23523bs=3 Connection: keep-alive HTTP/1.0 302 Moved Temporarily Content-Length: 0 Location: http://proxy.fwdsnp.com/details.html?r=977&t=1248D1400874602A001109&b=1248&d=http%3A%2F%2Fwww.travelocity.com%2F Date: Fri May 23 19:26:16 2014 Server: Apache Cache-Control: no-cache, no-store Pragma: no-cache Connection: close GET /details.html?r=977&t=1248D1400874602A001109&b=1248&d=http%3A%2F%2Fwww.travelocity.com%2F HTTP/1.1 Host: proxy.fwdsnp.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive HTTP/1.1 200 OK Server: nginx/1.1.19 Date: Fri, 23 May 2014 19:23:13 GMT Content-Type: text/html;charset=ISO-8859-1 Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: UID=ab0fe670-4e16-489d-8e49-2e09693d0398; Expires=Wed, 10-Jun-2082 22:55:10 GMT; Path=/ Set-Cookie: JSESSIONID=FBBAF21EA4CF7C963375F71832A0B527; Path=/ Content-Language: en-US Content-Encoding: gzip GET /go.html?t=1248D1400874602A001109&r=977&d=http%3A%2F%2Fwww.travelocity.com%2F&b=1248&a=2025&l=2055&m=1&v=16015547102 HTTP/1.1 Host: proxy.fwdsnp.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://proxy.fwdsnp.com/details.html?r=977&t=1248D1400874602A001109&b=1248&d=http%3A%2F%2Fwww.travelocity.com%2F Cookie: UID=ab0fe670-4e16-489d-8e49-2e09693d0398; JSESSIONID=FBBAF21EA4CF7C963375F71832A0B527 Connection: keep-alive HTTP/1.1 302 Moved Temporarily Server: nginx/1.1.19 Date: Fri, 23 May 2014 19:23:13 GMT Content-Length: 0 Connection: keep-alive Location: http://www.travelocity.com/?mcenabled=4&d=http%3A%2F%2Fwww.jdoqocy.com%2Fclick-3965551-10472366%3Fsid%3D1248D1400874602A001109%26url%3Dhttp%253A%252F%252Fwww.travelocity.com%252F Content-Language: en-US GET /?mcenabled=4&d=http%3A%2F%2Fwww.jdoqocy.com%2Fclick-3965551-10472366%3Fsid%3D1248D1400874602A001109%26url%3Dhttp%253A%252F%252Fwww.travelocity.com%252F HTTP/1.1 Host: www.travelocity.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://proxy.fwdsnp.com/details.html?r=977&t=1248D1400874602A001109&b=1248&d=http%3A%2F%2Fwww.travelocity.com%2F Cookie: m123gz23523bs=3 Connection: keep-alive HTTP/1.0 302 Moved Temporarily Content-Length: 0 Location: http://www.jdoqocy.com/click-3965551-10472366?sid=1248D1400874602A001109&url=http%3A%2F%2Fwww.travelocity.com%2F Set-Cookie: m123gz23523bs=3; domain=www.travelocity.com; path=/ Date: Fri May 23 19:25:56 2014 Server: Apache Cache-Control: no-cache, no-store Pragma: no-cache Connection: close GET /click-3965551-10472366?sid=1248D1400874602A001109&url=http%3A%2F%2Fwww.travelocity.com%2F HTTP/1.1 Host: www.jdoqocy.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://proxy.fwdsnp.com/details.html?r=977&t=1248D1400874602A001109&b=1248&d=http%3A%2F%2Fwww.travelocity.com%2F Connection: keep-alive HTTP/1.1 302 Found Server: Resin/3.1.8 P3P: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT" Cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Fri, 23 May 2014 19:50:03 GMT Location: http://cj.dotomi.com/je116efon5/fmr/437A5699/6C98884/3/3/3?f=cE4z%3DNOQUZNQMMUTQSMOWMMNNMV%26GD7%3D3FFB%25PW%25Ob%25ObIII.FDwH07Ay4FK.yA8%25Ob<<3FFB%3A%2F%2FIII.5zACAyK.yA8%3AUM%2Fy74y6-PVSRRRN-NMQTOPSS< The URL has moved here GET /je116efon5/fmr/437A5699/6C98884/3/3/3?f=cE4z%3DNOQUZNQMMUTQSMOWMMNNMV%26GD7%3D3FFB%25PW%25Ob%25ObIII.FDwH07Ay4FK.yA8%25Ob%3C%3C3FFB%3A%2F%2FIII.5zACAyK.yA8%3AUM%2Fy74y6-PVSRRRN-NMQTOPSS%3C%3Cc%3C3FFB%3A%2F%2FBDAJK.1IzE9B.yA8%2Fz0Fw47E.3F87%3FD%3DVTT%26F%3DNOQUZNQMMUTQSMOWMMNNMV%26x%3DNOQU%26z%3D3FFB%25PW%25Ob%25ObIII.FDwH07Ay4FK.yA8%25Ob%3C HTTP/1.1 Host: cj.dotomi.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://proxy.fwdsnp.com/details.html?r=977&t=1248D1400874602A001109&b=1248&d=http%3A%2F%2Fwww.travelocity.com%2F Connection: keep-alive HTTP/1.1 302 Found Server: Resin/3.1.8 P3P: policyref="/w3c/p3p-d.xml", CP="NOI DSP NID OUR STP" Cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Fri, 23 May 2014 19:50:03 GMT Location: http://www.emjcd.com/ri97ft10L/t-4/IHLOJKNN/KQNMMMI/H/LOKMHJKIQPMHPOQNJO/NvPMwtrNvJsKIIvKPHuNPLJsJsKJrIJO?h=l3to%3DCDFJOCFBBJIFHBDLBBCCBK%2652w%3Ds440%25EL%25DQ%25DQ777.42l6pwznt49.nzx%25DQ The URL has moved here GET /ri97ft10L/t-4/IHLOJKNN/KQNMMMI/H/LOKMHJKIQPMHPOQNJO/NvPMwtrNvJsKIIvKPHuNPLJsJsKJrIJO?h=l3to%3DCDFJOCFBBJIFHBDLBBCCBK%2652w%3Ds440%25EL%25DQ%25DQ777.42l6pwznt49.nzx%25DQ%3Cnuz!7GA7-IGHt2vu%3Cs440%3A%2F%2F777.uoz1zn9.nzx%3AJB%2Fnwtnv-EKHGGGC-CBFIDEHH%3C%3CR%3Cs440%3A%2F%2F02z89.q7o3y0.nzx%2Fop4ltw3.s4xw%3F2%3DKII%264%3DCDFJOCFBBJIFHBDLBBCCBK%26m%3DCDFJ%26o%3Ds440%25EL%25DQ%25DQ777.42l6pwznt49.nzx%25DQ%3C HTTP/1.1 Host: www.emjcd.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://proxy.fwdsnp.com/details.html?r=977&t=1248D1400874602A001109&b=1248&d=http%3A%2F%2Fwww.travelocity.com%2F Connection: keep-alive HTTP/1.1 302 Found Server: Resin/3.1.8 P3P: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT" Cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Fri, 23 May 2014 19:50:03 GMT Location: http://www.travelocity.com/pubspec/scripts/eap.asp?GOTO=HOTWIZ&WA1=07010&WA2=3965551&WA3=1248D1400874602A001109&WA5=10472366&WA6=Hot_Hotel+Deals+in+Hawaii+-+Ongoing Set-Cookie: S=473502319850879627; domain=.emjcd.com; path=/; expires=Sun, 22-May-2016 19:49:55 GMT Set-Cookie: LCLK=cjo!w5zw-756irkj; domain=.emjcd.com; path=/; expires=Sun, 22-May-2016 19:49:55 GMT Content-Type: text/html Connection: close Transfer-Encoding: chunked Date: Fri, 23 May 2014 19:50:02 GMT The URL has moved here