Red Cliff: Web Historian - 1 - D:\Cases\SF Article\inde
x.dat
           
URL Address Modified Time Accessed Time Type Deleted Cached Files HTTP Header
http://64.4.55.45/tab.separator.off.gif 12/29/2004 1:57:05 PM 3/10/2005 6:09:02 PM URL False KYRPJUXG\tab.separator.off[1].
gif
HTTP/1.1 200 OK Content-Length: 59 Content-Type: image/gif ETag: "80162a30d8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://www.google.com/   3/10/2005 5:47:17 PM URL False 8R9KCL4N\google[1].htm HTTP/1.1 200 OK Content-Length: 3163 Content-Type: text/html
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/qsearch4_morese
archopt.gif
1/4/2005 2:16:04 PM 3/10/2005 5:50:30 PM URL False B3B0BSCG\qsearch4_moresearchop
t[1].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "0328ad591f2c41:9d4" Content-Length: 463 ~U:jschmo
http://images.barnesandnoble.com/pimages/saleannex/headers/Signup_button.gif 5/27/2003 12:43:00 PM 3/10/2005 5:50:30 PM URL False B3B0BSCG\Signup_button[1].gif HTTP/1.1 200 OK Content-Type: image/gif ETag: "4490b96f24c31:918" Content-Length: 256 ~U:jschmo
http://64.4.55.45/i.p.cont.group.gif 11/15/2004 7:39:40 PM 3/10/2005 6:09:02 PM URL False KYRPJUXG\i.p.cont.group[1].gif
HTTP/1.1 200 OK Content-Length: 256 Content-Type: image/gif ETag: "02eb9c174cbc41:6c2" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
https://www.orbitz.com/global/js/global.js 1/24/2005 6:01:46 PM 3/10/2005 5:49:05 PM LEAK True ICJNEDI2\global[1].js HTTP/1.1 200 OK ETag: "48821d-4c0f-41f57e5a" Content-Type: application/x-javascript Content-Encoding: deflate Transfer-Encodi
ng: chunked ~U:jschmo
http://www.orbitz.com/img/buttons/search.gif 12/20/2004 5:39:59 AM 3/10/2005 5:49:01 PM URL False B3B0BSCG\search[1].gif HTTP/1.1 200 OK ETag: "5701f2-22b-41c6abff" Content-Length: 555 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/PImages/gresources/navpromos/topp
romo_fastnfree.GIF
10/7/2004 2:25:18 PM 3/10/2005 5:50:30 PM URL False B3B0BSCG\toppromo_fastnfree[1]
.gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "c843a0ff9aacc41:105a" Content-Length: 2438 ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/7230000/7231544.gif 12/29/2003 9:14:28 AM 3/10/2005 5:49:23 PM URL False ICJNEDI2\7231544[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "fb54121216cec31:8ea" Content-Length: 1804 ~U:jschmo
http://macslash.org/images/slashlogo.gif 7/2/2002 5:26:42 AM 3/10/2005 5:44:52 PM URL False B3B0BSCG\slashlogo[1].gif HTTP/1.1 200 OK X-Powered-By: Slash 2.002006 X-Fry: I don't regret this, but I both rue and lament it. ETag: "48914-5bf-3d217
1d2" Content-Length: 1471 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/air/sbs_arrow.gif 12/20/2004 5:39:22 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\sbs_arrow[1].gif HTTP/1.1 200 OK ETag: "2dd188-84-41c6abda" Content-Length: 132 Content-Type: image/gif ~U:jschmo
http://hp.msn.com/scr/home/hp94.js?v=16 1/25/2005 1:13:34 PM 3/10/2005 5:43:03 PM URL False 8R9KCL4N\hp94[1].js HTTP/1.1 200 OK Content-Length: 5166 Content-Type: application/x-javascript ETag: "7e3f799593c51:8b2" P3P: CP="BUS CUR CONo F
IN IVDo ONL OUR PHY SAMo TELo" ~U:jschmo
https://www.orbitz.com/img/corners/12x12_cef_f_tr.gif 12/20/2004 5:40:04 AM 3/10/2005 5:49:06 PM URL False ICJNEDI2\12x12_cef_f_tr[1].gif
HTTP/1.1 200 OK ETag: "5b0349-74-41c6ac04" Content-Length: 116 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/global/nav/tab_fl_o.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\tab_fl_o[1].gif HTTP/1.1 200 OK ETag: "72c1f6-34b-41c6ac06" Content-Length: 843 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/air/tip_integration/sort_dur.gif 12/20/2004 5:39:58 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\sort_dur[1].gif HTTP/1.1 200 OK ETag: "5bc179-241-41c6abfe" Content-Length: 577 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/global/nav/tab_cr.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\tab_cr[1].gif HTTP/1.1 200 OK ETag: "72c1ff-2dd-41c6ac06" Content-Length: 733 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/orbitz_footer.gif 12/20/2004 5:39:22 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\orbitz_footer[1].gif HTTP/1.1 200 OK ETag: "28c232-18f-41c6abda" Content-Length: 399 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/pImages/resources/gateway/marketin
g/2004/081704_member_f3.gif
8/13/2004 9:50:53 AM 3/10/2005 5:48:38 PM URL False KYRPJUXG\081704_member_f3[1].g
if
HTTP/1.0 200 OK Content-Type: image/gif ETag: "2cef1d8d3c81c41:c42" Content-Length: 9974 ~U:jschmo
http://www.orbitz.com/img/air/tip_integration/tip_dd_matrix_gradient_bottom_txt.gif 12/20/2004 5:39:58 AM 3/10/2005 5:49:01 PM URL False B3B0BSCG\tip_dd_matrix_gradien
t_bottom_txt[1].gif
HTTP/1.1 200 OK ETag: "3c299-2a7-41c6abfe" Content-Length: 679 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/img/global/nav/tab_qs.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:05 PM URL False 8R9KCL4N\tab_qs[2].gif HTTP/1.1 200 OK ETag: "4a03dd-32e-41c6ac06" Content-Length: 814 Content-Type: image/gif ~U:jschmo
http://global.msads.net/ads/50645/0000050645_000000000000000106016.gif 9/21/2004 8:42:01 PM 3/10/2005 5:53:37 PM URL False 8R9KCL4N\0000050645_0000000000
00000106016[1].gif
HTTP/1.1 200 OK Content-Length: 1147 Content-Type: image/gif ETag: "80d2bf93ca0c41:0000" PICS-Label: (PICS-1.1 "http://www.rs
ac.org/ratingsv01.html" l comment "RSACi North America Server" by "inet@microsoft.com" r (n 0 s 0 v 0 l 0)) P3P: CP="BUS CUR
CONo FIN IVDo ONL OUR PHY SAMo TELo" ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/admin4_account.g
if
1/4/2005 3:20:58 PM 3/10/2005 5:48:37 PM URL False B3B0BSCG\admin4_account[1].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "0718be69af2c41:105a" Content-Length: 231 ~U:jschmo
http://search.barnesandnoble.com/booksearch/results.asp?WRD=code%20hacking&userid=pv4dUK5Bu2&cds2Pid
=946
  3/10/2005 5:48:44 PM URL False 8R9KCL4N\results[1].htm HTTP/1.1 200 OK P3P: CP="CAO DSP COR ADM DEV TAI PSA IVDo CONo HIS TELo DEL SAMo UNRo LEG PRE" Content-Type: text/html Transf
er-Encoding: chunked ~U:jschmo
http://images.slashdot.org/greendot.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:23 PM URL False B3B0BSCG\greendot[1].gif HTTP/1.1 200 OK Keep-Alive: timeout=10, max=992 Content-Length: 53 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/i.p.greetcard.gif 11/15/2004 7:39:41 PM 3/10/2005 6:09:02 PM URL False ICJNEDI2\i.p.greetcard[1].gif HTTP/1.1 200 OK Content-Length: 232 Content-Type: image/gif ETag: "80c451c274cbc41:6fc" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://64.4.55.45/tab.slide.hm.li.gif 11/15/2004 7:40:10 PM 3/10/2005 6:09:02 PM URL False B3B0BSCG\tab.slide.hm.li[1].gi
f
HTTP/1.1 200 OK Content-Length: 2961 Content-Type: image/gif ETag: "0d19ad374cbc41:6f4" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/subnav4_colon.g
if
1/3/2005 4:50:32 PM 3/10/2005 5:50:30 PM URL False 8R9KCL4N\subnav4_colon[2].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "04493fdef1c41:105a" Content-Length: 48 ~U:jschmo
http://www.orbitz.com/html.ng/domain=orbitz&channel=home&Section=main&adsize=hometext2&OrbitzCookieN
ame=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&secure=false&
  3/10/2005 5:47:52 PM URL False B3B0BSCG\domain=orbitz&channel
=home&Section=main&adsize=home
text2&OrbitzCookieName=OSC&orb
itzID=CwOXEaWQle!-1574237785!1
71067271!7001!-1!1110494871232
&secure=false&[1].htm
HTTP/1.1 200 OK Content-Length: 3428 Content-Type: text/html
http://www.findcracks.com/   3/10/2005 5:50:44 PM URL False B3B0BSCG\findcracks[1].htm HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/admin4_wishlist.
gif
1/4/2005 3:20:59 PM 3/10/2005 5:48:37 PM URL False 8R9KCL4N\admin4_wishlist[1].gi
f
HTTP/1.0 200 OK Content-Type: image/gif ETag: "80724e79af2c41:9d4" Content-Length: 230 ~U:jschmo
http://login.passport.net/uilogin.srf?id=2af815441   3/10/2005 5:53:12 PM URL False 8R9KCL4N\uilogin[1].htm HTTP/1.1 200 OK PPServer: PPV: 25 H: BAYPPLOGU2A01 V: 1192 Content-Type: text/html P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Co
ntent-Length: 20574 ~U:jschmo
http://www.orbitz.com/img/air/change_search.gif 12/20/2004 5:39:22 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\change_search[1].gif HTTP/1.1 200 OK ETag: "3152a3-21e-41c6abda" Content-Length: 542 Content-Type: image/gif ~U:jschmo
http://news.google.com/news?imgefp=cGLAxecOCkQJ&imgurl=images.newsfactor.com/images/id/6198/ibm-leno
vo-deal_crm.jpg
  3/10/2005 5:45:15 PM URL False B3B0BSCG\news[3].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1627 ~U:jschmo
http://www.orbitz.com/html.ng/domain=orbitz&channel=air&Section=results&adsize=hotwireTop&origin=NYC
&dest=SAO&OrbitzCookieName=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&secur
e=false&
  3/10/2005 5:49:03 PM LEAK True ICJNEDI2\domain=orbitz&channel
=air&Section=results&adsize=ho
twireTop&origin=NYC&dest=SAO&O
rbitzCookieName=OSC&orbitzID=C
wOXEaWQle!-1574237785!17106727
1!7001!-1!11104[1]
HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html Content-Encoding: deflate ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/admin4_account.
gif
1/4/2005 3:20:58 PM 3/10/2005 5:50:30 PM URL False KYRPJUXG\admin4_account[1].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "0718be69af2c41:105a" Content-Length: 231 ~U:jschmo
http://a.tribalfusion.com/j.ad?site=MacSlash&adSpace=ROS&size=160x600&type=var&noAd=1&requestID=2456
381870.564574788166151
  3/10/2005 5:44:52 PM URL False 8R9KCL4N\j[1].ad HTTP/1.0 200 OK P3P: CP="NOI DEVa TAIa OUR BUS" Pragma: no-cache Content-Length: 0 Content-Type: application/x-javascript ~U
:jschmo
http://www.orbitz.com/img/air/logos/CO_small.gif 12/20/2004 5:39:32 AM 3/10/2005 5:48:33 PM URL False ICJNEDI2\CO_small[1].gif HTTP/1.1 200 OK ETag: "298ee6-135-41c6abe4" Content-Length: 309 Content-Type: image/gif ~U:jschmo
http://www.technewsworld.com/images/work/header-middle-top-tab-278x28.gif 1/5/2004 1:07:34 PM 3/10/2005 5:45:38 PM URL False KYRPJUXG\header-middle-top-tab
-278x28[1].gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c185b-10c-3ff9a7e6" Content-Length: 268 Keep-Alive: timeo
ut=15, max=78 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/i.p.delete.gif 11/15/2004 7:39:40 PM 3/10/2005 6:09:02 PM URL False KYRPJUXG\i.p.delete[1].gif HTTP/1.1 200 OK Content-Length: 306 Content-Type: image/gif ETag: "02eb9c174cbc41:6c2" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://saopaulo.grand.hyatt.com/owshare/jslibrary/vbFlash.js 8/26/2004 7:25:12 AM 3/10/2005 5:47:41 PM URL False ICJNEDI2\vbFlash[1].js HTTP/1.1 200 OK ETag: "6f008d-2a0-412dc898" Content-Length: 672 Keep-Alive: timeout=15, max=98 Content-Type: application/x-ja
vascript ~U:jschmo
http://www.orbitz.com/img/air/tip_integration/sort_by.gif 12/20/2004 5:39:58 AM 3/10/2005 5:49:01 PM URL False B3B0BSCG\sort_by[1].gif HTTP/1.1 200 OK ETag: "4d83b3-208-41c6abfe" Content-Length: 520 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/global/nav/tab_fl.gif 12/20/2004 5:40:06 AM 3/10/2005 5:47:50 PM URL False ICJNEDI2\tab_fl[1].gif HTTP/1.1 200 OK ETag: "6402eb-2c9-41c6ac06" Content-Length: 713 Content-Type: image/gif ~U:jschmo
http://ad.doubleclick.net/adi/N815.ecommercetimes.com/B1555812.4;sz=728x90;ord=11104947275778?   3/10/2005 5:45:35 PM URL False 8R9KCL4N\B1555812[1].htm HTTP/1.0 200 OK Content-Type: text/html Content-Length: 4460 P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PR
E COM NAV OTC NOI DSP COR" ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/pimages/gresources/Gateway/YlwFind
_btn.gif
11/24/2004 11:29:06 AM 3/10/2005 5:48:38 PM URL False B3B0BSCG\YlwFind_btn[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "e04ecfb742d2c41:9d4" Content-Length: 256 ~U:jschmo
https://orbitz.rpts.net/sa;src%3D775458%3Bord%3D1110494946440%3F%3Bpgnm%3DMember+-+Guestlogin%3Bpgur
l%3Dhttp%3A%2F%2Fwww.orbitz.com%2Fmember%2Fguestlogin%3Bsect%3DMember%3Bprodinfo%3Dprod_ignore%3Bu.s
eg%3D3%3Bno_rev%3Bref%3Dhttp%253A%252F%252Fwww.orbitz.com%252FApp%252FViewFlightSearchResults
    REDR False    
http://www.orbitz.com/img/air/logos/JL_noclick.gif 12/20/2004 5:39:40 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\JL_noclick[1].gif HTTP/1.1 200 OK ETag: "3207b9-2e4-41c6abec" Content-Length: 740 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/global/css/elements.css?cache=orbitz20050214 2/4/2005 12:56:55 PM 3/10/2005 5:49:05 PM URL False KYRPJUXG\elements[2].css HTTP/1.1 200 OK Content-Length: 7329 Content-Type: text/css
http://www.orbitz.com/html.ng/domain=orbitz&channel=air&Section=results&adsize=hotwireBottom&origin=
NYC&dest=SAO&OrbitzCookieName=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&se
cure=false&
  3/10/2005 5:49:01 PM URL False 8R9KCL4N\domain=orbitz&channel
=air&Section=results&adsize=ho
twireBottom&origin=NYC&dest=SA
O&OrbitzCookieName=OSC&orbitzI
D=CwOXEaWQle!-1574237785!17106
7271!7001!-1!11[1].htm
HTTP/1.1 200 OK Content-Length: 2646 Content-Type: text/html ­
http://www.orbitz.com/global/css/ddmodule.css?cache=orbitz20050214 12/20/2004 5:39:20 AM 3/10/2005 5:49:01 PM URL False B3B0BSCG\ddmodule[2].css HTTP/1.1 200 OK Content-Length: 2656 Content-Type: text/css
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/vcart4_btn_check
out.gif
1/3/2005 4:50:31 PM 3/10/2005 5:48:36 PM URL False 8R9KCL4N\vcart4_btn_checkout[1
].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "806db03edef1c41:918" Content-Length: 787 ~U:jschmo
http://images.slashdot.org/topics/topicmediaall.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:23 PM URL False 8R9KCL4N\topicmediaall[1].gif HTTP/1.1 200 OK Keep-Alive: timeout=10, max=993 Content-Length: 1792 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/spacer.gif 12/29/2004 1:57:05 PM 3/10/2005 6:09:02 PM URL False 8R9KCL4N\spacer[1].gif HTTP/1.1 200 OK Content-Length: 42 Content-Type: image/gif ETag: "80162a30d8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/tab4_giftcards_
cold.gif
1/13/2005 5:04:29 AM 3/10/2005 5:50:30 PM URL False ICJNEDI2\tab4_giftcards_cold[1
].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "80b4194557f9c41:105a" Content-Length: 336 ~U:jschmo
http://search.barnesandnoble.com/include/quicksearch.asp?userid=pv4dUK5Bu2&cds2Pid=9469fc3baae     REDR False    
http://www.freeserials.com/img/bg.gif 12/17/2003 9:55:55 AM 3/10/2005 5:50:59 PM URL False KYRPJUXG\bg[1].gif HTTP/1.1 200 OK ETag: "af175-5e-3fe06e7b" Content-Length: 94 Content-Type: image/gif Content-Language: ru ~U:jschmo
http://64.4.55.45/i.p.im_on.gif 11/15/2004 7:39:41 PM 3/10/2005 6:09:02 PM URL False 8R9KCL4N\i.p.im_on[1].gif HTTP/1.1 200 OK Content-Length: 263 Content-Type: image/gif ETag: "80c451c274cbc41:6c2" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://www.orbitz.com/Marketing/Images/ORB017-deeperdiscounts-v3.gif 11/19/2004 4:34:58 PM 3/10/2005 5:49:03 PM URL False 8R9KCL4N\ORB017-deeperdiscount
s-v3[1].gif
HTTP/1.1 200 OK ETag: "4aa1b9-95c-419e6702" Content-Length: 2396 Content-Type: image/gif ~U:jschmo
http://news.google.com/news?imgefp=YBuuVNyq3OYJ&imgurl=www.thanhniennews.com/images/newsimages/Agent
-Orange2-070.jpg
  3/10/2005 5:45:15 PM URL False 8R9KCL4N\news[3].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 9831 ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/8700000/8701384.gif 11/17/2004 3:50:24 PM 3/10/2005 5:49:23 PM URL False B3B0BSCG\8701384[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "40ec63fe7ccc41:109b" Content-Length: 2256 ~U:jschmo
http://www.freeserials.com/   3/10/2005 5:49:43 PM URL False ICJNEDI2\freeserials[1].htm HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=WINDOWS-1251 Content-Language: ru ~U:jschmo
http://ad.linksynergy.com/fs-bin/show?id=OX36Q3imQxc&bids=77305.10000364&type=3&subid=0   3/10/2005 5:44:51 PM URL False ICJNEDI2\show[1].gif HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/img/global/nav/bg_left_bigtabs.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:05 PM URL False B3B0BSCG\bg_left_bigtabs[1].gi
f
HTTP/1.1 200 OK ETag: "5581dd-a2-41c6ac06" Content-Length: 162 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/air/logos/JL_small.gif 12/20/2004 5:39:40 AM 3/10/2005 5:48:33 PM URL False KYRPJUXG\JL_small[1].gif HTTP/1.1 200 OK ETag: "2dc7a9-f9-41c6abec" Content-Length: 249 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/5920000/5920354.gif 12/27/2002 11:02:47 AM 3/10/2005 5:50:30 PM URL False B3B0BSCG\5920354[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "1e3e5a66c1adc21:1049" Content-Length: 2104 ~U:jschmo
http://www.orbitz.com/App/ViewFlightSearchResults?z=apz1&r=12   3/10/2005 5:48:32 PM URL False ICJNEDI2\ViewFlightSearchResul
ts[1].htm
HTTP/1.1 200 OK Content-Length: 271830 Content-Type: text/html
http://www.orbitz.com/App/ViewFlightSearchResults?z=bcb0&r=as   3/10/2005 5:49:01 PM URL False ICJNEDI2\ViewFlightSearchResul
ts[2].htm
HTTP/1.1 200 OK Content-Length: 55374 Content-Type: text/html
http://saopaulo.grand.hyatt.com/   3/10/2005 5:47:41 PM URL False ICJNEDI2\saopaulo.grand.hyatt[
1].htm
HTTP/1.1 200 OK Keep-Alive: timeout=15, max=100 Transfer-Encoding: chunked Content-Type: text/html ~U:jschmo
http://www.orbitz.com/img/air/tip_integration/3stop_click.gif 12/20/2004 5:39:58 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\3stop_click[1].gif HTTP/1.1 200 OK ETag: "7481f4-29e-41c6abfe" Content-Length: 670 Content-Type: image/gif ~U:jschmo
http://news.google.com/   3/10/2005 5:45:14 PM URL False KYRPJUXG\news.google[1].htm HTTP/1.1 200 OK Content-Length: 121965 Content-Type: text/html
http://www.orbitz.com/img/global/nav/bg_left_bigtabs.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\bg_left_bigtabs[1].gi
f
HTTP/1.1 200 OK ETag: "72c206-a2-41c6ac06" Content-Length: 162 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/subnav4_colon.gi
f
1/3/2005 4:50:32 PM 3/10/2005 5:48:37 PM URL False 8R9KCL4N\subnav4_colon[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "04493fdef1c41:105a" Content-Length: 48 ~U:jschmo
http://m2.doubleclick.net/987526/Intel_XDA_Overall_120x600_NYT.swf?clickTag=http%3A//ad.doubleclick.
net/click%253Bh%3Dv3%7C3237%7C3%7C0%7C%252a%7Cz%253B14480616%253B0-0%253B0%253B10980498%253B933-120%
7C600%253B9167258%7C9185154%7C1%253B%253B%257Esscs%253D%253fhttp%3A//www-1.ibm.com/servers/eserver/x
series/xcampaigns/campaign1.html%3Fca%3Dmigration%26met%3Dconsider_xSeries%26me%3Dbanner_Campaign%3D
104AV09W
3/2/2005 2:41:26 PM 3/10/2005 5:45:50 PM URL False ICJNEDI2\CA010VSJ.swf HTTP/1.1 200 OK Content-Length: 20818 Content-Type: application/x-shockwave-flash ~U:jschmo
http://www.orbitz.com/img/air/matrix/dp_xsell_bot.gif 12/20/2004 5:39:53 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\dp_xsell_bot[1].gif HTTP/1.1 200 OK ETag: "590437-5f-41c6abf9" Content-Length: 95 Content-Type: image/gif ~U:jschmo
http://ad.doubleclick.net/adi/N2537.ecommercetimes.com/B1563006.4;sz=336x280;ord=11104947271785?   3/10/2005 5:45:35 PM URL False KYRPJUXG\B1563006[1].htm HTTP/1.0 200 OK Content-Type: text/html Content-Length: 4344 P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PR
E COM NAV OTC NOI DSP COR" ~U:jschmo
http://by23fd.bay23.hotmail.msn.com/cgi-bin/compose?&curmbox=F000000001&a=1028e6c155aa3ce4f917f32f82
d3f2f2
  3/10/2005 5:53:57 PM URL False ICJNEDI2\compose[1].htm HTTP/1.1 200 OK Content-Length: 21960 Content-Type: text/html
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/PImages/gresources/navpromos/toppr
omo_fastnfree.GIF
10/7/2004 2:25:18 PM 3/10/2005 5:48:36 PM URL False ICJNEDI2\toppromo_fastnfree[1]
.gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "c843a0ff9aacc41:105a" Content-Length: 2438 ~U:jschmo
http://sc.msn.com/2L/7EM9]D+FXLWEOB~YII]@}.jpg 3/9/2005 5:38:01 PM 3/10/2005 6:08:48 PM URL False ICJNEDI2\7EM9]D+FXLWEOB~YII]@}
[1].jpg
HTTP/1.1 200 OK P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" Content-Type: image/jpeg ETag: "2bacaca6f824c51:88d" Co
ntent-Length: 2007 ~U:jschmo
http://www.google.com/search?hl=en&q=cracking+docustodian+licensing+&btnG=Google+Search   3/10/2005 5:44:10 PM URL False KYRPJUXG\search[1].htm HTTP/1.1 200 OK Content-Length: 6021 Content-Type: text/html
http://images.slashdot.org/topics/topicentertainment.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:23 PM URL False ICJNEDI2\topicentertainment[1]
.gif
HTTP/1.1 200 OK Keep-Alive: timeout=10, max=995 Content-Length: 1499 Content-Type: image/gif ~U:jschmo
http://saopaulo.grand.hyatt.com/owshare/awsimages/print.gif 3/27/2003 4:50:10 AM 3/10/2005 5:47:41 PM URL False ICJNEDI2\print[1].gif HTTP/1.1 200 OK ETag: "2881a3-b5-3e82c952" Content-Length: 181 Keep-Alive: timeout=15, max=90 Content-Type: image/gif ~U:jsc
hmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/tab4_music_cold
.gif
1/13/2005 9:46:00 PM 3/10/2005 5:50:30 PM URL False KYRPJUXG\tab4_music_cold[2].gi
f
HTTP/1.0 200 OK Content-Type: image/gif ETag: "0a4202ee3f9c41:105a" Content-Length: 240 ~U:jschmo
http://www.technewsworld.com/images/2005/tnw_adtitle_bg.jpg 3/9/2005 5:58:22 PM 3/10/2005 5:45:38 PM URL False 8R9KCL4N\tnw_adtitle_bg[1].jpg
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "29220cc-168-422f7f8e" Content-Length: 360 Keep-Alive: time
out=15, max=77 Content-Type: image/jpeg ~U:jschmo
http://64.4.55.45/i.p.search.gif 11/15/2004 7:39:41 PM 3/10/2005 6:09:02 PM URL False ICJNEDI2\i.p.search[1].gif HTTP/1.1 200 OK Content-Length: 242 Content-Type: image/gif ETag: "80c451c274cbc41:6fc" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://www.orbitz.com/html.ng/domain=orbitz&channel=air&Section=results&adsize=1x1&origin=NYC&dest=S
AO&OrbitzCookieName=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&secure=false
&
  3/10/2005 5:49:02 PM LEAK True KYRPJUXG\domain=orbitz&channel
=air&Section=results&adsize=1x
1&origin=NYC&dest=SAO&OrbitzCo
okieName=OSC&orbitzID=CwOXEaWQ
le!-1574237785!171067271!7001!
-1!111049487123[1]
HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html Content-Encoding: deflate ~U:jschmo
http://www.orbitz.com/img/air/matrix/tip_bg_on.gif 12/20/2004 5:39:53 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\tip_bg_on[1].gif HTTP/1.1 200 OK ETag: "41836a-f0-41c6abf9" Content-Length: 240 Content-Type: image/gif ~U:jschmo
http://news.google.com/news?imgefp=4cWGz5nAHYcJ&imgurl=news.xinhuanet.com/english/2005-03/09/xinsrc_
232030209071010903941.jpg
  3/10/2005 5:45:15 PM URL False KYRPJUXG\news[1].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1750 ~U:jschmo
http://www.technewsworld.com/images/work/advertisement_118x13.gif 1/5/2004 1:07:34 PM 3/10/2005 5:45:36 PM URL False KYRPJUXG\advertisement_118x13[
1].gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c180e-18d-3ff9a7e6" Content-Length: 397 Keep-Alive: timeo
ut=15, max=93 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/i.p.toarrow.gif 12/29/2004 1:56:33 PM 3/10/2005 6:07:39 PM URL False B3B0BSCG\i.p.toarrow[1].gif HTTP/1.1 200 OK Content-Length: 73 Content-Type: image/gif ETag: "8046171dd8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://hp.msn.com/c/home/flight/srch-arrw.gif 1/11/2005 3:49:09 PM 3/10/2005 5:43:04 PM URL False B3B0BSCG\srch-arrw[1].gif HTTP/1.1 200 OK Content-Length: 73 Content-Type: image/gif ETag: "706b6eff1ef8c41:88d" P3P: CP="BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo" ~U:jschmo
http://banner.linksynergy.com/fs/banners/13508/13508_10000012.gif 10/25/2004 2:11:25 AM 3/10/2005 5:44:47 PM URL False ICJNEDI2\13508_10000012[1].gif
HTTP/1.1 200 OK ETag: "56c-864-417c990d" Content-Length: 2148 Content-Type: image/gif ~U:jschmo
http://login.passport.net/images/yellow.gif 1/12/2005 1:45:35 AM 3/10/2005 5:53:17 PM URL False ICJNEDI2\yellow[1].gif HTTP/1.1 200 OK Content-Length: 44 Content-Type: image/gif Content-Location: http://login.passport.net/pp25/images/yellow.gif
?rollrs=11 ETag: "8011785172f8c41:8ba" PPServer: PPV: 25 H: BAYPPLOGU2B08 V: 1192 ~U:jschmo
http://www.orbitz.com/img/buttons/bookit_air.gif 1/12/2005 10:58:53 AM 3/10/2005 5:49:01 PM URL False B3B0BSCG\bookit_air[1].gif HTTP/1.1 200 OK ETag: "2e42d2-2d4-41e5493d" Content-Length: 724 Content-Type: image/gif ~U:jschmo
http://by23fd.bay23.hotmail.msn.com/cgi-bin/HoTMaiL?curmbox=F000000001&a=cec03517f01c559b0265ea3012e
5ed60
  3/10/2005 6:08:51 PM URL False 8R9KCL4N\HoTMaiL[1].htm HTTP/1.1 200 OK Content-Length: 25428 Content-Type: text/html
http://www.technewsworld.com/images/work/icon-shortcut-red_8x8.gif 1/5/2004 1:07:34 PM 3/10/2005 5:45:37 PM URL False KYRPJUXG\icon-shortcut-red_8x8
[1].gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c1855-3c-3ff9a7e6" Content-Length: 60 Keep-Alive: timeout
=15, max=82 Content-Type: image/gif ~U:jschmo
http://global.msads.net/ads/8707/0000008707_000000000000000154390.gif 2/28/2005 5:33:58 PM 3/10/2005 6:08:49 PM URL False KYRPJUXG\0000008707_0000000000
00000154390[1].gif
HTTP/1.1 200 OK Content-Length: 274 Content-Type: image/gif ETag: "0fb797e51dc51:000" P3P: CP="BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo" ~U:jschmo
http://www.google.com/nav_next.gif 9/23/2004 1:44:19 PM 3/10/2005 5:47:33 PM URL False KYRPJUXG\nav_next[1].gif HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 1514 ~U:jschmo
http://azerimake.km.ru/img/fs/cracksweb-468x60.gif 11/14/2004 3:37:44 AM 3/10/2005 5:52:52 PM URL False KYRPJUXG\cracksweb-468x60[1].g
if
HTTP/1.1 200 OK ETag: "dd1ea-1c2f-41971958" Content-Length: 7215 Keep-Alive: timeout=15, max=99 Content-Type: image/gif ~U:j
schmo
http://www.orbitz.com/img/air/logos/LA_noclick.gif 1/24/2005 10:55:25 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\LA_noclick[1].gif HTTP/1.1 200 OK ETag: "485253-478-41f51a6d" Content-Length: 1144 Content-Type: image/gif ~U:jschmo
http://macslash.org/images/wl.gif 7/4/2002 7:16:21 PM 3/10/2005 5:44:52 PM URL False 8R9KCL4N\wl[1].gif HTTP/1.1 200 OK X-Powered-By: Slash 2.002006 X-Fry: I'm never gonna get used to the thirty-first century. Caffeinated bacon?
ETag: "48918-3a-3d24d745" Content-Length: 58 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/tab4_kids_cold.g
if
1/13/2005 5:04:28 AM 3/10/2005 5:48:37 PM URL False ICJNEDI2\tab4_kids_cold[1].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "01e814457f9c41:105a" Content-Length: 315 ~U:jschmo
http://www.orbitz.com/img/air/tip_integration/orbitz_matrix_display.gif 12/20/2004 5:39:58 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\orbitz_matrix_display
[1].gif
HTTP/1.1 200 OK ETag: "79c3ef-4db-41c6abfe" Content-Length: 1243 Content-Type: image/gif ~U:jschmo
http://pagead2.googlesyndication.com/pagead/show_ads.js 3/3/2005 9:44:24 PM 3/10/2005 5:44:44 PM LEAK True 8R9KCL4N\show_ads[1].js HTTP/1.1 200 OK P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA PVD OTP OUR OTR IND
OTC" Content-Type: text/javascript; charset=UTF-8 Content-Encoding: gzip Content-Length: 2118 ~U:jschmo
http://saopaulo.grand.hyatt.com/owshare/hyatt/worldwide/grandimages/navbg1a.jpg 8/21/2003 3:35:11 AM 3/10/2005 5:47:41 PM URL False ICJNEDI2\navbg1a[1].jpg HTTP/1.1 200 OK ETag: "10c21b-1a5f-3f44762f" Content-Length: 6751 Keep-Alive: timeout=15, max=93 Content-Type: image/jpeg ~U
:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/vcart4_icon_car
t.gif
1/3/2005 4:50:31 PM 3/10/2005 5:50:30 PM URL False ICJNEDI2\vcart4_icon_cart[1].g
if
HTTP/1.0 200 OK Content-Type: image/gif ETag: "806db03edef1c41:918" Content-Length: 756 ~U:jschmo
http://images.barnesandnoble.com/pimages/js/navbar3.js 6/2/2003 2:10:31 PM 3/10/2005 5:50:30 PM URL False KYRPJUXG\navbar3[1].js HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "a6f0f0403229c31:918" Content-Length: 1184 ~U:jschmo
http://64.4.55.45/i.p.cancel.gif 12/29/2004 1:56:31 PM 3/10/2005 5:53:58 PM URL False B3B0BSCG\i.p.cancel[1].gif HTTP/1.1 200 OK Content-Length: 330 Content-Type: image/gif ETag: "8019e61bd8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://www.orbitz.com/global/css/interstitial.css?cache=orbitz20050214 12/20/2004 5:39:20 AM 3/10/2005 5:48:19 PM URL False ICJNEDI2\interstitial[2].css HTTP/1.1 200 OK Content-Length: 2138 Content-Type: text/css
http://www.google.com/   3/10/2005 5:43:25 PM LEAK True B3B0BSCG\google[1] HTTP/1.1 200 OK Content-Type: text/html Content-Encoding: gzip Content-Length: 1437 ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/8420000/8424258.gif 10/25/2004 11:17:16 AM 3/10/2005 5:50:31 PM URL False ICJNEDI2\8424258[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "a0374cb6a5bac41:9d4" Content-Length: 2020 ~U:jschmo
http://by23fd.bay23.hotmail.msn.com/cgi-bin/hmhome?fti=yes&curmbox=F000000001&a=1028e6c155aa3ce4f917
f32f82d3f2f2&_lang=EN&country=US
  3/10/2005 5:53:35 PM URL False KYRPJUXG\hmhome[1].htm HTTP/1.1 200 OK Content-Length: 20041 Content-Type: text/html
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/tab4_biztechno_
cold.gif
1/13/2005 5:04:31 AM 3/10/2005 5:50:30 PM URL False B3B0BSCG\tab4_biztechno_cold[1
].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "80e14a4657f9c41:105a" Content-Length: 548 ~U:jschmo
http://www.orbitz.com/html.ng/domain=orbitz&channel=home&Section=main&adsize=342x188&OrbitzCookieNam
e=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&secure=false&
  3/10/2005 5:47:51 PM URL False 8R9KCL4N\domain=orbitz&channel
=home&Section=main&adsize=342x
188&OrbitzCookieName=OSC&orbit
zID=CwOXEaWQle!-1574237785!171
067271!7001!-1!1110494871232&s
ecure=false&[1].htm
HTTP/1.1 200 OK Content-Length: 2917 Content-Type: text/html
http://www.freeserials.com/img/on.gif 12/17/2003 9:56:17 AM 3/10/2005 5:50:58 PM URL False 8R9KCL4N\on[1].gif HTTP/1.1 200 OK ETag: "af17d-a9-3fe06e91" Content-Length: 169 Content-Type: image/gif Content-Language: ru ~U:jschmo
http://81.176.69.227/cgi-bin/hotlog/img?im=101&v=51169,25650872,12364,5268553,13504,6352252   3/10/2005 5:51:00 PM URL False KYRPJUXG\img[1].gif HTTP/1.1 200 OK P3P: policyref="http://hit4.hotlog.ru:8001/w3c/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI
COM NAV INT DEM STA" Content-Type: image/gif Content-Length: 2694 ~U:jschmo
https://www.orbitz.com/img/corners/ffffc5_br.gif 12/20/2004 5:40:04 AM 3/10/2005 5:49:08 PM URL False ICJNEDI2\ffffc5_br[1].gif HTTP/1.1 200 OK ETag: "5ec2a8-34c-41c6ac04" Content-Length: 844 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/pimages/gresources/dotGold20.gif 7/22/2004 1:05:40 PM 3/10/2005 5:50:30 PM URL False ICJNEDI2\dotGold20[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "7424b01de70c41:9d4" Content-Length: 46 ~U:jschmo
http://64.4.55.45/i.p.photo.gif 12/29/2004 1:56:32 PM 3/10/2005 5:53:58 PM URL False 8R9KCL4N\i.p.photo[1].gif HTTP/1.1 200 OK Content-Length: 373 Content-Type: image/gif ETag: "0b07e1cd8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://hp.msn.com/c/home/flight/666.gif 11/24/2004 12:47:17 PM 3/10/2005 5:43:04 PM URL False 8R9KCL4N\666[1].gif HTTP/1.1 200 OK Content-Length: 43 Content-Type: image/gif ETag: "a42ec1a34dd2c41:88d" P3P: CP="BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo" ~U:jschmo
http://www.technewsworld.com/images/work/header-middle-bottom-tab-278x28.gif 1/5/2004 1:07:34 PM 3/10/2005 5:45:38 PM URL False KYRPJUXG\header-middle-bottom-
tab-278x28[1].gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c184c-112-3ff9a7e6" Content-Length: 274 Keep-Alive: timeo
ut=15, max=76 Content-Type: image/gif ~U:jschmo
http://global.msads.net/ads/55716/0000055716_000000000000000146006.gif 2/1/2005 12:40:45 PM 3/10/2005 6:08:49 PM URL False 8R9KCL4N\0000055716_0000000000
00000146006[1].gif
HTTP/1.1 200 OK Content-Length: 1151 Content-Type: image/gif ETag: "80c5128858c51:0000" PICS-Label: (PICS-1.1 "http://www.rsa
c.org/ratingsv01.html" l comment "RSACi North America Server" by "inet@microsoft.com" r (n 0 s 0 v 0 l 0)) P3P: CP="BUS CUR C
ONo FIN IVDo ONL OUR PHY SAMo TELo" ~U:jschmo
http://www.google.com/search?hl=en&lr=&q=cracking++licensing+software   3/10/2005 5:44:21 PM URL False 8R9KCL4N\search[1].htm HTTP/1.1 200 OK Content-Length: 20020 Content-Type: text/html
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/pImages/popups/slider/2005/030105_
bhg_slider.gif
2/25/2005 1:51:17 PM 3/10/2005 5:48:39 PM URL False ICJNEDI2\030105_bhg_slider[1].
gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "602bd9fc6a1bc51:c42" Content-Length: 5656 ~U:jschmo
http://www.orbitz.com/img/air/logos/AA_noclick.gif 12/20/2004 5:39:31 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\AA_noclick[1].gif HTTP/1.1 200 OK ETag: "260904-285-41c6abe3" Content-Length: 645 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/img/global/callout_guard_shield.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:06 PM URL False 8R9KCL4N\callout_guard_shield[
1].gif
HTTP/1.1 200 OK ETag: "318187-5ef-41c6ac06" Content-Length: 1519 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/4430000/4436036.gif 8/30/2001 3:30:56 PM 3/10/2005 5:49:22 PM URL False 8R9KCL4N\4436036[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "a0258a4a8a31c11:c42" Content-Length: 4836 ~U:jschmo
http://64.4.55.45/i.p.im_off.gif 12/29/2004 1:56:32 PM 3/10/2005 6:09:02 PM URL False 8R9KCL4N\i.p.im_off[1].gif HTTP/1.1 200 OK Content-Length: 267 Content-Type: image/gif ETag: "0b07e1cd8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/tab4_music_cold.
gif
1/13/2005 9:46:00 PM 3/10/2005 5:48:37 PM URL False KYRPJUXG\tab4_music_cold[1].gi
f
HTTP/1.0 200 OK Content-Type: image/gif ETag: "0a4202ee3f9c41:105a" Content-Length: 240 ~U:jschmo
http://macslash.org/images/sl.gif 7/3/2002 5:43:52 PM 3/10/2005 5:44:42 PM URL False ICJNEDI2\sl[1].gif HTTP/1.1 200 OK X-Powered-By: Slash 2.002006 X-Fry: I refuse to testify on the grounds that my organs will be chopped up into
a patty. ETag: "48912-30-3d237018" Content-Length: 48 Content-Type: image/gif ~U:jschmo
http://hit8.hotlog.ru/cgi-bin/hotlog/count?0.29294722306615756&s=160131&im=102&r=http%3A//www.findcr
acks.com/&pg=http%3A//www.findcracks.com/%3Fq%3Ddocustodian+licensing&c=Y&j=Y&wh=800x600&px=32&js=1.
3&
    REDR False    
http://www.orbitz.com/global/css/homepage.css?cache=orbitz20050214 2/1/2005 9:57:11 AM 3/10/2005 5:47:50 PM URL False B3B0BSCG\homepage[1].css HTTP/1.1 200 OK Content-Length: 12773 Content-Type: text/css
http://images.barnesandnoble.com/css/SearchProduct.css 9/15/2004 4:38:19 PM 3/10/2005 5:50:30 PM URL False KYRPJUXG\SearchProduct[1].css HTTP/1.1 200 OK Content-Type: text/css ETag: "441f32ef639bc41:918" Content-Length: 9323 ~U:jschmo
http://images.barnesandnoble.com/PImages/js/formValidation.js 10/2/2003 6:40:58 PM 3/10/2005 5:48:36 PM URL False B3B0BSCG\formValidation[1].js HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "704f543f3689c31:918" Content-Length: 1833 ~U:jschmo
http://images.slashdot.org/pix.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:22 PM URL False B3B0BSCG\pix[2].gif HTTP/1.1 200 OK Keep-Alive: timeout=10, max=998 Content-Length: 43 Content-Type: image/gif ~U:jschmo
http://spe.atdmt.com/b/NFNFXNFLXNFX/0205_016_B_728090_A.gif   3/10/2005 6:08:54 PM URL False KYRPJUXG\0205_016_B_728090_A[1
].gif
HTTP/1.1 200 OK Allow: GET Content-Length: 20070 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/tab4_pipe.gif 5/28/2003 4:03:45 PM 3/10/2005 5:50:30 PM URL False 8R9KCL4N\tab4_pipe[2].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "d0ffde3e5425c31:105a" Content-Length: 48 ~U:jschmo
http://www.orbitz.com/img/home/qs/qs_under_radio_bg.gif 12/20/2004 5:40:11 AM 3/10/2005 5:47:51 PM URL False ICJNEDI2\qs_under_radio_bg[1].
gif
HTTP/1.1 200 OK ETag: "4ec138-41-41c6ac0b" Content-Length: 65 Content-Type: image/gif ~U:jschmo
http://www.technewsworld.com/images/2004/tnw_headline_item.gif 4/21/2004 6:02:00 AM 3/10/2005 5:45:37 PM URL False 8R9KCL4N\tnw_headline_item[1].
gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "9eaa8b-41-40864698" Content-Length: 65 Keep-Alive: timeout
=15, max=80 Content-Type: image/gif ~U:jschmo
http://news.google.com/news?imgefp=0DjmLRW4YCYJ&imgurl=www.ctv.ca/archives/CTVNews/images/20050310/s
tar_wars050310/160_ap_star_wars1_20040920.jpg
  3/10/2005 5:45:15 PM URL False ICJNEDI2\news[5].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2336 ~U:jschmo
http://macslash.org/images/background_panther.jpg 3/6/2004 6:46:26 PM 3/10/2005 5:44:36 PM URL False ICJNEDI2\background_panther[1]
.jpg
HTTP/1.1 200 OK X-Powered-By: Slash 2.002006 X-Fry: Hey look, it's that guy you are! ETag: "11d9a0-205-404a62d2" Content-Leng
th: 517 Content-Type: image/jpeg ~U:jschmo
http://saopaulo.grand.hyatt.com/swfdata/banner.txt?q=6687757 3/10/2005 1:45:32 AM 3/10/2005 5:47:41 PM URL False B3B0BSCG\banner[1].txt HTTP/1.1 200 OK ETag: "68ba4-d3-422fed0c" Content-Length: 211 Keep-Alive: timeout=15, max=95 Content-Type: text/plain ~U:jsc
hmo
http://www.orbitz.com/img/security/verisign_footer.gif 12/20/2004 5:40:15 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\verisign_footer[1].gi
f
HTTP/1.1 200 OK ETag: "44209-d8e-41c6ac0f" Content-Length: 3470 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/i.p.importance.h.gif 12/29/2004 1:56:32 PM 3/10/2005 6:09:02 PM URL False ICJNEDI2\i.p.importance.h[1].g
if
HTTP/1.1 200 OK Content-Length: 160 Content-Type: image/gif ETag: "0b07e1cd8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://hp.msn.com/48/!ZW~87OK7G31,M[TAC3N7A.jpg 3/9/2005 7:09:06 PM 3/10/2005 5:43:04 PM URL False 8R9KCL4N\!ZW~87OK7G31,M[TAC3N7
A[1].jpg
HTTP/1.1 200 OK Content-Length: 2545 Content-Type: image/jpeg ETag: "f712d45f525c51:8b2" P3P: CP="BUS CUR CONo FIN IVDo ONL O
UR PHY SAMo TELo" ~U:jschmo
http://search.barnesandnoble.com/booksearch/results.asp?WRD=software%20cracking&userid=pv4dUK5Bu2   3/10/2005 5:50:30 PM URL False 8R9KCL4N\results[2].htm HTTP/1.1 200 OK P3P: CP="CAO DSP COR ADM DEV TAI PSA IVDo CONo HIS TELo DEL SAMo UNRo LEG PRE" Content-Type: text/html Transf
er-Encoding: chunked ~U:jschmo
https://www.orbitz.com/global/css/elements.css 2/4/2005 12:56:55 PM 3/10/2005 5:49:05 PM URL False 8R9KCL4N\elements[3].css HTTP/1.1 200 OK Content-Length: 7329 Content-Type: text/css
http://hpc.msn.com/css/hotmail/default.css 12/20/2004 7:22:12 PM 3/10/2005 5:53:14 PM LEAK True KYRPJUXG\default[1].css HTTP/1.1 200 OK Content-Length: 1049 Content-Encoding: gzip Content-Type: text/css ETag: "fe20b51df3e6c41:89f" P3P: CP="BUS C
UR CONo FIN IVDo ONL OUR PHY SAMo TELo" ~U:jschmo
http://www.orbitz.com/img/corners/ffffc5_br.gif 12/20/2004 5:40:04 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\ffffc5_br[1].gif HTTP/1.1 200 OK ETag: "294204-34c-41c6ac04" Content-Length: 844 Content-Type: image/gif ~U:jschmo
http://www.technewsworld.com/images/2004/xml_36x14.gif 4/6/2004 1:25:43 PM 3/10/2005 5:45:36 PM URL False ICJNEDI2\xml_36x14[1].gif HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "997b88-1ad-4072e817" Content-Length: 429 Keep-Alive: timeo
ut=15, max=87 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/js.ng/domain=orbitz&channel=air&Section=interstitial&adsize=450x200&origin=NYC
&dest=SAO&OrbitzCookieName=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&secur
e=false&
  3/10/2005 5:48:19 PM URL False KYRPJUXG\domain=orbitz&channel
=air&Section=interstitial&adsi
ze=450x200&origin=NYC&dest=SAO
&OrbitzCookieName=OSC&orbitzID
=CwOXEaWQle!-1574237785!171067
271!7001!-1!111[2]
HTTP/1.1 200 OK Content-Length: 2160 Content-Type: application/x-javascript
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/images/9190000/9192626.jpg 12/27/2004 11:05:55 AM 3/10/2005 5:48:38 PM URL False KYRPJUXG\9192626[1].jpg HTTP/1.0 200 OK Content-Type: image/jpeg ETag: "609214f22decc41:104b" Content-Length: 5977 ~U:jschmo
http://www.findcracks.com/ssi/style.css 7/27/2004 6:04:50 AM 3/10/2005 5:52:52 PM URL False 8R9KCL4N\style[1].css HTTP/1.1 200 OK ETag: "15e113-5df-410628c2" Content-Length: 1503 Content-Type: text/css ~U:jschmo
http://www.orbitz.com/img/air/logos/AM_noclick.gif 12/20/2004 5:39:31 AM 3/10/2005 5:49:01 PM URL False B3B0BSCG\AM_noclick[1].gif HTTP/1.1 200 OK ETag: "63ca2d-2cc-41c6abe3" Content-Length: 716 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/img/global/nav/tab_ng.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:06 PM URL False ICJNEDI2\tab_ng[2].gif HTTP/1.1 200 OK ETag: "7ec424-344-41c6ac06" Content-Length: 836 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/i.p.attach.gif 11/15/2004 7:39:36 PM 3/10/2005 6:09:02 PM URL False 8R9KCL4N\i.p.attach[1].gif HTTP/1.1 200 OK Content-Length: 68 Content-Type: image/gif ETag: "0d456bf74cbc41:6f4" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR P
HY SAMo TELo ~U:jschmo
https://orbitz.rpts.net/viewpixel   3/10/2005 5:49:08 PM URL False 8R9KCL4N\viewpixel[2].gif HTTP/1.0 200 OK Content-Type: image/gif Content-Length: 43 ~U:jschmo
http://www.orbitz.com/Marketing/Images/Showers_Gen_2005_03_03.jpg 3/10/2005 12:38:16 AM 3/10/2005 5:47:52 PM URL False KYRPJUXG\Showers_Gen_2005_03_0
3[1].jpg
HTTP/1.1 200 OK ETag: "4aa46a-5da1-422fdd48" Content-Length: 23969 Content-Type: image/jpeg ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/tab4_textbooks_c
old.gif
1/13/2005 10:24:35 PM 3/10/2005 5:48:37 PM URL False B3B0BSCG\tab4_textbooks_cold[1
].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "809bf991e8f9c41:105a" Content-Length: 512 ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/7490000/7490874.gif 3/10/2004 10:08:09 AM 3/10/2005 5:49:23 PM URL False B3B0BSCG\7490874[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "ff996e7fb16c41:8ea" Content-Length: 1948 ~U:jschmo
http://www.barnesandnoble.com/   3/10/2005 5:48:34 PM URL False 8R9KCL4N\barnesandnoble[1].htm
HTTP/1.1 200 OK P3P: CP="CAO DSP COR ADM DEV TAI PSA IVDo CONo HIS TELo DEL SAMo UNRo LEG PRE" Content-Type: text/html Transf
er-Encoding: chunked ~U:jschmo
http://images.slashdot.org/topics/topicsecurity.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:22 PM URL False 8R9KCL4N\topicsecurity[1].gif HTTP/1.1 200 OK Keep-Alive: timeout=10, max=999 Content-Length: 3034 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/i.p.sort.desc.gif 11/15/2004 7:39:41 PM 3/10/2005 6:09:02 PM URL False B3B0BSCG\i.p.sort.desc[1].gif HTTP/1.1 200 OK Content-Length: 53 Content-Type: image/gif ETag: "80c451c274cbc41:6fc" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://news.google.com/news?imgefp=OTu3cMJADeoJ&imgurl=a123.g.akamai.net/f/123/12465/1d/media.canada
.com/cp/entertainment/20050310/e031034a.jpg
  3/10/2005 5:45:15 PM URL False 8R9KCL4N\news[5].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1784 ~U:jschmo
http://www.orbitz.com/img/orbots/near_airport.gif 12/20/2004 5:40:14 AM 3/10/2005 5:47:51 PM URL False KYRPJUXG\near_airport[1].gif HTTP/1.1 200 OK ETag: "1d018f-152-41c6ac0e" Content-Length: 338 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/pimages/gresources/hdCantFind.gif
8/4/2004 3:50:55 PM 3/10/2005 5:50:30 PM URL False KYRPJUXG\hdCantFind[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "20601a5b5c7ac41:c42" Content-Length: 923 ~U:jschmo
http://www.orbitz.com/global/css/results_air.css?cache=orbitz20050214 1/13/2005 5:56:18 PM 3/10/2005 5:48:32 PM LEAK True ICJNEDI2\results_air[1].css HTTP/1.1 200 OK ETag: "6fc113-1f36-41e6fc92" Content-Type: text/css Content-Encoding: deflate Transfer-Encoding: chunked ~U:
jschmo
http://news.google.com/news?imgefp=gUf6DnRlCikJ&imgurl=images.newsfactor.com/images/id/5376/apple-bl
u-ray-board_nfn.jpg
  3/10/2005 5:45:15 PM URL False KYRPJUXG\news[3].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1763 ~U:jschmo
https://www.orbitz.com/img/global/nav/tab_ms.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:06 PM URL False B3B0BSCG\tab_ms[2].gif HTTP/1.1 200 OK ETag: "6402f3-5e1-41c6ac06" Content-Length: 1505 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/global/js/framebuster.js 1/7/2005 6:35:55 PM 3/10/2005 5:47:50 PM URL False KYRPJUXG\framebuster[1].js HTTP/1.1 200 OK Content-Length: 2205 Content-Type: application/x-javascript
http://www.orbitz.com/img/air/logos/DL_small.gif 12/20/2004 5:39:33 AM 3/10/2005 5:48:34 PM URL False ICJNEDI2\DL_small[1].gif HTTP/1.1 200 OK ETag: "6e5087-c8-41c6abe5" Content-Length: 200 Content-Type: image/gif ~U:jschmo
http://www.technewsworld.com/images/work/search-button-61x20.gif 1/5/2004 1:07:34 PM 3/10/2005 5:45:35 PM URL False KYRPJUXG\search-button-61x20[1
].gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c183c-26a-3ff9a7e6" Content-Length: 618 Keep-Alive: timeo
ut=15, max=96 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/i.p.send.gif 11/15/2004 7:39:41 PM 3/10/2005 5:53:58 PM URL False KYRPJUXG\i.p.send[1].gif HTTP/1.1 200 OK Content-Length: 149 Content-Type: image/gif ETag: "80c451c274cbc41:6f4" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://hp.msn.com/4U/B}BN-R}~8C34][H8}K[Q0T.jpg 3/10/2005 12:54:10 PM 3/10/2005 5:43:04 PM URL False KYRPJUXG\B}BN-R}~8C34][H8}K[Q0
T[1].jpg
HTTP/1.1 200 OK Content-Length: 1730 Content-Type: image/jpeg ETag: "5eab92299a25c51:8b2" P3P: CP="BUS CUR CONo FIN IVDo ONL
OUR PHY SAMo TELo" ~U:jschmo
http://m2.doubleclick.net/653550/nc_hway_336x280_30k_3l.swf?clickTag=http%3A//ad.doubleclick.net/cli
ck%253Bh%3Dv3%7C3237%7C3%7C0%7C%252a%7Cc%253B14768702%253B0-0%253B0%253B11072969%253B4252-336%7C280%
253B9288145%7C9306041%7C1%253B%253B%257Esscs%253D%253fhttp%3A//h71016.www7.hp.com/html/december/inde
x.asp%3Fjumpid%3Dex_r2910_link/kimSMBcoreDG/2Qnc6220/EcommerceTimes
3/9/2005 4:00:34 PM 3/10/2005 5:45:50 PM URL False 8R9KCL4N\CAL0FUJF.swf HTTP/1.1 200 OK Content-Length: 29858 Content-Type: application/x-shockwave-flash ~U:jschmo
https://www.orbitz.com/global/css/styles.css?cache=orbitz20050214 2/10/2005 1:40:14 PM 3/10/2005 5:49:05 PM LEAK True B3B0BSCG\styles[1].css HTTP/1.1 200 OK ETag: "1e823f-51f2-420baa8e" Content-Type: text/css Content-Encoding: deflate Transfer-Encoding: chunked ~U:
jschmo
http://www.orbitz.com/img/global/nav/tab_ng.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\tab_ng[1].gif HTTP/1.1 200 OK ETag: "7f83ad-344-41c6ac06" Content-Length: 836 Content-Type: image/gif ~U:jschmo
http://www.technewsworld.com/images/work/icon_print_20x14.gif 1/5/2004 1:07:34 PM 3/10/2005 5:45:36 PM URL False ICJNEDI2\icon_print_20x14[1].g
if
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c1852-4c-3ff9a7e6" Content-Length: 76 Keep-Alive: timeout
=15, max=90 Content-Type: image/gif ~U:jschmo
http://by23fd.bay23.hotmail.msn.com/cgi-bin/dasp/EN/helppane___9080000001F.js   3/10/2005 6:08:45 PM LEAK True B3B0BSCG\helppane___9080000001
F[1].js
HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: application/x-javascript; charset=iso-8859-1 Content-Encoding: gzip
X-Powered-By: ASP.NET P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" HMServer: H: BAY23-F35.phx.gbl V: WIN2K3 10.05.1
504.0009 i D: Mar 4 2005 17:02:52 S: 0 ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/pimages/gresources/Gateway/whitedo
ts.gif
11/5/2002 1:58:16 PM 3/10/2005 5:48:38 PM URL False ICJNEDI2\whitedots[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "b74e744cfd84c21:9d4" Content-Length: 44 ~U:jschmo
http://www.orbitz.com/img/air/logos/CO_noclick.gif 12/20/2004 5:39:32 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\CO_noclick[1].gif HTTP/1.1 200 OK ETag: "26070a-38e-41c6abe4" Content-Length: 910 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/img/global/nav/corner_tr.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:05 PM URL False KYRPJUXG\corner_tr[2].gif HTTP/1.1 200 OK ETag: "6402f2-72-41c6ac06" Content-Length: 114 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/i.p.cal.gif 12/29/2004 1:56:29 PM 3/10/2005 6:09:02 PM URL False KYRPJUXG\i.p.cal[1].gif HTTP/1.1 200 OK Content-Length: 237 Content-Type: image/gif ETag: "80ecb41ad8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/tab4_pipe.gif 5/28/2003 4:03:45 PM 3/10/2005 5:48:37 PM URL False 8R9KCL4N\tab4_pipe[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "d0ffde3e5425c31:105a" Content-Length: 48 ~U:jschmo
http://by23fd.bay23.hotmail.msn.com/cgi-bin/dasp/EN/hotmail___1000000002.css   3/10/2005 6:08:45 PM LEAK True KYRPJUXG\hotmail___1000000002[
1].css
HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/css; charset=iso-8859-1 Content-Encoding: gzip X-Powered-By: AS
P.NET P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" HMServer: H: BAY23-F34.phx.gbl V: WIN2K3 10.05.1504.0009 i D: M
ar 4 2005 17:02:52 S: 0 ~U:jschmo
http://by23fd.bay23.hotmail.msn.com/cgi-bin/dasp/EN/helppane___9080000001F.js   3/10/2005 6:09:02 PM URL False B3B0BSCG\helppane___9080000001
F[2].js
HTTP/1.1 200 OK Content-Length: 3841 Content-Type: application/x-javascript ð­
http://adfarm.mediaplex.com/ad/bn/525-26092-2060-4?mpt=2789993     REDR False    
http://news.google.com/news?imgefp=jhg277RC7zgJ&imgurl=deseretnews.com/photos/2149517.jpg   3/10/2005 5:45:15 PM URL False ICJNEDI2\news[4].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2010 ~U:jschmo
http://global.msads.net/ads/8707/0000008707_000000000000000154392.gif 2/28/2005 5:36:59 PM 3/10/2005 6:09:02 PM URL False B3B0BSCG\0000008707_0000000000
00000154392[1].gif
HTTP/1.1 200 OK Content-Length: 184 Content-Type: image/gif ETag: "8077993e61dc51:0000" PICS-Label: (PICS-1.1 "http://www.rsa
c.org/ratingsv01.html" l comment "RSACi North America Server" by "inet@microsoft.com" r (n 0 s 0 v 0 l 0)) P3P: CP="BUS CUR C
ONo FIN IVDo ONL OUR PHY SAMo TELo" ~U:jschmo
http://ads.osdn.com/?ad_id=6420&alloc_id=13925&site_id=1&request_id=8246091   3/10/2005 5:46:11 PM URL False B3B0BSCG\ads.osdn[1].htm HTTP/1.1 200 OK Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html ~U:jschmo
http://64.4.55.45/i.p.folder.inbox.gif 11/15/2004 7:39:41 PM 3/10/2005 6:09:02 PM URL False 8R9KCL4N\i.p.folder.inbox[1].g
if
HTTP/1.1 200 OK Content-Length: 178 Content-Type: image/gif ETag: "80c451c274cbc41:6c2" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://hp.msn.com/c/hotmail/go.gif 12/13/2004 6:53:06 PM 3/10/2005 5:53:17 PM URL False ICJNEDI2\go[1].gif HTTP/1.1 200 OK Content-Length: 474 Content-Type: image/gif ETag: "528cae46ee1c41:88d" P3P: CP="BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo" ~U:jschmo
http://news.google.com/news?imgefp=NSWgOTpY_0AJ&imgurl=www.covers.com/images/2005/mcgwire_mark050310
.jpg
  3/10/2005 5:45:15 PM URL False 8R9KCL4N\news[4].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2339 ~U:jschmo
http://www.orbitz.com/img/global/nav/tab_v.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:01 PM URL False B3B0BSCG\tab_v[1].gif HTTP/1.1 200 OK ETag: "182e2-36f-41c6ac06" Content-Length: 879 Content-Type: image/gif ~U:jschmo
http://news.google.com/news?imgefp=L3AWXXEn4QwJ&imgurl=www.irishecho.com/newspaper/images/16116.jpg   3/10/2005 5:45:15 PM URL False 8R9KCL4N\news[1].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1957 ~U:jschmo
http://www.orbitz.com/img/global/interstitial/dots_static.gif 12/20/2004 5:40:06 AM 3/10/2005 5:48:19 PM URL False 8R9KCL4N\dots_static[1].gif HTTP/1.1 200 OK ETag: "5a410b-395-41c6ac06" Content-Length: 917 Content-Type: image/gif ~U:jschmo
http://spe.atdmt.com/b/MSMSNMATCUPH/UOPOnlineCPM_160x600_pink_fldrs_002.gif   3/10/2005 6:09:00 PM URL False ICJNEDI2\UOPOnlineCPM_160x600_
pink_fldrs_002[1].gif
HTTP/1.1 200 OK Allow: GET Content-Length: 9999 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/air/logos/AM_small.gif 12/20/2004 5:39:31 AM 3/10/2005 5:48:34 PM URL False KYRPJUXG\AM_small[1].gif HTTP/1.1 200 OK ETag: "390eeb-c0-41c6abe3" Content-Length: 192 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/home/bg_caremodule.gif 12/20/2004 5:40:10 AM 3/10/2005 5:47:52 PM URL False 8R9KCL4N\bg_caremodule[1].gif HTTP/1.1 200 OK ETag: "4c41ab-45a-41c6ac0a" Content-Length: 1114 Content-Type: image/gif ~U:jschmo
http://hp.msn.com/global/c/lg/msft94.gif 1/25/2005 11:30:55 AM 3/10/2005 5:43:03 PM URL False KYRPJUXG\msft94[1].gif HTTP/1.1 200 OK Content-Length: 893 Content-Type: image/gif ETag: "f027553efb2c51:8b2" P3P: CP="BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo" ~U:jschmo
http://www.technewsworld.com/images/2005/tnw_contenttab_bg_336x18.gif 2/25/2005 6:49:23 PM 3/10/2005 5:45:38 PM URL False B3B0BSCG\tnw_contenttab_bg_336
x18[1].gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "26f2e52-16a-421fb983" Content-Length: 362 Keep-Alive: time
out=15, max=75 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/html.ng/domain=orbitz&channel=air&Section=results&adsize=hotwireTop&origin=NYC
&dest=SAO&OrbitzCookieName=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&secur
e=false&
  3/10/2005 5:48:32 PM LEAK True B3B0BSCG\domain=orbitz&channel
=air&Section=results&adsize=ho
twireTop&origin=NYC&dest=SAO&O
rbitzCookieName=OSC&orbitzID=C
wOXEaWQle!-1574237785!17106727
1!7001!-1!11104[1]
HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html Content-Encoding: deflate ~U:jschmo
http://www.orbitz.com/global/js/behaviors.js 1/11/2005 3:01:52 PM 3/10/2005 5:49:01 PM URL False B3B0BSCG\behaviors[2].js HTTP/1.1 200 OK Content-Length: 5457 Content-Type: application/x-javascript
http://www.orbitz.com/img/global/nav/corner_tr.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\corner_tr[1].gif HTTP/1.1 200 OK ETag: "7f83ae-72-41c6ac06" Content-Length: 114 Content-Type: image/gif ~U:jschmo
http://spe.atdmt.com/ds/DEDENATCOATC/Corporate_1Q05/cookie_300x250_rev_d.swf?clickTag1=http://www.ec
tnews.com/adsys/link/%3Fcreative%3d2248%26ENN_rnd%3d11104947275248%26ENN_target=http://clk.atdmt.com
/go/cmmriatc0040000037den/direct;ai.6848594;ct.1/01&clickTag=http://www.ectnews.com/adsys/link/%3Fcr
eative%3d2248%26ENN_rnd%3d11104947275248%26ENN_target=http://clk.atdmt.com/go/cmmriatc0040000037den/
direct;ai.6848594;ct.1/01
  3/10/2005 5:45:36 PM URL False B3B0BSCG\CA8TUBCP.swf HTTP/1.1 200 OK Allow: GET Content-Length: 41568 Content-Type: application/x-shockwave-flash ~U:jschmo
http://www.orbitz.com/Marketing/Images/Clear1x1.gif 7/26/2003 4:37:46 AM 3/10/2005 5:49:02 PM URL False B3B0BSCG\Clear1x1[1].gif HTTP/1.1 200 OK ETag: "4807b1-2b-3f223dda" Content-Length: 43 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/pimages/gresources/Gateway/blackdo
ts.gif
11/5/2002 1:57:53 PM 3/10/2005 5:48:38 PM URL False B3B0BSCG\blackdots[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "6b8513ffd84c21:c42" Content-Length: 44 ~U:jschmo
http://www.orbitz.com/img/air/logos/JJ_noclick.gif 12/20/2004 5:39:40 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\JJ_noclick[1].gif HTTP/1.1 200 OK ETag: "2608fe-246-41c6abec" Content-Length: 582 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/img/global/nav/tab_h.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:05 PM URL False KYRPJUXG\tab_h[2].gif HTTP/1.1 200 OK ETag: "2f41dd-2f0-41c6ac06" Content-Length: 752 Content-Type: image/gif ~U:jschmo
http://hp.msn.com/c/hotmail/fin.jpg 12/10/2004 12:46:38 PM 3/10/2005 5:53:17 PM URL False B3B0BSCG\fin[1].jpg HTTP/1.1 200 OK Content-Length: 972 Content-Type: image/jpeg ETag: "99961133e0dec41:8e0" P3P: CP="BUS CUR CONo FIN IVDo ONL O
UR PHY SAMo TELo" ~U:jschmo
http://global.msads.net/ads/1246/0000001246_000000000000000140287.gif 1/12/2005 4:58:00 PM 3/10/2005 6:08:57 PM URL False ICJNEDI2\0000001246_0000000000
00000140287[1].gif
HTTP/1.1 200 OK Content-Length: 1231 Content-Type: image/gif ETag: "0248c8f1f8c41:0000" PICS-Label: (PICS-1.1 "http://www.rsa
c.org/ratingsv01.html" l comment "RSACi North America Server" by "inet@microsoft.com" r (n 0 s 0 v 0 l 0)) P3P: CP="BUS CUR C
ONo FIN IVDo ONL OUR PHY SAMo TELo" ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/admin4_help.gif 1/4/2005 3:20:59 PM 3/10/2005 5:48:37 PM URL False ICJNEDI2\admin4_help[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "80724e79af2c41:105a" Content-Length: 159 ~U:jschmo
http://www.google.com/search?hl=en&q=sao+paulo+hotels   3/10/2005 5:47:33 PM URL False 8R9KCL4N\search[2].htm HTTP/1.1 200 OK Content-Length: 23166 Content-Type: text/html
http://spe.atdmt.com/b/MSMSNMATCTRU/TrueCPA_everyonesingleDP_160X600.gif   3/10/2005 6:09:02 PM URL False 8R9KCL4N\TrueCPA_everyonesingl
eDP_160X600[1].gif
HTTP/1.1 200 OK Allow: GET Content-Length: 19098 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/tab.separator.on.r.gif 11/15/2004 7:40:10 PM 3/10/2005 6:09:02 PM URL False ICJNEDI2\tab.separator.on.r[1]
.gif
HTTP/1.1 200 OK Content-Length: 57 Content-Type: image/gif ETag: "0d19ad374cbc41:6f4" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR P
HY SAMo TELo ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/qsearch3_vline_
dots.gif
5/29/2003 3:53:20 PM 3/10/2005 5:50:30 PM URL False KYRPJUXG\qsearch3_vline_dots[1
].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "205061f41b26c31:918" Content-Length: 48 ~U:jschmo
http://images.barnesandnoble.com/pImages/kmp/headers/8674_hpotter2.gif 9/17/2004 11:55:38 AM 3/10/2005 5:50:30 PM URL False KYRPJUXG\8674_hpotter2[1].gif HTTP/1.1 200 OK Content-Type: image/gif ETag: "acaddc6ce9cc41:109b" Content-Length: 1794 ~U:jschmo
http://64.4.55.45/i.p.cal.note.gif 11/15/2004 7:39:36 PM 3/10/2005 6:09:02 PM URL False ICJNEDI2\i.p.cal.note[1].gif HTTP/1.1 200 OK Content-Length: 232 Content-Type: image/gif ETag: "0d456bf74cbc41:6fc" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://www.technewsworld.com/shared/print.css 2/28/2005 9:29:09 PM 3/10/2005 5:45:30 PM LEAK True B3B0BSCG\print[1].css HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c4db0-b89-4223d375" Keep-Alive: timeout=15, max=98 Conten
t-Type: text/css Content-Encoding: gzip Content-Length: 968 ~U:jschmo
http://www.orbitz.com/img/global/sideL-ylwBackGradient.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\sideL-ylwBackGradient
[1].gif
HTTP/1.1 200 OK ETag: "1981e4-67-41c6ac06" Content-Length: 103 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/toppromo3_rule.
gif
5/28/2003 4:03:43 PM 3/10/2005 5:50:30 PM URL False KYRPJUXG\toppromo3_rule[1].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "4060793d5425c31:918" Content-Length: 48 ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/8020000/8020396.gif 7/27/2004 4:34:43 PM 3/10/2005 5:49:23 PM URL False 8R9KCL4N\8020396[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "1bb7e261974c41:c42" Content-Length: 1992 ~U:jschmo
http://64.4.55.45/i.p.cont.individual.gif 12/29/2004 1:56:32 PM 3/10/2005 6:09:02 PM URL False 8R9KCL4N\i.p.cont.individual[1
].gif
HTTP/1.1 200 OK Content-Length: 246 Content-Type: image/gif ETag: "0b07e1cd8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://saopaulo.grand.hyatt.com/owshare/hyatt/worldwide/grandimages/phototour.gif 7/24/2003 11:39:20 AM 3/10/2005 5:47:41 PM URL False 8R9KCL4N\phototour[1].gif HTTP/1.1 200 OK ETag: "10c21e-eac-3f1ffda8" Content-Length: 3756 Keep-Alive: timeout=15, max=91 Content-Type: image/gif ~U:j
schmo
http://www.orbitz.com/img/air/logos/RG_small.gif 12/20/2004 5:39:46 AM 3/10/2005 5:48:34 PM URL False B3B0BSCG\RG_small[1].gif HTTP/1.1 200 OK ETag: "10824f-122-41c6abf2" Content-Length: 290 Content-Type: image/gif ~U:jschmo
http://saopaulo.grand.hyatt.com/images/bannerpic3.jpg 8/14/2003 12:08:19 PM 3/10/2005 5:47:41 PM URL False B3B0BSCG\bannerpic3[1].jpg HTTP/1.1 200 OK ETag: "4f42b0-15d30-3f3bb3f3" Content-Length: 89392 Keep-Alive: timeout=15, max=92 Content-Type: image/jpeg
~U:jschmo
http://hp.msn.com/css/home/hp-cl1.css 1/27/2005 2:08:08 PM 3/10/2005 5:43:02 PM URL False 8R9KCL4N\hp-cl1[1].css HTTP/1.1 200 OK Content-Length: 1054 Content-Type: text/css ETag: "6f9cb589a34c51:89f" P3P: CP="BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo" ~U:jschmo
http://www.orbitz.com/img/global/nav/tab_qs.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\tab_qs[1].gif HTTP/1.1 200 OK ETag: "7e02f6-32e-41c6ac06" Content-Length: 814 Content-Type: image/gif ~U:jschmo
http://macslash.org/images/slashheadtop.gif 6/30/2000 2:03:07 AM 3/10/2005 5:44:42 PM URL False KYRPJUXG\slashheadtop[1].gif HTTP/1.1 200 OK X-Powered-By: Slash 2.002006 X-Fry: That's it! You can only take my money for so long before you take it all
and I say enough! ETag: "4893b-20ef-395c381b" Content-Length: 8431 Content-Type: image/gif ~U:jschmo
http://saopaulo.grand.hyatt.com/owshare/hyatt/worldwide/grandimages/clock02.swf?timezone=America/Sao
_Paulo
7/28/2003 3:57:47 AM 3/10/2005 5:47:41 PM URL False B3B0BSCG\clock02[1].swf HTTP/1.1 200 OK ETag: "10c205-1653-3f24d77b" Content-Length: 5715 Keep-Alive: timeout=15, max=98 Content-Type: application/x-
shockwave-flash ~U:jschmo
http://www.orbitz.com/img/air/tip_integration/sort_depart.gif 12/20/2004 5:39:58 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\sort_depart[1].gif HTTP/1.1 200 OK ETag: "e03f5-230-41c6abfe" Content-Length: 560 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/global/nav/tab_c.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:01 PM URL False B3B0BSCG\tab_c[1].gif HTTP/1.1 200 OK ETag: "640316-260-41c6ac06" Content-Length: 608 Content-Type: image/gif ~U:jschmo
http://www.bn.com/     REDR False    
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/pimages/gresources/Gateway/YellowS
rch_btn.gif
11/24/2004 11:28:56 AM 3/10/2005 5:48:38 PM URL False ICJNEDI2\YellowSrch_btn[1].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "833981b142d2c41:105a" Content-Length: 313 ~U:jschmo
http://www.orbitz.com/img/air/tip_integration/matrix_down_arrow.gif 12/20/2004 5:39:58 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\matrix_down_arrow[1].
gif
HTTP/1.1 200 OK ETag: "3c269-42-41c6abfe" Content-Length: 66 Content-Type: image/gif ~U:jschmo
http://news.google.com/news?imgefp=jKDI4zj49ygJ&imgurl=msnbcmedia.msn.com/j/msnbc/Components/Photos/
041114/041114_favre_vmed_830p.vmedium.jpg
  3/10/2005 5:45:15 PM URL False B3B0BSCG\news[5].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1843 ~U:jschmo
http://news.google.com/news?imgefp=rFLq_MQOlBYJ&imgurl=www.kashar.net/newspics/Samsung_v770.jpg   3/10/2005 5:45:15 PM URL False B3B0BSCG\news[4].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 13703 ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/admin4_colon.gif
1/4/2005 2:23:14 PM 3/10/2005 5:48:37 PM URL False KYRPJUXG\admin4_colon[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "0fdd6d592f2c41:918" Content-Length: 71 ~U:jschmo
http://www.technewsworld.com/images/2004/enn_logo_bottom_300x75.png 4/22/2004 6:42:26 PM 3/10/2005 5:45:37 PM URL False ICJNEDI2\enn_logo_bottom_300x7
5[1].png
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "9f704e-28e9-40884a52" Content-Length: 10473 Keep-Alive: ti
meout=15, max=79 Content-Type: image/png ~U:jschmo
http://www.google.com/nav_page.gif 9/23/2004 1:44:19 PM 3/10/2005 5:47:33 PM URL False ICJNEDI2\nav_page[1].gif HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 373 ~U:jschmo
http://images.slashdot.org/topics/topicbiotech.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:23 PM URL False KYRPJUXG\topicbiotech[1].gif HTTP/1.1 200 OK Keep-Alive: timeout=10, max=992 Content-Length: 1046 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/lgo_msn_118x35.gif 12/29/2004 1:56:35 PM 3/10/2005 6:09:02 PM URL False KYRPJUXG\lgo_msn_118x35[1].gif
HTTP/1.1 200 OK Content-Length: 914 Content-Type: image/gif ETag: "8073481ed8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/tab4_bnu_cold.g
if
1/13/2005 5:04:30 AM 3/10/2005 5:50:30 PM URL False B3B0BSCG\tab4_bnu_cold[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "04bb24557f9c41:105a" Content-Length: 421 ~U:jschmo
http://global.msads.net/ads/8707/0000008707_000000000000000137880.gif 1/4/2005 12:42:04 PM 3/10/2005 6:08:52 PM URL False B3B0BSCG\0000008707_0000000000
00000137880[1].gif
HTTP/1.1 200 OK Content-Length: 608 Content-Type: image/gif ETag: "07ed6b384f2c41:000" P3P: CP="BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo" ~U:jschmo
http://64.4.55.45/i.p.folder.gif 11/15/2004 7:39:41 PM 3/10/2005 6:09:02 PM URL False KYRPJUXG\i.p.folder[1].gif HTTP/1.1 200 OK Content-Length: 163 Content-Type: image/gif ETag: "80c451c274cbc41:6c2" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://www.orbitz.com/img/buttons/activate.gif 12/20/2004 5:39:59 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\activate[1].gif HTTP/1.1 200 OK ETag: "468130-2d2-41c6abff" Content-Length: 722 Content-Type: image/gif ~U:jschmo
http://news.google.com/news?imgefp=U_-m5wKFE84J&imgurl=www.ecommercetimes.com/images/rw5791/reed-els
evier-security-records.jpg
  3/10/2005 5:45:15 PM URL False KYRPJUXG\news[2].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2193 ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/admin4_colon.gi
f
1/4/2005 2:23:14 PM 3/10/2005 5:50:30 PM URL False ICJNEDI2\admin4_colon[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "0fdd6d592f2c41:918" Content-Length: 71 ~U:jschmo
http://ad.linksynergy.com/fs-bin/show?id=OX36Q3imQxc&bids=77305.10000362&type=3&subid=0   3/10/2005 5:44:51 PM URL False B3B0BSCG\show[1].gif HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/air/logos/AA_small.gif 12/20/2004 5:39:31 AM 3/10/2005 5:48:33 PM URL False 8R9KCL4N\AA_small[1].gif HTTP/1.1 200 OK ETag: "390bf8-116-41c6abe3" Content-Length: 278 Content-Type: image/gif ~U:jschmo
http://images.slashdot.org/topics/topicdemocrats.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:22 PM URL False B3B0BSCG\topicdemocrats[1].gif
HTTP/1.1 200 OK Keep-Alive: timeout=10, max=996 Content-Length: 1558 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/air/tip_integration/2stop_on_click.gif 12/20/2004 5:39:58 AM 3/10/2005 5:49:02 PM URL False 8R9KCL4N\2stop_on_click[1].gif
HTTP/1.1 200 OK ETag: "25044a-196-41c6abfe" Content-Length: 406 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/global/css/results.css?cache=orbitz20050214 1/14/2005 3:21:19 PM 3/10/2005 5:49:01 PM URL False KYRPJUXG\results[2].css HTTP/1.1 200 OK Content-Length: 3753 Content-Type: text/css
http://www.orbitz.com/html.ng/domain=orbitz&channel=air&Section=results&adsize=hotwireBottom&origin=
NYC&dest=SAO&OrbitzCookieName=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&se
cure=false&
  3/10/2005 5:49:01 PM LEAK True B3B0BSCG\domain=orbitz&channel
=air&Section=results&adsize=ho
twireBottom&origin=NYC&dest=SA
O&OrbitzCookieName=OSC&orbitzI
D=CwOXEaWQle!-1574237785!17106
7271!7001!-1!11[1]
HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html Content-Encoding: deflate ~U:jschmo
http://hit7.hotlog.ru/cgi-bin/hotlog/count?0.30918892308510914&s=1002207&im=101&r=http%3A//www.frees
erials.com/&pg=http%3A//www.freeserials.com/serials/search.php%3Fq%3Ddocustodian%26query%3DSearch+%2
521&c=Y&j=Y&wh=800x600&px=32&js=1.3&
    REDR False    
http://www.orbitz.com/img/air/tip_integration/matrix_tr_9_22_5ae.gif 12/20/2004 5:39:58 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\matrix_tr_9_22_5ae[1]
.gif
HTTP/1.1 200 OK ETag: "5bc18d-75-41c6abfe" Content-Length: 117 Content-Type: image/gif ~U:jschmo
http://news.google.com/images/envelope.gif 9/23/2004 1:41:59 PM 3/10/2005 5:45:14 PM URL False ICJNEDI2\envelope[1].gif HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 85 ~U:jschmo
http://www.orbitz.com/img/global/nav/tab_qs_o.gif 12/20/2004 5:40:06 AM 3/10/2005 5:47:50 PM URL False 8R9KCL4N\tab_qs_o[1].gif HTTP/1.1 200 OK ETag: "72c207-3a2-41c6ac06" Content-Length: 930 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/pimages/gresources/Gateway/FndaStr
_hordots.gif
11/24/2004 11:28:58 AM 3/10/2005 5:48:38 PM URL False KYRPJUXG\FndaStr_hordots[1].gi
f
HTTP/1.0 200 OK Content-Type: image/gif ETag: "5077e4b242d2c41:105a" Content-Length: 56 ~U:jschmo
http://www.orbitz.com/img/air/logos/AV_noclick.gif 12/20/2004 5:39:31 AM 3/10/2005 5:48:32 PM URL False B3B0BSCG\AV_noclick[1].gif HTTP/1.1 200 OK ETag: "108beb-241-41c6abe3" Content-Length: 577 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/global/css/elements.css?cache=orbitz20050214 2/4/2005 12:56:55 PM 3/10/2005 5:49:05 PM LEAK True KYRPJUXG\elements[1].css HTTP/1.1 200 OK ETag: "6fc10f-14a1-4203b767" Content-Type: text/css Content-Encoding: deflate Transfer-Encoding: chunked ~U:
jschmo
http://global.msads.net/ads/363/0000000363_000000000000000148856.gif 2/9/2005 4:20:45 PM 3/10/2005 6:09:02 PM URL False B3B0BSCG\0000000363_0000000000
00000148856[1].gif
HTTP/1.1 200 OK Content-Length: 1164 Content-Type: image/gif ETag: "80346f37edec51:0000" pics-label: (PICS-1.1 "http://www.rs
ac.org/ratingsv01.html" l comment "RSACi North America Server" by "inet@microsoft.com" r (n 0 s 0 v 0 l 0)) P3P: CP="BUS CUR
CONo FIN IVDo ONL OUR PHY SAMo TELo" ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/vcart4_topbot_ru
le.gif
1/12/2005 11:43:23 AM 3/10/2005 5:48:36 PM URL False B3B0BSCG\vcart4_topbot_rule[1]
.gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "e0e978d4c5f8c41:105a" Content-Length: 62 ~U:jschmo
http://www.technewsworld.com/images/work/newsltrs_arrow_22x22.gif 1/5/2004 1:07:34 PM 3/10/2005 5:45:37 PM URL False B3B0BSCG\newsltrs_arrow_22x22[
1].gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c17fc-150-3ff9a7e6" Content-Length: 336 Keep-Alive: timeo
ut=15, max=85 Content-Type: image/gif ~U:jschmo
http://news.google.com/news?imgefp=VeaxuXhPUBEJ&imgurl=www.ctv.ca/archives/CTVNews/images/20050310/T
ung_resignation_050310/160_ap_tung_chee_hwa_050302.jpg
  3/10/2005 5:45:15 PM URL False ICJNEDI2\news[6].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1708 ~U:jschmo
http://images.slashdot.org/topics/topicmozilla.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:23 PM URL False B3B0BSCG\topicmozilla[1].gif HTTP/1.1 200 OK Keep-Alive: timeout=10, max=994 Content-Length: 2593 Content-Type: image/gif ~U:jschmo
http://saopaulo.grand.hyatt.com/owshare/hyatt/worldwide/grandimages/footerbg02.jpg 7/24/2003 7:17:50 AM 3/10/2005 5:47:41 PM URL False ICJNEDI2\footerbg02[1].jpg HTTP/1.1 200 OK ETag: "10c20e-8f4-3f1fc05e" Content-Length: 2292 Keep-Alive: timeout=15, max=89 Content-Type: image/jpeg ~U:
jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/tab4_gamesgifts
_cold.gif
1/13/2005 5:04:28 AM 3/10/2005 5:50:30 PM URL False 8R9KCL4N\tab4_gamesgifts_cold[
2].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "01e814457f9c41:105a" Content-Length: 485 ~U:jschmo
http://by23fd.bay23.hotmail.msn.com/cgi-bin/dasp/EN/hotmail___100000434.js   3/10/2005 6:09:02 PM URL False 8R9KCL4N\hotmail___100000434[2
].js
HTTP/1.1 200 OK Content-Length: 33243 Content-Type: application/x-javascript ­
http://www.freeserials.com/img/line2.gif 5/26/2004 11:23:47 AM 3/10/2005 5:50:58 PM URL False ICJNEDI2\line2[1].gif HTTP/1.1 200 OK ETag: "af123-2b-40b4b683" Content-Length: 43 Content-Type: image/gif Content-Language: ru ~U:jschmo
http://64.4.55.45/i.p.new.gif 11/15/2004 7:39:41 PM 3/10/2005 6:09:02 PM URL False B3B0BSCG\i.p.new[1].gif HTTP/1.1 200 OK Content-Length: 235 Content-Type: image/gif ETag: "80c451c274cbc41:6fc" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://www.orbitz.com/global/js/behaviors.js 1/11/2005 3:01:52 PM 3/10/2005 5:48:33 PM LEAK True B3B0BSCG\behaviors[1].js HTTP/1.1 200 OK ETag: "120277-d51-41e430b0" Content-Type: application/x-javascript Content-Encoding: deflate Transfer-Encodin
g: chunked ~U:jschmo
http://news.google.com/news?imgefp=B2o4u28Z-FAJ&imgurl=msnbcmedia.msn.com/j/msnbc/Components/Photos/
050309/050309_jose_medellin_vsm.vsmall.jpg
  3/10/2005 5:45:15 PM URL False 8R9KCL4N\news[2].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1583 ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/8400000/8401006.gif 10/18/2004 3:17:19 PM 3/10/2005 5:49:22 PM URL False KYRPJUXG\8401006[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "34e83a1647b5c41:93f" Content-Length: 1973 ~U:jschmo
http://by23fd.bay23.hotmail.msn.com/cgi-bin/premail/5238a2412128   3/10/2005 6:08:41 PM URL False ICJNEDI2\5238a2412128[1] HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html Content-Encoding: gzip X-Powered-By: ASP.NET P3P: CP="BUS
CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" HMServer: H: BAY23-F38.phx.gbl V: WIN2K3 10.05.1504.0009 i D: Mar 4 2005 17:02:52
S: 0 ~U:jschmo
http://spe.atdmt.com/ds/OTANTAMONSRC/030705/S_S_hawaiivaca_309x60_0205.swf?clickTag1=http://clk.atdm
t.com/go/msnnkonm00200074ave/direct;wi.309;hi.60;ai.5237092.5490966.6916112;ct.1/01&clickTag=http://
clk.atdmt.com/go/msnnkonm00200074ave/direct;wi.309;hi.60;ai.5237092.5490966.6916112;ct.1/01
  3/10/2005 5:43:06 PM URL False ICJNEDI2\S_S_hawaiivaca_309x60
_0205[1].swf
HTTP/1.1 200 OK Allow: GET Content-Length: 9197 Content-Type: application/x-shockwave-flash ~U:jschmo
http://ad.linksynergy.com/fs-bin/show?id=OX36Q3imQxc&bids=78941.10000008&type=3&subid=0   3/10/2005 5:44:51 PM URL False 8R9KCL4N\show[1].gif HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: image/gif ~U:jschmo
http://64.4.55.45/i.p.attachfile.gif 12/29/2004 1:56:29 PM 3/10/2005 5:53:58 PM URL False ICJNEDI2\i.p.attachfile[1].gif
HTTP/1.1 200 OK Content-Length: 239 Content-Type: image/gif ETag: "80ecb41ad8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://www.orbitz.com/img/icons/icon_arrow_orange.gif 12/20/2004 5:40:14 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\icon_arrow_orange[1].
gif
HTTP/1.1 200 OK ETag: "2c821a-e2-41c6ac0e" Content-Length: 226 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/App/ViewFlightSearchResults?z=apz1&r=12   3/10/2005 5:48:32 PM LEAK True ICJNEDI2\ViewFlightSearchResul
ts[1]
HTTP/1.1 200 OK Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html Content-Encoding: deflate ~U:jschmo
http://www.orbitz.com/App/ViewFlightSearchResults?z=bcb0&r=as   3/10/2005 5:49:01 PM LEAK True ICJNEDI2\ViewFlightSearchResul
ts[2]
HTTP/1.1 200 OK Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html Content-Encoding: deflate ~U:jschmo
http://www.orbitz.com/img/air/tip_integration/2stop_click.gif 12/20/2004 5:39:58 AM 3/10/2005 5:48:33 PM URL False B3B0BSCG\2stop_click[1].gif HTTP/1.1 200 OK ETag: "7481d9-26a-41c6abfe" Content-Length: 618 Content-Type: image/gif ~U:jschmo
http://news.google.com/   3/10/2005 5:45:14 PM LEAK True KYRPJUXG\news.google[1] HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Encoding: gzip Content-Length: 26456 ~U:jschmo
http://www.orbitz.com/global/css/elements.css?cache=orbitz20050214 2/4/2005 12:56:55 PM 3/10/2005 5:49:01 PM URL False ICJNEDI2\elements[1].css HTTP/1.1 200 OK Content-Length: 7329 Content-Type: text/css
http://ad.doubleclick.net/adi/N2537.ecommercetimes.com/B1527521.5;sz=728x90;ord=11104947277466?   3/10/2005 5:45:35 PM URL False ICJNEDI2\B1527521[1].htm HTTP/1.0 200 OK Content-Type: text/html Content-Length: 4340 P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PR
E COM NAV OTC NOI DSP COR" ~U:jschmo
http://www.orbitz.com/html.ng/domain=orbitz&channel=home&Section=main&adsize=hometext3&OrbitzCookieN
ame=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&secure=false&
  3/10/2005 5:47:52 PM URL False 8R9KCL4N\domain=orbitz&channel
=home&Section=main&adsize=home
text3&OrbitzCookieName=OSC&orb
itzID=CwOXEaWQle!-1574237785!1
71067271!7001!-1!1110494871232
&secure=false&[1].htm
HTTP/1.1 200 OK Content-Length: 3528 Content-Type: text/html
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/pimages/gresources/Gateway/search2
.gif
11/24/2004 11:29:01 AM 3/10/2005 5:48:37 PM URL False B3B0BSCG\search2[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "116477b442d2c41:105a" Content-Length: 479 ~U:jschmo
http://www.orbitz.com/img/air/matrix/tip_mysearch_o.gif 12/20/2004 5:39:53 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\tip_mysearch_o[1].gif
HTTP/1.1 200 OK ETag: "cc318-166-41c6abf9" Content-Length: 358 Content-Type: image/gif ~U:jschmo
http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-6162369826930049&dt=1110494684187&lmt=
1110494684&format=120x600_as&output=html&url=http%3A%2F%2Fmacslash.org%2Farticle.pl%3Fsid%3D05%2F01%
2F22%2F1852233&color_bg=99AACC&color_text=003366&color_link=000000&color_url=000099&color_border=2D5
893&ad_type=text_image&ref=http%3A%2F%2Fwww.google.com%2Fsearch%3Fhl%3Den%26lr%3D%26q%3Dcracking%2B%
2Blicensing%2Bsoftware&u_h=600&u_w=800&u_ah=570&u_aw=800&u_cd=32&u_tz=-300&u_his=4&u_java=true
  3/10/2005 5:44:46 PM LEAK True ICJNEDI2\CAWHIZ0D.com%2Fsearch
%3Fhl%3Den%26lr%3D%26q%3Dcrack
ing%2B%2Blicensing%2Bsoftware&
u_h=600&u_w=800&u_ah=570&u_aw=
800&u_cd=32&u_tz=-300&u_his=4&
u_java=true
HTTP/1.1 200 OK P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA PVD OTP OUR OTR IND
OTC" Content-Type: text/html; charset=ISO-8859-1 Content-Encoding: gzip Content-Length: 2112 ~U:jschmo
http://ad.reunion.com/code?pid=433&gid=12&gbo=on&rid=1098575180     REDR False    
http://64.4.55.45/tab.bg.off.gif 12/29/2004 1:57:05 PM 3/10/2005 6:09:02 PM URL False 8R9KCL4N\tab.bg.off[1].gif HTTP/1.1 200 OK Content-Length: 176 Content-Type: image/gif ETag: "80162a30d8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/logo3_bnwww.gif 5/28/2003 4:03:43 PM 3/10/2005 5:48:36 PM URL False 8R9KCL4N\logo3_bnwww[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "28eb633d5425c31:105a" Content-Length: 2580 ~U:jschmo
http://www.google.com/search?hl=en&q=cracking+docustodian+licensing+&btnG=Google+Search   3/10/2005 5:44:10 PM LEAK True KYRPJUXG\search[1] HTTP/1.1 200 OK Content-Type: text/html Transfer-Encoding: chunked Content-Encoding: gzip ~U:jschmo
http://images.slashdot.org/topics/topicms.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:22 PM URL False 8R9KCL4N\topicms[1].gif HTTP/1.1 200 OK Keep-Alive: timeout=10, max=995 Content-Length: 1425 Content-Type: image/gif ~U:jschmo
http://saopaulo.grand.hyatt.com/saogh/pics/saogra02p001.jpg 3/11/2004 6:30:16 AM 3/10/2005 5:47:41 PM URL False 8R9KCL4N\saogra02p001[1].jpg HTTP/1.1 200 OK ETag: "14c1bc-22f5-40504dc8" Content-Length: 8949 Keep-Alive: timeout=15, max=94 Content-Type: image/jpeg ~U
:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/tab4_dvd_cold.g
if
1/13/2005 5:04:29 AM 3/10/2005 5:50:30 PM URL False ICJNEDI2\tab4_dvd_cold[2].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "80b4194557f9c41:105a" Content-Length: 343 ~U:jschmo
http://www.freeserials.com/ssi_eng/style.css 5/26/2004 11:27:38 AM 3/10/2005 5:50:58 PM URL False KYRPJUXG\style[1].css HTTP/1.1 200 OK ETag: "af1b2-e63-40b4b76a" Content-Length: 3683 Content-Type: text/css Content-Language: ru ~U:jschmo
http://www.orbitz.com/html.ng/domain=orbitz&channel=air&Section=results&adsize=hotwireBottom&origin=
NYC&dest=SAO&OrbitzCookieName=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&se
cure=false&
  3/10/2005 5:48:33 PM LEAK True 8R9KCL4N\domain=orbitz&channel
=air&Section=results&adsize=ho
twireBottom&origin=NYC&dest=SA
O&OrbitzCookieName=OSC&orbitzI
D=CwOXEaWQle!-1574237785!17106
7271!7001!-1!11[1]
HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html Content-Encoding: deflate ~U:jschmo
http://images.slashdot.org/slc.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:22 PM URL False 8R9KCL4N\slc[1].gif HTTP/1.1 200 OK Keep-Alive: timeout=10, max=997 Content-Length: 122 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/img/corners/12x12_cef_f_br.gif 12/20/2004 5:40:04 AM 3/10/2005 5:49:08 PM URL False B3B0BSCG\12x12_cef_f_br[1].gif
HTTP/1.1 200 OK ETag: "418381-72-41c6ac04" Content-Length: 114 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/bgcolor.gif 11/15/2004 7:38:58 PM 3/10/2005 6:09:02 PM URL False B3B0BSCG\bgcolor[1].gif HTTP/1.1 200 OK Content-Length: 151 Content-Type: image/gif ETag: "07db0a874cbc41:6f4" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/pimages/gresources/btnGoGrn.gif 8/3/2004 10:15:46 AM 3/10/2005 5:50:30 PM URL False B3B0BSCG\btnGoGrn[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "45b4c25e6479c41:9d4" Content-Length: 215 ~U:jschmo
http://64.4.55.45/i.p.delete.d.gif 12/29/2004 1:56:32 PM 3/10/2005 5:53:58 PM URL False KYRPJUXG\i.p.delete.d[1].gif HTTP/1.1 200 OK Content-Length: 306 Content-Type: image/gif ETag: "0b07e1cd8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://hp.msn.com/c/home/flight/d1e2fe.gif 1/11/2005 3:49:09 PM 3/10/2005 5:43:04 PM URL False KYRPJUXG\d1e2fe[1].gif HTTP/1.1 200 OK Content-Length: 35 Content-Type: image/gif ETag: "b2a669ff1ef8c41:89f" P3P: CP="BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo" ~U:jschmo
http://www.apple.com/storenews/linkshare/imac/imac120x90.gif 9/3/2004 4:00:38 AM 3/10/2005 5:44:46 PM URL False B3B0BSCG\imac120x90[1].gif HTTP/1.1 200 OK Content-Length: 5017 Content-Type: image/gif ETag: "1399-413824a6" ~U:jschmo
http://login.passport.net/images/T.gif 1/12/2005 1:45:35 AM 3/10/2005 5:53:17 PM URL False 8R9KCL4N\T[1].gif HTTP/1.1 200 OK Content-Length: 43 Content-Type: image/gif Content-Location: http://login.passport.net/pp25/images/T.gif?roll
rs=11 ETag: "8011785172f8c41:e61" PPServer: PPV: 25 H: BAYPPLOGU2A03 V: 1192 ~U:jschmo
http://www.orbitz.com/img/air/orbot_gradient_bg.gif 12/20/2004 5:39:22 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\orbot_gradient_bg[1].
gif
HTTP/1.1 200 OK ETag: "299108-5a-41c6abda" Content-Length: 90 Content-Type: image/gif ~U:jschmo
http://www.technewsworld.com/images/ico-mboard-lightbulb.gif 3/15/2004 6:25:05 PM 3/10/2005 5:45:37 PM URL False ICJNEDI2\ico-mboard-lightbulb[
1].gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c1e82-430-40563b51" Content-Length: 1072 Keep-Alive: time
out=15, max=83 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/admin3_gtpointup
.gif
6/2/2003 10:03:15 AM 3/10/2005 5:48:39 PM URL False B3B0BSCG\admin3_gtpointup[1].g
if
HTTP/1.0 200 OK Content-Type: image/gif ETag: "e08d15b6f29c31:9d4" Content-Length: 58 ~U:jschmo
http://azerimake.km.ru/img/findcracks.js 11/14/2004 3:48:27 AM 3/10/2005 5:52:52 PM URL False ICJNEDI2\findcracks[1].js HTTP/1.1 200 OK ETag: "dd266-13a-41971bdb" Content-Length: 314 Keep-Alive: timeout=15, max=100 Content-Type: application/x-ja
vascript ~U:jschmo
http://by23fd.bay23.hotmail.msn.com/cgi-bin/HoTMaiL   3/10/2005 6:09:02 PM URL False KYRPJUXG\HoTMaiL[1].htm HTTP/1.1 200 OK Content-Length: 24577 Content-Type: text/html
https://www.orbitz.com/d.gif 12/20/2004 5:38:53 AM 3/10/2005 5:49:06 PM URL False KYRPJUXG\d[1].gif HTTP/1.1 200 OK ETag: "5e05b9-2b-41c6abbd" Content-Length: 43 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/global/css/home_iefix.css 12/20/2004 5:39:20 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\home_iefix[1].css HTTP/1.1 200 OK Content-Length: 3055 Content-Type: text/css
http://news.google.com/news?imgefp=bvDSsexnHP8J&imgurl=news.xinhuanet.com/english/2005-03/10/xinsrc_
4920302100906140108142.jpg
  3/10/2005 5:45:15 PM URL False B3B0BSCG\news[6].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1355 ~U:jschmo
http://www.technewsworld.com/shared/general.css 3/9/2005 7:52:08 PM 3/10/2005 5:45:32 PM URL False 8R9KCL4N\general[2].css HTTP/1.1 200 OK Content-Length: 13205 Content-Type: text/css
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/tab4_gamesgifts_
cold.gif
1/13/2005 5:04:28 AM 3/10/2005 5:48:37 PM URL False 8R9KCL4N\tab4_gamesgifts_cold[
1].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "01e814457f9c41:105a" Content-Length: 485 ~U:jschmo
http://81.176.69.227/cgi-bin/hotlog/img?im=101&v=50574,25650277,12261,5268450,13382,6352130   3/10/2005 5:49:48 PM URL False B3B0BSCG\img[1].gif HTTP/1.1 200 OK P3P: policyref="http://hit4.hotlog.ru:8001/w3c/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI
COM NAV INT DEM STA" Content-Type: image/gif Content-Length: 2719 ~U:jschmo
http://macslash.org/images/ads/turbotax_120x120.gif 1/5/2005 1:01:49 PM 3/10/2005 5:44:43 PM URL False B3B0BSCG\turbotax_120x120[1].g
if
HTTP/1.1 200 OK X-Powered-By: Slash 2.002006 X-Bender: Care to contribute to the Anti-Mugging-You Fund? ETag: "250f91-1c0d-41
dc2b8d" Content-Length: 7181 Content-Type: image/gif ~U:jschmo
http://saopaulo.grand.hyatt.com/owshare/hyatt/worldwide/grandimages/navbar02.gif 7/29/2003 3:22:45 AM 3/10/2005 5:47:41 PM URL False 8R9KCL4N\navbar02[1].gif HTTP/1.1 200 OK ETag: "10c218-19f5-3f2620c5" Content-Length: 6645 Keep-Alive: timeout=15, max=94 Content-Type: image/gif ~U:
jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/logo3_bnwww.gif
5/28/2003 4:03:43 PM 3/10/2005 5:50:30 PM URL False 8R9KCL4N\logo3_bnwww[2].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "28eb633d5425c31:105a" Content-Length: 2580 ~U:jschmo
http://images.barnesandnoble.com/gresources/cleardot.gif 4/7/1997 10:17:00 AM 3/10/2005 5:50:30 PM URL False ICJNEDI2\cleardot[1].gif HTTP/1.1 200 OK Content-Type: image/gif ETag: "056765b5e43bc1:109b" Content-Length: 42 ~U:jschmo
http://www.orbitz.com/global/css/interstitial.css?cache=orbitz20050214 12/20/2004 5:39:20 AM 3/10/2005 5:48:19 PM LEAK True ICJNEDI2\interstitial[1].css HTTP/1.1 200 OK ETag: "83023c-5a-41c6abd8" Content-Type: text/css Content-Encoding: deflate Transfer-Encoding: chunked ~U:js
chmo
http://images.slashdot.org/topics/topiclinuxbiz.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:22 PM URL False ICJNEDI2\topiclinuxbiz[1].gif HTTP/1.1 200 OK Keep-Alive: timeout=10, max=997 Content-Length: 2000 Content-Type: image/gif ~U:jschmo
http://by23fd.bay23.hotmail.msn.com/cgi-bin/HoTMaiL661f7efc   3/10/2005 6:08:57 PM URL False B3B0BSCG\HoTMaiL661f7efc[1] HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html Content-Encoding: gzip X-Powered-By: ASP.NET P3P: CP="BUS
CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" HMServer: H: BAY23-F30.phx.gbl V: WIN2K3 10.05.1504.0009 i D: Mar 4 2005 17:02:52
S: 0 ~U:jschmo
http://saopaulo.grand.hyatt.com/owshare/hyatt/worldwide/grandimages/navbg2a.jpg 8/21/2003 3:35:09 AM 3/10/2005 5:47:41 PM URL False B3B0BSCG\navbg2a[1].jpg HTTP/1.1 200 OK ETag: "10c21c-267c-3f44762d" Content-Length: 9852 Keep-Alive: timeout=15, max=95 Content-Type: image/jpeg ~U
:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/tab4_usedoop_co
ld.gif
1/13/2005 5:04:27 AM 3/10/2005 5:50:30 PM URL False KYRPJUXG\tab4_usedoop_cold[2].
gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "8087e84357f9c41:105a" Content-Length: 432 ~U:jschmo
http://www.orbitz.com/img/home/orbot_bottom_cc.gif 1/26/2005 12:30:18 PM 3/10/2005 5:47:51 PM URL False B3B0BSCG\orbot_bottom_cc[1].gi
f
HTTP/1.1 200 OK ETag: "e8315-3f0-41f7d3aa" Content-Length: 1008 Content-Type: image/gif ~U:jschmo
http://www.freeserials.com/img/off.gif 12/17/2003 9:56:15 AM 3/10/2005 5:50:58 PM URL False B3B0BSCG\off[1].gif HTTP/1.1 200 OK ETag: "af17c-a9-3fe06e8f" Content-Length: 169 Content-Type: image/gif Content-Language: ru ~U:jschmo
http://64.4.55.45/i.p.tools.gif 12/29/2004 1:56:33 PM 3/10/2005 5:53:58 PM URL False KYRPJUXG\i.p.tools[1].gif HTTP/1.1 200 OK Content-Length: 168 Content-Type: image/gif ETag: "8046171dd8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
https://www.orbitz.com/img/security/verisign_footer.gif 12/20/2004 5:40:15 AM 3/10/2005 5:49:07 PM URL False 8R9KCL4N\verisign_footer[2].gi
f
HTTP/1.1 200 OK ETag: "6483b6-d8e-41c6ac0f" Content-Length: 3470 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/html.ng/domain=orbitz&channel=air&Section=results&adsize=1x1&origin=NYC&dest=S
AO&OrbitzCookieName=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&secure=false
&
  3/10/2005 5:48:34 PM LEAK True KYRPJUXG\domain=orbitz&channel
=air&Section=results&adsize=1x
1&origin=NYC&dest=SAO&OrbitzCo
okieName=OSC&orbitzID=CwOXEaWQ
le!-1574237785!171067271!7001!
-1!111049487123[1]
HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html Content-Encoding: deflate ~U:jschmo
http://www.technewsworld.com/images/work/header-background-574x117.gif 1/5/2004 1:07:34 PM 3/10/2005 5:45:35 PM URL False B3B0BSCG\header-background-574
x117[1].gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c1802-47bf-3ff9a7e6" Content-Length: 18367 Keep-Alive: ti
meout=15, max=95 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/Amex_114x39.gif 12/20/2004 5:39:22 AM 3/10/2005 5:47:52 PM URL False KYRPJUXG\Amex_114x39[1].gif HTTP/1.1 200 OK ETag: "28c226-d8b-41c6abda" Content-Length: 3467 Content-Type: image/gif ~U:jschmo
http://hp.msn.com/c/home/flight/1px-nav.gif 1/18/2005 5:49:13 PM 3/10/2005 5:43:04 PM URL False B3B0BSCG\1px-nav[1].gif HTTP/1.1 200 OK Content-Length: 51 Content-Type: image/gif ETag: "6038c1eeaffdc41:8b2" P3P: CP="BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo" ~U:jschmo
http://slashdot.org/   3/10/2005 5:46:02 PM URL False KYRPJUXG\slashdot[1].htm HTTP/1.1 200 OK Content-Length: 55434 Content-Type: text/html
http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-6162369826930049&dt=1110494684187&lmt=
1110494684&format=120x600_as&output=html&url=http%3A%2F%2Fmacslash.org%2Farticle.pl%3Fsid%3D05%2F01%
2F22%2F1852233&color_bg=99AACC&color_text=003366&color_link=000000&color_url=000099&color_border=2D5
893&ad_type=text_image&ref=http%3A%2F%2Fwww.google.com%2Fsearch%3Fhl%3Den%26lr%3D%26q%3Dcracking%2B%
2Blicensing%2Bsoftware&u_h=600&u_w=800&u_ah=570&u_aw=800&u_cd=32&u_tz=-300&u_his=4&u_java=true
  3/10/2005 5:44:46 PM URL False KYRPJUXG\CA6NG1UB.htm HTTP/1.1 200 OK Content-Length: 7460 Content-Type: text/html
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/pImages/popups/slider/2005/030105_
bhg_button.gif
2/25/2005 1:51:20 PM 3/10/2005 5:48:38 PM URL False 8R9KCL4N\030105_bhg_button[1].
gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "624dc4fe6a1bc51:9d4" Content-Length: 733 ~U:jschmo
http://www.findcracks.com/img/start.gif 7/27/2004 6:05:10 AM 3/10/2005 5:52:52 PM URL False KYRPJUXG\start[1].gif HTTP/1.1 200 OK ETag: "15e10d-1b9-410628d6" Content-Length: 441 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/air/logos/MX_noclick.gif 12/20/2004 5:39:42 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\MX_noclick[1].gif HTTP/1.1 200 OK ETag: "6d4e67-2b7-41c6abee" Content-Length: 695 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/img/global/nav/tab_cs.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:06 PM URL False B3B0BSCG\tab_cs[1].gif HTTP/1.1 200 OK ETag: "5581a7-38d-41c6ac06" Content-Length: 909 Content-Type: image/gif ~U:jschmo
http://www.technewsworld.com/shared/general.js 3/7/2005 5:52:18 PM 3/10/2005 5:45:31 PM LEAK True ICJNEDI2\general[1].js HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "289a9b1-4721-422cdb22" Keep-Alive: timeout=15, max=97 Cont
ent-Type: application/x-javascript Content-Encoding: gzip Content-Length: 5547 ~U:jschmo
http://images.reunion.com/125/1045.jpg 2/1/2005 4:58:06 PM 3/10/2005 5:53:40 PM URL False B3B0BSCG\1045[1].jpg HTTP/1.1 200 OK ETag: "3be3a-3ada-3a433780" Content-Length: 15066 Content-Type: image/jpeg ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/tab4_dvd_cold.gi
f
1/13/2005 5:04:29 AM 3/10/2005 5:48:37 PM URL False ICJNEDI2\tab4_dvd_cold[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "80b4194557f9c41:105a" Content-Length: 343 ~U:jschmo
http://www.technewsworld.com/shared/tnwscreen.css 3/9/2005 7:46:31 PM 3/10/2005 5:45:29 PM LEAK True KYRPJUXG\tnwscreen[1].css HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "27e06f7-15a7-422f98e7" Keep-Alive: timeout=15, max=99 Cont
ent-Type: text/css Content-Encoding: gzip Content-Length: 1359 ~U:jschmo
http://macslash.org/images/slashheadbottom.gif 6/30/2000 2:02:54 AM 3/10/2005 5:44:42 PM URL False 8R9KCL4N\slashheadbottom[1].gi
f
HTTP/1.1 200 OK X-Powered-By: Slash 2.002006 X-Bender: Bender's a genius! ETag: "4891d-28d-395c380e" Content-Length: 653 Cont
ent-Type: image/gif ~U:jschmo
http://saopaulo.grand.hyatt.com/owshare/hyatt/worldwide/grandimages/pixel.gif 3/1/2002 8:51:26 AM 3/10/2005 5:47:41 PM URL False 8R9KCL4N\pixel[1].gif HTTP/1.1 200 OK ETag: "10c240-2b-3c7f875e" Content-Length: 43 Keep-Alive: timeout=15, max=97 Content-Type: image/gif ~U:jsch
mo
http://images.barnesandnoble.com/pimages/iframe/iframeKMP.js 12/22/2004 3:08:56 PM 3/10/2005 5:50:30 PM URL False ICJNEDI2\iframeKMP[1].js HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "68c5dd1062e8c41:109b" Content-Length: 4769 ~U:jschmo
http://images.barnesandnoble.com/PImages/js/slider.js 2/7/2005 2:33:36 PM 3/10/2005 5:48:36 PM URL False KYRPJUXG\slider[1].js HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "9a7413eb4bdc51:918" Content-Length: 1332 ~U:jschmo
http://www.google.com/search?hl=en&lr=&q=cracking++licensing+software   3/10/2005 5:44:21 PM LEAK True 8R9KCL4N\search[1] HTTP/1.1 200 OK Content-Type: text/html Transfer-Encoding: chunked Content-Encoding: gzip ~U:jschmo
http://images.slashdot.org/topics/topichandhelds.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:22 PM URL False ICJNEDI2\topichandhelds[1].gif
HTTP/1.1 200 OK Keep-Alive: timeout=10, max=999 Content-Length: 2597 Content-Type: image/gif ~U:jschmo
http://images.slashdot.org/topics/topicbusiness.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:22 PM URL False KYRPJUXG\topicbusiness[1].gif HTTP/1.1 200 OK Keep-Alive: timeout=10, max=998 Content-Length: 1457 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/i.1EF9B0.gif 11/15/2004 7:39:36 PM 3/10/2005 6:08:57 PM URL False ICJNEDI2\i.1EF9B0[1].gif HTTP/1.1 200 OK Content-Length: 249 Content-Type: image/gif ETag: "0d456bf74cbc41:6fc" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://news.google.com/news?imgefp=6t1jJdPcFo8J&imgurl=www.scidev.net/scidev_images/SE_Asia_mosquito
.jpg
  3/10/2005 5:45:15 PM URL False KYRPJUXG\news[5].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1533 ~U:jschmo
http://www.orbitz.com/img/buttons/find_75x21.gif 12/20/2004 5:39:59 AM 3/10/2005 5:47:51 PM URL False 8R9KCL4N\find_75x21[1].gif HTTP/1.1 200 OK ETag: "17c1f3-38d-41c6abff" Content-Length: 909 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/admin3_gtpointu
p.gif
6/2/2003 10:03:15 AM 3/10/2005 5:50:30 PM URL False 8R9KCL4N\admin3_gtpointup[1].g
if
HTTP/1.0 200 OK Content-Type: image/gif ETag: "e08d15b6f29c31:9d4" Content-Length: 58 ~U:jschmo
http://www.orbitz.com/App/PerformLFSSearchRequest?z=aptq&r=10&lastPage=interstitial     REDR False    
http://www.orbitz.com/App/PrepareClickFlightMatrix?version=1&xcoord=1&ycoord=2&z=aq1l&r=29     REDR False    
http://81.176.69.241/cgi-bin/hotlog/img?im=102&v=1674,3919357,661,1512910,684,1410319   3/10/2005 5:50:52 PM URL False B3B0BSCG\img[2].gif HTTP/1.1 200 OK P3P: policyref="http://hit4.hotlog.ru:8001/w3c/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI
COM NAV INT DEM STA" Content-Type: image/gif Content-Length: 2493 ~U:jschmo
http://www.freeserials.com/serials/search.php?q=docustodian&query=Search+%21   3/10/2005 5:50:58 PM URL False 8R9KCL4N\search[3].htm HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=WINDOWS-1251 Content-Language: ru ~U:jschmo
https://www.orbitz.com/img/global/callout_grad.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:06 PM URL False ICJNEDI2\callout_grad[1].gif HTTP/1.1 200 OK ETag: "47420d-67-41c6ac06" Content-Length: 103 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/security/truste_footer.gif 12/20/2004 5:40:15 AM 3/10/2005 5:49:01 PM URL False B3B0BSCG\truste_footer[1].gif HTTP/1.1 200 OK ETag: "5181d7-853-41c6ac0f" Content-Length: 2131 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/admin4_help.gif
1/4/2005 3:20:59 PM 3/10/2005 5:50:30 PM URL False ICJNEDI2\admin4_help[2].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "80724e79af2c41:105a" Content-Length: 159 ~U:jschmo
http://hp.msn.com/1V/WHE3!FNR8_1ZVX3SSPQ[AC.jpg 3/9/2005 9:35:33 PM 3/10/2005 5:43:04 PM URL False B3B0BSCG\WHE3!FNR8_1ZVX3SSPQ[A
C[1].jpg
HTTP/1.1 200 OK Content-Length: 2014 Content-Type: image/jpeg ETag: "81ae4dd51925c51:8b2" P3P: CP="BUS CUR CONo FIN IVDo ONL
OUR PHY SAMo TELo" ~U:jschmo
https://www.orbitz.com/global/css/elements.css 2/4/2005 12:56:55 PM 3/10/2005 5:49:05 PM LEAK True 8R9KCL4N\elements[2].css HTTP/1.1 200 OK ETag: "830249-14a1-4203b767" Content-Type: text/css Content-Encoding: deflate Transfer-Encoding: chunked ~U:
jschmo
http://www.orbitz.com/global/js/quick_search.js?cache=20041108 1/25/2005 2:52:06 PM 3/10/2005 5:47:51 PM URL False B3B0BSCG\quick_search[1].js HTTP/1.1 200 OK Content-Length: 15236 Content-Type: application/x-javascript
http://www.technewsworld.com/images/work/icon_related_20x14.gif 1/5/2004 1:07:34 PM 3/10/2005 5:45:36 PM URL False 8R9KCL4N\icon_related_20x14[1]
.gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c1821-4d-3ff9a7e6" Content-Length: 77 Keep-Alive: timeout
=15, max=88 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/images/8180000/8188722.gif 8/26/2004 2:58:29 PM 3/10/2005 5:48:38 PM URL False ICJNEDI2\8188722[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "7ae6cfac9e8bc41:1049" Content-Length: 2898 ~U:jschmo
http://www.technewsworld.com/shared/tnwscreen.css 3/9/2005 7:46:31 PM 3/10/2005 5:45:29 PM URL False KYRPJUXG\tnwscreen[2].css HTTP/1.1 200 OK Content-Length: 5543 Content-Type: text/css
http://www.orbitz.com/img/air/logos/UA_noclick.gif 12/20/2004 5:39:48 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\UA_noclick[1].gif HTTP/1.1 200 OK ETag: "2604fd-310-41c6abf4" Content-Length: 784 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/img/global/nav/bg_right_bigtabs.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:05 PM URL False 8R9KCL4N\bg_right_bigtabs[1].g
if
HTTP/1.1 200 OK ETag: "810214-a9-41c6ac06" Content-Length: 169 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/i.p.cal.meet.req.gif 11/15/2004 7:39:36 PM 3/10/2005 6:09:02 PM URL False B3B0BSCG\i.p.cal.meet.req[1].g
if
HTTP/1.1 200 OK Content-Length: 248 Content-Type: image/gif ETag: "0d456bf74cbc41:6fc" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://www.orbitz.com/img/corners/6x6_cf7_transparent.gif 12/20/2004 5:40:04 AM 3/10/2005 5:47:51 PM URL False ICJNEDI2\6x6_cf7_transparent[1
].gif
HTTP/1.1 200 OK ETag: "4f046c-3a-41c6ac04" Content-Length: 58 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/tab4_usedoop_col
d.gif
1/13/2005 5:04:27 AM 3/10/2005 5:48:37 PM URL False KYRPJUXG\tab4_usedoop_cold[1].
gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "8087e84357f9c41:105a" Content-Length: 432 ~U:jschmo
http://ad.doubleclick.net/adi/N815.ecommercetimes.com/B1555812.3;sz=120x600;ord=11104947275322?   3/10/2005 5:45:38 PM URL False B3B0BSCG\B1555812[1].htm HTTP/1.0 200 OK Content-Type: text/html Content-Length: 4465 P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PR
E COM NAV OTC NOI DSP COR" ~U:jschmo
http://www.freeserials.com/ssi_eng/menu.js 12/17/2003 9:58:02 AM 3/10/2005 5:50:57 PM URL False KYRPJUXG\menu[1].js HTTP/1.1 200 OK ETag: "af1a3-81-3fe06efa" Content-Length: 129 Content-Type: application/x-javascript Content-Language: ru ~U
:jschmo
http://64.4.55.45/i.p.folder.drafts.gif 12/29/2004 1:56:32 PM 3/10/2005 6:09:02 PM URL False B3B0BSCG\i.p.folder.drafts[1].
gif
HTTP/1.1 200 OK Content-Length: 240 Content-Type: image/gif ETag: "0b07e1cd8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://www.technewsworld.com/images/rw6303/cebit-samsung-smartphone-sony.jpg 3/10/2005 5:20:11 PM 3/10/2005 5:45:36 PM URL False ICJNEDI2\cebit-samsung-smartph
one-sony[1].jpg
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "4230c81b" Content-Length: 9507 Keep-Alive: timeout=15, max
=94 Content-Type: image/jpeg ~U:jschmo
http://www.orbitz.com/html.ng/domain=orbitz&channel=home&Section=main&adsize=1x1&OrbitzCookieName=OS
C&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&secure=false&
  3/10/2005 5:47:52 PM URL False 8R9KCL4N\domain=orbitz&channel
=home&Section=main&adsize=1x1&
OrbitzCookieName=OSC&orbitzID=
CwOXEaWQle!-1574237785!1710672
71!7001!-1!1110494871232&secur
e=false&[1].htm
HTTP/1.1 200 OK Content-Length: 2620 Content-Type: text/html
http://images.slashdot.org/topics/topicwireless.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:22 PM URL False B3B0BSCG\topicwireless[1].gif HTTP/1.1 200 OK Keep-Alive: timeout=10, max=1000 Content-Length: 1045 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/i.p.folder.sent.gif 11/15/2004 7:39:41 PM 3/10/2005 6:09:02 PM URL False KYRPJUXG\i.p.folder.sent[1].gi
f
HTTP/1.1 200 OK Content-Length: 162 Content-Type: image/gif ETag: "80c451c274cbc41:6c2" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/admin4_wishlist
.gif
1/4/2005 3:20:59 PM 3/10/2005 5:50:30 PM URL False 8R9KCL4N\admin4_wishlist[2].gi
f
HTTP/1.0 200 OK Content-Type: image/gif ETag: "80724e79af2c41:9d4" Content-Length: 230 ~U:jschmo
http://www.orbitz.com/img/orbots/near_address.gif 12/20/2004 5:40:14 AM 3/10/2005 5:47:51 PM URL False ICJNEDI2\near_address[1].gif HTTP/1.1 200 OK ETag: "650200-4c3-41c6ac0e" Content-Length: 1219 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/pimages/gresources/linePagination
.gif
8/10/2004 9:56:25 AM 3/10/2005 5:50:30 PM URL False ICJNEDI2\linePagination[1].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "32f76ad3e17ec41:c42" Content-Length: 44 ~U:jschmo
http://www.orbitz.com/img/global/interstitial/logo_one_moment.gif 12/20/2004 5:40:06 AM 3/10/2005 5:48:19 PM URL False 8R9KCL4N\logo_one_moment[1].gi
f
HTTP/1.1 200 OK ETag: "404362-6b8-41c6ac06" Content-Length: 1720 Content-Type: image/gif ~U:jschmo
http://www.google.com/nav_first.gif 9/23/2004 1:44:19 PM 3/10/2005 5:47:33 PM URL False B3B0BSCG\nav_first[1].gif HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 1033 ~U:jschmo
http://www.orbitz.com/img/air/logos/UA_small.gif 12/20/2004 5:39:48 AM 3/10/2005 5:48:34 PM URL False 8R9KCL4N\UA_small[1].gif HTTP/1.1 200 OK ETag: "260452-232-41c6abf4" Content-Length: 562 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/html.ng/domain=orbitz&channel=home&Section=main&adsize=hometext1&OrbitzCookieN
ame=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&secure=false&
  3/10/2005 5:47:52 PM URL False KYRPJUXG\domain=orbitz&channel
=home&Section=main&adsize=home
text1&OrbitzCookieName=OSC&orb
itzID=CwOXEaWQle!-1574237785!1
71067271!7001!-1!1110494871232
&secure=false&[1].htm
HTTP/1.1 200 OK Content-Length: 3384 Content-Type: text/html
http://hp.msn.com/29/HT12X1_50+4UDIW5_K4X`E.jpg 3/10/2005 1:39:35 PM 3/10/2005 5:43:04 PM URL False ICJNEDI2\HT12X1_50+4UDIW5_K4X`
E[1].jpg
HTTP/1.1 200 OK Content-Length: 9037 Content-Type: image/jpeg ETag: "fb502c82a025c51:88d" P3P: CP="BUS CUR CONo FIN IVDo ONL
OUR PHY SAMo TELo" ~U:jschmo
https://www.orbitz.com/Secure/SubmitFlightSelection?version=1&selectIndex=0&action=purchase&carrier=
AV&z=bcec&r=cq
  3/10/2005 5:49:05 PM URL False KYRPJUXG\SubmitFlightSelection
[1].htm
HTTP/1.1 200 OK Content-Length: 16743 Content-Type: text/html
http://by23fd.bay23.hotmail.msn.com/cgi-bin/HoTMaiL?curmbox=F000000001&a=cec03517f01c559b0265ea3012e
5ed60
  3/10/2005 6:08:51 PM LEAK True 8R9KCL4N\HoTMaiL[1] HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html Content-Encoding: gzip X-Powered-By: ASP.NET P3P: CP="BUS
CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" HMServer: H: BAY23-F39.phx.gbl V: WIN2K3 10.05.1504.0009 i D: Mar 4 2005 17:02:52
S: 0 ~U:jschmo
http://www.orbitz.com/img/global/nav/tab_d.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\tab_d[1].gif HTTP/1.1 200 OK ETag: "7f836f-238-41c6ac06" Content-Length: 568 Content-Type: image/gif ~U:jschmo
http://www.technewsworld.com/images/work/icon_send_20x14.gif 1/5/2004 1:07:34 PM 3/10/2005 5:45:36 PM URL False 8R9KCL4N\icon_send_20x14[1].gi
f
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c1860-4c-3ff9a7e6" Content-Length: 76 Keep-Alive: timeout
=15, max=91 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/images/9100000/9109926.gif 2/24/2005 3:12:09 PM 3/10/2005 5:48:38 PM URL False 8R9KCL4N\9109926[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "2c9c531ead1ac51:105a" Content-Length: 7952 ~U:jschmo
http://www.orbitz.com/img/air/logos/RG_noclick.gif 12/20/2004 5:39:46 AM 3/10/2005 5:49:01 PM URL False B3B0BSCG\RG_noclick[1].gif HTTP/1.1 200 OK ETag: "390737-33e-41c6abf2" Content-Length: 830 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/img/global/nav/tab_cr.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:05 PM URL False ICJNEDI2\tab_cr[1].gif HTTP/1.1 200 OK ETag: "640318-2dd-41c6ac06" Content-Length: 733 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/i.p.white.b.gif 11/15/2004 7:39:42 PM 3/10/2005 6:08:45 PM URL False KYRPJUXG\i.p.white.b[1].gif HTTP/1.1 200 OK Content-Length: 55 Content-Type: image/gif ETag: "05beac274cbc41:6f4" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR P
HY SAMo TELo ~U:jschmo
http://64.4.55.45/tab.bg.sln.gif 11/15/2004 7:40:09 PM 3/10/2005 6:09:02 PM URL False ICJNEDI2\tab.bg.sln[1].gif HTTP/1.1 200 OK Content-Length: 46 Content-Type: image/gif ETag: "803a2d374cbc41:6f4" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR P
HY SAMo TELo ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/tab4_home_hot.gi
f
1/13/2005 5:04:28 AM 3/10/2005 5:48:37 PM URL False B3B0BSCG\tab4_home_hot[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "01e814457f9c41:918" Content-Length: 227 ~U:jschmo
http://by23fd.bay23.hotmail.msn.com/cgi-bin/premail/5238   3/10/2005 6:08:41 PM URL False ICJNEDI2\5238[1].htm HTTP/1.1 200 OK Content-Length: 19867 Content-Type: text/html
http://news.google.com/images/news.gif 9/23/2004 1:42:07 PM 3/10/2005 5:45:14 PM URL False 8R9KCL4N\news[1].gif HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 6700 ~U:jschmo
http://64.4.55.45/tab.bg.on.gif 11/15/2004 7:40:09 PM 3/10/2005 6:09:02 PM URL False B3B0BSCG\tab.bg.on[1].gif HTTP/1.1 200 OK Content-Length: 49 Content-Type: image/gif ETag: "803a2d374cbc41:6f4" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR P
HY SAMo TELo ~U:jschmo
http://www.technewsworld.com/shared/general.js 3/7/2005 5:52:18 PM 3/10/2005 5:45:31 PM URL False ICJNEDI2\general[2].js HTTP/1.1 200 OK Content-Length: 18209 Content-Type: application/x-javascript
http://search.barnesandnoble.com/include/quicksearch.asp?userid=pv4dUK5Bu2538e031d     REDR False    
http://64.4.55.45/i.p.arr.left.gif 11/15/2004 7:39:36 PM 3/10/2005 6:09:02 PM URL False B3B0BSCG\i.p.arr.left[1].gif HTTP/1.1 200 OK Content-Length: 56 Content-Type: image/gif ETag: "0d456bf74cbc41:6fc" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR P
HY SAMo TELo ~U:jschmo
https://www.orbitz.com/global/js/global.js 1/24/2005 6:01:46 PM 3/10/2005 5:49:05 PM URL False ICJNEDI2\global[2].js HTTP/1.1 200 OK Content-Length: 21519 Content-Type: application/x-javascript
http://hp.msn.com/c/hotmail/en-US.gif 12/13/2004 6:53:06 PM 3/10/2005 5:53:17 PM URL False B3B0BSCG\en-US[1].gif HTTP/1.1 200 OK Content-Length: 913 Content-Type: image/gif ETag: "528cae46ee1c41:89f" P3P: CP="BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo" ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/vcart4_btn_chec
kout.gif
1/3/2005 4:50:31 PM 3/10/2005 5:50:30 PM URL False KYRPJUXG\vcart4_btn_checkout[1
].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "806db03edef1c41:918" Content-Length: 787 ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/vcart4_topbot_r
ule.gif
1/12/2005 11:43:23 AM 3/10/2005 5:50:30 PM URL False 8R9KCL4N\vcart4_topbot_rule[1]
.gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "e0e978d4c5f8c41:105a" Content-Length: 62 ~U:jschmo
http://www.orbitz.com/img/home/qs/qs_arrow.gif 12/20/2004 5:40:11 AM 3/10/2005 5:47:51 PM URL False KYRPJUXG\qs_arrow[1].gif HTTP/1.1 200 OK ETag: "70409a-d8-41c6ac0b" Content-Length: 216 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/8060000/8065689.gif 8/11/2004 12:42:29 PM 3/10/2005 5:49:23 PM URL False KYRPJUXG\8065689[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "aebdef30c27fc41:93f" Content-Length: 1640 ~U:jschmo
http://www.orbitz.com/img/global/interstitial/dots_20031030.gif 12/20/2004 5:40:06 AM 3/10/2005 5:48:19 PM URL False B3B0BSCG\dots_20031030[1].gif HTTP/1.1 200 OK ETag: "5a4114-851-41c6ac06" Content-Length: 2129 Content-Type: image/gif ~U:jschmo
http://img-cdn.mediaplex.com/ads/525/26092/PVday_free_VI660_20_0_728x90.gif 2/11/2005 7:51:13 PM 3/10/2005 6:08:58 PM URL False 8R9KCL4N\PVday_free_VI660_20_0
_728x90[1].gif
HTTP/1.1 200 OK ETag: "1265c5-4467-cfca0240" Content-Length: 17511 Content-Type: image/gif ~U:jschmo
http://macslash.org/images/ads/100x28_team_one_logo.gif 9/14/2004 10:46:47 PM 3/10/2005 5:44:52 PM URL False 8R9KCL4N\100x28_team_one_logo[
1].gif
HTTP/1.1 200 OK X-Powered-By: Slash 2.002006 X-Fry: I'm gonna be a science fiction hero, just like Uhura, or Captain Janeway,
or Xena! ETag: "1d68fb-6fb-4147ad17" Content-Length: 1787 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/air/dotted_line.gif 12/20/2004 5:39:22 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\dotted_line[1].gif HTTP/1.1 200 OK ETag: "109036-2c-41c6abda" Content-Length: 44 Content-Type: image/gif ~U:jschmo
http://hp.msn.com/css/home/hp.css?v=18 2/14/2005 7:23:34 PM 3/10/2005 5:43:03 PM URL False ICJNEDI2\hp[1].css HTTP/1.1 200 OK Content-Length: 10856 Content-Type: text/css ETag: "e8b2ab95f412c51:88d" P3P: CP="BUS CUR CONo FIN IVDo ONL O
UR PHY SAMo TELo" ~U:jschmo
http://www.freeserials.com/ssi_eng/popup.js 3/5/2005 10:54:36 PM 3/10/2005 5:50:58 PM URL False ICJNEDI2\popup[1].js HTTP/1.1 200 OK ETag: "af237-6bb-422a7efc" Content-Length: 1723 Content-Type: application/x-javascript Content-Language: ru
~U:jschmo
http://www.orbitz.com/img/air/tip_integration/matrix_tr_8_10_5ae.gif 12/20/2004 5:39:58 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\matrix_tr_8_10_5ae[1]
.gif
HTTP/1.1 200 OK ETag: "3a035d-6c-41c6abfe" Content-Length: 108 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/air/logos/NW_noclick.gif 12/20/2004 5:39:42 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\NW_noclick[1].gif HTTP/1.1 200 OK ETag: "63c5cc-380-41c6abee" Content-Length: 896 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/global/nav/bg_right_bigtabs.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\bg_right_bigtabs[1].g
if
HTTP/1.1 200 OK ETag: "7f83de-a9-41c6ac06" Content-Length: 169 Content-Type: image/gif ~U:jschmo
http://www.technewsworld.com/images/new/icon-inline-search.gif 1/5/2004 1:07:32 PM 3/10/2005 5:45:36 PM URL False B3B0BSCG\icon-inline-search[1]
.gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c15f0-22f-3ff9a7e4" Content-Length: 559 Keep-Alive: timeo
ut=15, max=92 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/corners/10x10_f_cf7_br.gif 12/20/2004 5:40:04 AM 3/10/2005 5:47:52 PM URL False KYRPJUXG\10x10_f_cf7_br[1].gif
HTTP/1.1 200 OK ETag: "624392-75-41c6ac04" Content-Length: 117 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/pImages/resources/gateway/2005_03/
030905_oop_f2.gif
3/9/2005 4:17:44 PM 3/10/2005 5:48:38 PM URL False KYRPJUXG\030905_oop_f2[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "8e2726fed24c51:8ea" Content-Length: 9392 ~U:jschmo
http://www.orbitz.com/img/air/logos/00_noclick.gif 12/20/2004 5:39:22 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\00_noclick[1].gif HTTP/1.1 200 OK ETag: "260b05-2fc-41c6abda" Content-Length: 764 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/img/global/nav/tab_fl.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:05 PM URL False ICJNEDI2\tab_fl[2].gif HTTP/1.1 200 OK ETag: "26423b-2c9-41c6ac06" Content-Length: 713 Content-Type: image/gif ~U:jschmo
http://hp.msn.com/c/hotmail/env.jpg 12/10/2004 12:46:38 PM 3/10/2005 5:53:17 PM URL False KYRPJUXG\env[1].jpg HTTP/1.1 200 OK Content-Length: 1376 Content-Type: image/jpeg ETag: "a934f33e0dec41:89b" P3P: CP="BUS CUR CONo FIN IVDo ONL O
UR PHY SAMo TELo" ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/tab4_books_hot.
gif
1/13/2005 5:04:30 AM 3/10/2005 5:50:30 PM URL False ICJNEDI2\tab4_books_hot[1].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "04bb24557f9c41:918" Content-Length: 253 ~U:jschmo
http://news.google.com/news?imgefp=TAmO0zME_RYJ&imgurl=www.masnet.org/cms_article_files/article_2256
/pic1.jpg
  3/10/2005 5:45:14 PM URL False B3B0BSCG\news[1].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1266 ~U:jschmo
http://www.technewsworld.com/images/work/arrow_mdgrey_929292_7x11.gif 4/20/2004 5:31:00 PM 3/10/2005 5:45:37 PM URL False B3B0BSCG\arrow_mdgrey_929292_7
x11[1].gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "9e60f1-41-40859694" Content-Length: 65 Keep-Alive: timeout
=15, max=81 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/7520000/7522139.gif 3/18/2004 2:26:46 PM 3/10/2005 5:49:23 PM URL False B3B0BSCG\7522139[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "22c8a8f31edc41:9d4" Content-Length: 2756 ~U:jschmo
http://macslash.org/images/digitalforest_logo.gif 7/24/2003 12:12:19 AM 3/10/2005 5:44:36 PM URL False 8R9KCL4N\digitalforest_logo[1]
.gif
HTTP/1.1 200 OK X-Powered-By: Slash 2.002006 X-Fry: I heard one time you single-handedly defeated a hoard of rampaging someth
ings in the something something system. ETag: "4af31-383-3f1f5ca3" Content-Length: 899 Content-Type: image/gif ~U:jschmo
http://www.google.com/search?hl=en&q=sao+paulo+hotels   3/10/2005 5:47:33 PM LEAK True 8R9KCL4N\search[1] HTTP/1.1 200 OK Content-Type: text/html Transfer-Encoding: chunked Content-Encoding: gzip ~U:jschmo
http://spe.atdmt.com/b/MSMSNMATCUPH/728x90_uopoff_purplestripes.gif   3/10/2005 6:09:02 PM URL False B3B0BSCG\728x90_uopoff_purples
tripes[1].gif
HTTP/1.1 200 OK Allow: GET Content-Length: 24649 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/tab.separator.on.l.gif 12/29/2004 1:57:05 PM 3/10/2005 6:09:02 PM URL False 8R9KCL4N\tab.separator.on.l[1]
.gif
HTTP/1.1 200 OK Content-Length: 52 Content-Type: image/gif ETag: "80162a30d8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/qsearch4_search
.gif
1/4/2005 2:16:04 PM 3/10/2005 5:50:30 PM URL False ICJNEDI2\qsearch4_search[1].gi
f
HTTP/1.0 200 OK Content-Type: image/gif ETag: "0328ad591f2c41:9d4" Content-Length: 262 ~U:jschmo
http://sc.msn.com/,!/08LW8-XPW53]I{35C2X}C.jpg 3/9/2005 5:41:24 PM 3/10/2005 5:53:36 PM URL False B3B0BSCG\08LW8-XPW53]I{35C2X}C
[1].jpg
HTTP/1.1 200 OK P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" Content-Type: image/jpeg ETag: "87e5db1ff924c51:8b2" Co
ntent-Length: 1523 ~U:jschmo
http://m2.doubleclick.net/987526/Intel_XDA_Performance_728x90.swf?clickTag=http%3A//ad.doubleclick.n
et/click%253Bh%3Dv3%7C3237%7C3%7C0%7C%252a%7Cd%253B14477533%253B3-0%253B0%253B10980499%253B3454-728%
7C90%253B9166196%7C9184092%7C1%253B%253B%257Esscs%253D%253fhttp%3A//www-1.ibm.com/servers/eserver/xs
eries/xcampaigns/campaign1.html%3Fca%3Dmigration%26met%3Dconsider_xSeries%26me%3Dbanner_Campaign%3D1
04AV09W
2/28/2005 2:43:55 PM 3/10/2005 5:45:50 PM URL False ICJNEDI2\CANJ5XKM.swf HTTP/1.1 200 OK Content-Length: 17028 Content-Type: application/x-shockwave-flash ~U:jschmo
http://64.4.55.45/i.p.cal.task.gif 11/15/2004 7:39:39 PM 3/10/2005 6:09:02 PM URL False 8R9KCL4N\i.p.cal.task[1].gif HTTP/1.1 200 OK Content-Length: 249 Content-Type: image/gif ETag: "809720c174cbc41:6c2" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://pagead2.googlesyndication.com/pagead/show_ads.js 3/3/2005 9:44:24 PM 3/10/2005 5:44:44 PM URL False 8R9KCL4N\show_ads[2].js HTTP/1.1 200 OK Content-Length: 9224 Content-Type: text/javascript
http://login.passport.net/1033/L/PPIE.css 1/12/2005 1:45:32 AM 3/10/2005 5:53:12 PM URL False ICJNEDI2\PPIE[1].css HTTP/1.1 200 OK Content-Length: 3638 Content-Type: text/css Content-Location: http://login.passport.net/pp25/1033/L/PPIE.css?
rollrs=11 ETag: "04eae4f72f8c41:938" PPServer: PPV: 25 H: BAYPPLOGU2B04 V: 1192 ~U:jschmo
http://www.orbitz.com/img/orbots/cal_btn.gif 12/20/2004 5:40:14 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\cal_btn[1].gif HTTP/1.1 200 OK ETag: "4043e5-2f9-41c6ac0e" Content-Length: 761 Content-Type: image/gif ~U:jschmo
http://news.google.com/news?imgefp=2w2ENbpR4C0J&imgurl=www.technewsworld.com/images/rw6141/microsoft
-istanbul-software.jpg
  3/10/2005 5:45:15 PM URL False ICJNEDI2\news[3].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1603 ~U:jschmo
http://saopaulo.grand.hyatt.com/owshare/hyatt/worldwide/grandimages/header03.swf?txtext= 7/17/2003 9:04:44 AM 3/10/2005 5:47:41 PM URL False KYRPJUXG\header03[1].swf HTTP/1.1 200 OK ETag: "10c233-d77d-3f169eec" Content-Length: 55165 Keep-Alive: timeout=15, max=97 Content-Type: application/x
-shockwave-flash ~U:jschmo
http://by23fd.bay23.hotmail.msn.com/cgi-bin/dasp/EN/hotmail___100000434.js   3/10/2005 6:08:45 PM LEAK True 8R9KCL4N\hotmail___100000434[1
].js
HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: application/x-javascript; charset=iso-8859-1 Content-Encoding: gzip
X-Powered-By: ASP.NET P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" HMServer: H: BAY23-F13.phx.gbl V: WIN2K3 10.05.1
504.0009 i D: Mar 4 2005 17:02:52 S: 0 ~U:jschmo
http://www.google.com/intl/en/images/logo.gif 9/23/2004 1:42:04 PM 3/10/2005 5:47:17 PM URL False ICJNEDI2\logo[1].gif HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 8558 ~U:jschmo
http://ad.linksynergy.com/fs-bin/show?id=OX36Q3imQxc&bids=77305.10000522&type=3&subid=0   3/10/2005 5:44:52 PM URL False ICJNEDI2\show[2].gif HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/air/logos/CM_small.gif 12/20/2004 5:39:32 AM 3/10/2005 5:48:33 PM URL False KYRPJUXG\CM_small[1].gif HTTP/1.1 200 OK ETag: "6d478b-f3-41c6abe4" Content-Length: 243 Content-Type: image/gif ~U:jschmo
http://www.findcracks.com/?q=docustodian+licensing   3/10/2005 5:52:52 PM URL False KYRPJUXG\findcracks[1].htm HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html ~U:jschmo
http://crl.microsoft.com/pki/crl/products/CodeSignPCA.crl 7/9/2004 6:02:48 PM 7/18/2004 10:30:15 PM URL False B3B0BSCG\CodeSignPCA[1].crl HTTP/1.1 200 OK Content-Length: 556 Content-Type: application/pkix-crl ETag: "0347278066c41:27a" ~U:system
http://global.msads.net/ads/55716/0000055716_000000000000000146003.gif 2/1/2005 12:32:41 PM 3/10/2005 6:08:52 PM URL False B3B0BSCG\0000055716_0000000000
00000146003[1].gif
HTTP/1.1 200 OK Content-Length: 1151 Content-Type: image/gif ETag: "8082d47848c51:0000" PICS-Label: (PICS-1.1 "http://www.rsa
c.org/ratingsv01.html" l comment "RSACi North America Server" by "inet@microsoft.com" r (n 0 s 0 v 0 l 0)) P3P: CP="BUS CUR C
ONo FIN IVDo ONL OUR PHY SAMo TELo" ~U:jschmo
http://macslash.org/images/cr.gif 7/2/2002 6:05:49 AM 3/10/2005 5:44:42 PM URL False ICJNEDI2\cr[1].gif HTTP/1.1 200 OK X-Powered-By: Slash 2.002006 X-Bender: My life, and by extension everyone else's, is meaningless. ETag: "4893
c-49-3d217afd" Content-Length: 73 Content-Type: image/gif ~U:jschmo
http://saopaulo.grand.hyatt.com/saogh/images/hotelname.jpg 8/6/2003 6:49:48 AM 3/10/2005 5:47:41 PM URL False KYRPJUXG\hotelname[1].jpg HTTP/1.1 200 OK ETag: "2800cf-280c-3f30dd4c" Content-Length: 10252 Keep-Alive: timeout=15, max=99 Content-Type: image/jpeg ~
U:jschmo
http://www.orbitz.com/img/air/tip_integration/sort_price_on.gif 12/20/2004 5:39:58 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\sort_price_on[1].gif HTTP/1.1 200 OK ETag: "608252-1eb-41c6abfe" Content-Length: 491 Content-Type: image/gif ~U:jschmo
http://m3.doubleclick.net/viewad/844751/4-stat_728x90_etext_goog_lose10.gif 2/8/2005 4:53:36 PM 3/10/2005 5:53:32 PM URL False ICJNEDI2\4-stat_728x90_etext_g
oog_lose10[1].gif
HTTP/1.1 200 OK Content-Type: image/gif ETag: "166ba428ec51:a94" Content-Length: 4160 ~U:jschmo
http://www.orbitz.com/img/global/nav/tab_h.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\tab_h[1].gif HTTP/1.1 200 OK ETag: "72c204-2f0-41c6ac06" Content-Length: 752 Content-Type: image/gif ~U:jschmo
http://saopaulo.grand.hyatt.com/owshare/awsimages/flag_br.gif 2/5/2003 4:35:28 AM 3/10/2005 5:47:41 PM URL False ICJNEDI2\flag_br[1].gif HTTP/1.1 200 OK ETag: "2881af-436-3e40dae0" Content-Length: 1078 Keep-Alive: timeout=15, max=96 Content-Type: image/gif ~U:j
schmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/pimages/gresources/Gateway/Findsto
re2.gif
1/6/2005 12:36:09 PM 3/10/2005 5:48:38 PM URL False 8R9KCL4N\Findstore2[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "f1a33e3516f4c41:9d4" Content-Length: 1244 ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/4770000/4779122.gif 1/30/2002 11:25:19 AM 3/10/2005 5:50:31 PM URL False 8R9KCL4N\4779122[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "486c74b5aaa9c11:93f" Content-Length: 4225 ~U:jschmo
https://www.orbitz.com/img/global/nav/logo.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:05 PM URL False B3B0BSCG\logo[2].gif HTTP/1.1 200 OK ETag: "7f83b1-72f-41c6ac06" Content-Length: 1839 Content-Type: image/gif ~U:jschmo
http://www.findcracks.com/img/bookmark.gif 7/27/2004 6:05:02 AM 3/10/2005 5:52:52 PM URL False B3B0BSCG\bookmark[1].gif HTTP/1.1 200 OK ETag: "15e10c-18c-410628ce" Content-Length: 396 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/admin4_orderstat
us.gif
1/4/2005 3:20:59 PM 3/10/2005 5:48:37 PM URL False ICJNEDI2\admin4_orderstatus[1]
.gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "80724e79af2c41:918" Content-Length: 326 ~U:jschmo
http://images.slashdot.org/topics/topicintel.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:23 PM URL False ICJNEDI2\topicintel[1].gif HTTP/1.1 200 OK Keep-Alive: timeout=10, max=993 Content-Length: 1018 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/global/css/elements.css 2/4/2005 12:56:55 PM 3/10/2005 5:47:50 PM URL False 8R9KCL4N\elements[1].css HTTP/1.1 200 OK Content-Length: 7329 Content-Type: text/css
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/tab4_saleannex_
cold.gif
1/13/2005 5:04:26 AM 3/10/2005 5:50:30 PM URL False KYRPJUXG\tab4_saleannex_cold[2
].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "0f14f4357f9c41:105a" Content-Length: 324 ~U:jschmo
http://hit7.hotlog.ru/cgi-bin/hotlog/count?0.8529024468923341&s=1002207&im=101&r=&pg=http%3A//www.fr
eeserials.com/&c=Y&j=Y&wh=800x600&px=32&js=1.3&
    REDR False    
http://www.orbitz.com/html.ng/domain=orbitz&channel=air&Section=results&adsize=hotwireTop&origin=NYC
&dest=SAO&OrbitzCookieName=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&secur
e=false&
  3/10/2005 5:49:03 PM URL False 8R9KCL4N\domain=orbitz&channel
=air&Section=results&adsize=ho
twireTop&origin=NYC&dest=SAO&O
rbitzCookieName=OSC&orbitzID=C
wOXEaWQle!-1574237785!17106727
1!7001!-1!11104[1].htm
HTTP/1.1 200 OK Content-Length: 2646 Content-Type: text/html ­
http://www.orbitz.com/img/exitapp/dealdetector.gif 12/20/2004 5:40:05 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\dealdetector[1].gif HTTP/1.1 200 OK ETag: "2c8132-51e-41c6ac05" Content-Length: 1310 Content-Type: image/gif ~U:jschmo
http://news.google.com/news?imgefp=VNZT1YsODmAJ&imgurl=www.eastvalleytribune.com/images/photos/abiuc
u6.jpg
  3/10/2005 5:45:15 PM URL False ICJNEDI2\news[2].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1347 ~U:jschmo
http://64.4.55.45/i.p.black.b.gif 12/29/2004 1:56:29 PM 3/10/2005 6:08:45 PM URL False ICJNEDI2\i.p.black.b[1].gif HTTP/1.1 200 OK Content-Length: 46 Content-Type: image/gif ETag: "80ecb41ad8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/8060000/8067717.gif 8/11/2004 1:20:36 PM 3/10/2005 5:49:23 PM URL False 8R9KCL4N\8067717[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "62b24584c77fc41:104b" Content-Length: 1910 ~U:jschmo
http://orbitz.rpts.net/viewpixel   3/10/2005 5:49:01 PM URL False 8R9KCL4N\viewpixel[1].gif HTTP/1.0 200 OK Content-Type: image/gif Content-Length: 43 ~U:jschmo
http://64.4.55.45/i.p.downarrow.gif 12/29/2004 1:56:32 PM 3/10/2005 6:09:02 PM URL False KYRPJUXG\i.p.downarrow[1].gif HTTP/1.1 200 OK Content-Length: 52 Content-Type: image/gif ETag: "0b07e1cd8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR P
HY SAMo TELo ~U:jschmo
http://ad.linksynergy.com/fs-bin/show?id=OX36Q3imQxc&bids=77305.10000363&type=3&subid=0   3/10/2005 5:44:51 PM URL False KYRPJUXG\show[2].gif HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/icons/calendar.gif 12/20/2004 5:40:13 AM 3/10/2005 5:47:51 PM URL False B3B0BSCG\calendar[1].gif HTTP/1.1 200 OK ETag: "7642fd-176-41c6ac0d" Content-Length: 374 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/air/logos/JJ_small.gif 12/20/2004 5:39:40 AM 3/10/2005 5:48:33 PM URL False B3B0BSCG\JJ_small[1].gif HTTP/1.1 200 OK ETag: "659036-ce-41c6abec" Content-Length: 206 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/search.barnesandnoble.com/gresources/cleardot.gif 4/7/1997 10:17:00 AM 3/10/2005 5:50:30 PM URL False 8R9KCL4N\cleardot[1].gif HTTP/1.0 200 OK P3P: CP="CAO DSP COR ADM DEV TAI PSA IVDo CONo HIS TELo DEL SAMo UNRo LEG PRE" Content-Type: image/gif ETag:
"056765b5e43bc1:a28" Content-Length: 42 ~U:jschmo
https://www.orbitz.com/img/buttons/book_as_guest.gif 12/20/2004 5:39:59 AM 3/10/2005 5:49:06 PM URL False KYRPJUXG\book_as_guest[1].gif HTTP/1.1 200 OK ETag: "6b038b-462-41c6abff" Content-Length: 1122 Content-Type: image/gif ~U:jschmo
http://images.barnesandnoble.com/pimages/js/popup_open.js 12/10/2004 10:23:41 AM 3/10/2005 5:50:30 PM URL False KYRPJUXG\popup_open[1].js HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "e471c3bccdec41:109b" Content-Length: 3757 ~U:jschmo
http://saopaulo.grand.hyatt.com/owshare/jslibrary/aws.js 8/26/2004 7:36:45 AM 3/10/2005 5:47:41 PM URL False KYRPJUXG\aws[1].js HTTP/1.1 200 OK ETag: "6f05ce-781-412dcb4d" Content-Length: 1921 Keep-Alive: timeout=15, max=99 Content-Type: application/x-j
avascript ~U:jschmo
http://www.orbitz.com/img/air/tip_integration/tip_dd_matrix_gradient_bottom.gif 12/20/2004 5:39:58 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\tip_dd_matrix_gradien
t_bottom[1].gif
HTTP/1.1 200 OK ETag: "3c254-180-41c6abfe" Content-Length: 384 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/global/nav/logo.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:01 PM URL False B3B0BSCG\logo[1].gif HTTP/1.1 200 OK ETag: "248440-72f-41c6ac06" Content-Length: 1839 Content-Type: image/gif ~U:jschmo
http://images.slashdot.org/topics/topicmoney.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:22 PM URL False KYRPJUXG\topicmoney[1].gif HTTP/1.1 200 OK Keep-Alive: timeout=10, max=996 Content-Length: 2329 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/tab4_bnu_cold.gi
f
1/13/2005 5:04:30 AM 3/10/2005 5:48:37 PM URL False ICJNEDI2\tab4_bnu_cold[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "04bb24557f9c41:105a" Content-Length: 421 ~U:jschmo
http://www.orbitz.com/img/air/matrix/toplefttext.gif 12/20/2004 5:39:53 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\toplefttext[1].gif HTTP/1.1 200 OK ETag: "308325-49d-41c6abf9" Content-Length: 1181 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/global/js/exitApp.js 2/2/2005 2:37:15 PM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\exitApp[1].js HTTP/1.1 200 OK Content-Length: 3680 Content-Type: application/x-javascript
http://64.4.55.45/tab.separator.end.gif 12/29/2004 1:57:05 PM 3/10/2005 6:09:02 PM URL False KYRPJUXG\tab.separator.end[1].
gif
HTTP/1.1 200 OK Content-Length: 46 Content-Type: image/gif ETag: "80162a30d8edc41:69e" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/vcart4_icon_cart
.gif
1/3/2005 4:50:31 PM 3/10/2005 5:48:36 PM URL False KYRPJUXG\vcart4_icon_cart[1].g
if
HTTP/1.0 200 OK Content-Type: image/gif ETag: "806db03edef1c41:918" Content-Length: 756 ~U:jschmo
http://global.msads.net/ads/363/0000000363_000000000000000148864.gif 2/9/2005 4:33:59 PM 3/10/2005 6:08:57 PM URL False B3B0BSCG\0000000363_0000000000
00000148864[1].gif
HTTP/1.1 200 OK Content-Length: 1316 Content-Type: image/gif ETag: "80fdb110efec51:0000" PICS-Label: (PICS-1.1 "http://www.rs
ac.org/ratingsv01.html" l comment "RSACi North America Server" by "inet@microsoft.com" r (n 0 s 0 v 0 l 0)) P3P: CP="BUS CUR
CONo FIN IVDo ONL OUR PHY SAMo TELo" ~U:jschmo
http://www.google.com/images/logo_sm.gif 9/23/2004 1:42:04 PM 3/10/2005 5:47:33 PM URL False B3B0BSCG\logo_sm[1].gif HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 4707 ~U:jschmo
http://images.slashdot.org/topics/topicspace.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:23 PM URL False KYRPJUXG\topicspace[1].gif HTTP/1.1 200 OK Keep-Alive: timeout=10, max=994 Content-Length: 1186 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/crs_918.gif 11/15/2004 7:39:30 PM 3/10/2005 6:09:02 PM URL False KYRPJUXG\crs_918[1].gif HTTP/1.1 200 OK Content-Length: 799 Content-Type: image/gif ETag: "04dc3bb74cbc41:6f4" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://www.technewsworld.com/shared/print.css 2/28/2005 9:29:09 PM 3/10/2005 5:45:32 PM URL False B3B0BSCG\print[2].css HTTP/1.1 200 OK Content-Length: 2953 Content-Type: text/css
http://www.freeserials.com/img/menu.gif 12/17/2003 9:56:08 AM 3/10/2005 5:50:58 PM URL False 8R9KCL4N\menu[1].gif HTTP/1.1 200 OK ETag: "af179-3e-3fe06e88" Content-Length: 62 Content-Type: image/gif Content-Language: ru ~U:jschmo
http://64.4.55.45/i.p.putinfolder.gif 11/15/2004 7:39:41 PM 3/10/2005 6:09:02 PM URL False KYRPJUXG\i.p.putinfolder[1].gi
f
HTTP/1.1 200 OK Content-Length: 172 Content-Type: image/gif ETag: "80c451c274cbc41:6c2" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://news.google.com/news?imgefp=oEXpglZNm6gJ&imgurl=www.thanhniennews.com/images/newsimages/birdf
lu-070.jpg
  3/10/2005 5:45:15 PM URL False 8R9KCL4N\news[6].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 11760 ~U:jschmo
http://images.barnesandnoble.com/css/kmp_gen.css 10/16/2003 12:56:45 PM 3/10/2005 5:50:30 PM URL False 8R9KCL4N\kmp_gen[1].css HTTP/1.1 200 OK Content-Type: text/css ETag: "9b31147b694c31:109b" Content-Length: 1482 ~U:jschmo
http://news.google.com/news?imgefp=nL5nGvzBSYQJ&imgurl=news.xinhuanet.com/english/2005-03/10/xinsrc_
3520302100802265116237.jpg
  3/10/2005 5:45:15 PM URL False B3B0BSCG\news[2].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1522 ~U:jschmo
http://64.4.55.45/i.p.junkmail.gif 11/15/2004 7:39:41 PM 3/10/2005 6:09:02 PM URL False ICJNEDI2\i.p.junkmail[1].gif HTTP/1.1 200 OK Content-Length: 249 Content-Type: image/gif ETag: "80c451c274cbc41:6fc" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/PImages/nou/bg.gif 8/13/2003 5:27:30 PM 3/10/2005 5:50:30 PM URL False ICJNEDI2\bg[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "e6ac56b3e161c31:9d4" Content-Length: 43 ~U:jschmo
http://64.4.55.45/i.p.importance.l.gif 11/15/2004 7:39:41 PM 3/10/2005 5:53:59 PM URL False 8R9KCL4N\i.p.importance.l[1].g
if
HTTP/1.1 200 OK Content-Length: 171 Content-Type: image/gif ETag: "80c451c274cbc41:6f4" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://hp.msn.com/c/home/flight/fox-sports.gif 11/18/2004 1:56:59 PM 3/10/2005 5:43:04 PM URL False 8R9KCL4N\fox-sports[1].gif HTTP/1.1 200 OK Content-Length: 942 Content-Type: image/gif ETag: "80cfa661a0cdc41:88d" P3P: CP="BUS CUR CONo FIN IVDo ONL OU
R PHY SAMo TELo" ~U:jschmo
http://ad.linksynergy.com/fs-bin/show?id=OX36Q3imQxc&bids=77305.10000831&type=4&subid=0   3/10/2005 5:44:51 PM URL False KYRPJUXG\show[1].gif HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/air/logos/AV_small.gif 12/20/2004 5:39:31 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\AV_small[1].gif HTTP/1.1 200 OK ETag: "6d4d16-e3-41c6abe3" Content-Length: 227 Content-Type: image/gif ~U:jschmo
http://www.barnesandnoble.com/newsletters/kmp_iframe_cds2.asp?pid=6603&userid=pv4dUK5Bu2   3/10/2005 5:50:30 PM URL False ICJNEDI2\kmp_iframe_cds2[2].ht
m
HTTP/1.1 200 OK P3P: CP="CAO DSP COR ADM DEV TAI PSA IVDo CONo HIS TELo DEL SAMo UNRo LEG PRE" Content-Type: text/html Transf
er-Encoding: chunked ~U:jschmo
http://global.msads.net/ads/2609/0000002609_000000000000000093734.gif 7/30/2004 1:00:45 PM 3/10/2005 6:09:02 PM URL False B3B0BSCG\0000002609_0000000000
00000093734[1].gif
HTTP/1.1 200 OK Content-Length: 476 Content-Type: image/gif ETag: "809cf8c05676c41:0000" pics-label: (PICS-1.1 "http://www.rs
ac.org/ratingsv01.html" l comment "RSACi North America Server" by "inet@microsoft.com" r (n 0 s 0 v 0 l 0)) P3P: CP="BUS CUR
CONo FIN IVDo ONL OUR PHY SAMo TELo" ~U:jschmo
http://hit8.hotlog.ru/cgi-bin/hotlog/count?0.8944668763315831&s=160131&im=102&r=&pg=http%3A//www.fin
dcracks.com/&c=Y&j=Y&wh=800x600&px=32&js=1.3&
    REDR False    
http://www.orbitz.com/img/air/tip_integration/1stop_click.gif 12/20/2004 5:39:58 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\1stop_click[1].gif HTTP/1.1 200 OK ETag: "608244-2b2-41c6abfe" Content-Length: 690 Content-Type: image/gif ~U:jschmo
http://macslash.org/images/wr.gif 7/4/2002 7:17:53 PM 3/10/2005 5:44:52 PM URL False ICJNEDI2\wr[1].gif HTTP/1.1 200 OK X-Powered-By: Slash 2.002006 X-Fry: That doesn't look like an "L", unless you count lower case. ETag: "48919-
3a-3d24d7a1" Content-Length: 58 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/global/css/ddmodule.css?cache=orbitz20050214 12/20/2004 5:39:20 AM 3/10/2005 5:48:32 PM LEAK True B3B0BSCG\ddmodule[1].css HTTP/1.1 200 OK ETag: "7742d4-260-41c6abd8" Content-Type: text/css Content-Encoding: deflate Transfer-Encoding: chunked ~U:j
schmo
http://www.technewsworld.com/images/work/tnw_logo_258x94.gif 3/19/2004 11:30:33 AM 3/10/2005 5:45:35 PM URL False B3B0BSCG\tnw_logo_258x94[1].gi
f
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c181d-1436-405b2029" Content-Length: 5174 Keep-Alive: tim
eout=15, max=99 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/tab4_saleannex_c
old.gif
1/13/2005 5:04:26 AM 3/10/2005 5:48:37 PM URL False KYRPJUXG\tab4_saleannex_cold[1
].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "0f14f4357f9c41:105a" Content-Length: 324 ~U:jschmo
http://www.orbitz.com/html.ng/domain=orbitz&channel=home&Section=main&adsize=1x1&OrbitzCookieName=OS
C&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&secure=false&
  3/10/2005 5:47:52 PM LEAK True B3B0BSCG\domain=orbitz&channel
=home&Section=main&adsize=1x1&
OrbitzCookieName=OSC&orbitzID=
CwOXEaWQle!-1574237785!1710672
71!7001!-1!1110494871232&secur
e=false&[1]
HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html Content-Encoding: deflate ~U:jschmo
http://www.orbitz.com/img/air/matrix/dp_xsell_top.gif 12/20/2004 5:39:53 AM 3/10/2005 5:49:01 PM URL False B3B0BSCG\dp_xsell_top[1].gif HTTP/1.1 200 OK ETag: "59042d-740-41c6abf9" Content-Length: 1856 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/   3/10/2005 5:47:50 PM URL False KYRPJUXG\orbitz[1].htm HTTP/1.1 200 OK Content-Length: 69793 Content-Type: text/html
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/3590000/3590378.gif 1/19/2001 4:01:54 PM 3/10/2005 5:50:30 PM URL False ICJNEDI2\3590378[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "8c5364d5b82c01:918" Content-Length: 1562 ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/toppromo3_rule.g
if
5/28/2003 4:03:43 PM 3/10/2005 5:48:36 PM URL False B3B0BSCG\toppromo3_rule[1].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "4060793d5425c31:918" Content-Length: 48 ~U:jschmo
http://www.orbitz.com/js.ng/domain=orbitz&channel=air&Section=interstitial&adsize=450x200&origin=NYC
&dest=SAO&OrbitzCookieName=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&secur
e=false&
  3/10/2005 5:48:19 PM LEAK True KYRPJUXG\domain=orbitz&channel
=air&Section=interstitial&adsi
ze=450x200&origin=NYC&dest=SAO
&OrbitzCookieName=OSC&orbitzID
=CwOXEaWQle!-1574237785!171067
271!7001!-1!111[1]
HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: application/x-javascript Content-Encoding: deflate ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/2650000/2657694.gif 8/29/2000 8:51:31 PM 3/10/2005 5:50:31 PM URL False KYRPJUXG\2657694[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "c8e541701c12c01:c42" Content-Length: 1890 ~U:jschmo
http://global.msads.net/ads/8013/0000008013_000000000000000107267.gif 9/27/2004 3:29:09 PM 3/10/2005 6:09:02 PM URL False 8R9KCL4N\0000008013_0000000000
00000107267[1].gif
HTTP/1.1 200 OK Content-Length: 1114 Content-Type: image/gif ETag: "80708a42c8a4c41:0000" PICS-Label: (PICS-1.1 "http://www.r
sac.org/ratingsv01.html" l comment "RSACi North America Server" by "inet@microsoft.com" r (n 0 s 0 v 0 l 0)) P3P: CP="BUS CUR
CONo FIN IVDo ONL OUR PHY SAMo TELo" ~U:jschmo
http://by23fd.bay23.hotmail.msn.com/cgi-bin/dasp/EN/hotmail___1000000002.css   3/10/2005 6:09:02 PM URL False KYRPJUXG\hotmail___1000000002[
2].css
HTTP/1.1 200 OK Content-Length: 3374 Content-Type: text/css ð­
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/tab4_textbooks_
cold.gif
1/13/2005 10:24:35 PM 3/10/2005 5:50:30 PM URL False 8R9KCL4N\tab4_textbooks_cold[1
].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "809bf991e8f9c41:105a" Content-Length: 512 ~U:jschmo
http://www.freeserials.com/img/sel.gif 12/17/2003 9:56:22 AM 3/10/2005 5:50:58 PM URL False ICJNEDI2\sel[1].gif HTTP/1.1 200 OK ETag: "af180-47-3fe06e96" Content-Length: 71 Content-Type: image/gif Content-Language: ru ~U:jschmo
http://images.barnesandnoble.com/pimages/js/visualcart_prodid.js 11/3/2004 10:58:14 AM 3/10/2005 5:50:30 PM URL False ICJNEDI2\visualcart_prodid[1].
js
HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "4ee12eedbdc1c41:918" Content-Length: 29750 ~U:jschmo
https://www.orbitz.com/img/orbitz_footer.gif 12/20/2004 5:39:22 AM 3/10/2005 5:49:08 PM URL False KYRPJUXG\orbitz_footer[1].gif HTTP/1.1 200 OK ETag: "2e52e6-18f-41c6abda" Content-Length: 399 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/pimages/gresources/hdSearchResult
s.gif
8/3/2004 10:16:47 AM 3/10/2005 5:50:30 PM URL False KYRPJUXG\hdSearchResults[1].gi
f
HTTP/1.0 200 OK Content-Type: image/gif ETag: "a49e3d836479c41:9d4" Content-Length: 922 ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/pimages/cleardot.gif 7/15/2003 1:55:39 PM 3/10/2005 5:48:39 PM URL False KYRPJUXG\cleardot[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "a4a8514dfa4ac31:109b" Content-Length: 42 ~U:jschmo
http://hp.msn.com/55/LN!H2WS26G5_YXFO_}2F2P.gif 3/10/2005 8:01:39 AM 3/10/2005 5:43:04 PM URL False ICJNEDI2\LN!H2WS26G5_YXFO_}2F2
P[1].gif
HTTP/1.1 200 OK Content-Length: 1894 Content-Type: image/gif ETag: "ccb06f4c7125c51:8b2" P3P: CP="BUS CUR CONo FIN IVDo ONL O
UR PHY SAMo TELo" ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/5170000/5170447.gif 5/22/2002 3:11:29 PM 3/10/2005 5:50:30 PM URL False 8R9KCL4N\5170447[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "14a7187ac41c21:987" Content-Length: 4178 ~U:jschmo
http://ax.phobos.apple.com.edgesuite.net/images/badgeitunes61x15dark.gif 3/6/2005 7:30:07 PM 3/10/2005 5:44:46 PM URL False B3B0BSCG\badgeitunes61x15dark[
1].gif
HTTP/1.1 200 OK Content-Length: 906 Content-Type: image/gif X-Apple-Max-Age: 3600 ETag: "5fa50b-38a-422ba08f" ~U:jschmo
http://global.msads.net/ads/7945/0000007945_000000000000000118515.gif 10/29/2004 4:52:29 PM 3/10/2005 5:53:37 PM URL False 8R9KCL4N\0000007945_0000000000
00000118515[1].gif
HTTP/1.1 200 OK Content-Length: 1033 Content-Type: image/gif ETag: "80e4fd33f9bdc41:0000" PICS-Label: (PICS-1.1 "http://www.r
sac.org/ratingsv01.html" l comment "RSACi North America Server" by "inet@microsoft.com" r (n 0 s 0 v 0 l 0)) X-Powered-By: AS
P.NET P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" ~U:jschmo
http://64.4.55.45/tab.bg.dln.gif 11/15/2004 7:40:09 PM 3/10/2005 6:09:02 PM URL False ICJNEDI2\tab.bg.dln[1].gif HTTP/1.1 200 OK Content-Length: 56 Content-Type: image/gif ETag: "803a2d374cbc41:6f4" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR P
HY SAMo TELo ~U:jschmo
http://www.google.com/nav_current.gif 9/23/2004 1:44:19 PM 3/10/2005 5:47:33 PM URL False ICJNEDI2\nav_current[1].gif HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 376 ~U:jschmo
http://www.findcracks.com/img/email.gif 7/27/2004 6:05:06 AM 3/10/2005 5:52:52 PM URL False 8R9KCL4N\email[1].gif HTTP/1.1 200 OK ETag: "15e108-29f-410628d2" Content-Length: 671 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/air/logos/AC_noclick.gif 12/20/2004 5:39:31 AM 3/10/2005 5:49:01 PM URL False B3B0BSCG\AC_noclick[1].gif HTTP/1.1 200 OK ETag: "88865-305-41c6abe3" Content-Length: 773 Content-Type: image/gif ~U:jschmo
http://macslash.org/images/gl.gif 7/4/2002 7:21:46 PM 3/10/2005 5:44:52 PM URL False KYRPJUXG\gl[1].gif HTTP/1.1 200 OK X-Powered-By: Slash 2.002006 X-Fry: Where's Captain Bender? Off catastrophizing some other planet? ETag: "489
1e-3a-3d24d88a" Content-Length: 58 Content-Type: image/gif ~U:jschmo
http://www.technewsworld.com/shared/general.css 3/9/2005 7:52:08 PM 3/10/2005 5:45:32 PM LEAK True 8R9KCL4N\general[1].css HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "2833ccc-3395-422f9a38" Keep-Alive: timeout=15, max=100 Con
tent-Type: text/css Content-Encoding: gzip Content-Length: 2833 ~U:jschmo
http://by23fd.bay23.hotmail.msn.com/cgi-bin/compose?&curmbox=F000000001&a=1028e6c155aa3ce4f917f32f82
d3f2f2
  3/10/2005 5:53:57 PM LEAK True ICJNEDI2\compose[1] HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html Content-Encoding: gzip X-Powered-By: ASP.NET P3P: CP="BUS
CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" X-XFS-Error: 600 HMServer: H: BAY23-F29.phx.gbl V: WIN2K3 10.05.1504.0009 i D: Mar
4 2005 17:02:52 S: 0 ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/tab4_giftcards_c
old.gif
1/13/2005 5:04:29 AM 3/10/2005 5:48:37 PM URL False B3B0BSCG\tab4_giftcards_cold[1
].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "80b4194557f9c41:105a" Content-Length: 336 ~U:jschmo
http://m2.doubleclick.net/653550/728x90_ducks_24k_2l.swf?clickTag=http%3A//ad.doubleclick.net/click%
253Bh%3Dv3%7C3237%7C3%7C0%7C%252a%7Cj%253B13437794%253B0-0%253B0%253B10781516%253B3454-728%7C90%253B
8626627%7C8644523%7C1%253B%253B%257Esscs%253D%253fhttp%3A//www.hp.com/sbso/upgrade/intel/index.html%
3Fjumpid%3Dex_R295_link/kimsmbcore1Q05upgradeOP/011505/E-CommerceTimes
1/18/2005 12:49:48 PM 3/10/2005 5:45:50 PM URL False 8R9KCL4N\CAKHQTF4.swf HTTP/1.1 200 OK Content-Length: 23700 Content-Type: application/x-shockwave-flash ~U:jschmo
http://macslash.org/images/sr.gif 7/4/2002 7:16:31 PM 3/10/2005 5:44:42 PM URL False KYRPJUXG\sr[1].gif HTTP/1.1 200 OK X-Powered-By: Slash 2.002006 X-Fry: If this is some kind of scam, I don't get it. You already have my power
of attorney. ETag: "48913-30-3d24d74f" Content-Length: 48 Content-Type: image/gif ~U:jschmo
http://saopaulo.grand.hyatt.com/owshare/hyatt/css/grand02.css 11/11/2004 3:44:46 AM 3/10/2005 5:47:41 PM URL False B3B0BSCG\grand02[1].css HTTP/1.1 200 OK ETag: "af0545-1231-4193267e" Content-Length: 4657 Keep-Alive: timeout=15, max=100 Content-Type: text/css ~U:
jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/tab4_home_cold.
gif
1/13/2005 5:04:28 AM 3/10/2005 5:50:30 PM URL False B3B0BSCG\tab4_home_cold[1].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "01e814457f9c41:9d4" Content-Length: 226 ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/cleardot.gif 4/7/1997 10:17:00 AM 3/10/2005 5:50:30 PM URL False B3B0BSCG\cleardot[2].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "056765b5e43bc1:9d4" Content-Length: 42 ~U:jschmo
http://images.barnesandnoble.com/css/navbar4.css 1/13/2005 9:32:41 AM 3/10/2005 5:50:30 PM URL False 8R9KCL4N\navbar4[1].css HTTP/1.1 200 OK Content-Type: text/css ETag: "64cd7bc7cf9c41:918" Content-Length: 2249 ~U:jschmo
http://www.passportimages.com/helppane26.js 1/12/2005 1:43:00 AM 3/10/2005 5:53:12 PM URL False 8R9KCL4N\helppane26[1].js HTTP/1.1 200 OK Content-Length: 4061 Content-Type: application/x-javascript Content-Location: http://www.passportimages.com/p
p25/helppane26.js?rollrs=11 ETag: "0f214f571f8c41:55a" PPServer: PPV: 25 H: TK2PPIMG2B01 V: 1192 ~U:jschmo
http://global.msads.net/ads/1126/0000001126_000000000000000157281.swf?fd=www.msn.com&clickTAG=http%3
A//g.msn.com/0AD0001D/700838.5.1%3F%3FPID%3D2432000%26amp%3BUIT%3DG%26amp%3BTargetID%3D1048194%26amp
%3BAN%3D8742%26amp%3BPG%3DMSNREC
3/8/2005 4:36:59 PM 3/10/2005 5:43:07 PM URL False KYRPJUXG\0000001126_0000000000
00000157281[1].swf
HTTP/1.1 200 OK Content-Length: 19427 Content-Type: application/x-shockwave-flash ETag: "80f23f52624c51:0000" PICS-Label: (PI
CS-1.1 "http://www.rsac.org/ratingsv01.html" l comment "RSACi North America Server" by "inet@microsoft.com" r (n 0 s 0 v 0 l
0)) P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/4770000/4779120.gif 1/30/2002 11:25:19 AM 3/10/2005 5:50:30 PM URL False B3B0BSCG\4779120[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "9a1f47b5aaa9c11:c42" Content-Length: 4225 ~U:jschmo
http://spe.atdmt.com/b/NFNFXNFLXNFX/0205_013_B_160600_A.gif   3/10/2005 6:08:54 PM URL False KYRPJUXG\0205_013_B_160600_A[1
].gif
HTTP/1.1 200 OK Allow: GET Content-Length: 20094 Content-Type: image/gif ~U:jschmo
http://saopaulo.grand.hyatt.com/apps/clock2/clock2.cgi?tz=America/Sao_Paulo   3/10/2005 5:47:41 PM URL False KYRPJUXG\clock2[1].xml HTTP/1.1 200 OK Keep-Alive: timeout=15, max=96 Transfer-Encoding: chunked Content-Type: text/xml ~U:jschmo
http://news.google.com/news?imgefp=O_hUQKmHrSUJ&imgurl=timesunion.com/Shared/Graphics/NewsDB/AP/PAKI
STAN%2520IRAN%2520NUCLEAR%2520ISL10103101537_TN.jpg
  3/10/2005 5:45:15 PM URL False 8R9KCL4N\news[7].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1461 ~U:jschmo
http://www.orbitz.com/img/home/optional_flex.gif 12/20/2004 5:40:11 AM 3/10/2005 5:47:51 PM URL False KYRPJUXG\optional_flex[1].gif HTTP/1.1 200 OK ETag: "18c207-ca-41c6ac0b" Content-Length: 202 Content-Type: image/gif ~U:jschmo
http://www.ectnews.com/images/end-enn.gif 1/5/2004 1:08:01 PM 3/10/2005 5:45:37 PM URL False ICJNEDI2\end-enn[1].gif HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c1a4f-3ff-3ff9a801" Content-Length: 1023 Keep-Alive: time
out=15, max=100 Content-Type: image/gif ~U:jschmo
http://a.tribalfusion.com/j.ad?site=MacSlash&adSpace=ROS&size=468x60&type=horiz&noAd=1&pop=0&request
ID=2456304210.43087742420011443
  3/10/2005 5:44:42 PM URL False KYRPJUXG\j[1].ad HTTP/1.0 200 OK P3P: CP="NOI DEVa TAIa OUR BUS" Pragma: no-cache Content-Length: 0 Content-Type: application/x-javascript ~U
:jschmo
http://news.google.com/images/cleardot.gif 9/23/2004 1:41:58 PM 3/10/2005 5:45:14 PM URL False B3B0BSCG\cleardot[1].gif HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 ~U:jschmo
http://www.orbitz.com/Marketing/Images/hotwire-125x175-message2.gif 7/11/2004 2:02:14 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\hotwire-125x175-messa
ge2[1].gif
HTTP/1.1 200 OK ETag: "73125f-9a0-40f0d7e6" Content-Length: 2464 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/home/rightcol_bottom.gif 12/20/2004 5:40:11 AM 3/10/2005 5:47:52 PM URL False ICJNEDI2\rightcol_bottom[1].gi
f
HTTP/1.1 200 OK ETag: "e830b-6c-41c6ac0b" Content-Length: 108 Content-Type: image/gif ~U:jschmo
http://hp.msn.com/4J/,,6]-]D27NW_{GT{Q{[GZ.jpg 3/10/2005 9:45:31 AM 3/10/2005 5:43:04 PM URL False ICJNEDI2\,,6]-]D27NW_{GT{Q{[GZ
[1].jpg
HTTP/1.1 200 OK Content-Length: 2034 Content-Type: image/jpeg ETag: "2f6fe8ce7f25c51:8b2" P3P: CP="BUS CUR CONo FIN IVDo ONL
OUR PHY SAMo TELo" ~U:jschmo
http://hpc.msn.com/css/hotmail/default.css 12/20/2004 7:22:12 PM 3/10/2005 5:53:14 PM URL False KYRPJUXG\default[2].css HTTP/1.1 200 OK Content-Length: 3048 Content-Type: text/css
http://www.orbitz.com/d.gif 12/20/2004 5:38:53 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\d[1].gif HTTP/1.1 200 OK ETag: "55c2ea-2b-41c6abbd" Content-Length: 43 Content-Type: image/gif ~U:jschmo
http://www.technewsworld.com/images/work/newsltrs_subscribe_75x22.gif 1/5/2004 1:07:34 PM 3/10/2005 5:45:36 PM URL False KYRPJUXG\newsltrs_subscribe_75
x22[1].gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c1856-2a1-3ff9a7e6" Content-Length: 673 Keep-Alive: timeo
ut=15, max=86 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/7190000/7196435.gif 12/15/2003 12:34:05 PM 3/10/2005 5:49:23 PM URL False 8R9KCL4N\7196435[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "ef4f65a331c3c31:987" Content-Length: 2768 ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/pImages/resources/gateway/marketin
g/2004/122104_gamestop_f8.gif
12/21/2004 10:33:14 AM 3/10/2005 5:48:38 PM URL False B3B0BSCG\122104_gamestop_f8[1]
.gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "c088286372e7c41:c42" Content-Length: 5048 ~U:jschmo
http://www.findcracks.com/img/pixelwhite.gif 6/2/2004 5:28:40 AM 3/10/2005 5:52:52 PM URL False ICJNEDI2\pixelwhite[1].gif HTTP/1.1 200 OK ETag: "15e10a-2b-40bd9dc8" Content-Length: 43 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/air/logos/DL_noclick.gif 12/20/2004 5:39:33 AM 3/10/2005 5:49:01 PM URL False 8R9KCL4N\DL_noclick[1].gif HTTP/1.1 200 OK ETag: "2608f4-2a3-41c6abe5" Content-Length: 675 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/img/global/nav/tab_d.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:06 PM URL False KYRPJUXG\tab_d[1].gif HTTP/1.1 200 OK ETag: "7c404e-238-41c6ac06" Content-Length: 568 Content-Type: image/gif ~U:jschmo
http://images.barnesandnoble.com/pimages/saleannex/icons/greenwhitedot.gif 5/22/2003 3:49:46 PM 3/10/2005 5:50:30 PM URL False ICJNEDI2\greenwhitedot[1].gif HTTP/1.1 200 OK Content-Type: image/gif ETag: "f4ecfc4b9b20c31:918" Content-Length: 43 ~U:jschmo
http://www.orbitz.com/html.ng/domain=orbitz&channel=home&Section=main&adsize=hometextpkg&OrbitzCooki
eName=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&secure=false&
  3/10/2005 5:47:52 PM URL False B3B0BSCG\domain=orbitz&channel
=home&Section=main&adsize=home
textpkg&OrbitzCookieName=OSC&o
rbitzID=CwOXEaWQle!-1574237785
!171067271!7001!-1!11104948712
32&secure=false[1].htm
HTTP/1.1 200 OK Content-Length: 2060 Content-Type: text/html
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/tab4_biztechno_c
old.gif
1/13/2005 5:04:31 AM 3/10/2005 5:48:37 PM URL False 8R9KCL4N\tab4_biztechno_cold[1
].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "80e14a4657f9c41:105a" Content-Length: 548 ~U:jschmo
http://www.orbitz.com/img/air/logos/AV_click.gif 12/20/2004 5:39:31 AM 3/10/2005 5:49:02 PM URL False B3B0BSCG\AV_click[1].gif HTTP/1.1 200 OK ETag: "6d4995-228-41c6abe3" Content-Length: 552 Content-Type: image/gif ~U:jschmo
http://www.topcash.biz/adverts/42/1.htm 3/7/2005 6:32:47 AM 3/10/2005 5:51:16 PM URL False ICJNEDI2\1[1].htm HTTP/1.1 200 OK ETag: "21af98-2da-748f75c0" Content-Length: 730 Content-Type: text/html; charset=ISO-8859-1 ~U:jschmo
http://images.barnesandnoble.com/css/Gateway_v1.css 1/7/2005 10:14:34 AM 3/10/2005 5:48:36 PM URL False ICJNEDI2\Gateway_v1[1].css HTTP/1.1 200 OK Content-Type: text/css ETag: "20404e98cbf4c41:918" Content-Length: 5242 ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/4770000/4779118.gif 1/30/2002 11:25:19 AM 3/10/2005 5:50:30 PM URL False KYRPJUXG\4779118[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "46351cb5aaa9c11:c42" Content-Length: 4178 ~U:jschmo
http://64.4.55.45/i.F424A.gif 11/15/2004 7:39:36 PM 3/10/2005 6:08:52 PM URL False 8R9KCL4N\i.F424A[1].gif HTTP/1.1 200 OK Content-Length: 175 Content-Type: image/gif ETag: "0d456bf74cbc41:6c2" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/admin4_aboutshi
pping.gif
1/4/2005 3:21:00 PM 3/10/2005 5:50:30 PM URL False KYRPJUXG\admin4_aboutshipping[
2].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "09ebce79af2c41:918" Content-Length: 325 ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/5170000/5170449.gif 5/22/2002 3:11:29 PM 3/10/2005 5:50:30 PM URL False ICJNEDI2\5170449[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "e83a7ac41c21:c42" Content-Length: 4225 ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/pimages/gresources/dot4.gif 8/4/2004 4:24:03 PM 3/10/2005 5:50:30 PM URL False B3B0BSCG\dot4[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "d49eebfb607ac41:9d4" Content-Length: 130 ~U:jschmo
http://www.orbitz.com/global/css/results_air.css?cache=orbitz20050214 1/13/2005 5:56:18 PM 3/10/2005 5:49:01 PM URL False ICJNEDI2\results_air[2].css HTTP/1.1 200 OK Content-Length: 10038 Content-Type: text/css
http://www.google.com/images/gds1.gif 3/7/2005 2:40:14 AM 3/10/2005 5:47:33 PM URL False B3B0BSCG\gds1[1].gif HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 2632 ~U:jschmo
https://www.orbitz.com/img/security/truste_footer.gif 12/20/2004 5:40:15 AM 3/10/2005 5:49:06 PM URL False B3B0BSCG\truste_footer[2].gif HTTP/1.1 200 OK ETag: "46c059-853-41c6ac0f" Content-Length: 2131 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/img/buttons/signin.gif 12/20/2004 5:40:00 AM 3/10/2005 5:49:06 PM URL False 8R9KCL4N\signin[1].gif HTTP/1.1 200 OK ETag: "56c3d1-262-41c6ac00" Content-Length: 610 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/global/js/global.js 1/24/2005 6:01:46 PM 3/10/2005 5:49:00 PM URL False B3B0BSCG\global[1].js HTTP/1.1 200 OK Content-Length: 21519 Content-Type: application/x-javascript
http://www.orbitz.com/img/air/results_bottom.gif 12/20/2004 5:39:22 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\results_bottom[1].gif
HTTP/1.1 200 OK ETag: "48531e-1c6-41c6abda" Content-Length: 454 Content-Type: image/gif ~U:jschmo
http://saopaulo.grand.hyatt.com/images/logo.gif 8/5/2003 6:53:25 AM 3/10/2005 5:47:41 PM URL False KYRPJUXG\logo[1].gif HTTP/1.1 200 OK ETag: "4f415b-833-3f2f8ca5" Content-Length: 2099 Keep-Alive: timeout=15, max=93 Content-Type: image/gif ~U:j
schmo
http://hp.msn.com/1K/[R9[}DQ~8A3_~HB_63[+4H.jpg 3/9/2005 8:04:19 PM 3/10/2005 5:43:04 PM URL False KYRPJUXG\[R9[}DQ~8A3_~HB_63[+4
H[1].jpg
HTTP/1.1 200 OK Content-Length: 13196 Content-Type: image/jpeg ETag: "1749d716d25c51:88d" P3P: CP="BUS CUR CONo FIN IVDo ONL
OUR PHY SAMo TELo" ~U:jschmo
https://www.orbitz.com/global/css/styles.css?cache=orbitz20050214 2/10/2005 1:40:14 PM 3/10/2005 5:49:05 PM URL False B3B0BSCG\styles[2].css HTTP/1.1 200 OK Content-Length: 23026 Content-Type: text/css
http://www.orbitz.com/img/global/nav/tab_cs.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\tab_cs[1].gif HTTP/1.1 200 OK ETag: "72c1b0-38d-41c6ac06" Content-Length: 909 Content-Type: image/gif ~U:jschmo
http://www.technewsworld.com/images/work/icon_discuss_20x14.gif 1/5/2004 1:07:34 PM 3/10/2005 5:45:36 PM URL False KYRPJUXG\icon_discuss_20x14[1]
.gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "6c1851-a5-3ff9a7e6" Content-Length: 165 Keep-Alive: timeou
t=15, max=89 Content-Type: image/gif ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/pimages/GreyArrow.gif 12/10/2004 3:38:06 PM 3/10/2005 5:48:38 PM URL False 8R9KCL4N\GreyArrow[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "c96ffd26f8dec41:c42" Content-Length: 115 ~U:jschmo
http://www.orbitz.com/img/air/logos/US_noclick.gif 12/20/2004 5:39:50 AM 3/10/2005 5:49:01 PM URL False ICJNEDI2\US_noclick[1].gif HTTP/1.1 200 OK ETag: "6d4d9d-2a1-41c6abf6" Content-Length: 673 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/img/global/nav/tab_v.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:05 PM URL False B3B0BSCG\tab_v[2].gif HTTP/1.1 200 OK ETag: "7d026c-36f-41c6ac06" Content-Length: 879 Content-Type: image/gif ~U:jschmo
http://news.google.com/news?imgefp=ahjHfg2bxVgJ&imgurl=www.ctv.ca/archives/CTVNews/images/20050309/d
an_rather_final_newscast_050309/160_ap_dan_rather_050204.jpg
  3/10/2005 5:45:15 PM URL False KYRPJUXG\news[4].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 1815 ~U:jschmo
http://www.orbitz.com/global/css/results.css?cache=orbitz20050214 1/14/2005 3:21:19 PM 3/10/2005 5:48:32 PM LEAK True KYRPJUXG\results[1].css HTTP/1.1 200 OK ETag: "23c2ab-6a9-41e829bf" Content-Type: text/css Content-Encoding: deflate Transfer-Encoding: chunked ~U:j
schmo
http://www.freeserials.com/img/pixelblack.gif 12/17/2003 9:56:18 AM 3/10/2005 5:50:58 PM URL False B3B0BSCG\pixelblack[1].gif HTTP/1.1 200 OK ETag: "af17e-2b-3fe06e92" Content-Length: 43 Content-Type: image/gif Content-Language: ru ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/7160000/7165576.gif 12/4/2003 3:01:11 PM 3/10/2005 5:50:30 PM URL False KYRPJUXG\7165576[1].gif HTTP/1.0 200 OK Content-Type: image/gif ETag: "bb804b5da1bac31:c42" Content-Length: 1851 ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/tab4_books_cold.
gif
1/13/2005 5:04:30 AM 3/10/2005 5:48:37 PM URL False ICJNEDI2\tab4_books_cold[1].gi
f
HTTP/1.0 200 OK Content-Type: image/gif ETag: "04bb24557f9c41:105a" Content-Length: 252 ~U:jschmo
http://www.orbitz.com/html.ng/domain=orbitz&channel=air&Section=results&adsize=1x1&origin=NYC&dest=S
AO&OrbitzCookieName=OSC&orbitzID=CwOXEaWQle!-1574237785!171067271!7001!-1!1110494871232&secure=false
&
  3/10/2005 5:49:02 PM URL False B3B0BSCG\domain=orbitz&channel
=air&Section=results&adsize=1x
1&origin=NYC&dest=SAO&OrbitzCo
okieName=OSC&orbitzID=CwOXEaWQ
le!-1574237785!171067271!7001!
-1!111049487123[1].htm
HTTP/1.1 200 OK Content-Length: 2618 Content-Type: text/html ­
http://64.4.55.45/i.p.writenew.gif 11/15/2004 7:39:42 PM 3/10/2005 6:09:02 PM URL False ICJNEDI2\i.p.writenew[1].gif HTTP/1.1 200 OK Content-Length: 348 Content-Type: image/gif ETag: "05beac274cbc41:6f4" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://images.slashdot.org/topics/topicgoogle.gif 3/9/2005 9:26:49 PM 3/10/2005 5:46:22 PM URL False KYRPJUXG\topicgoogle[1].gif HTTP/1.1 200 OK Keep-Alive: timeout=10, max=1000 Content-Length: 2048 Content-Type: image/gif ~U:jschmo
http://64.4.55.45/i.p.trash.gif 11/15/2004 7:39:41 PM 3/10/2005 6:09:02 PM URL False ICJNEDI2\i.p.trash[1].gif HTTP/1.1 200 OK Content-Length: 549 Content-Type: image/gif ETag: "80c451c274cbc41:6fc" P3P: CP=BUS CUR CONo FIN IVDo ONL OUR
PHY SAMo TELo ~U:jschmo
http://www.passportimages.com/1033/dotnetlogoBIG.gif 1/12/2005 1:42:52 AM 3/10/2005 5:53:17 PM URL False B3B0BSCG\dotnetlogoBIG[1].gif HTTP/1.1 200 OK Content-Length: 1889 Content-Type: image/gif Content-Location: http://www.passportimages.com/pp25/1033/dotnet
logoBIG.gif?rollrs=11 ETag: "03e50f071f8c41:55e" PPServer: PPV: 25 H: TK2PPIMG2B01 V: 1192 ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/admin4_ordersta
tus.gif
1/4/2005 3:20:59 PM 3/10/2005 5:50:30 PM URL False B3B0BSCG\admin4_orderstatus[1]
.gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "80724e79af2c41:918" Content-Length: 326 ~U:jschmo
http://www.orbitz.com/img/orbots/near_city.gif 12/20/2004 5:40:14 AM 3/10/2005 5:47:51 PM URL False 8R9KCL4N\near_city[1].gif HTTP/1.1 200 OK ETag: "1d0189-2e0-41c6ac0e" Content-Length: 736 Content-Type: image/gif ~U:jschmo
http://ads.msn.com/ads/pronws/HM010804mailbox.gif 12/22/2003 6:26:35 PM 3/10/2005 6:08:49 PM URL False ICJNEDI2\HM010804mailbox[1].gi
f
HTTP/1.1 200 OK Content-Length: 2841 Content-Type: image/gif ETag: "808727ae3c8c31:1422" P3P: CP="BUS CUR CONo FIN IVDo ONL O
UR PHY SAMo TELo" PICS-Label: (PICS-1.1 "http://www.rsac.org/ratingsv01.html" l comment "RSACi North America Server" by "inet
@microsoft.com" r (n 0 s 0 v 0 l 0)) ~U:jschmo
http://www.technewsworld.com/images/2004/story-letters-ico_15x19.gif 3/19/2004 6:42:11 PM 3/10/2005 5:45:37 PM URL False 8R9KCL4N\story-letters-ico_15x
19[1].gif
HTTP/1.1 200 OK P3P: CP="ALL DSP COR DEVa TAIa OUR IND DEM" ETag: "90a4d0-de-405b8553" Content-Length: 222 Keep-Alive: timeou
t=15, max=84 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/Marketing/Images/osg_flights_animated.gif 7/29/2004 12:45:12 AM 3/10/2005 5:48:19 PM URL False B3B0BSCG\osg_flights_animated[
1].gif
HTTP/1.1 200 OK ETag: "c1d63-6adc-410880d8" Content-Length: 27356 Content-Type: image/gif ~U:jschmo
http://by23fd.bay23.hotmail.msn.com/cgi-bin/HoTMaiL9ae984f2   3/10/2005 6:09:02 PM URL False KYRPJUXG\HoTMaiL9ae984f2[1] HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html Content-Encoding: gzip X-Powered-By: ASP.NET P3P: CP="BUS
CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" HMServer: H: BAY23-F21.phx.gbl V: WIN2K3 10.05.1504.0009 i D: Mar 4 2005 17:02:52
S: 0 ~U:jschmo
http://news.google.com/news?imgefp=e6HbHR-WKLsJ&imgurl=www.firstcoastnews.com/assetpool/images/05310
104954_evidence.jpg
  3/10/2005 5:45:15 PM URL False ICJNEDI2\news[1].jpg HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2231 ~U:jschmo
http://www.orbitz.com/img/air/logos/US_small.gif 12/20/2004 5:39:50 AM 3/10/2005 5:48:34 PM URL False B3B0BSCG\US_small[1].gif HTTP/1.1 200 OK ETag: "390a49-146-41c6abf6" Content-Length: 326 Content-Type: image/gif ~U:jschmo
http://www.orbitz.com/img/icons/gt_arrow.gif 1/28/2005 11:16:34 AM 3/10/2005 5:48:14 PM URL False ICJNEDI2\gt_arrow[1].gif HTTP/1.1 200 OK ETag: "80819a-375-41fa6562" Content-Length: 885 Content-Type: image/gif ~U:jschmo
http://hp.msn.com/K@/3-K_NWQV134`0{-PBIRT8.jpg 3/9/2005 9:23:48 PM 3/10/2005 5:43:04 PM URL False B3B0BSCG\3-K_NWQV134`0{-PBIRT8
[1].jpg
HTTP/1.1 200 OK Content-Length: 13244 Content-Type: image/jpeg ETag: "656f7f311825c51:8b2" P3P: CP="BUS CUR CONo FIN IVDo ONL
OUR PHY SAMo TELo" ~U:jschmo
http://81.176.69.241/cgi-bin/hotlog/img?im=102&v=1690,3919373,666,1512915,689,1410324   3/10/2005 5:52:53 PM URL False B3B0BSCG\img[3].gif HTTP/1.1 200 OK P3P: policyref="http://hit4.hotlog.ru:8001/w3c/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI
COM NAV INT DEM STA" Content-Type: image/gif Content-Length: 2492 ~U:jschmo
http://www.orbitz.com/img/global/nav/tab_ms.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:01 PM URL False B3B0BSCG\tab_ms[1].gif HTTP/1.1 200 OK ETag: "72c1ba-5e1-41c6ac06" Content-Length: 1505 Content-Type: image/gif ~U:jschmo
http://orbitz.rpts.net/sa;src%3D775458%3Bord%3D1110494871308%3F%3Bpgnm%3DHome+-+Quick+Search%3Bpgurl
%3Dhttp%3A%2F%2Fwww.orbitz.com%2Fhome%2Fquick_search%3Bsect%3DHome%3Bu.seg%3D3%3Bref%3DUnknown
    REDR False    
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/pImages/resources/gateway/2005_03/
030705_bigbizbooks_f1.jpg
3/3/2005 1:57:44 PM 3/10/2005 5:48:38 PM URL False B3B0BSCG\030705_bigbizbooks_f1
[1].jpg
HTTP/1.0 200 OK Content-Type: image/jpeg ETag: "04d9e12220c51:987" Content-Length: 25638 ~U:jschmo
http://www.orbitz.com/img/air/logos/CM_noclick.gif 12/20/2004 5:39:32 AM 3/10/2005 5:49:01 PM URL False KYRPJUXG\CM_noclick[1].gif HTTP/1.1 200 OK ETag: "2983e1-2b5-41c6abe4" Content-Length: 693 Content-Type: image/gif ~U:jschmo
https://www.orbitz.com/img/global/nav/tab_c.gif 12/20/2004 5:40:06 AM 3/10/2005 5:49:05 PM URL False 8R9KCL4N\tab_c[1].gif HTTP/1.1 200 OK ETag: "401fe-260-41c6ac06" Content-Length: 608 Content-Type: image/gif ~U:jschmo
http://n3349ad.doubleclick.net/adi/N3349.msn/B1394462.77;dcadv=844751;sz=728x90;code=98343;ord=11243
?
  3/10/2005 5:53:21 PM URL False 8R9KCL4N\B1394462[1].htm HTTP/1.0 200 OK Content-Type: text/html Content-Length: 503 P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE
COM NAV OTC NOI DSP COR" ~U:jschmo
http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/gresources/navbar/tab4_kids_cold.
gif
1/13/2005 5:04:28 AM 3/10/2005 5:50:30 PM URL False B3B0BSCG\tab4_kids_cold[1].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "01e814457f9c41:105a" Content-Length: 315 ~U:jschmo
http://a1055.g.akamai.net/f/1055/979/5h/images.barnesandnoble.com/gresources/navbar/admin4_aboutship
ping.gif
1/4/2005 3:21:00 PM 3/10/2005 5:48:37 PM URL False KYRPJUXG\admin4_aboutshipping[
1].gif
HTTP/1.0 200 OK Content-Type: image/gif ETag: "09ebce79af2c41:918" Content-Length: 325 ~U:jschmo