GET http://www.ptp22.com/seo.php?username=fuji10&format=468x60 HTTP/1.1 Accept: */* Accept-Language: en-us User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPat; OfficeLivePatch.1.) Accept-Encoding: gzip, deflate Proxy-Connection: Keep-Alive Host: www.ptp22.com HTTP/1.1 200 OK Server: nginx/1.2.8 Date: Sat, 17 Aug 2013 02:36:30 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 844 X-Powered-By: PHP/5.1.6 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Encoding: gzip Vary: Accept-Encoding Connection: Keep-Alive Proxy-Connection: Keep-Alive
POST http://50.62.128.149/?username=fuji10 HTTP/1.1 Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml+xml, */* Referer: http://www.ptp22.com/seo.php?username=fuji10&format=468x60 Accept-Language: en-us User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPat; OfficeLivePatch.1.) Content-Type: application/x-www-form-urlencoded Accept-Encoding: gzip, deflate Host: 50.62.128.149 Content-Length: 396 Proxy-Connection: Keep-Alive Pragma: no-cache clickurl=http%3A%2F%2Fwww.ewebse.com%2Fgo.php%3Fclient_ip%3D...%26md5%3D2cb5e39904f7827316b8b61e82447ba3%26track%3Dgb%26feedname%3D1%26uid%3Dfuji10%26unique_id%3D17dc8a6d92f9170aa4d98bbe4f6716d3&unique_id=17dc8a6d92f9170aa4d98bbe4f6716d3&format=banner&md5_ua=32b2b1165d2a06b8459982ae8d2d855d&md5_uid=d09aea40b0387911d96dcc4173c29e4d&fH=604&fW=1004&bX=&bY=&sX=1024&sY=768&if=&frm=0&aj=-1 HTTP/1.1 200 OK Server: nginx/1.2.8 Date: Sat, 17 Aug 2013 02:36:31 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 2525 X-Powered-By: PHP/5.1.6 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Connection: Keep-Alive Proxy-Connection: Keep-Alive
POST http://click.ewebse.com/go.php?client_ip=...&md5=2cb5e39904f7827316b8b61e82447ba3&track=gb&feedname=1&uid=fuji10&unique_id=17dc8a6d92f9170aa4d98bbe4f6716d3 HTTP/1.1 Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml+xml, */* Referer: http://50.62.128.149/?username=fuji10 Accept-Language: en-us User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPat; OfficeLivePatch.1.) Content-Type: application/x-www-form-urlencoded Accept-Encoding: gzip, deflate Host: click.ewebse.com Content-Length: 347 Proxy-Connection: Keep-Alive Pragma: no-cache clickurl=http%3A%2F%2Fwww.ewebse.com%2Fgo.php%3Fclient_ip%3D...%26md5%3D2cb5e39904f7827316b8b61e82447ba3%26track%3Dgb%26feedname%3D1%26uid%3Dfuji10%26unique_id%3D17dc8a6d92f9170aa4d98bbe4f6716d3&unique_id=17dc8a6d92f9170aa4d98bbe4f6716d3&format=banner&md5_ua=32b2b1165d2a06b8459982ae8d2d855d&md5_uid=d09aea40b0387911d96dcc4173c29e4d&frm= HTTP/1.1 200 OK Server: nginx/1.2.8 Date: Sat, 17 Aug 2013 02:36:32 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 2209 X-Powered-By: PHP/5.1.6 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Connection: Keep-Alive Proxy-Connection: Keep-Alive
POST http://bing-usa.com/results/?partnerid=113643&appid=134548&subid=none&ip=...&cid=281347&entry=car%20disposal&ronMin=0.000200&mb=0.000200&qs=IhwIAhVYFXdeBhdIERFeXltHQhJqDVkVVQYYd1ZFBBweEAYdJ0UcFGRcW0ZdQ1Q8HgZPS1YXBgsLHBQTYlhYRFlUBjcPFxdEQFpZX1wTFAc3G1BAQlUQd1xWVBoCSVlBXhETE2ZPAxJRVQ51XlJBTFYXGVJeDxARY1ldDFxLEHVeU0IFQ0BHX14REREvWUNAXFUQdRJTXElARFlfEhEPEWNbX0UQUxBrXlNCSUAIWkFeERERYxVcXlxVEHVeRREQFElbV18SFRZ1BQQUUVIYc19US0hWEAYCD0hPHD4cHhkPB0wzCk0RFh1SGBtTEBIWZV5dRlVcEGMFFE8LHxpPDAVWHAchDAs0UQ1UMR5GQRhVRg9KXEdWViRHCAcJB1MgQAAdFFYBCD9TdkhPNwYaA0lXEB0-RkUaOTFMWA0ZB1M9AlBBSgJFKhoCFRAUSVpfXxgQByMIHwQCAFIsCl5DSENCXVxIQFFROg1QQV9RFXFWRQEMEh0NUgBOT0R1AB1NW10OdFtUXEhJQUdWWwdCSDdUX0hdVhRySAYcDQINVAwPUwFFOhodHx8ETGMcDBw0GRpUX0ARERFhWV1WAQcddUBTQklCRFlJG1NNHDsdGQBJVkFgXAVXSxYZHBwHQkNNJQ1DEwMIBXcIDwsLGRcaSlxHRE0_AAhdCwpVKQoKHB5dGAAIBlVSBGEPSEMKEFQoMRAdDAIXDEpdRRcUZVFaSVtdBXdYFgYULxkMCwdUTARgDQ4AD0AScxsXHyYTFQQfD0hGT3ZaCT0uKXYBOyhfHh8bDgMLDBMZZ19cQ0FTFXNWVEtOSCtcWFsXFxAMW1VBX1EXGl9SQU9ERzZeXRUUFWs2Ax8CAAV3WAAeEBMfTFwKBBMVdl4PMyAsYw4nJ1dOFA== HTTP/1.1 Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml+xml, */* Referer: http://click.ewebse.com/go.php?client_ip=...&md5=2cb5e39904f7827316b8b61e82447ba3&track=gb&feedname=1&uid=fuji10&unique_id=17dc8a6d92f9170aa4d98bbe4f6716d3 Accept-Language: en-us User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPat; OfficeLivePatch.1.) Content-Type: application/x-www-form-urlencoded Accept-Encoding: gzip, deflate Host: bing-usa.com Content-Length: 18 Proxy-Connection: Keep-Alive Pragma: no-cache tempurl_id=1288745 HTTP/1.1 200 OK Date: Sat, 17 Aug 2013 02:36:33 GMT Server: Apache/2.2.14 (Ubuntu) Set-Cookie: JSESSIONID=0F3CC91E8A4051A4AA8D8F07C3855DB1; Path=/ Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2173 Keep-Alive: timeout=1, max=128 Content-Type: text/html Connection: Keep-Alive Proxy-Connection: Keep-Alive GET http://redirect.xmladfeed.com/presults.jsp?partnerid=113643&appid=134548&subid=none&ip=...&cid=281347&entry=car%20disposal&ronMin=0.000200&mb=0.000200&qs=IhwIAhVYFXdeBhdIERFeXltHQhJqDVkVVQYYd1ZFBBweEAYdJ0UcFGRcW0ZdQ1Q8HgZPS1YXBgsLHBQTYlhYRFlUBjcPFxdEQFpZX1wTFAc3G1BAQlUQd1xWVBoCSVlBXhETE2ZPAxJRVQ51XlJBTFYXGVJeDxARY1ldDFxLEHVeU0IFQ0BHX14REREvWUNAXFUQdRJTXElARFlfEhEPEWNbX0UQUxBrXlNCSUAIWkFeERERYxVcXlxVEHVeRREQFElbV18SFRZ1BQQUUVIYc19US0hWEAYCD0hPHD4cHhkPB0wzCk0RFh1SGBtTEBIWZV5dRlVcEGMFFE8LHxpPDAVWHAchDAs0UQ1UMR5GQRhVRg9KXEdWViRHCAcJB1MgQAAdFFYBCD9TdkhPNwYaA0lXEB0-RkUaOTFMWA0ZB1M9AlBBSgJFKhoCFRAUSVpfXxgQByMIHwQCAFIsCl5DSENCXVxIQFFROg1QQV9RFXFWRQEMEh0NUgBOT0R1AB1NW10OdFtUXEhJQUdWWwdCSDdUX0hdVhRySAYcDQINVAwPUwFFOhodHx8ETGMcDBw0GRpUX0ARERFhWV1WAQcddUBTQklCRFlJG1NNHDsdGQBJVkFgXAVXSxYZHBwHQkNNJQ1DEwMIBXcIDwsLGRcaSlxHRE0_AAhdCwpVKQoKHB5dGAAIBlVSBGEPSEMKEFQoMRAdDAIXDEpdRRcUZVFaSVtdBXdYFgYULxkMCwdUTARgDQ4AD0AScxsXHyYTFQQfD0hGT3ZaCT0uKXYBOyhfHh8bDgMLDBMZZ19cQ0FTFXNWVEtOSCtcWFsXFxAMW1VBX1EXGl9SQU9ERzZeXRUUFWs2Ax8CAAV3WAAeEBMfTFwKBBMVdl4PMyAsYw4nJ1dOFA==&POS=4x117&VIEWPORT=936x593&IFRAME=N&FLASH=Y&COOKIES=Y&JSON=Y&RES=1024x768&REFERER=http%3A//click.ewebse.com/go.php%3Fclient_ip%3D...%26md5%3D2cb5e39904f7827316b8b61e82447ba3%26track%3Dgb%26feedname%3D1%26uid%3Dfuji10%26unique_id%3D17dc8a6d92f9170aa4d98bbe4f6716d3 HTTP/1.1 Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml+xml, */* Referer: http://bing-usa.com/results/?partnerid=113643&appid=134548&subid=none&ip=...&cid=281347&entry=car%20disposal&ronMin=0.000200&mb=0.000200&qs=IhwIAhVYFXdeBhdIERFeXltHQhJqDVkVVQYYd1ZFBBweEAYdJ0UcFGRcW0ZdQ1Q8HgZPS1YXBgsLHBQTYlhYRFlUBjcPFxdEQFpZX1wTFAc3G1BAQlUQd1xWVBoCSVlBXhETE2ZPAxJRVQ51XlJBTFYXGVJeDxARY1ldDFxLEHVeU0IFQ0BHX14REREvWUNAXFUQdRJTXElARFlfEhEPEWNbX0UQUxBrXlNCSUAIWkFeERERYxVcXlxVEHVeRREQFElbV18SFRZ1BQQUUVIYc19US0hWEAYCD0hPHD4cHhkPB0wzCk0RFh1SGBtTEBIWZV5dRlVcEGMFFE8LHxpPDAVWHAchDAs0UQ1UMR5GQRhVRg9KXEdWViRHCAcJB1MgQAAdFFYBCD9TdkhPNwYaA0lXEB0-RkUaOTFMWA0ZB1M9AlBBSgJFKhoCFRAUSVpfXxgQByMIHwQCAFIsCl5DSENCXVxIQFFROg1QQV9RFXFWRQEMEh0NUgBOT0R1AB1NW10OdFtUXEhJQUdWWwdCSDdUX0hdVhRySAYcDQINVAwPUwFFOhodHx8ETGMcDBw0GRpUX0ARERFhWV1WAQcddUBTQklCRFlJG1NNHDsdGQBJVkFgXAVXSxYZHBwHQkNNJQ1DEwMIBXcIDwsLGRcaSlxHRE0_AAhdCwpVKQoKHB5dGAAIBlVSBGEPSEMKEFQoMRAdDAIXDEpdRRcUZVFaSVtdBXdYFgYULxkMCwdUTARgDQ4AD0AScxsXHyYTFQQfD0hGT3ZaCT0uKXYBOyhfHh8bDgMLDBMZZ19cQ0FTFXNWVEtOSCtcWFsXFxAMW1VBX1EXGl9SQU9ERzZeXRUUFWs2Ax8CAAV3WAAeEBMfTFwKBBMVdl4PMyAsYw4nJ1dOFA== Accept-Language: en-us User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPat; OfficeLivePatch.1.) Accept-Encoding: gzip, deflate Host: redirect.xmladfeed.com Proxy-Connection: Keep-Alive HTTP/1.1 302 Moved Temporarily Date: Sat, 17 Aug 2013 02:36:34 GMT Server: Apache/2.2.14 (Ubuntu) Set-Cookie: JSESSIONID=85E7B5C9E6D9DB44630CB04419C80CFF; Path=/ P3P: CP="IDC DSP COR CURa ADMa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV INT STA" Set-Cookie: mgUser=1|f440f4dd44324a27b3b03dc109b607ec|...|1376706994631|0; Domain=.xmladfeed.com; Expires=Mon, 16-Sep-2013 02:36:34 GMT Set-Cookie: mgCPAC=R|1|1376706994633|281347-575661-0-1376706994633-1377500400000-clt^&nc^0&vt^1376706994&ncl^0&d_1376706994^3|cpc|7861791|ron|52115451|113643|134548|...|none|2|0|0|R|0.00225|0.00225|0.00225|0.00135|||&ct^&nv^1-|-; Domain=.xmladfeed.com; Expires=Tue, 27-Aug-2013 02:36:34 GMT Set-Cookie: mgCPAC=""; Domain=.xmladfeed.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT Location: ... Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 20 Keep-Alive: timeout=1, max=128 Content-Type: text/html Connection: Keep-Alive Proxy-Connection: Keep-Alive