Thursday, 27. March 2008, 15:51:17
if you click to see a picture through urlcash.net you get a fake "MSN live messenger" popup
Dont click on it its False advertising not a real message
Original page (in the wild)
The fake message
The full route
Domain infoThats all i can dig up about the domainhttp://www.urlcash.net/ _____>
http://who.godaddy.com/WhoIs.aspx?domain=urlcash.net&prog_id=godaddy __>
http://www.domainsbyproxy.com/1.
http://*-*********.urlcash.net/2.
http://www.urlcash.net/local_banners/msn_girl_**.gif ( at random)
The raw info with a description of all server requests is in all.log
The full clint / server requestsGET /www/delivery/al.php?zoneid=34&cb=INSERT_RANDOM_NUMBER_HERE&layerstyle=simple&align=right&valign=bottom&padding=0&closetime=25&padding=0&shifth=20&shiftv=0&closebutton=f&nobg=t&noborder=t HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 9.26
Host: www.urlads.net
Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Charset: iso-8859-1, utf-8, utf-16, *;q=0.1
Accept-Encoding: deflate, gzip, x-gzip, identity, *;q=0
Referer: http://e-siwc71rqv.urlcash.net/
Cookie: OAVARS[ab8b9541]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%223%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[a1e410a4]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2214%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[ab3337b0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%229%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[ab504fb4]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2263%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2238%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[a3edb70f]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2263%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2237%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAID=e7fec6b59f7ec470c807fda25f109520; OAVARS[abfcec92]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2213%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D
Cookie2: $Version=1
Connection: Keep-Alive, TE
TE: deflate, gzip, chunked, identity, trailers
HTTP/1.1 200 OK
Date: Thu, 27 Mar 2008 15:02:09 GMT
Server: Apache
X-Powered-By: PHP/5.2.5
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=e7fec6b59f7ec470c807fda25f109520; expires=Fri, 27-Mar-2009 15:02:09 GMT; path=/
Content-Length: 3719
Keep-Alive: timeout=3, max=20
Connection: Keep-Alive
Content-Type: application/x-javascript
var MAX_eed8ca3e = '';
MAX_eed8ca3e += "<"+"div id=\"MAX_eed8ca3e\" style=\"position:absolute; width:203px; height:118px; z-index:99; left: 0px; top: 0px; visibility: hidden\">\n";
MAX_eed8ca3e += "<"+"table cellspacing=\"0\" cellpadding=\"0\">\n";
MAX_eed8ca3e += "<"+"tr>\n";
MAX_eed8ca3e += "<"+"td align=\"center\">\n";
MAX_eed8ca3e += "<"+"table border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n";
MAX_eed8ca3e += "<"+"tr>\n";
MAX_eed8ca3e += "<"+"td width=\"201\" height=\"116\" align=\"center\" valign=\"middle\" style=\"padding: 0px\"><"+"a href=\'http://www.urlads.net/www/delivery/ck.php?oaparams=2__bannerid=185__zoneid=34__cb=8bab21c7a7__maxdest=http://master.urlads.net/count/click.php?id=7\' target=\'_blank\'><"+"img src=\'http://www.urlcash.net/local_banners/msn_girl_28.gif\' width=\'201\' height=\'116\' border=\'0\' /><"+"/a><"+"div id=\'beacon_185\' style=\'position: absolute; left: 0px; top: 0px; visibility: hidden;\'><"+"img src=\'http://www.urlads.net/www/delivery/lg.php?bannerid=185&campaignid=57&zoneid=34&channel_ids=,&OACBLOCK=86400&OASCCAP=2&loc=http%3A%2F%2Fe-siwc71rqv.urlcash.net%2F&cb=8bab21c7a7\' width=\'0\' height=\'0\' alt=\'\' style=\'width: 0px; height: 0px;\' /><"+"/div><"+"/td>\n";
MAX_eed8ca3e += "<"+"/tr>\n";
MAX_eed8ca3e += "<"+"/table>\n";
MAX_eed8ca3e += "<"+"/td>\n";
MAX_eed8ca3e += "<"+"/tr>\n";
MAX_eed8ca3e += "<"+"/table>\n";
MAX_eed8ca3e += "<"+"/div>\n";
document.write(MAX_eed8ca3e);
function MAX_findObj(n, d) {
var p,i,x; if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
for(i=0;!x&&d.layers&&i>d.layers.length;i++) x=MAX_findObj(n,d.layers[i].document);
if(!x && document.getElementById) x=document.getElementById(n); return x;
}
function MAX_getClientSize() {
if (window.innerHeight >= 0) {
return [window.innerWidth, window.innerHeight];
} else if (document.documentElement && document.documentElement.clientWidth > 0) {
return [document.documentElement.clientWidth,document.documentElement.clientHeight]
} else if (document.body.clientHeight > 0) {
return [document.body.clientWidth,document.body.clientHeight]
} else {
return [0, 0]
}
}
function MAX_adlayers_place_eed8ca3e()
{
var c = MAX_findObj('MAX_eed8ca3e');
if (!c)
return false;
_s='style'
var clientSize = MAX_getClientSize()
ih = clientSize[1]
iw = clientSize[0]
if(document.all && !window.opera)
{
sl = document.body.scrollLeft || document.documentElement.scrollLeft;
st = document.body.scrollTop || document.documentElement.scrollTop;
of = 0;
}
else
{
sl = window.pageXOffset;
st = window.pageYOffset;
if (window.opera)
of = 0;
else
of = 16;
}
c[_s].left = parseInt(sl+iw - 223) + (window.opera?'':'px');
c[_s].top = parseInt(st+ih - 118) + (window.opera?'':'px');
c[_s].visibility = MAX_adlayers_visible_eed8ca3e;
}
function MAX_simplepop_eed8ca3e(what)
{
var c = MAX_findObj('MAX_eed8ca3e');
if (!c)
return false;
if (c.style)
c = c.style;
switch(what)
{
case 'close':
MAX_adlayers_visible_eed8ca3e = 'hidden';
MAX_adlayers_place_eed8ca3e();
window.clearInterval(MAX_adlayers_timerid_eed8ca3e);
break;
case 'open':
MAX_adlayers_visible_eed8ca3e = 'visible';
MAX_adlayers_place_eed8ca3e();
MAX_adlayers_timerid_eed8ca3e = window.setInterval('MAX_adlayers_place_eed8ca3e()', 10);
return window.setTimeout('MAX_simplepop_eed8ca3e(\'close\')', 25000);
break;
}
}
var MAX_adlayers_timerid_eed8ca3e;
var MAX_adlayers_visible_eed8ca3e;
MAX_simplepop_eed8ca3e('open');
GET /www/delivery/ajs.php?zoneid=32&cb=75287883634&loc=http%3A//e-siwc71rqv.urlcash.net/ HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 9.26
Host: www.urlads.net
Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Charset: iso-8859-1, utf-8, utf-16, *;q=0.1
Accept-Encoding: deflate, gzip, x-gzip, identity, *;q=0
Referer: http://e-siwc71rqv.urlcash.net/
Cookie: OAVARS[ab8b9541]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%223%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[a1e410a4]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2214%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[ab3337b0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%229%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[ab504fb4]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2263%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2238%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[a3edb70f]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2263%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2237%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[abfcec92]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2213%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAID=e7fec6b59f7ec470c807fda25f109520
Cookie2: $Version=1
Connection: Keep-Alive, TE
TE: deflate, gzip, chunked, identity, trailers
HTTP/1.1 200 OK
Date: Thu, 27 Mar 2008 15:02:10 GMT
Server: Apache
X-Powered-By: PHP/5.2.5
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=e7fec6b59f7ec470c807fda25f109520; expires=Fri, 27-Mar-2009 15:02:10 GMT; path=/
Content-Length: 788
Keep-Alive: timeout=3, max=19
Connection: Keep-Alive
Content-Type: application/x-javascript
var MAX_7120097b = '';
MAX_7120097b += "<"+"script type=\"text/javascript\" src=\"http://www.urlads.net/urladscb.js\"><"+"/script>\n";
MAX_7120097b += "<"+"script type=\"text/javascript\">\n";
MAX_7120097b += "startup123(\"http://www.fpcTraffic2.com/raw/click.cgi?account=urlcash&track=O\");\n";
MAX_7120097b += "<"+"/script><"+"div id=\'beacon_270\' style=\'position: absolute; left: 0px; top: 0px; visibility: hidden;\'><"+"img src=\'http://www.urlads.net/www/delivery/lg.php?bannerid=270&campaignid=60&zoneid=32&channel_ids=,&OABLOCK=86400&OASCAP=1&OACBLOCK=43200&OASCCAP=2&loc=http%3A%2F%2Fe-siwc71rqv.urlcash.net%2F&cb=f00d400211\' width=\'0\' height=\'0\' alt=\'\' style=\'width: 0px; height: 0px;\' /><"+"/div>\n";
document.write(MAX_7120097b);
GET /local_banners/msn_girl_28.gif HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 9.26
Host: www.urlcash.net
Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Charset: iso-8859-1, utf-8, utf-16, *;q=0.1
Accept-Encoding: deflate, gzip, x-gzip, identity, *;q=0
Referer: http://e-siwc71rqv.urlcash.net/
Cookie: isuser=0
Cookie2: $Version=1
Connection: Keep-Alive, TE
TE: deflate, gzip, chunked, identity, trailers
HTTP/1.1 200 OK
Date: Thu, 27 Mar 2008 14:59:51 GMT
Server: Apache
Last-Modified: Sun, 24 Feb 2008 09:58:57 GMT
ETag: "1b60d9d-1e0f-80f6fa40"
Accept-Ranges: bytes
Content-Length: 7695
Keep-Alive: timeout=3, max=20
Connection: Keep-Alive
Content-Type: image/gif
GIF89aֹ t ק rE+ג־p×׃ֶvdmֻצרש›pEX'³בgux»ה¨½ֱg1״מנװלמ־יל³ֵֹ°„U¦µ¸¢vIZirp|~נף%Hi׀ךם’f:¹־העפDDDנעֺגא¸ַוי¸׃¿ֲׁגח§ֶּ™W7בעפק־¯†ֳ—gw…ˆשף°•\Cױ©|ֺחךֳ׃ןסֵהט.װגוi;"¼aµֽׂr°ָ…“–¡dIמSXY׳‰s†Z8†F*ּטכטפצ׳םנׂכמסו’A[rֻ°L´ycיכ…ֿב¦XHַ€gאטךֵֺ׃ױ>ֶe§ֳ˜₪¥S›§}P¶װג…¢|“™ט׳»ֳ¸kV”ֶױR¿ׂ½t]יkלעm>׃iדכממצק‰¢§L7אןס¨¨¨·ױ”´»ֹ׳ˆְ0r§²¨ּp×lT~R,ּאדֶ’y¥]=z½…U•²˜״וטװךםכ׃׃ »“ֹ‡oµcK־¥wט‰G!־…©²ְֺ׀ְ°½ײגװוחˆ«ם£¯±ֱn™¡נX±ֺדרֽ
ֶׁ׀%©ֹדאודS0£ֿ®ֿ״ֱױְc´ִZ/H¨טֳדץֿ÷ׂכQ:€ֳ|Kֺpיסס¼דטיספֹ׳טןה¢ֹװָזיM+׃האסף¯ַ׃ײטך 8\ֽנלה»§ֱׂטכy‹׳ְ_z<¸״פֶװ׳׀¬¨yF׃£q¾׀ׂ׀צ«›ּזטףנצr€ƒלפץ²¿ֱֵגׁילּiֺזי<¿װֹזךהףץגעפ ˆהײםן³שזפקִדטְבזֻּחכדעץ׃למגעץןסאנר״חמגסףזןס׃¸ארֱתאדעפ״אףֱֹ€}«ֽ[_`טרײ{~ֱזםp `¨ו5V±ֱ¨ Hלמ–׃א€°׃גֱOKNNx£]”¿ׂ¨¸`z׃בָדזֺדז¯}¼ֺּ״ְוףצטפקזפציץרךץרpppחפק333!ש , ֹ t שH° ֱƒ*\ָ°¡ֳ‡#JָP™ֵ‹3jָ±£ַ CI²₪ֹ“*{ֲ²¥ֻ—0cֺI³¦ֽ›8sךֹ³gLeµJ´¨ׁ£H“*]ֺ´©׃§P£JJ©6״4hױ÷מ+W‡¹2£בײ³h׃×]ֻ¶·pדֺK·n\l·‰״»¦ja
רִd¬¾ˆ+^ּ¸±דַ#KL¹²וָzֱשE×n¼מˆז%˜Wˆw":«^ֽ÷µכ׳°cֻM»¶ם¸eׂ%‹׳nj5j₪'^¼F¥B»¹ףח׀£KN½÷ץכ״³k־}תn~…׀ 9₪ˆZ&=%B·†»9™½/V/4Y־$O%˜פ hאמP} p0xgp°ƒf¨ב†rXF~hאw8ד+S`ˆz:ט OQCH7`™hגא˜˜@;8,h״(הiה‘B*ˆה’&F‹½pP“TViו•X.שa&ni₪?שI$fh‚I-X₪ְN,k¬E€°’ֺ!cֹ¹ֳ“UֱA$;T׀°DrֶDר#&ֺH;gDעG¡b€ף8לP' Uy~2‰םD¢RnJFעh ¦¢Z₪˜jz*¨¢Zֵ§ תG$~&ת'™סי©›&«ל²ּ6»י–[.&? €fLס'hk¸ד&״ׂiµאˆQ׀־;Tp ְאג')אT @¼TP/);¨ B§
08kםTXP
•’BJ;bK,י
PETPסֵ•&Lך¹*טGƒR
@½PI¯€#sא<¬B$
קלףֿ@3´@O[םµf(ֲ'—bֿ±טנֱ,כ˜q
'PE;
·³ץ¾ע*(ְֳ_a-s0l-־b$pq־–־¡uֿjצַמ^ׁ+× Z‹ UPAֱ¼s„%Uָ]…µ*$ ָ¼|sנ©Tלp² spנ0ם”-פח ƒNפֿF#€@X”S2jX1ִ":״“c™nײם˜%ִ‹ ְֳנ€˜6נא¨אְ²ץםא״;¦?ַע—"׀K/ׂN’x½ֳs=־¦K²ֳָ¯yן@זִ.<ח¯ףם‡ת+בˆu<ב— ִ"`gUdC® Eק*„׃U½דְפG‚vפB:C/ְ!I€£‚אh׀״מS’°ע„w°×
½kַ÷gCֲ"f6ל:׳=.צ!aץ†?בQ˜תש8״¿*Z±[2]»g4( ˜E8
{ֲִז„0!עxס’-§€x)€ק;ֳ ¢t†4*^ִאא™:הש&†) ‘!נbPµƒHz‘‡ל`$שׁL2S!@װp׀H‘€˜2¥£ A
K‡BמקֶZע–¸ּ¥.נ¡Zצׂ–]ג4A
}ז˜5¨Eא–ֽ״¥4½״hNף״ּ¦.A7Z—ְֽ?lMmף¹4Z5£©ˆYt!0‚)€>X¡E¬ףרּ§>קֹֿ~תף
ט>ֵ
פ M¨ׁFְ׀€b
רK(÷@ֿ«5פ¢ֽ¨F7ֺׁzפ£
©HGJׂ’†װhּH©J0׀ShֶTJ׃פ¦8ֽ©Nwֺ׃תפ§@
×P}R־t¨HM×R—ֺװ¦:U§F‹T§Jױ×Zץ×Xֽ×V·ֺױ®zץ«`
«Xַzױ¨’ץ¬hM«Z׳ֺײ¶bױh ˆ«\חJ׳÷ץ®xֽ«^קֺ׳¾תץ¯€
¬`ם
׳ֱצ°ˆM¬bֻ״»¶±¬d'K½˜ֽ¬f7ֻ־zצ³
hGKׂצ´¨MmgVײ÷צµ°lgKצ¶¸ֽnwֻתV¶¬•-3(A$@מ$ +H`׀®t§;ז:wֹ%qKzק»א
¯xik4˜ק¼”X.ךֱ„צ־אנִ>ֲא‹0ר£ קֽ/~ק«0׀׳׳€ן2ׁ^&@ s€ְ־ֻא;רֱ°„'Lב
[רֲ†°ֱׁaר‚ֳ>צב lאִd˜† ;¸רֵ0¶ƒfל «˜' F„x־@(ֶ0:Lה"שָHN²’—ּה&;שֹP.²ׁ~@ו@€0F·ּו.{שֻ0F?°+b¸ ֺhN³׳ּז6»שֽp³חLח*Oש-צA†0׃¿€´ MטB:0ֲ&!!׳שׁ´₪'ט;`HG$°×N{ת׃&ֲ×DMj
”₪Fµ×Wj(„a€ה±Jתײ¸־µ›צ <K ƒ?" ) =ָ€–†6׀ ׀מ
ֱ H@ג 2ָv¶ְ ´!ֺ^צ–½ל˜›׳ E.ִ0`ֿˆ·¼חMןzר־·¾קֽן~›¼~ְ<~la»ֿ€׀ 8»x6ִ`mhk[ׂnƒ%ּ-מ›חמB3גPBֿר·ֺW־ע–»ו80ךב‹Aלƒז6·vn״¢
ױ¦8´!q‹_\°ֳֵֶ-nr“›``AH`לזXֿ÷ײ·o£a ” ֵ'‚ףeKֱד^טA³mAt‹קAײ®רׁe m[bבMקרַM„.¸ ˆ€
¬ץֲנˆO¼גֿרֶ;ס|ה½\dג3נ?ָ=n/|[ם?z¹CmPxַ=־תaְˆז`ע]Hצ¸ֿ½מwֿ{Pu Cז7_לLְ¶ָ€³mסצ‹C‚4 ¢Oƒ”יׂ¿{ַֿ¾w׳ֱHP @‰a< קטO¿ת׳¯x¯ֳXֲנ#PƒDְ4P{(Nƒ‹ק c׀,P›P€c0ֿ†qlWlֵזz°§j ה7ְֱ~˜8ya2c°י0|°-–0jGm}€m&€9ְIƒIPI°,0 נv׀ ַzxvDpL 7@x~3–„J¸„L״„Nר„P…R8…TX…Sh43צ–7‚5`nD7mֽ׳=נ‚p z€X †9נ‚ H׳lf7?(¯ַ§p8 “`Vˆ‚8ˆ„Xˆ†ˆ…B° P™ l5Pvˆl=נvױ¦ƒcְ,ְk8 _0 [€oָ p}ֶׂƒ>רƒ¯'
8נ!א`ˆ´X‹¶x‹W&ׁא ָˆa׀ִf ²ְ j7t@w €‰l€ר־ט ˆlcpv p‚^ w¸0u‹ֱ
הXזxט˜ך¸ל״מרנןh4א 3׀ˆpvm׀ֹ׳ׂv p†ָֻ‰<ְ\ְ<נJ0 [ְlְ·m¨·p`‡R„´Sק¸אֱP$Y’&y’(™’*¹’,’.ש’0ש’F
ֹנk™׀ˆְ‰;§|;mg˜l°Jנ<Fy”y0 l=P}–t
7א€ש”€S· ¸א¯“^ש•`–b9–פha°)א) a״ m;h 9°[אqְz©z
ֹ `2p tx‘v¨‘DנI * ’ְ׀•c™’9™”’F“fy“a l™)׀&ˆ4—‰Fא‰y©×ֹ—I™qְJְ‚™7•שz“€ס Zיֱֲ9ִYֶyָשָ¹ּ־ש׀ִy™5Y ©–)נˆאּ}qm”X°yְtְ|Jא°שNIwvw·UI“½נ›¯Pײ7ֺ) ) z ַI†`L y¨¶€׃קc ”B™J°חיy°9P€₪hm0&¸@‰i½©9 0J ִש¢1Z£ׁi4A×™נ i–׀¶ְ ׀v ֹ¸זIt׀¡[¡H׃F› ˜ֺfnR‰¢yש¹•¯£`תA ¦c£ײG¦bz¦f÷¦cj}l¦n
§fצ`Z¦a:§d
§yJ§{Z§~ת§€¨‚
¦F׃ ױy“ְי™ֲ rאlI›cנ‰J`×J€IְF`‘ט׀6$zw')Jר©
׀×ת
«±:«¯«²z«µ*«³«µך×»ך×÷j«g
«÷ֺ«¿«ִך«ֺ÷¬ּ¬־ך«… ;ˆ=Zm)ַw Zwc ‘ױ ֻ¸†[ X: z‰Iƒ4` $j›ZJ×¥
ֺ«ֹ«ְת«ִ:¬´Z¬¯z¦´:°›¯÷¯ֳ¯ֿ÷°¬…ֺ™¨ײ¨קַ ÷4°9 P¡×†m¨w)ֹ=°I׀s4ֶ¦pס:¯¿iקׯ {³Z³k°<כ«ֱ³;K°ת°D[´ׁ÷ ¸׀ך™PA*₪*m6hƒloנj8 mx—_`²F׀—¨vֺf|XZ•Fפj¯>¬=³´ֶ¶o«C{°u°E›·[¨:Z צ; ™rְ€±9`כyX«D¹†|נy`©)l` ֱ¨pRp™° €¶Zי¯ ³¶°ֶ´¨K·*¬@K·j}s{«²;·z{»ֻj40 z`¡ * ¸€|z ²`
u)yX»“‘J_°²™פשƒזײ¹÷i »¾ג;¾ה[¾ז[¾p¾ך»¾ל»»י¾נ¿0 »ׂך· ¸¿·pְֲ¿–`
¶0אp”_\°µX׀©זֺF ›ilpvֺז¹p¢»•× ¿¾ײקֱ"¾#\ֲג«»¼k¿׳ -׀ֲ-°¿k‚J—¼¦ְ±w™tא‰`µ<”J –t#Z×l‡€ֱ›lֲLִNִלk4׃ֲ€@פנֲ·׀^נ¿¦`
% ֿ8”ג€|׀‰k˜5ַ ²אCךsח¬ֱ]ך×`c|ַ~ַ€ָ‚<ָ„\ָ†|ָˆ,ֵ׃׀»©נ,{@‚.,^l
–P², [ְ‰rא‰גֺƒz`®“״²@‡‹¸«ִh’ץַ€ָ|<ֻ´לַ¶|ֻµ¼ֻ÷ֻƒl4׀
קֻ™#(ֹ-ֵ…כ`
>Wz°ֳF I€¡¬©ױ©cְmqְ;ְ² לvּטט¼־ל־מ־ ־נ<ֿפ¼־ע\ֿרֿתּp6 ¿ֹ-נ.פrאֵr ¼l oנ״< ¢<׃} ְ> ְ¦אb<־ִ׀˜!©
ל|ֿת|ׂ&}ׂתׂ*ׂ'
ּ׃אֿ ָ-€{€(`׀›׀םyּ-mHׁ¡¡l° ֹ»ׁבֶ%נװwׂ£{־צ|¦יl}WmׂX}ֿ\°Z½ױֱ<¬amױcױX־סLײ.½ײלּֿ
-׀X׃ZL”|¢;ח[oְ¸גpEשr` ´¹ֶָNװ¦ ׂ"םיPׂhmֿס־ךּױa-˜}–=ײ›—ֽײ¢n6 ׳אp׃¬ֽZֵ;W¸>€‰`<l”“[¹cנ±c€±Kֳpֶv¹ן ¾
¡-ײg
›)
ֽ–°׃ױ׳=¢m4`קˆ6נ»X½ֵפp…r`ר¡ghµ®9¹±)©H-ֶ%`
בל¹®@־‰י׀nnאא^אNאא
אNב
.אבמאבב ג־¨ ¼`\¿K8m׀\ל¨@ל¼/x‰
IאׂGXm4װLֽ K/p°נM0בnב־אL^או^בRמהMבו"¾ו\ם¾0בmֵ8׃‘¼ְ¿ט
דָ—¼<> q®²7ָ 8Hm€>p¸הֵ]הM0Iו~¦
וnט‡.ב…Nו‡מט®ט®הSה]~י"n4¨`
זc~ז·¿ֳ¨y¢p @*ֶzא£HµIֺװ–¼I ˆ—0$ חנG¨לֲ>לִ^לִֶלֺ^לָ¾ל־ל׀םׁ®י¨ ˆ“¿›¿k9¸שˆ=mֹ׀pנ†/X€S‹€‡pLƒ±}א¹©ְכ¯Hƒאׂלײwןֿ~¦תןןֱNם¿
¢¾ ¼ 5 ‘ln
^Pr› p ƒ›אc°8‰»±1H₪*¹N
ע¢Pן ע*¿ע,ן
€םְ«נ¯‘i¶ ֶ%`>0ֶ5״ׁqEjחc»‚!כ©@ j`„'ל-?ץT_ץ)o4&` ¬`נא@צשֵ²`ן|ֹ> ׳8©¼oL² ƒ>±K?M/~pעץ~ק€ר‚?ר„_ר†רˆררXoץ n צR€׳^½-%@סz ּ\½צk?p}° ±ˆv¹.€7~L
d°ר´_¶¸_ע'¼ •v—_¼pl
iHס־ֳ¨ֺ«<u¯׳{®«ֿת3 Z€†ְ^²אˆר¸נױ @ g —oM‰:Oסp°ש–־£/ְֽ€€ס₪8׀§3$9Qa¨^&ULL₪XׁגE5nה״ׁדGסדחן·&u×עµֳ€=´‘u€,Sptֲ)ׁ³„%eֹע1Tƒ²Jl:*p ֱƒכ„pׂkֱֳ#dmוױכW°aֵ%[ײלY´fG–ֺ$S:–;bֺ ©Oׂpפטפי׃TQ§HרH’pS‚Pe ¬I¬_׃¡J[עeּ™5¯ץ'ֽ&]ם£rֱפ*׃ˆ\hG„Hk׳±eֿץיU¹s_¨*׳9¿ּ˜,ֽרqהֹ•/gשsטׁ¥O־42B)`…¯K¸ ]ְ€¹6‘p]€I׳ֵ#מד©†~רp`x_²$µpBa… D n†.¸¹nAtנA#”pB
+´נB93ֶ˜
p©gS¦qDK4סִ5™BֵM€€s`‘ Qך cCsװqG{פסG ƒrH"‰װpC2 @גIuN‘E*«QֺSװy-P($ְֺ‚"ֻ4ףL4׃T׃˜#±זˆz ְAJךװג־.׀sO>פףO'נװ¢־J© ‡2$80kײtפQH#ץ±Mkׂ©CְֺX`QA…^*uTRK5ץTQ?”S (ֳEqִֹFn$µץV\‹l“2˜A\~V`5הXd“UvYf™-–״_ ְ…‰:ֽץZl³e“$rִמˆA2¶r£צ\t׃Uwu!ˆ\\D™u2h´µק^G9»g}7 ##ךָd`Q
6˜„› Ea†v¸aˆF״א‚¡ר¬€_;צרcCyd’K6שd”שױ·ד
¬!£€^¢k¾רז:pײ9gw®¹™8"2ָ״`ד”“Vzi¦›Vze§£–zj׫¶÷d־עׁzk®»צתk°ֳ{l²ֻ6l´׃V{ם¯³fm¸ד–{n÷כm»ףײ{o¾&›³e|pֲ7pִW|qֶwqָ#—p־ת±rּ3׳|s־;קs׀C}tׂK7פֽ+G}uײ[wu״cח\uk·vsv{קwאEחגסYaˆ!¬@שV>)yט£—~zך«·zל³׳~{מ»׳~רג‡8ב„VXa|+Fס~}צw}רד/|ג‡8„Xּ_!ך‘‘ ֺO$`
x@dPLאָ™+¸_(€Ol >:ט@‚P„#$aM¨Aj׀„4 ;ָB×נ„„ םw¾" y…CרCֲp†C$ג?״@!ֶPG`[טֳ!ײp€7lEba+ >Db
Q״ֵ
61_,bֽCס…t!“˜F2²±ד½¨)ךֳ~ֹ³¢ֵַֻ&ֺp@₪ֽxH‚ה—¸ָ6‰‚פa—€>²דj”d =I6"R”DT₪ַˆ}₪r¨T¥*YֺT¾R–¥+m¹ֺ[ֺR•i¥ע²X„"°ƒWנֶ-[©K\ײ2™ֻ|ו*›KhFS׃₪f5¥ֹJdל&³™ֿT&4‘שMcb3—ֶה¥*±€X S˜„(f7ֳMqֲ–´f=םyOcjףֻהח1ֹLyT™אלf9S‰־X₪3˜ֲ´B>ךּmbsƒ®(>-zׁz÷נ˜ט3+:OZ>T£±”¨>בׂ}t£(_¼ׁV<bְhMmzSזT§:}¥J}ב‹Tת"פvzT₪&U©Ki3UֺT¨FU×SֵיS©zU¬fץ×סGW½תU°†U¬c%kYֽzV´¦Ukek[:V’ִU®s¥k]םzW¼זU¯{וk_תWְv¯ ;
GET /www/delivery/afr.php?n=ab3337b0&zoneid=9&cb=INSERT_RANDOM_NUMBER_HERE HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 9.26
Host: www.urlads.net
Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Charset: iso-8859-1, utf-8, utf-16, *;q=0.1
Accept-Encoding: deflate, gzip, x-gzip, identity, *;q=0
Referer: http://e-siwc71rqv.urlcash.net/
Cookie: OAVARS[ab8b9541]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%223%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[a1e410a4]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2214%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[ab3337b0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%229%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[ab504fb4]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2263%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2238%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[a3edb70f]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2263%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2237%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[abfcec92]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2213%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAID=e7fec6b59f7ec470c807fda25f109520
Cookie2: $Version=1
Connection: Keep-Alive, TE
TE: deflate, gzip, chunked, identity, trailers
HTTP/1.1 200 OK
Date: Thu, 27 Mar 2008 15:02:10 GMT
Server: Apache
X-Powered-By: PHP/5.2.5
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=e7fec6b59f7ec470c807fda25f109520; expires=Fri, 27-Mar-2009 15:02:10 GMT; path=/
Set-Cookie: OAVARS[ab3337b0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%229%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; path=/
Content-Length: 804
Keep-Alive: timeout=3, max=18
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
<html>
<head>
<title>Advertisement</title>
</head>
<body leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' style='background-color:transparent; width: 100%; text-align: center;'>
<!-- BEGIN STANDARD TAG - 468 x 60 - ROS: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=468 HEIGHT=60 SRC="http://adserving.cpxinteractive.com/st?ad_type=iframe&ad_size=468x60§ion=285586"></IFRAME>
<!-- END TAG --><div id='beacon_61' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http://www.urlads.net/www/delivery/lg.php?bannerid=61&campaignid=36&zoneid=9&loc=http%3A%2F%2Fe-siwc71rqv.urlcash.net%2F&cb=c65e8fa87a' width='0' height='0' alt='' style='width: 0px; height: 0px;' /></div>
</body>
</html>
GET /not_found.php HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 9.26
Host: www.urlcash.net
Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Charset: iso-8859-1, utf-8, utf-16, *;q=0.1
Accept-Encoding: deflate, gzip, x-gzip, identity, *;q=0
Referer: http://e-siwc71rqv.urlcash.net/
Cookie: isuser=0
Cookie2: $Version=1
Connection: Keep-Alive, TE
TE: deflate, gzip, chunked, identity, trailers
HTTP/1.1 200 OK
Date: Thu, 27 Mar 2008 14:59:51 GMT
Server: Apache
X-Powered-By: PHP/5.2.5
Content-Length: 2822
Keep-Alive: timeout=3, max=20
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
<html><head><title>URLCash.net :: An URL Forwarding Service - Where You Get Paid!</title>
<style type='text/css'>
body {
background-color:#FFFFFF;
font-size:7pt;
color:#000000;
margin:0px;
padding:0px;
border:none;
border-bottom:solid 1px #000000;
text-align:center;
font-family:verdana,tahoma,helvetica;
}
#rightbox {
position:absolute;
right:0px;
top:0px;
width:85px;
height:600px;
z-index:3;
}
.textbox {
padding-left:4px;
font-size:9pt;
}
a {
text-decoration:none;
color:#000000;
}
a:hover {
text-decoration:underline;
color:#888888;
}
</style>
</html>
<body>
<table cellpadding='0' width='100%' height='100%' cellpadding='0' border='0'>
<tr>
<td align='center' class='textbox'>
<!-- 728x90 Adult Top 404 -->
<iframe id='a3edb70f' name='a3edb70f' src='http://www.urlads.net/www/delivery/afr.php?n=a3edb70f&zoneid=37&cb=INSERT_RANDOM_NUMBER_HERE' framespacing='0' frameborder='no' scrolling='no'
width='728' height='90'><a href='http://www.urlads.net/www/delivery/ck.php?n=a6a03412&cb=INSERT_RANDOM_NUMBER_HERE' target='_blank'><img
src='http://www.urlads.net/www/delivery/avw.php?zoneid=37&cb=INSERT_RANDOM_NUMBER_HERE&n=a6a03412' border='0' alt='' /></a></iframe>
<script type='text/javascript' src='http://www.urlads.net/www/delivery/ag.php'></script>
<p><b>The requested page was not found on urlcash.net</b><br /><br />
<a href='http://www.urlcash.net?ref=5750&w=404' target='_top'>Click here to learn how you can make money from just posting on a forum - easy!</a>
</p>
<!-- 728x90 Adult Bottom 404 -->
<iframe id='ab504fb4' name='ab504fb4' src='http://www.urlads.net/www/delivery/afr.php?n=ab504fb4&zoneid=38&cb=INSERT_RANDOM_NUMBER_HERE' framespacing='0' frameborder='no' scrolling='no'
width='728' height='90'><a href='http://www.urlads.net/www/delivery/ck.php?n=a53ed4c3&cb=INSERT_RANDOM_NUMBER_HERE' target='_blank'><img
src='http://www.urlads.net/www/delivery/avw.php?zoneid=38&cb=INSERT_RANDOM_NUMBER_HERE&n=a53ed4c3' border='0' alt='' /></a></iframe>
<script type='text/javascript' src='http://www.urlads.net/www/delivery/ag.php'></script>
</tr>
</table>
</body>
</html>
GET /www/delivery/afr.php?n=abfcec92&zoneid=13&cb=INSERT_RANDOM_NUMBER_HERE HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 9.26
Host: www.urlads.net
Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Charset: iso-8859-1, utf-8, utf-16, *;q=0.1
Accept-Encoding: deflate, gzip, x-gzip, identity, *;q=0
Referer: http://e-siwc71rqv.urlcash.net/
Cookie: OAVARS[ab8b9541]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%223%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[a1e410a4]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2214%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[ab3337b0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%229%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[ab504fb4]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2263%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2238%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[a3edb70f]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2263%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2237%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[abfcec92]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2213%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAID=e7fec6b59f7ec470c807fda25f109520
Cookie2: $Version=1
Connection: Keep-Alive, TE
TE: deflate, gzip, chunked, identity, trailers
HTTP/1.1 200 OK
Date: Thu, 27 Mar 2008 15:02:10 GMT
Server: Apache
X-Powered-By: PHP/5.2.5
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=e7fec6b59f7ec470c807fda25f109520; expires=Fri, 27-Mar-2009 15:02:10 GMT; path=/
Set-Cookie: OAVARS[abfcec92]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2213%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; path=/
Content-Length: 805
Keep-Alive: timeout=3, max=20
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
<html>
<head>
<title>Advertisement</title>
</head>
<body leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' style='background-color:transparent; width: 100%; text-align: center;'>
<!-- BEGIN STANDARD TAG - 468 x 60 - ROS: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=468 HEIGHT=60 SRC="http://adserving.cpxinteractive.com/st?ad_type=iframe&ad_size=468x60§ion=285586"></IFRAME>
<!-- END TAG --><div id='beacon_61' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http://www.urlads.net/www/delivery/lg.php?bannerid=61&campaignid=36&zoneid=13&loc=http%3A%2F%2Fe-siwc71rqv.urlcash.net%2F&cb=d6eabf245a' width='0' height='0' alt='' style='width: 0px; height: 0px;' /></div>
</body>
</html>
GET /favicon.ico HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 9.26
Host: e-siwc71rqv.urlcash.net
Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Charset: iso-8859-1, utf-8, utf-16, *;q=0.1
Accept-Encoding: deflate, gzip, x-gzip, identity, *;q=0
Referer: http://e-siwc71rqv.urlcash.net/
Connection: Keep-Alive, TE
TE: deflate, gzip, chunked, identity, trailers
HTTP/1.1 200 OK
Date: Thu, 27 Mar 2008 14:59:52 GMT
Server: Apache
Last-Modified: Tue, 31 Jul 2007 23:16:30 GMT
ETag: "1b60cae-0-663bcf80"
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=3, max=20
Connection: Keep-Alive
Content-Type: image/x-icon
GET /www/delivery/afr.php?n=a3edb70f&zoneid=37&cb=INSERT_RANDOM_NUMBER_HERE HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 9.26
Host: www.urlads.net
Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Charset: iso-8859-1, utf-8, utf-16, *;q=0.1
Accept-Encoding: deflate, gzip, x-gzip, identity, *;q=0
Referer: http://www.urlcash.net/not_found.php
Cookie: OAVARS[ab8b9541]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%223%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[a1e410a4]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2214%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[ab504fb4]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2263%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2238%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[a3edb70f]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2263%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2237%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[ab3337b0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%229%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAID=e7fec6b59f7ec470c807fda25f109520; OAVARS[abfcec92]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2213%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D
Cookie2: $Version=1
Connection: Keep-Alive, TE
TE: deflate, gzip, chunked, identity, trailers
HTTP/1.1 200 OK
Date: Thu, 27 Mar 2008 15:02:11 GMT
Server: Apache
X-Powered-By: PHP/5.2.5
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=e7fec6b59f7ec470c807fda25f109520; expires=Fri, 27-Mar-2009 15:02:11 GMT; path=/
Set-Cookie: OAVARS[a3edb70f]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2263%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2237%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; path=/
Content-Length: 681
Keep-Alive: timeout=3, max=17
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
<html>
<head>
<title>Advertisement</title>
</head>
<body leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' style='background-color:transparent; width: 100%; text-align: center;'>
<iframe src="http://srv.etology.com/urlcash/728x90c.htm" scrolling="No" allowtransparency="true" width="728" height="90" frameborder="No"></iframe><div id='beacon_63' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http://www.urlads.net/www/delivery/lg.php?bannerid=63&campaignid=26&zoneid=37&loc=http%3A%2F%2Fwww.urlcash.net%2Fnot_found.php&cb=ede041310c' width='0' height='0' alt='' style='width: 0px; height: 0px;' /></div>
</body>
</html>
GET /www/delivery/afr.php?n=ab504fb4&zoneid=38&cb=INSERT_RANDOM_NUMBER_HERE HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 9.26
Host: www.urlads.net
Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Charset: iso-8859-1, utf-8, utf-16, *;q=0.1
Accept-Encoding: deflate, gzip, x-gzip, identity, *;q=0
Referer: http://www.urlcash.net/not_found.php
Cookie: OAVARS[ab8b9541]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%223%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[a1e410a4]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2214%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[ab504fb4]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2263%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2238%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[a3edb70f]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2263%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2237%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAVARS[ab3337b0]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A1%3A%229%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; OAID=e7fec6b59f7ec470c807fda25f109520; OAVARS[abfcec92]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2261%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2213%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D
Cookie2: $Version=1
Connection: Keep-Alive, TE
TE: deflate, gzip, chunked, identity, trailers
HTTP/1.1 200 OK
Date: Thu, 27 Mar 2008 15:02:11 GMT
Server: Apache
X-Powered-By: PHP/5.2.5
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=e7fec6b59f7ec470c807fda25f109520; expires=Fri, 27-Mar-2009 15:02:11 GMT; path=/
Set-Cookie: OAVARS[ab504fb4]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A2%3A%2263%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A2%3A%2238%22%3Bs%3A6%3A%22oadest%22%3Bs%3A0%3A%22%22%3B%7D; path=/
Content-Length: 681
Keep-Alive: timeout=3, max=19
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
<html>
<head>
<title>Advertisement</title>
</head>
<body leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' style='background-color:transparent; width: 100%; text-align: center;'>
<iframe src="http://srv.etology.com/urlcash/728x90c.htm" scrolling="No" allowtransparency="true" width="728" height="90" frameborder="No"></iframe><div id='beacon_63' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http://www.urlads.net/www/delivery/lg.php?bannerid=63&campaignid=26&zoneid=38&loc=http%3A%2F%2Fwww.urlcash.net%2Fnot_found.php&cb=af8b2a3eb3' width='0' height='0' alt='' style='width: 0px; height: 0px;' /></div>
</body>
</html>