urlquery.net - Free url scanner

Overview

URL	http://205.196.120.181/rsfifwb7t0fg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe
IP	205.196.120.181
ASN	AS46179 MediaFire, LLC
Location	United States
Report completed	2012-11-10 20:15:30 CET
Status	Loading report..
urlQuery Alerts	No alerts detected

Settings

UserAgent	Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader	8.0
Java	1.6.0_26

Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Source IP	Destination IP	Severity	Alert
2012-11-10 20:14:50	108.161.187.32	urlQuery Client	3	FILEMAGIC Macromedia Flash data (compressed),

Snort /w Sourcefire VRT

Timestamp	Source IP	Destination IP	Severity	Alert
2012-11-10 20:14:51	urlQuery Client	2.23.130.110	2	ssp_ssl: Invalid Client HELLO after Server HELLO Detected
2012-11-10 20:14:51	urlQuery Client	2.23.130.110	2	ssp_ssl: Invalid Client HELLO after Server HELLO Detected

Recent reports on same IP/ASN/Domain

Last 4 reports on IP: 205.196.120.181

Date	Alerts / IDS	URL	IP
2013-03-03 07:09:12	0 / 4	http://205.196.120.181/5relsshus0vg/csiioeipriah36p/moborobo.exe	205.196.120.181
2012-11-11 18:32:25	0 / 1	http://205.196.120.181/3ou5196h22ng/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.120.181
2012-11-10 23:26:21	0 / 2	http://205.196.120.181/87ej9p71ybhg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.120.181
2012-11-10 21:50:47	0 / 2	http://205.196.120.181/09h23o4gghqg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.120.181

Last 6 reports on ASN: AS46179 MediaFire, LLC

Date	Alerts / IDS	URL	IP
2013-04-03 08:27:34	0 / 5	http://205.196.121.19/htdyo80z636g/sov9mbcu6dwwbr3/MW3+Aimbot+v2.4.8.exe	205.196.121.19
2013-04-03 08:20:45	0 / 4	http://199.91.154.104/lt07cdzkmheg/fnva5cdh5fnfam6/Pack+Hacking+Pro+1.5.exe	199.91.154.104
2013-04-03 08:11:02	0 / 1	http://205.196.121.238/6m4uwcnhajsg/d71inh3p9751cp3/ij.exe	205.196.121.238
2013-04-03 07:59:19	0 / 1	http://205.196.120.158/errqes9kabsg/d71inh3p9751cp3/ij.exe	205.196.120.158
2013-04-03 05:05:09	0 / 4	http://205.196.122.52/50c31xcfq1lg/j9sdax2se33b0k0/Mc+Patcher.exe	205.196.122.52
2013-04-03 04:45:51	0 / 3	http://205.196.123.107/e568laran95g/f2ofqqecf6q8mgy/WTFAOS.exe	205.196.123.107

Last 4 reports on domain: 205.196.120.181

Date	Alerts / IDS	URL	IP
2013-03-03 07:09:12	0 / 4	http://205.196.120.181/5relsshus0vg/csiioeipriah36p/moborobo.exe	205.196.120.181
2012-11-11 18:32:25	0 / 1	http://205.196.120.181/3ou5196h22ng/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.120.181
2012-11-10 23:26:21	0 / 2	http://205.196.120.181/87ej9p71ybhg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.120.181
2012-11-10 21:50:47	0 / 2	http://205.196.120.181/09h23o4gghqg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.120.181

JavaScript

Executed Scripts (62)

Executed Evals (0)

Executed Writes (37)

#1 JavaScript::Write (size: 244, repeated: 1)

<!-- BEGIN JS TAG - [Mediafire - Rubicon] - Default < - DO NOT MODIFY -->
<SCRIPT SRC="http://ads.cpxinteractive.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44" TYPE="text/javascript"></script>
<!-- END TAG -->

#2 JavaScript::Write (size: 9, repeated: 5)

</script>

#3 JavaScript::Write (size: 274, repeated: 1)

<SCRIPT language="Javascript">
var cpmstar_rnd=Math.round(Math.random()*999999);
var cpmstar_pid=12887;
document.writeln("<SCR"+"IPT language='Javascript' src='http://server.cpmstar.com/view.aspx?poolid="+cpmstar_pid+"&script=1&rnd="+cpmstar_rnd+"'></SCR"+"IPT>");
</script>

#4 JavaScript::Write (size: 114, repeated: 1)

<SCRIPT language='Javascript' src='http://server.cpmstar.com/view.aspx?poolid=12887&script=1&rnd=265935'></SCRIPT>

#5 JavaScript::Write (size: 581, repeated: 1)

<a href="http://ib.adnxs.com/click?woTRrGwfkj_ChNGsbB-SPwAAAEAzM8M_woTRrGwfkj_ChNGsbB-SP-dQNL2jaYpeoArzhH1cTlGqp55QAAAAAHZYCwAdAgAAHQIAAAIAAAA2VRQAKkACAAAAAQBVU0QAVVNEANgCWgBNUQAAH0sAAgQCAQUAAIIA4iK5twAAAAA./cnd=%219QT9KgjwvQ8QtqpRGKqACSAE/referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGOeh0em7tJrFXiIOODAuMjAzLjE2OC4yNTQoAQ.." target="_blank"><img width="728" height="90" style="border-style: none" src="http://cdn.adnxs.com/p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png"/></a>

#6 JavaScript::Write (size: 58, repeated: 1)

<div id="recaptcha_widget_div" style="display:none"></div>

#7 JavaScript::Write (size: 27, repeated: 1)

<div id="theToolTip"></div>

#8 JavaScript::Write (size: 1718, repeated: 1)

<html><head>            <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
            <meta http-equiv="Expires" content="Tue, 01 Jan 2000 12:12:12 GMT">
            <meta http-equiv="Pragma" content="no-cache">
    </head>
<body> <img src="http://92.61.254.230/rubicon/px/aid:5c74c6c25ab020701a1481fc45e2e94897a39011;c:7A04E12E6E4E1123;s:6bdb00c88686993b;cid:33664;ts:1352574889987" width="1" height="1" style="position: absolute; left: -150px;" />
<object classid='clsid:D27CDB6E-AE6D-11cf-96B8-444553540000' width='300' height='250' id='player1' name='player1'>
   <param name='movie' value='http://dspads.sitescout.netdna-cdn.com/3900/3859/300x250.-ACA343C.swf?clickTag=http%3A%2F%2Fclickserv.sitescout.com%2Fclk%2F04713701195c110a%2F9878732a8e2f50e0%2F1-3346%2F2%2Fwww.mediafire.com%252F%2F%2FcidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw' />
   <param name='allowfullscreen' value='false' />
   <param name='allowscriptaccess' value='sameDomain' />
   <param name="swfversion" value="6.0.65.0" />
   <param name='WMODE' value='opaque' />
   <embed id='player1'
          swfversion='6.0.65.0'
          name='player1'
          src='http://dspads.sitescout.netdna-cdn.com/3900/3859/300x250.-ACA343C.swf?clickTag=http%3A%2F%2Fclickserv.sitescout.com%2Fclk%2F04713701195c110a%2F9878732a8e2f50e0%2F1-3346%2F2%2Fwww.mediafire.com%252F%2F%2FcidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw'
          width='300'
          height='250'
          allowscriptaccess='sameDomain'
          allowfullscreen='false'
          WMODE='opaque' 
   />
</object> <img src="http://pixel.quantserve.com/pixel/p-01nD5uD1pGDW2.gif" border="0" height="1" width="1" style="display:none;" /></body></html>

#9 JavaScript::Write (size: 1718, repeated: 1)

<html><head>            <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
            <meta http-equiv="Expires" content="Tue, 01 Jan 2000 12:12:12 GMT">
            <meta http-equiv="Pragma" content="no-cache">
    </head>
<body> <img src="http://92.61.254.231/rubicon/px/aid:615df5c492390090ad0362a8a338074145d07317;c:7A04E12E6E4E1123;s:6bdb00c88686993b;cid:33664;ts:1352574890152" width="1" height="1" style="position: absolute; left: -150px;" />
<object classid='clsid:D27CDB6E-AE6D-11cf-96B8-444553540000' width='300' height='250' id='player1' name='player1'>
   <param name='movie' value='http://dspads.sitescout.netdna-cdn.com/3900/3859/300x250.-ACA343C.swf?clickTag=http%3A%2F%2Fclickserv.sitescout.com%2Fclk%2F04713701195c110a%2F9878732a8e2f50e0%2F1-3346%2F2%2Fwww.mediafire.com%252F%2F%2FcidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw' />
   <param name='allowfullscreen' value='false' />
   <param name='allowscriptaccess' value='sameDomain' />
   <param name="swfversion" value="6.0.65.0" />
   <param name='WMODE' value='opaque' />
   <embed id='player1'
          swfversion='6.0.65.0'
          name='player1'
          src='http://dspads.sitescout.netdna-cdn.com/3900/3859/300x250.-ACA343C.swf?clickTag=http%3A%2F%2Fclickserv.sitescout.com%2Fclk%2F04713701195c110a%2F9878732a8e2f50e0%2F1-3346%2F2%2Fwww.mediafire.com%252F%2F%2FcidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw'
          width='300'
          height='250'
          allowscriptaccess='sameDomain'
          allowfullscreen='false'
          WMODE='opaque' 
   />
</object> <img src="http://pixel.quantserve.com/pixel/p-01nD5uD1pGDW2.gif" border="0" height="1" width="1" style="display:none;" /></body></html>

#10 JavaScript::Write (size: 201, repeated: 1)

<iframe frameborder='0' scrolling='no' height='600' width='160' src='//server.cpmstar.com/view.aspx?poolid=12887&campaignid=56911&creativeid=137299&h=067AA536D333B4853658CF46B8C39A4075DB313C'></iframe>

#11 JavaScript::Write (size: 198, repeated: 1)

<iframe src="http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1" width="1" height="1" frameborder="0" scrolling="No" marginheight="0" marginwidth="0" topmargin="0" leftmargin="0"></iframe>

#12 JavaScript::Write (size: 134, repeated: 1)

<iframe src='http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/?rt=iframe' width='1' height='1' frameborder='0'></iframe>

#13 JavaScript::Write (size: 52, repeated: 1)

<script language="JavaScript" type="text/javascript"

#14 JavaScript::Write (size: 53, repeated: 4)

<script language="JavaScript" type="text/javascript">

#15 JavaScript::Write (size: 87, repeated: 3)

<script type="text/javascript" src="http://ads.rubiconproject.com/ad/3196.js"></script>

#16 JavaScript::Write (size: 235, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/27309-15.js?cb=0.5059716134663681&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#17 JavaScript::Write (size: 237, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-15.js?cb=0.0016224635651047592&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#18 JavaScript::Write (size: 233, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-2.js?cb=0.8376454668803763&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#19 JavaScript::Write (size: 233, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-9.js?cb=0.7586335325681874&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#20 JavaScript::Write (size: 98, repeated: 1)

<script type="text/javascript" src="http://www.google.com/recaptcha/api/js/recaptcha.js"></script>

#21 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3176583" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#22 JavaScript::Write (size: 903, repeated: 2)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3228674" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#23 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3320011" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#24 JavaScript::Write (size: 498, repeated: 1)

<script> var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6035951", c3: "122134" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })(); </script> <noscript> <img src="http://b.scorecardresearch.com/p?c1=8&c2=&c3=&c4=&c5=&c6=&c15=&cv=2.0&cj=1" /> </noscript>

#25 JavaScript::Write (size: 104, repeated: 1)

<script>Recaptcha.widget = Recaptcha.$("recaptcha_widget_div"); Recaptcha.challenge_callback();</script>

#26 JavaScript::Write (size: 69, repeated: 1)

src="http://ads.rubiconproject.com/ad/3196.js?cb=0.5010167233699182">

#27 JavaScript::Write (size: 26, repeated: 3)

var rp_account   = "3196";

#28 JavaScript::Write (size: 24, repeated: 1)

var rp_account = "3196";

#29 JavaScript::Write (size: 24, repeated: 3)

var rp_adtype    = "js";

#30 JavaScript::Write (size: 21, repeated: 1)

var rp_adtype = "js";

#31 JavaScript::Write (size: 26, repeated: 3)

var rp_site      = "3346";

#32 JavaScript::Write (size: 21, repeated: 1)

var rp_site = "3346";

#33 JavaScript::Write (size: 81, repeated: 4)

var rp_smartfile = "http://www.mediafire.com/templates/ads/revv_smart_file.html";

#34 JavaScript::Write (size: 30, repeated: 1)

var rp_zonesize  = "27309-15";

#35 JavaScript::Write (size: 29, repeated: 1)

var rp_zonesize  = "9685-15";

#36 JavaScript::Write (size: 28, repeated: 1)

var rp_zonesize  = "9685-9";

#37 JavaScript::Write (size: 27, repeated: 1)

var rp_zonesize = "9685-2";

HTTP Transactions (118)

Request	Response
GET /css/mfv3_85677.php?ver=nonssl HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 37605 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:45 GMT Connection: keep-alive
GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 Host: cdn.mediafire.com GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 52116 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:45 GMT Connection: keep-alive
GET /?4p5wab4oqodaj44 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Nov 2012 19:14:45 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: 0 Set-Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; expires=Sat, 11-Oct-2014 19:14:45 GMT; path=/; domain=.mediafire.com; httponly Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 17019 Connection: close Server: MediaFire
GET /images/favicon/download.ico HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Date: Sat, 10 Nov 2012 19:14:46 GMT Last-Modified: Thu, 25 Oct 2012 21:59:32 GMT Accept-Ranges: bytes Content-Length: 1150 Connection: close Server: MediaFire
GET /css?family=Open+Sans:800,400,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/css Expires: Sat, 10 Nov 2012 19:14:46 GMT Date: Sat, 10 Nov 2012 19:14:46 GMT Cache-Control: private, max-age=86400 Content-Encoding: gzip Content-Length: 318 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE
GET /blank.html HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Last-Modified: Tue, 18 Sep 2012 21:44:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 78 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/icons/ajax-loader-grey_round.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 1775 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/logos/logo_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 16 Jul 2012 19:28:31 GMT Accept-Ranges: bytes Content-Length: 3708 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 2315 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_allowemail.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 941 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/buttons/btn_twitter_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 1799 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/icons/dropdown-arrow-left-white.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 123 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/icons/information_darkblue.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 722 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /ga.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 14888 Content-Encoding: gzip Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT X-Content-Type-Options: nosniff, nosniff Date: Sat, 10 Nov 2012 08:33:27 GMT Expires: Sat, 10 Nov 2012 20:33:27 GMT Vary: Accept-Encoding Age: 38479 Cache-Control: max-age=43200, public Server: GFE/2.0
GET /images/icons/icon-sprite-16-v3.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 02 Oct 2012 17:01:27 GMT Accept-Ranges: bytes Content-Length: 61715 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/backgrounds/download/rockmelt/rockmelt_dl_btn.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:44 GMT Accept-Ranges: bytes Content-Length: 7653 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 Host: platform.twitter.com GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: public, max-age=1800 Last-Modified: Thu, 08 Nov 2012 09:18:41 GMT Etag: "567a94a4e136d5c4b7bfde258474cfa6" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 25717 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
GET /recaptcha/api/challenge?k=6LextQUAAAAAALlQv0DSHOYxqF3DftRZxA5yebEe HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Date: Sat, 10 Nov 2012 19:14:47 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 449 Server: GSE
GET /ajax/libs/jquery/1.7.2/jquery.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Content-Encoding: gzip Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT Date: Fri, 09 Nov 2012 20:33:45 GMT Expires: Sat, 09 Nov 2013 20:33:45 GMT X-Content-Type-Options: nosniff Server: sffe Content-Length: 73891 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 81661
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 Host: www.facebook.com GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 Content-Encoding: gzip X-FB-Debug: T4HHu7vK9fszciqxwQS82qLK95db4Rzn0D7myK6pjc4= Date: Sat, 10 Nov 2012 19:14:47 GMT Transfer-Encoding: chunked Connection: keep-alive
GET /js/encoder.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sat, 10 Nov 2012 19:14:47 GMT Last-Modified: Thu, 05 Jan 2012 22:41:54 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Mon, 10 Dec 2012 19:14:47 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3695 Connection: close Server: MediaFire
GET /js/master_85677.js HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: text/javascript Last-Modified: Fri, 09 Nov 2012 23:25:30 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Server: MediaFire Content-Length: 143613 Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /js/bust_out.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sat, 10 Nov 2012 19:14:47 GMT Last-Modified: Thu, 31 May 2012 19:49:34 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Mon, 10 Dec 2012 19:14:47 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 57 Connection: close Server: MediaFire
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=1759221474&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=2086098979&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.1665035522.1352574887.1352574887.1352574887.1%3B%2B__utmz%3D213136648.1352574887.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 Host: www.google-analytics.com GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=1759221474&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=2086098979&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.1665035522.1352574887.1352574887.1352574887.1%3B%2B__utmz%3D213136648.1352574887.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 09 Nov 2012 20:33:28 GMT Content-Length: 35 X-Content-Type-Options: nosniff Pragma: no-cache Expires: Wed, 19 Apr 2000 11:43:00 GMT Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Age: 81679 Server: GFE/2.0
GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 Host: p.twitter.com GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: image/gif Etag: "377d257f2d2e294916143c069141c1c5:1328738114" Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT Accept-Ranges: bytes Content-Length: 43 Cache-Control: no-cache P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Date: Sat, 10 Nov 2012 19:14:47 GMT Connection: keep-alive
GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 Host: cdn.api.twitter.com GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Last-Modified: Sat, 10 Nov 2012 19:06:55 GMT Pragma: no-cache X-Frame-Options: SAMEORIGIN Status: 200 OK Content-Encoding: gzip Content-Length: 897 Server: tfe Vary: Accept-Encoding Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 10 Nov 2012 19:14:47 GMT Date: Sat, 10 Nov 2012 19:14:47 GMT Connection: keep-alive
GET /images/ad-loader.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:09:03 GMT Accept-Ranges: bytes Content-Length: 1786 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:47 GMT Connection: keep-alive
GET /recaptcha/api/js/recaptcha.js HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: application/x-javascript Expires: Sat, 10 Nov 2012 19:14:47 GMT Date: Sat, 10 Nov 2012 19:14:47 GMT Last-Modified: Tue, 12 Jun 2012 14:07:31 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 17531 Server: GSE Cache-Control: public, max-age=0 Age: 0
GET /recaptcha/api/img/red/refresh.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sat, 10 Nov 2012 19:52:50 GMT Date: Sat, 10 Nov 2012 18:52:50 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 974 Server: GSE Age: 1317 Cache-Control: public, max-age=3600
GET /images/backgrounds/footer/footer_texture.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 20:31:25 GMT Accept-Ranges: bytes Content-Length: 2649 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive
GET /recaptcha/api/img/red/audio.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sat, 10 Nov 2012 19:51:24 GMT Date: Sat, 10 Nov 2012 18:51:24 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 914 Server: GSE Age: 1404 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/text.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sat, 10 Nov 2012 19:55:26 GMT Date: Sat, 10 Nov 2012 18:55:26 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 155 Server: GSE Age: 1162 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/help.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sat, 10 Nov 2012 19:59:20 GMT Date: Sat, 10 Nov 2012 18:59:20 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 367 Server: GSE Age: 928 Cache-Control: public, max-age=3600
GET /images/backgrounds/footer/icn_footer_blog.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 171 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_gp.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 29 Aug 2012 21:02:04 GMT Accept-Ranges: bytes Content-Length: 312 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_tw.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 274 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive
GET /recaptcha/api/image?c=03AHJ_VuvLTfmDkxFUuV-SiO7PjCB3JJlu-efbydIFOCPEictXSa1PDvhDFbu0ycJvBQJr3NjJ48SchNTomNChkxnVGc5ZD2ckZTyWc3kq0M91PrG9TVEN_qhMM27zV47Q5sZYfcofUDBYYsktEwuE-Vasy7fHXIUDNOMmvirk_H1CTkCA4l6BphY HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Sat, 10 Nov 2012 19:24:48 GMT Date: Sat, 10 Nov 2012 19:14:48 GMT Cache-Control: public, max-age=600 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 2626 Server: GSE
GET /images/backgrounds/footer/icn_footer_fb.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 514 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateTW_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 387 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive
GET /templates/linkto/default-337x281-default.php?r=73613 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Nov 2012 19:14:48 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 786 Connection: close Server: MediaFire
GET /images/backgrounds/newHome/loginActivateFB_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 255 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive
GET /templates/linkto/default-337x281-default2.php?r=78035 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Nov 2012 19:14:48 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 787 Connection: close Server: MediaFire
GET /templates/linkto/default-729x91-default.php?r=15146 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Nov 2012 19:14:48 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 666 Connection: close Server: MediaFire
GET /templates/linkto/default-161x601-default.php?r=46595 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Nov 2012 19:14:48 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 733 Connection: close Server: MediaFire
GET /en_US/all.js?_=1352574888144 HTTP/1.1 Host: connect.facebook.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Etag: "06c9a8ca347f3538149da85e21e875b7" Content-Encoding: gzip X-FB-Debug: TzBGyMVUsy2i0kmJxG/P+WT075yCWghpTvtC8/J+0gs= Content-Length: 58143 Cache-Control: public, max-age=1172 Expires: Sat, 10 Nov 2012 19:34:20 GMT Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive Vary: Accept-Encoding
GET /recaptcha/api/img/red/sprite.png HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/png Expires: Sat, 10 Nov 2012 20:14:49 GMT Date: Sat, 10 Nov 2012 19:14:49 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 4679 Server: GSE Cache-Control: public, max-age=3600 Age: 0
GET /ad/3196.js HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Sun, 11 Nov 2012 19:14:49 GMT Date: Sat, 10 Nov 2012 19:14:49 GMT Connection: keep-alive
GET /ad/3196.js?cb=0.5010167233699182 HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3551 Cneonction: close Cache-Control: max-age=86400 Expires: Sun, 11 Nov 2012 19:14:49 GMT Date: Sat, 10 Nov 2012 19:14:49 GMT Connection: keep-alive
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: QpUXNDPC4a/ZS9XMuzc2WDBWEZ8S2oHPsfImau8uouU= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31479690 Expires: Sun, 10 Nov 2013 03:36:19 GMT Date: Sat, 10 Nov 2012 19:14:49 GMT Connection: keep-alive
GET /helper_01.swf HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Date: Sat, 10 Nov 2012 19:14:49 GMT Last-Modified: Sat, 15 Oct 2011 19:43:58 GMT Accept-Ranges: bytes Content-Length: 1480 Cache-Control: max-age=2592000 Expires: Mon, 10 Dec 2012 19:14:49 GMT Connection: close Server: MediaFire
GET /a/3196/3346/9685-15.js?cb=0.0016224635651047592&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-15.js?cb=0.0016224635651047592&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sat, 10 Nov 2012 19:14:49 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db7f4509ea7a950cba8fe6d5da1^1^1352574889^1355524350; expires=Fri, 08-Feb-2013 19:14:49 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sat, 10-Nov-2012 20:14:49 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sat, 10-Nov-2012 20:14:49 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Sun, 11-Nov-2012 00:59:59 GMT; max-age=45910; path=/; domain=.rubiconproject.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=71 Connection: Keep-Alive Transfer-Encoding: chunked
POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 106 Content-Type: application/ocsp-request	HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 10 Nov 2012 19:14:50 GMT Server: Apache Content-Transfer-Encoding: Binary Cache-Control: max-age=16518, public, no-transform, must-revalidate Last-Modified: Sat, 10 Nov 2012 18:04:38 GMT Expires: Sun, 11 Nov 2012 00:04:38 GMT Etag: "425f173981e640aacf9573ef82ae3ba23112327d" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" Content-Length: 1923 Connection: close
GET /static/fonts/opensans/v6/k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM.woff HTTP/1.1 Host: themes.googleusercontent.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://fonts.googleapis.com/css?family=Open+Sans:800,400,700 Origin: http://www.mediafire.com	HTTP/1.1 200 OK Content-Type: font/woff Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT Date: Fri, 09 Nov 2012 20:33:30 GMT Expires: Sat, 09 Nov 2013 20:33:30 GMT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: sffe Content-Length: 22748 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 81679
GET /a/3196/3346/9685-2.js?cb=0.8376454668803763&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-2.js?cb=0.8376454668803763&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sat, 10 Nov 2012 19:14:50 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db40a509ea7aa50cba8fe180a9b^1^1352574890^1355524350; expires=Fri, 08-Feb-2013 19:14:50 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sat, 10-Nov-2012 20:14:50 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk2=0; expires=Sat, 10-Nov-2012 20:14:50 GMT; max-age=10; path=/; domain=.rubiconproject.com ses2=3346^1; expires=Sun, 11-Nov-2012 00:59:59 GMT; max-age=45909; path=/; domain=.rubiconproject.com csi2=3204661.js^1^1352574890^1352574890; expires=Sat, 17-Nov-2012 19:14:50 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=44 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/9685-9.js?cb=0.7586335325681874&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-9.js?cb=0.7586335325681874&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=46595 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sat, 10 Nov 2012 19:14:50 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; expires=Fri, 08-Feb-2013 19:14:50 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sat, 10-Nov-2012 20:14:50 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk9=0; expires=Sat, 10-Nov-2012 20:14:50 GMT; max-age=10; path=/; domain=.rubiconproject.com ses9=3346^1; expires=Sun, 11-Nov-2012 00:59:59 GMT; max-age=45909; path=/; domain=.rubiconproject.com csi9=3165520.js^1^1352574890^1352574890; expires=Sat, 17-Nov-2012 19:14:50 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=48 Connection: Keep-Alive Transfer-Encoding: chunked
GET /beacon.js HTTP/1.1 Host: b.scorecardresearch.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613	HTTP/1.1 200 OK Content-Type: application/x-javascript Vary: Accept-Encoding Content-Encoding: gzip Expires: Sat, 24 Nov 2012 19:14:50 GMT Date: Sat, 10 Nov 2012 19:14:50 GMT Content-Length: 1140 Connection: keep-alive Cache-Control: private, no-transform, max-age=1209600
GET /pixel/p-01nD5uD1pGDW2.gif HTTP/1.1 Host: pixel.quantserve.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613	HTTP/1.1 200 OK Content-Type: image/gif Connection: close Set-Cookie: mc=509ea7aa-4dbf1-9af13-25e31; expires=Mon, 12-May-2014 19:14:50 GMT; path=/; domain=.quantserve.com P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Cache-Control: private, no-cache, no-store, proxy-revalidate Pragma: no-cache Expires: Fri, 04 Aug 1978 12:00:00 GMT Content-Length: 35 Date: Sat, 10 Nov 2012 19:14:50 GMT Server: QS
GET /rubicon/px/aid:5c74c6c25ab020701a1481fc45e2e94897a39011;c:7A04E12E6E4E1123;s:6bdb00c88686993b;cid:33664;ts:1352574889987 HTTP/1.1 Host: 92.61.254.230 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache-Coyote/1.1 Cache-Control: max-age=0,no-cache,no-store Pragma: no-cache Expires: Tue, 11 Oct 1977 12:34:56 GMT Connection: close Content-Length: 807 Date: Sat, 10 Nov 2012 19:14:49 GMT
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 Host: tap2-cdn.rubiconproject.com GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f4509ea7a950cba8fe6d5da1^1^1352574889^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Last-Modified: Fri, 09 Nov 2012 22:35:12 GMT Content-Encoding: gzip Cache-Control: max-age=600 Expires: Sat, 10 Nov 2012 19:24:50 GMT Date: Sat, 10 Nov 2012 19:14:50 GMT Content-Length: 5080 Connection: keep-alive Vary: Accept-Encoding
GET /a/3196/3346/27309-15.js?cb=0.5059716134663681&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/27309-15.js?cb=0.5059716134663681&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=78035 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sat, 10 Nov 2012 19:14:50 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592dc798509ea7aa50cba8fe59783f^1^1352574890^1355524350; expires=Fri, 08-Feb-2013 19:14:50 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sat, 10-Nov-2012 20:14:50 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sat, 10-Nov-2012 20:14:50 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Sun, 11-Nov-2012 00:59:59 GMT; max-age=45909; path=/; domain=.rubiconproject.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Transfer-Encoding: chunked
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 Host: fpdownload2.macromedia.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/xml Server: Apache Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT Etag: "87de33-256-4cd617ed12480" Accept-Ranges: bytes Content-Length: 598 Date: Sat, 10 Nov 2012 19:14:50 GMT Connection: keep-alive
GET /partner/scripts/rubicon/alice.js HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f4509ea7a950cba8fe6d5da1^1^1352574889^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:56:23 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sat, 10 Nov 2012 20:14:50 GMT Date: Sat, 10 Nov 2012 19:14:50 GMT Content-Length: 5798 Connection: keep-alive Vary: Accept-Encoding
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352574890435&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D73613&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352574890435&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D73613&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352574890435&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D73613&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sat, 10 Nov 2012 19:14:50 GMT Connection: keep-alive Set-Cookie: UID=4a9372d-195.159.219.9-1352574890; expires=Fri, 31-Oct-2014 19:14:50 GMT; path=/; domain=.scorecardresearch.com UIDR=1352574890; expires=Fri, 31-Oct-2014 19:14:50 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 Date: Sat, 10 Nov 2012 19:14:50 GMT Content-Length: 0
GET /3900/3859/300x250.-ACA343C.swf?clickTag=http%3A%2F%2Fclickserv.sitescout.com%2Fclk%2F04713701195c110a%2F9878732a8e2f50e0%2F1-3346%2F2%2Fwww.mediafire.com%252F%2F%2FcidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw HTTP/1.1 Host: dspads.sitescout.netdna-cdn.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Date: Sat, 10 Nov 2012 19:14:50 GMT Content-Length: 54403 Connection: keep-alive Etag: W/"54403-1342719889000" Last-Modified: Thu, 19 Jul 2012 17:44:49 GMT Server: NetDNA-cache/2.2 X-Cache: HIT Accept-Ranges: bytes
GET /pixel/p-01nD5uD1pGDW2.gif HTTP/1.1 Host: pixel.quantserve.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=78035 Cookie: mc=509ea7aa-4dbf1-9af13-25e31	HTTP/1.1 200 OK Content-Type: image/gif Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Pragma: no-cache Expires: Fri, 04 Aug 1978 12:00:00 GMT Content-Length: 35 Date: Sat, 10 Nov 2012 19:14:50 GMT Server: QS
GET /rubicon/px/aid:615df5c492390090ad0362a8a338074145d07317;c:7A04E12E6E4E1123;s:6bdb00c88686993b;cid:33664;ts:1352574890152 HTTP/1.1 Host: 92.61.254.231 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=78035	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache-Coyote/1.1 Cache-Control: max-age=0,no-cache,no-store Pragma: no-cache Expires: Tue, 11 Oct 1977 12:34:56 GMT Connection: close Content-Length: 807 Date: Sat, 10 Nov 2012 19:14:50 GMT
GET /int/integration?pixel=303852&nid=302660 HTTP/1.1 Host: i.ctnsnet.com GET /int/integration?pixel=303852&nid=302660 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_98b06ff7d82e426d9abc9dcdbb39df6c=1; path=/; domain=.ctnsnet.com; expires=Sun, 10-Nov-2013 19:14:50 GMT; px=AAAEouxQxjSq; path=/; domain=.ctnsnet.com; expires=Sun, 10-Mar-2013 19:14:50 GMT; pb=AAAEowJQxjSq; path=/; domain=.ctnsnet.com; expires=Wed, 09-Jan-2013 19:14:50 GMT; opt=0; path=/; domain=.ctnsnet.com; expires=Sun, 10-Nov-2013 19:14:50 GMT; Pragma: no-cache Cache-Control: private, no-cache, no-store, max-age=0 Location: http://pixel.rubiconproject.com/tap.php?v=14965&nid=2731&put=98b06ff7d82e426d9abc9dcdbb39df6c&expires=30 Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:50 GMT Connection: close
GET /sync?ssp=rubicon HTTP/1.1 Host: x.bidswitch.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=9d843e45-439b-4b75-857e-b58446eeadd4; path=/; expires=Mon, 10-Nov-2014 19:14:50 GMT P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: /sync?ul_cb=1&ssp=rubicon Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 26 Jul 1997 05:00:00 GMT Pragma: no-cache Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:50 GMT
GET /rb_match HTTP/1.1 Host: um.simpli.fi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain Server: nginx Date: Sat, 10 Nov 2012 19:14:50 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: uid=S2W94OD8AigFY6469toymV%3D%3D; path=/; expires=Sun, 10 Nov 2013 19:14:50 GMT; domain=.simpli.fi Location: http://pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=E0BD654B2802FCE03AAE63059932DAF6&expires=365 P3P: policyref="http://www.simplifi.com/w3c/Policies.xml", CP="ADMa DEVa PSAa PSDa OUR IND DSP NON COR"
GET /view.aspx?poolid=12887&script=1&rnd=265935 HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&script=1&rnd=265935 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=46595	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: /view.aspx?poolid=12887&script=1&rnd=265935&test=1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: USER_ID=F%aa%06%09%c6%cbE%3f%f33%88%1d%ec%3b%d9; domain=.server.cpmstar.com; expires=Wed, 10-Nov-2032 19:14:51 GMT; path=/ P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sat, 10 Nov 2012 19:14:51 GMT Content-Length: 185 Connection: Keep-alive Keep-Alive: timeout=15, max=100 Via: 1.1 ID-0001544140306215 uproxy-5
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352574890435&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D73613&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352574890435&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D73613&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613 Cookie: UID=4a9372d-195.159.219.9-1352574890; UIDR=1352574890	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:50 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /dmm/rubicon/match HTTP/1.1 Host: rubicon-match.dotomi.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 204 No Content Content-Type: text/plain Date: Sat, 10 Nov 2012 19:14:50 GMT X-Name: dtiad01rtb19p.int Cache-Control: max-age=0, no-store Content-Length: 0 Connection: close
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352574890813&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D78035&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352574890813&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D78035&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=78035 Cookie: UID=4a9372d-195.159.219.9-1352574890; UIDR=1352574890	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:50 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Fri, 08-Feb-2013 19:14:50 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Sun, 11-Nov-2012 19:14:50 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwqs_6hAUQqs_6hAUYAA..; path=/; expires=Fri, 08-Feb-2013 19:14:50 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FSn4^Ehxzkb10I3eXSQPkkOY1ydik999/<AvJ:-; path=/; expires=Fri, 08-Feb-2013 19:14:50 GMT; domain=.adnxs.com; HttpOnly Date: Sat, 10 Nov 2012 19:14:50 GMT Content-Length: 1349
GET /3900/3859/300x250.-ACA343C.swf?clickTag=http%3A%2F%2Fclickserv.sitescout.com%2Fclk%2F04713701195c110a%2F9878732a8e2f50e0%2F1-3346%2F2%2Fwww.mediafire.com%252F%2F%2FcidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw HTTP/1.1 Host: dspads.sitescout.netdna-cdn.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=78035 If-Modified-Since: Thu, 19 Jul 2012 17:44:49 GMT If-None-Match: W/"54403-1342719889000"	HTTP/1.1 304 Not Modified HTTP/1.1 304 Not Modified Date: Sat, 10 Nov 2012 19:14:50 GMT Connection: keep-alive Etag: W/"54403-1342719889000" Last-Modified: Thu, 19 Jul 2012 17:44:49 GMT Server: NetDNA-cache/2.2 X-Cache: HIT
GET /sync?ul_cb=1&ssp=rubicon HTTP/1.1 Host: x.bidswitch.net GET /sync?ul_cb=1&ssp=rubicon HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: tuuid=9d843e45-439b-4b75-857e-b58446eeadd4	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=9d843e45-439b-4b75-857e-b58446eeadd4; path=/; expires=Mon, 10-Nov-2014 19:14:50 GMT P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: //pixel.rubiconproject.com/tap.php?v=15796&nid=2760&put=9d843e45-439b-4b75-857e-b58446eeadd4&expires=30 Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 26 Jul 1997 05:00:00 GMT Pragma: no-cache Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:50 GMT
GET /r1/ruum HTTP/1.1 Host: rp.gwallet.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: application/octet-stream Content-Length: 0 Server: radiumone/1.2 Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Expires: Tue, 29 Oct 2002 19:50:44 GMT Location: http://pixel.rubiconproject.com/tap.php?v=7935&nid=2271&expires=30&put=BkdHLmO1al-6Rdy2LCLAxIUIzM8 Pragma: no-cache P3P: CP="RadiumOne does not have a P3P policy. For information on our privacy policy please visit http://radiumone.com/about/privacy.html" Set-Cookie: ra1_uid=5544967276499052288; Expires=Sun, 10-Nov-2013 19:14:51 GMT; Path=/; Domain=gwallet.com; Version=1
GET /match?mrbyus=true&excid=17 HTTP/1.1 Host: rubicon.admailtiser.com GET /match?mrbyus=true&excid=17 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: nginx/1.1.1 Date: Sat, 10 Nov 2012 19:14:51 GMT Content-Length: 0 Connection: keep-alive P3P: policyref="http://admailtiser.com/w3c/p3p.xml", CP="NOI IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA NOR UNI" Set-Cookie: cicouid=629c9f03-3c9c-4f8b-9b98-217b8a0ddcf4FTS_vcFHelfijcfRGIWJYg; Domain=.admailtiser.com; Expires=Sun, 10-Nov-2013 19:14:51 GMT; Path=/ Location: http://pixel.rubiconproject.com/tap.php?v=12224&nid=2530&put=-8875470260323754750&expires=365
GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 Host: secure.gravatar.com GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx Date: Sat, 10 Nov 2012 19:14:51 GMT Content-Length: 906 Connection: keep-alive Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Access-Control-Allow-Origin: * Content-Disposition: inline; filename="00000000.png" X-Varnish: 2442005416 2437130913 Via: 1.1 varnish Expires: Sat, 10 Nov 2012 19:19:51 GMT Cache-Control: max-age=300
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: s-static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: JS4qOSg1Dl3AgVtg3MyBP4whcr8SZapA/Vud9cBlDwY= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31479650 Expires: Sun, 10 Nov 2013 03:35:41 GMT Date: Sat, 10 Nov 2012 19:14:51 GMT Connection: keep-alive
GET /oz/feeds/invite-media-rtb/tokens/?rt=iframe HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sat, 10 Nov 2012 19:14:51 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=866fb605d4334fc0bcbfd275d22e554d8289f1ec&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Sun, 10-Nov-2013 19:14:51 GMT; Path=/ au=H9D461O5-GR01-10.250.151.242; Domain=.rubiconproject.com; Expires=Sun, 08-Nov-2020 19:14:51 GMT; Path=/ dq=1\|1\|0\|0; Expires=Sun, 10-Nov-2013 19:14:51 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="10 Nov 2012 19:14:51 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=200 Connection: Keep-Alive
GET /dmp/pixelSync?network=Rubicon HTTP/1.1 Host: pixel.sitescout.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Server: Apache-Coyote/1.1 Date: Sat, 10 Nov 2012 19:14:50 GMT
GET /tap.php?v=14965&nid=2731&put=98b06ff7d82e426d9abc9dcdbb39df6c&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=14965&nid=2731&put=98b06ff7d82e426d9abc9dcdbb39df6c&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:51 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%2614965%3D1; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2614965%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.pixel.rubiconproject.com put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9895 Connection: Keep-Alive
GET /p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FSn4^Ehxzkb10I3eXSQPkkOY1ydik999/<AvJ:-; sess=1; icu=ChIIlroHEAoYASABKAEwqs_6hAUQqs_6hAUYAA..	HTTP/1.1 200 OK Content-Type: image/png Server: Apache Etag: "a9daeac0f83c5ce58b932bd0f829631f:1351039989" Last-Modified: Wed, 24 Oct 2012 00:53:09 GMT Accept-Ranges: bytes Content-Length: 5051 Date: Sat, 10 Nov 2012 19:14:51 GMT Connection: keep-alive
GET /tap.php?v=6286&nid=2132&put=E0BD654B2802FCE03AAE63059932DAF6&expires=365 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=6286&nid=2132&put=E0BD654B2802FCE03AAE63059932DAF6&expires=365 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:51 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%266286%3D1; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.pixel.rubiconproject.com put_2132=E0BD654B2802FCE03AAE63059932DAF6; expires=Sun, 10-Nov-2013 19:14:51 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9984 Connection: Keep-Alive
GET /tap.php?v=12224&nid=2530&put=-8875470260323754750&expires=365 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=12224&nid=2530&put=-8875470260323754750&expires=365 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:51 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%2612224%3D1; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2612224%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.pixel.rubiconproject.com put_2530=-8875470260323754750; expires=Sun, 10-Nov-2013 19:14:51 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9926 Connection: Keep-Alive
GET /tap.php?v=15796&nid=2760&put=9d843e45-439b-4b75-857e-b58446eeadd4&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=15796&nid=2760&put=9d843e45-439b-4b75-857e-b58446eeadd4&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:51 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%2615796%3D1; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2615796%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.pixel.rubiconproject.com put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9211 Connection: Keep-Alive
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352574891042&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D15146&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352574891042&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D15146&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146 Cookie: UID=4a9372d-195.159.219.9-1352574890; UIDR=1352574890	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:51 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352574891091&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D15146&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352574891091&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D15146&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146 Cookie: UID=4a9372d-195.159.219.9-1352574890; UIDR=1352574890	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:51 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /tap.php?v=7935&nid=2271&expires=30&put=BkdHLmO1al-6Rdy2LCLAxIUIzM8 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7935&nid=2271&expires=30&put=BkdHLmO1al-6Rdy2LCLAxIUIzM8 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:51 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267935%3D1; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.pixel.rubiconproject.com put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9643 Connection: Keep-Alive
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sat, 10 Nov 2012 19:14:51 GMT Connection: close Content-Length: 381
GET /m/rc HTTP/1.1 Host: rc.d.chango.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 35 Server: RTB Etag: "0f4e929dd5bb2564f7ab9c76338e04e292a42ace" Pragma: no-cache Cache-Control: no-cache, no-store, max-age=0, must-revalidate P3P: policyref="http://as.chango.com/static/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: _t=e7018658-2b6a-11e2-9516-00259034b9f4; Domain=chango.com; expires=Tue, 08 Nov 2022 19:14:51 GMT; Path=/ Connection: close
GET /cfcm.ashx?providerId=1007&extMatch=1 HTTP/1.1 Host: extmap.rub.ace.advertising.com GET /cfcm.ashx?providerId=1007&extMatch=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found HTTP/1.1 302 Found Date: Sat, 10 Nov 2012 19:14:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET X-AspNet-Version: 2.0.50727 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Pragma: no-cache Location: /cfcm.ashx?providerId=1007&extMatch=1&ctst=1 Set-Cookie: ACID=xe520013525748910003; domain=advertising.com; expires=Mon, 10-Nov-2014 19:14:51 GMT; path=/ Cache-Control: private, no-cache, max-age=0 Expires: Sat, 10 Nov 2012 19:14:51 GMT Content-Length: 0
GET /adserver/cookiematch?pnid=3000007 HTTP/1.1 Host: rubicon-rtb.p.veruta.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache-Coyote/1.1 Content-Length: 43 Date: Sat, 10 Nov 2012 19:14:50 GMT
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352574891624&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D46595&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352574891624&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D46595&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=46595 Cookie: UID=4a9372d-195.159.219.9-1352574890; UIDR=1352574890	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:51 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /c/cse?a=Q&B=17 HTTP/1.1 Host: connexity.net GET /c/cse?a=Q&B=17 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Connexity Transfer-Encoding: chunked Connection: keep-alive Date: Sat, 10 Nov 2012 19:14:51 GMT Cache-Control: no-store, max-age=-1, post-check=0, pre-check=0 Pragma: no-cache Expires: -1 P3P: policyref="/w3c/p3p.xml", CP="CAO PSA OUR CURa DEVa PSDo PSAo BUS COR UNI COM",an.pp="http://www.connexity.com/privacy",an.oo="http://www.connexity.com/privacy",an.bt="N" Set-Cookie: COu=e97b36569a14f57f-064a296082de1b41-2175fb3dd9911197; expires=Thu, 09-Nov-2017 19:14:51 GMT; domain=.connexity.net; path=/ Content-Transfer-Encoding: binary
GET /rubicon_sync?publisher_user_id=866fb605d4334fc0bcbfd275d22e554d8289f1ec&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 Host: pixel.invitemedia.com GET /rubicon_sync?publisher_user_id=866fb605d4334fc0bcbfd275d22e554d8289f1ec&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: text/html Date: Sat, 10 Nov 2012 19:14:51 GMT Set-Cookie: uid=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef;Path=/;Domain=invitemedia.com;Expires=Sun, 10-Nov-2013 19:14:51 GMT impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC" Cache-Control: no-cache Content-Length: 221 Connection: close Server: Jetty(7.3.1.v20110307)
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FSn4^Ehxzkb10I3eXSQPkkOY1ydik999/<AvJ:-; sess=1; icu=ChIIlroHEAoYASABKAEwqs_6hAUQqs_6hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Fri, 08-Feb-2013 19:14:51 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Sun, 11-Nov-2012 19:14:51 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FSn4^Ehxzkb10I3eXSQPkkOY1ydik999/<AvJ:-; path=/; expires=Fri, 08-Feb-2013 19:14:51 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sat, 10 Nov 2012 19:14:51 GMT
GET /images/pixel.gif HTTP/1.1 Host: spe.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Allow: GET Expires: Mon, 12 Nov 2012 19:09:54 GMT Date: Sat, 10 Nov 2012 19:14:52 GMT Connection: keep-alive
GET /cfcm.ashx?providerId=1007&extMatch=1&ctst=1 HTTP/1.1 Host: extmap.rub.ace.advertising.com GET /cfcm.ashx?providerId=1007&extMatch=1&ctst=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: ACID=xe520013525748910003	HTTP/1.1 302 Found HTTP/1.1 302 Found Date: Sat, 10 Nov 2012 19:14:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET X-AspNet-Version: 2.0.50727 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Pragma: no-cache Location: http://pixel.rubiconproject.com/tap.php?v=7249%7c%7c11203&nid=2146,2309&put=RUID5qaxja8ccqffeu7zjb8jhdngjuxzkj3euasjbme1ib7odzfoa6zy====&expires=30 Set-Cookie: UMAP=MTAwNzoxMzUyNTc0ODky; domain=advertising.com; expires=Mon, 10-Nov-2014 19:14:52 GMT; path=/ Cache-Control: private, no-cache, max-age=0 Expires: Sat, 10 Nov 2012 19:14:52 GMT Content-Length: 0
GET /ping_match.gif?ei=RUBICON&rurl=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4210%26nid%3D1523%26put%3D_wfivefivec_%26expires%3D10 HTTP/1.1 Host: i.w55c.net GET /ping_match.gif?ei=RUBICON&rurl=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4210%26nid%3D1523%26put%3D_wfivefivec_%26expires%3D10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found HTTP/1.1 302 Found Date: Sat, 10 Nov 2012 19:14:52 GMT Server: Jetty(6.1.22) Set-Cookie: wfivefivec=e0bc4d58-e100-460a-9957-c4eda8435a22;Path=/;Domain=.w55c.net;Expires=Mon, 10-Nov-14 19:14:52 GMT X-Version: DataXu Pixel Tracker v3.3 20120918 Cache-Control: private P3P: policyref="https://cts.w55c.net/ct/p3p_policy_ref.xml", CP="UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI" Content-Length: 0 Location: http://pixel.rubiconproject.com/tap.php?v=4210&nid=1523&put=e0bc4d58-e100-460a-9957-c4eda8435a22&expires=10 Via: 1.1 lhr032172010000 (MII-APC/2.2) Keep-Alive: timeout=2 Connection: Keep-Alive
GET /pull_sync?pid=rubicon HTTP/1.1 Host: www.wtp101.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 26 Jul 1997 05:00:00 GMT Pragma: no-cache Content-Length: 43 Date: Sat, 10 Nov 2012 19:14:52 GMT
GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 Host: user.lucidmedia.com GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Apache-Coyote/1.1 Cache-Control: no-cache, no-store Pragma: no-cache Date: Sat, 10 Nov 2012 19:14:52 GMT Expires: Sat, 10 Nov 2012 19:14:52 GMT P3P: CP="NOI ADM DEV CUR" X-Handled-By: awserh29/127.0.0.1 Set-Cookie: lm_userid=3ffjjYb5eSz; Domain=.lucidmedia.com; Expires=Sun, 10-Nov-2013 19:14:52 GMT; Path=/ Location: http://pixel.rubiconproject.com/tap.php?v=7206&nid=1197&put=4245697051038754751&expires=30 Content-Length: 0 Connection: close
GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 Host: m.xp1.ru4.com GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Sun-Java-System-Web-Server/7.0 Date: Sat, 10 Nov 2012 19:14:50 GMT P3P: policyref="/w3c/p3p.xml", CP="NON DSP COR PSAa OUR STP UNI" Pragma: no-cache Set-Cookie: X1ID=NE-00000002449248265; domain=.ru4.com; path=/; expires=Sat, 10-May-2014 14:14:50 GMT Location: http://pixel.rubiconproject.com/tap.php?v=5671&nid=2081&put=NE-00000002449248265&expires=30 Content-Length: 0
GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353006891&publisher_dsp_id=2101&external_user_id=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef HTTP/1.1 Host: tap.rubiconproject.com GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353006891&publisher_dsp_id=2101&external_user_id=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=866fb605d4334fc0bcbfd275d22e554d8289f1ec&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%267935%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890; cd=false; au=H9D461O5-GR01-10.250.151.242; dq=1\|1\|0\|0; lm="10 Nov 2012 19:14:51 GMT"; put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; put_2132=E0BD654B2802FCE03AAE63059932DAF6; put_2530=-8875470260323754750; put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sat, 10 Nov 2012 19:14:52 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.rubiconproject.com/tap.php?v=5852&nid=2101&put=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Sun, 10-Nov-2013 19:14:52 GMT; Path=/ dq=2\|2\|0\|0; Expires=Sun, 10-Nov-2013 19:14:52 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="10 Nov 2012 19:14:52 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=181 Connection: Keep-Alive
GET /tap.php?v=7249%7c%7c11203&nid=2146,2309&put=RUID5qaxja8ccqffeu7zjb8jhdngjuxzkj3euasjbme1ib7odzfoa6zy====&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7249%7c%7c11203&nid=2146,2309&put=RUID5qaxja8ccqffeu7zjb8jhdngjuxzkj3euasjbme1ib7odzfoa6zy====&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%267935%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890; cd=false; au=H9D461O5-GR01-10.250.151.242; lm="10 Nov 2012 19:14:51 GMT"; put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; put_2132=E0BD654B2802FCE03AAE63059932DAF6; put_2530=-8875470260323754750; put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:52 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267935%3D1%267249%3D1%2611203%3D1; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C%267249%3D25067%2C0%2C1%2C%2C%2611203%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.pixel.rubiconproject.com put_2146=RUID5qaxja8ccqffeu7zjb8jhdngjuxzkj3euasjbme1ib7odzfoa6zy%3D%3D%3D%3D; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com put_2309=RUID5qaxja8ccqffeu7zjb8jhdngjuxzkj3euasjbme1ib7odzfoa6zy%3D%3D%3D%3D; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9875 Connection: Keep-Alive
GET /tap.php?v=4210&nid=1523&put=e0bc4d58-e100-460a-9957-c4eda8435a22&expires=10 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=4210&nid=1523&put=e0bc4d58-e100-460a-9957-c4eda8435a22&expires=10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%267935%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890; cd=false; au=H9D461O5-GR01-10.250.151.242; lm="10 Nov 2012 19:14:51 GMT"; put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; put_2132=E0BD654B2802FCE03AAE63059932DAF6; put_2530=-8875470260323754750; put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:52 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267935%3D1%264210%3D1; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C%264210%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.pixel.rubiconproject.com put_1523=e0bc4d58-e100-460a-9957-c4eda8435a22; expires=Tue, 20-Nov-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9530 Connection: Keep-Alive
GET /tap.php?v=7206&nid=1197&put=4245697051038754751&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7206&nid=1197&put=4245697051038754751&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%267935%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890; cd=false; au=H9D461O5-GR01-10.250.151.242; lm="10 Nov 2012 19:14:51 GMT"; put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; put_2132=E0BD654B2802FCE03AAE63059932DAF6; put_2530=-8875470260323754750; put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:52 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267935%3D1%267206%3D1; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C%267206%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.pixel.rubiconproject.com put_1197=4245697051038754751; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9689 Connection: Keep-Alive
GET /tap.php?v=5852&nid=2101&put=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5852&nid=2101&put=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=866fb605d4334fc0bcbfd275d22e554d8289f1ec&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%267935%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890; cd=false; au=H9D461O5-GR01-10.250.151.242; lm="10 Nov 2012 19:14:52 GMT"; put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; put_2132=E0BD654B2802FCE03AAE63059932DAF6; put_2530=-8875470260323754750; put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:52 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267935%3D1%265852%3D1; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C%265852%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.pixel.rubiconproject.com put_2101=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8937 Connection: Keep-Alive
GET /tap.php?v=5671&nid=2081&put=NE-00000002449248265&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5671&nid=2081&put=NE-00000002449248265&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%267935%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890; cd=false; au=H9D461O5-GR01-10.250.151.242; lm="10 Nov 2012 19:14:51 GMT"; put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; put_2132=E0BD654B2802FCE03AAE63059932DAF6; put_2530=-8875470260323754750; put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:52 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267935%3D1%265671%3D1; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C%265671%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.pixel.rubiconproject.com put_2081=NE-00000002449248265; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8799 Connection: Keep-Alive
GET /cached/creatives/137299/zuhu160yellow.jpg HTTP/1.1 Host: cdn3.cpmstar.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://server.cpmstar.com/view.aspx?poolid=12887&campaignid=56911&creativeid=137299&h=067AA536D333B4853658CF46B8C39A4075DB313C	HTTP/1.1 200 OK Content-Type: image/jpeg Cache-Control: public Server: Microsoft-IIS/7.5 Content-Disposition: inline;filename=137299_zuhu160yellow.jpg X-AspNet-Version: 2.0.50727 P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Via: 1.1 ID-0001544140306215 uproxy-2 Age: 15973 Date: Sat, 10 Nov 2012 19:14:52 GMT Expires: Sun, 11 Nov 2012 14:48:39 GMT Content-Length: 44455 Connection: close
POST / HTTP/1.1 Host: ocsp.verisign.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	HTTP/1.0 200 Ok Content-Type: application/ocsp-response Last-Modified: Fri, 09 Nov 2012 00:41:57 GMT Expires: Fri, 16 Nov 2012 00:41:57 GMT Content-Transfer-Encoding: binary Content-Length: 1814 Cache-Control: max-age=451625, public, no-transform, must-revalidate Date: Sat, 10 Nov 2012 19:14:52 GMT nncoection: close Connection: Keep-Alive
GET /dialog/oauth?client_id=124578887583575&response_type=token%2Csigned_request%2Ccode&display=none&domain=www.mediafire.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Df182ddf5ecd0e92%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff2107650cfc07d2%26domain%3Dwww.mediafire.com%26relation%3Dparent&sdk=joey HTTP/1.1 Host: www.facebook.com GET /dialog/oauth?client_id=124578887583575&response_type=token%2Csigned_request%2Ccode&display=none&domain=www.mediafire.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Df182ddf5ecd0e92%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff2107650cfc07d2%26domain%3Dwww.mediafire.com%26relation%3Dparent&sdk=joey HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Location: http://static.ak.facebook.com/connect/xd_arbiter.php?version=17#cb=f182ddf5ecd0e92&origin=http%3A%2F%2Fwww.mediafire.com%2Ff2107650cfc07d2&domain=www.mediafire.com&relation=parent&error=unknown_user Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-FB-Debug: UA9IJqo/SIWDoic7V7G98hWNOh5L6CJnfvbu9uBJrl0= Date: Sat, 10 Nov 2012 19:14:53 GMT Connection: keep-alive Content-Length: 0
GET /partner/scripts/rubicon/page_parser.js?d=www.mediafire.com HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613 Cookie: rpb=14240%3D1%267935%3D1%265671%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890; cd=false; au=H9D461O5-GR01-10.250.151.242; lm="10 Nov 2012 19:14:52 GMT"; put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; put_2132=E0BD654B2802FCE03AAE63059932DAF6; put_2530=-8875470260323754750; put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8; put_2146=RUID5qaxja8ccqffeu7zjb8jhdngjuxzkj3euasjbme1ib7odzfoa6zy%3D%3D%3D%3D; put_2309=RUID5qaxja8ccqffeu7zjb8jhdngjuxzkj3euasjbme1ib7odzfoa6zy%3D%3D%3D%3D; put_1523=e0bc4d58-e100-460a-9957-c4eda8435a22; put_1197=4245697051038754751; put_2101=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef; put_2081=NE-00000002449248265	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:56:39 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sat, 10 Nov 2012 20:14:54 GMT Date: Sat, 10 Nov 2012 19:14:54 GMT Content-Length: 5705 Connection: keep-alive Vary: Accept-Encoding
GET /rsfifwb7t0fg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe HTTP/1.1 Host: 205.196.120.181 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 302 Found HTTP/1.1 302 Found Location: http://www.mediafire.com/?4p5wab4oqodaj44 Connection: Close
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1 Host: static.ak.fbcdn.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 Origin: http://www.facebook.com
GET /view.aspx?poolid=12887&campaignid=56911&creativeid=137299&h=067AA536D333B4853658CF46B8C39A4075DB313C HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&campaignid=56911&creativeid=137299&h=067AA536D333B4853658CF46B8C39A4075DB313C HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=46595 Cookie: USER_ID=F%aa%06%09%c6%cbE%3f%f33%88%1d%ec%3b%d9; n15=0,12887,56911,137299,1352574912,0; sm=t=1352488572	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sat, 10 Nov 2012 19:14:53 GMT Connection: close Via: 1.1 ID-0001544140306215 uproxy-5

Request	Response
GET /css/mfv3_85677.php?ver=nonssl HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 37605 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:45 GMT Connection: keep-alive
GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 Host: cdn.mediafire.com GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 52116 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:45 GMT Connection: keep-alive
GET /?4p5wab4oqodaj44 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Nov 2012 19:14:45 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: 0 Set-Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; expires=Sat, 11-Oct-2014 19:14:45 GMT; path=/; domain=.mediafire.com; httponly Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 17019 Connection: close Server: MediaFire
GET /images/favicon/download.ico HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Date: Sat, 10 Nov 2012 19:14:46 GMT Last-Modified: Thu, 25 Oct 2012 21:59:32 GMT Accept-Ranges: bytes Content-Length: 1150 Connection: close Server: MediaFire
GET /css?family=Open+Sans:800,400,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/css Expires: Sat, 10 Nov 2012 19:14:46 GMT Date: Sat, 10 Nov 2012 19:14:46 GMT Cache-Control: private, max-age=86400 Content-Encoding: gzip Content-Length: 318 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE
GET /blank.html HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Last-Modified: Tue, 18 Sep 2012 21:44:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 78 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/icons/ajax-loader-grey_round.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 1775 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/logos/logo_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 16 Jul 2012 19:28:31 GMT Accept-Ranges: bytes Content-Length: 3708 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 2315 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_allowemail.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 941 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/buttons/btn_twitter_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 1799 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/icons/dropdown-arrow-left-white.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 123 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/icons/information_darkblue.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 722 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /ga.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 14888 Content-Encoding: gzip Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT X-Content-Type-Options: nosniff, nosniff Date: Sat, 10 Nov 2012 08:33:27 GMT Expires: Sat, 10 Nov 2012 20:33:27 GMT Vary: Accept-Encoding Age: 38479 Cache-Control: max-age=43200, public Server: GFE/2.0
GET /images/icons/icon-sprite-16-v3.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 02 Oct 2012 17:01:27 GMT Accept-Ranges: bytes Content-Length: 61715 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /images/backgrounds/download/rockmelt/rockmelt_dl_btn.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:44 GMT Accept-Ranges: bytes Content-Length: 7653 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 Host: platform.twitter.com GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: public, max-age=1800 Last-Modified: Thu, 08 Nov 2012 09:18:41 GMT Etag: "567a94a4e136d5c4b7bfde258474cfa6" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 25717 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
GET /recaptcha/api/challenge?k=6LextQUAAAAAALlQv0DSHOYxqF3DftRZxA5yebEe HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Date: Sat, 10 Nov 2012 19:14:47 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 449 Server: GSE
GET /ajax/libs/jquery/1.7.2/jquery.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Content-Encoding: gzip Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT Date: Fri, 09 Nov 2012 20:33:45 GMT Expires: Sat, 09 Nov 2013 20:33:45 GMT X-Content-Type-Options: nosniff Server: sffe Content-Length: 73891 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 81661
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 Host: www.facebook.com GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 Content-Encoding: gzip X-FB-Debug: T4HHu7vK9fszciqxwQS82qLK95db4Rzn0D7myK6pjc4= Date: Sat, 10 Nov 2012 19:14:47 GMT Transfer-Encoding: chunked Connection: keep-alive
GET /js/encoder.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sat, 10 Nov 2012 19:14:47 GMT Last-Modified: Thu, 05 Jan 2012 22:41:54 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Mon, 10 Dec 2012 19:14:47 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3695 Connection: close Server: MediaFire
GET /js/master_85677.js HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: text/javascript Last-Modified: Fri, 09 Nov 2012 23:25:30 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Server: MediaFire Content-Length: 143613 Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:46 GMT Connection: keep-alive
GET /js/bust_out.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sat, 10 Nov 2012 19:14:47 GMT Last-Modified: Thu, 31 May 2012 19:49:34 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Mon, 10 Dec 2012 19:14:47 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 57 Connection: close Server: MediaFire
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=1759221474&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=2086098979&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.1665035522.1352574887.1352574887.1352574887.1%3B%2B__utmz%3D213136648.1352574887.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 Host: www.google-analytics.com GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=1759221474&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=2086098979&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.1665035522.1352574887.1352574887.1352574887.1%3B%2B__utmz%3D213136648.1352574887.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 09 Nov 2012 20:33:28 GMT Content-Length: 35 X-Content-Type-Options: nosniff Pragma: no-cache Expires: Wed, 19 Apr 2000 11:43:00 GMT Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Age: 81679 Server: GFE/2.0
GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 Host: p.twitter.com GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: image/gif Etag: "377d257f2d2e294916143c069141c1c5:1328738114" Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT Accept-Ranges: bytes Content-Length: 43 Cache-Control: no-cache P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Date: Sat, 10 Nov 2012 19:14:47 GMT Connection: keep-alive
GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 Host: cdn.api.twitter.com GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Last-Modified: Sat, 10 Nov 2012 19:06:55 GMT Pragma: no-cache X-Frame-Options: SAMEORIGIN Status: 200 OK Content-Encoding: gzip Content-Length: 897 Server: tfe Vary: Accept-Encoding Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 10 Nov 2012 19:14:47 GMT Date: Sat, 10 Nov 2012 19:14:47 GMT Connection: keep-alive
GET /images/ad-loader.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:09:03 GMT Accept-Ranges: bytes Content-Length: 1786 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:47 GMT Connection: keep-alive
GET /recaptcha/api/js/recaptcha.js HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: application/x-javascript Expires: Sat, 10 Nov 2012 19:14:47 GMT Date: Sat, 10 Nov 2012 19:14:47 GMT Last-Modified: Tue, 12 Jun 2012 14:07:31 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 17531 Server: GSE Cache-Control: public, max-age=0 Age: 0
GET /recaptcha/api/img/red/refresh.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sat, 10 Nov 2012 19:52:50 GMT Date: Sat, 10 Nov 2012 18:52:50 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 974 Server: GSE Age: 1317 Cache-Control: public, max-age=3600
GET /images/backgrounds/footer/footer_texture.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 20:31:25 GMT Accept-Ranges: bytes Content-Length: 2649 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive
GET /recaptcha/api/img/red/audio.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sat, 10 Nov 2012 19:51:24 GMT Date: Sat, 10 Nov 2012 18:51:24 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 914 Server: GSE Age: 1404 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/text.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sat, 10 Nov 2012 19:55:26 GMT Date: Sat, 10 Nov 2012 18:55:26 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 155 Server: GSE Age: 1162 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/help.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sat, 10 Nov 2012 19:59:20 GMT Date: Sat, 10 Nov 2012 18:59:20 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 367 Server: GSE Age: 928 Cache-Control: public, max-age=3600
GET /images/backgrounds/footer/icn_footer_blog.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 171 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_gp.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 29 Aug 2012 21:02:04 GMT Accept-Ranges: bytes Content-Length: 312 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_tw.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 274 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive
GET /recaptcha/api/image?c=03AHJ_VuvLTfmDkxFUuV-SiO7PjCB3JJlu-efbydIFOCPEictXSa1PDvhDFbu0ycJvBQJr3NjJ48SchNTomNChkxnVGc5ZD2ckZTyWc3kq0M91PrG9TVEN_qhMM27zV47Q5sZYfcofUDBYYsktEwuE-Vasy7fHXIUDNOMmvirk_H1CTkCA4l6BphY HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Sat, 10 Nov 2012 19:24:48 GMT Date: Sat, 10 Nov 2012 19:14:48 GMT Cache-Control: public, max-age=600 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 2626 Server: GSE
GET /images/backgrounds/footer/icn_footer_fb.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 514 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateTW_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 387 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive
GET /templates/linkto/default-337x281-default.php?r=73613 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Nov 2012 19:14:48 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 786 Connection: close Server: MediaFire
GET /images/backgrounds/newHome/loginActivateFB_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 255 Server: MediaFire Cache-Control: max-age=2592000 Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive
GET /templates/linkto/default-337x281-default2.php?r=78035 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Nov 2012 19:14:48 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 787 Connection: close Server: MediaFire
GET /templates/linkto/default-729x91-default.php?r=15146 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Nov 2012 19:14:48 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 666 Connection: close Server: MediaFire
GET /templates/linkto/default-161x601-default.php?r=46595 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Nov 2012 19:14:48 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 733 Connection: close Server: MediaFire
GET /en_US/all.js?_=1352574888144 HTTP/1.1 Host: connect.facebook.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Etag: "06c9a8ca347f3538149da85e21e875b7" Content-Encoding: gzip X-FB-Debug: TzBGyMVUsy2i0kmJxG/P+WT075yCWghpTvtC8/J+0gs= Content-Length: 58143 Cache-Control: public, max-age=1172 Expires: Sat, 10 Nov 2012 19:34:20 GMT Date: Sat, 10 Nov 2012 19:14:48 GMT Connection: keep-alive Vary: Accept-Encoding
GET /recaptcha/api/img/red/sprite.png HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/png Expires: Sat, 10 Nov 2012 20:14:49 GMT Date: Sat, 10 Nov 2012 19:14:49 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 4679 Server: GSE Cache-Control: public, max-age=3600 Age: 0
GET /ad/3196.js HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Sun, 11 Nov 2012 19:14:49 GMT Date: Sat, 10 Nov 2012 19:14:49 GMT Connection: keep-alive
GET /ad/3196.js?cb=0.5010167233699182 HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3551 Cneonction: close Cache-Control: max-age=86400 Expires: Sun, 11 Nov 2012 19:14:49 GMT Date: Sat, 10 Nov 2012 19:14:49 GMT Connection: keep-alive
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: QpUXNDPC4a/ZS9XMuzc2WDBWEZ8S2oHPsfImau8uouU= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31479690 Expires: Sun, 10 Nov 2013 03:36:19 GMT Date: Sat, 10 Nov 2012 19:14:49 GMT Connection: keep-alive
GET /helper_01.swf HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=d93mxf5s340iucmt25x241n3oun5rtql; __utma=213136648.1665035522.1352574887.1352574887.1352574887.1; __utmb=213136648.1.10.1352574887; __utmc=213136648; __utmz=213136648.1352574887.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Date: Sat, 10 Nov 2012 19:14:49 GMT Last-Modified: Sat, 15 Oct 2011 19:43:58 GMT Accept-Ranges: bytes Content-Length: 1480 Cache-Control: max-age=2592000 Expires: Mon, 10 Dec 2012 19:14:49 GMT Connection: close Server: MediaFire
GET /a/3196/3346/9685-15.js?cb=0.0016224635651047592&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-15.js?cb=0.0016224635651047592&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sat, 10 Nov 2012 19:14:49 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db7f4509ea7a950cba8fe6d5da1^1^1352574889^1355524350; expires=Fri, 08-Feb-2013 19:14:49 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sat, 10-Nov-2012 20:14:49 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sat, 10-Nov-2012 20:14:49 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Sun, 11-Nov-2012 00:59:59 GMT; max-age=45910; path=/; domain=.rubiconproject.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=71 Connection: Keep-Alive Transfer-Encoding: chunked
POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 106 Content-Type: application/ocsp-request	HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 10 Nov 2012 19:14:50 GMT Server: Apache Content-Transfer-Encoding: Binary Cache-Control: max-age=16518, public, no-transform, must-revalidate Last-Modified: Sat, 10 Nov 2012 18:04:38 GMT Expires: Sun, 11 Nov 2012 00:04:38 GMT Etag: "425f173981e640aacf9573ef82ae3ba23112327d" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" Content-Length: 1923 Connection: close
GET /static/fonts/opensans/v6/k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM.woff HTTP/1.1 Host: themes.googleusercontent.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://fonts.googleapis.com/css?family=Open+Sans:800,400,700 Origin: http://www.mediafire.com	HTTP/1.1 200 OK Content-Type: font/woff Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT Date: Fri, 09 Nov 2012 20:33:30 GMT Expires: Sat, 09 Nov 2013 20:33:30 GMT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: sffe Content-Length: 22748 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 81679
GET /a/3196/3346/9685-2.js?cb=0.8376454668803763&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-2.js?cb=0.8376454668803763&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sat, 10 Nov 2012 19:14:50 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db40a509ea7aa50cba8fe180a9b^1^1352574890^1355524350; expires=Fri, 08-Feb-2013 19:14:50 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sat, 10-Nov-2012 20:14:50 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk2=0; expires=Sat, 10-Nov-2012 20:14:50 GMT; max-age=10; path=/; domain=.rubiconproject.com ses2=3346^1; expires=Sun, 11-Nov-2012 00:59:59 GMT; max-age=45909; path=/; domain=.rubiconproject.com csi2=3204661.js^1^1352574890^1352574890; expires=Sat, 17-Nov-2012 19:14:50 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=44 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/9685-9.js?cb=0.7586335325681874&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-9.js?cb=0.7586335325681874&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=46595 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sat, 10 Nov 2012 19:14:50 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; expires=Fri, 08-Feb-2013 19:14:50 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sat, 10-Nov-2012 20:14:50 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk9=0; expires=Sat, 10-Nov-2012 20:14:50 GMT; max-age=10; path=/; domain=.rubiconproject.com ses9=3346^1; expires=Sun, 11-Nov-2012 00:59:59 GMT; max-age=45909; path=/; domain=.rubiconproject.com csi9=3165520.js^1^1352574890^1352574890; expires=Sat, 17-Nov-2012 19:14:50 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=48 Connection: Keep-Alive Transfer-Encoding: chunked
GET /beacon.js HTTP/1.1 Host: b.scorecardresearch.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613	HTTP/1.1 200 OK Content-Type: application/x-javascript Vary: Accept-Encoding Content-Encoding: gzip Expires: Sat, 24 Nov 2012 19:14:50 GMT Date: Sat, 10 Nov 2012 19:14:50 GMT Content-Length: 1140 Connection: keep-alive Cache-Control: private, no-transform, max-age=1209600
GET /pixel/p-01nD5uD1pGDW2.gif HTTP/1.1 Host: pixel.quantserve.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613	HTTP/1.1 200 OK Content-Type: image/gif Connection: close Set-Cookie: mc=509ea7aa-4dbf1-9af13-25e31; expires=Mon, 12-May-2014 19:14:50 GMT; path=/; domain=.quantserve.com P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Cache-Control: private, no-cache, no-store, proxy-revalidate Pragma: no-cache Expires: Fri, 04 Aug 1978 12:00:00 GMT Content-Length: 35 Date: Sat, 10 Nov 2012 19:14:50 GMT Server: QS
GET /rubicon/px/aid:5c74c6c25ab020701a1481fc45e2e94897a39011;c:7A04E12E6E4E1123;s:6bdb00c88686993b;cid:33664;ts:1352574889987 HTTP/1.1 Host: 92.61.254.230 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache-Coyote/1.1 Cache-Control: max-age=0,no-cache,no-store Pragma: no-cache Expires: Tue, 11 Oct 1977 12:34:56 GMT Connection: close Content-Length: 807 Date: Sat, 10 Nov 2012 19:14:49 GMT
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 Host: tap2-cdn.rubiconproject.com GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f4509ea7a950cba8fe6d5da1^1^1352574889^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Last-Modified: Fri, 09 Nov 2012 22:35:12 GMT Content-Encoding: gzip Cache-Control: max-age=600 Expires: Sat, 10 Nov 2012 19:24:50 GMT Date: Sat, 10 Nov 2012 19:14:50 GMT Content-Length: 5080 Connection: keep-alive Vary: Accept-Encoding
GET /a/3196/3346/27309-15.js?cb=0.5059716134663681&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/27309-15.js?cb=0.5059716134663681&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=78035 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sat, 10 Nov 2012 19:14:50 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592dc798509ea7aa50cba8fe59783f^1^1352574890^1355524350; expires=Fri, 08-Feb-2013 19:14:50 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sat, 10-Nov-2012 20:14:50 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sat, 10-Nov-2012 20:14:50 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Sun, 11-Nov-2012 00:59:59 GMT; max-age=45909; path=/; domain=.rubiconproject.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Transfer-Encoding: chunked
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 Host: fpdownload2.macromedia.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/xml Server: Apache Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT Etag: "87de33-256-4cd617ed12480" Accept-Ranges: bytes Content-Length: 598 Date: Sat, 10 Nov 2012 19:14:50 GMT Connection: keep-alive
GET /partner/scripts/rubicon/alice.js HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f4509ea7a950cba8fe6d5da1^1^1352574889^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:56:23 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sat, 10 Nov 2012 20:14:50 GMT Date: Sat, 10 Nov 2012 19:14:50 GMT Content-Length: 5798 Connection: keep-alive Vary: Accept-Encoding
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352574890435&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D73613&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352574890435&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D73613&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352574890435&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D73613&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sat, 10 Nov 2012 19:14:50 GMT Connection: keep-alive Set-Cookie: UID=4a9372d-195.159.219.9-1352574890; expires=Fri, 31-Oct-2014 19:14:50 GMT; path=/; domain=.scorecardresearch.com UIDR=1352574890; expires=Fri, 31-Oct-2014 19:14:50 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 Date: Sat, 10 Nov 2012 19:14:50 GMT Content-Length: 0
GET /3900/3859/300x250.-ACA343C.swf?clickTag=http%3A%2F%2Fclickserv.sitescout.com%2Fclk%2F04713701195c110a%2F9878732a8e2f50e0%2F1-3346%2F2%2Fwww.mediafire.com%252F%2F%2FcidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw HTTP/1.1 Host: dspads.sitescout.netdna-cdn.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Date: Sat, 10 Nov 2012 19:14:50 GMT Content-Length: 54403 Connection: keep-alive Etag: W/"54403-1342719889000" Last-Modified: Thu, 19 Jul 2012 17:44:49 GMT Server: NetDNA-cache/2.2 X-Cache: HIT Accept-Ranges: bytes
GET /pixel/p-01nD5uD1pGDW2.gif HTTP/1.1 Host: pixel.quantserve.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=78035 Cookie: mc=509ea7aa-4dbf1-9af13-25e31	HTTP/1.1 200 OK Content-Type: image/gif Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Pragma: no-cache Expires: Fri, 04 Aug 1978 12:00:00 GMT Content-Length: 35 Date: Sat, 10 Nov 2012 19:14:50 GMT Server: QS
GET /rubicon/px/aid:615df5c492390090ad0362a8a338074145d07317;c:7A04E12E6E4E1123;s:6bdb00c88686993b;cid:33664;ts:1352574890152 HTTP/1.1 Host: 92.61.254.231 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=78035	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache-Coyote/1.1 Cache-Control: max-age=0,no-cache,no-store Pragma: no-cache Expires: Tue, 11 Oct 1977 12:34:56 GMT Connection: close Content-Length: 807 Date: Sat, 10 Nov 2012 19:14:50 GMT
GET /int/integration?pixel=303852&nid=302660 HTTP/1.1 Host: i.ctnsnet.com GET /int/integration?pixel=303852&nid=302660 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_98b06ff7d82e426d9abc9dcdbb39df6c=1; path=/; domain=.ctnsnet.com; expires=Sun, 10-Nov-2013 19:14:50 GMT; px=AAAEouxQxjSq; path=/; domain=.ctnsnet.com; expires=Sun, 10-Mar-2013 19:14:50 GMT; pb=AAAEowJQxjSq; path=/; domain=.ctnsnet.com; expires=Wed, 09-Jan-2013 19:14:50 GMT; opt=0; path=/; domain=.ctnsnet.com; expires=Sun, 10-Nov-2013 19:14:50 GMT; Pragma: no-cache Cache-Control: private, no-cache, no-store, max-age=0 Location: http://pixel.rubiconproject.com/tap.php?v=14965&nid=2731&put=98b06ff7d82e426d9abc9dcdbb39df6c&expires=30 Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:50 GMT Connection: close
GET /sync?ssp=rubicon HTTP/1.1 Host: x.bidswitch.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=9d843e45-439b-4b75-857e-b58446eeadd4; path=/; expires=Mon, 10-Nov-2014 19:14:50 GMT P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: /sync?ul_cb=1&ssp=rubicon Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 26 Jul 1997 05:00:00 GMT Pragma: no-cache Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:50 GMT
GET /rb_match HTTP/1.1 Host: um.simpli.fi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain Server: nginx Date: Sat, 10 Nov 2012 19:14:50 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: uid=S2W94OD8AigFY6469toymV%3D%3D; path=/; expires=Sun, 10 Nov 2013 19:14:50 GMT; domain=.simpli.fi Location: http://pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=E0BD654B2802FCE03AAE63059932DAF6&expires=365 P3P: policyref="http://www.simplifi.com/w3c/Policies.xml", CP="ADMa DEVa PSAa PSDa OUR IND DSP NON COR"
GET /view.aspx?poolid=12887&script=1&rnd=265935 HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&script=1&rnd=265935 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=46595	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: /view.aspx?poolid=12887&script=1&rnd=265935&test=1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: USER_ID=F%aa%06%09%c6%cbE%3f%f33%88%1d%ec%3b%d9; domain=.server.cpmstar.com; expires=Wed, 10-Nov-2032 19:14:51 GMT; path=/ P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sat, 10 Nov 2012 19:14:51 GMT Content-Length: 185 Connection: Keep-alive Keep-Alive: timeout=15, max=100 Via: 1.1 ID-0001544140306215 uproxy-5
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352574890435&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D73613&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352574890435&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D73613&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613 Cookie: UID=4a9372d-195.159.219.9-1352574890; UIDR=1352574890	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:50 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /dmm/rubicon/match HTTP/1.1 Host: rubicon-match.dotomi.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 204 No Content Content-Type: text/plain Date: Sat, 10 Nov 2012 19:14:50 GMT X-Name: dtiad01rtb19p.int Cache-Control: max-age=0, no-store Content-Length: 0 Connection: close
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352574890813&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D78035&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352574890813&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D78035&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=78035 Cookie: UID=4a9372d-195.159.219.9-1352574890; UIDR=1352574890	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:50 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Fri, 08-Feb-2013 19:14:50 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Sun, 11-Nov-2012 19:14:50 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwqs_6hAUQqs_6hAUYAA..; path=/; expires=Fri, 08-Feb-2013 19:14:50 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FSn4^Ehxzkb10I3eXSQPkkOY1ydik999/<AvJ:-; path=/; expires=Fri, 08-Feb-2013 19:14:50 GMT; domain=.adnxs.com; HttpOnly Date: Sat, 10 Nov 2012 19:14:50 GMT Content-Length: 1349
GET /3900/3859/300x250.-ACA343C.swf?clickTag=http%3A%2F%2Fclickserv.sitescout.com%2Fclk%2F04713701195c110a%2F9878732a8e2f50e0%2F1-3346%2F2%2Fwww.mediafire.com%252F%2F%2FcidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw HTTP/1.1 Host: dspads.sitescout.netdna-cdn.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=78035 If-Modified-Since: Thu, 19 Jul 2012 17:44:49 GMT If-None-Match: W/"54403-1342719889000"	HTTP/1.1 304 Not Modified HTTP/1.1 304 Not Modified Date: Sat, 10 Nov 2012 19:14:50 GMT Connection: keep-alive Etag: W/"54403-1342719889000" Last-Modified: Thu, 19 Jul 2012 17:44:49 GMT Server: NetDNA-cache/2.2 X-Cache: HIT
GET /sync?ul_cb=1&ssp=rubicon HTTP/1.1 Host: x.bidswitch.net GET /sync?ul_cb=1&ssp=rubicon HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: tuuid=9d843e45-439b-4b75-857e-b58446eeadd4	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=9d843e45-439b-4b75-857e-b58446eeadd4; path=/; expires=Mon, 10-Nov-2014 19:14:50 GMT P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: //pixel.rubiconproject.com/tap.php?v=15796&nid=2760&put=9d843e45-439b-4b75-857e-b58446eeadd4&expires=30 Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 26 Jul 1997 05:00:00 GMT Pragma: no-cache Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:50 GMT
GET /r1/ruum HTTP/1.1 Host: rp.gwallet.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: application/octet-stream Content-Length: 0 Server: radiumone/1.2 Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Expires: Tue, 29 Oct 2002 19:50:44 GMT Location: http://pixel.rubiconproject.com/tap.php?v=7935&nid=2271&expires=30&put=BkdHLmO1al-6Rdy2LCLAxIUIzM8 Pragma: no-cache P3P: CP="RadiumOne does not have a P3P policy. For information on our privacy policy please visit http://radiumone.com/about/privacy.html" Set-Cookie: ra1_uid=5544967276499052288; Expires=Sun, 10-Nov-2013 19:14:51 GMT; Path=/; Domain=gwallet.com; Version=1
GET /match?mrbyus=true&excid=17 HTTP/1.1 Host: rubicon.admailtiser.com GET /match?mrbyus=true&excid=17 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: nginx/1.1.1 Date: Sat, 10 Nov 2012 19:14:51 GMT Content-Length: 0 Connection: keep-alive P3P: policyref="http://admailtiser.com/w3c/p3p.xml", CP="NOI IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA NOR UNI" Set-Cookie: cicouid=629c9f03-3c9c-4f8b-9b98-217b8a0ddcf4FTS_vcFHelfijcfRGIWJYg; Domain=.admailtiser.com; Expires=Sun, 10-Nov-2013 19:14:51 GMT; Path=/ Location: http://pixel.rubiconproject.com/tap.php?v=12224&nid=2530&put=-8875470260323754750&expires=365
GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 Host: secure.gravatar.com GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx Date: Sat, 10 Nov 2012 19:14:51 GMT Content-Length: 906 Connection: keep-alive Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Access-Control-Allow-Origin: * Content-Disposition: inline; filename="00000000.png" X-Varnish: 2442005416 2437130913 Via: 1.1 varnish Expires: Sat, 10 Nov 2012 19:19:51 GMT Cache-Control: max-age=300
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: s-static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: JS4qOSg1Dl3AgVtg3MyBP4whcr8SZapA/Vud9cBlDwY= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31479650 Expires: Sun, 10 Nov 2013 03:35:41 GMT Date: Sat, 10 Nov 2012 19:14:51 GMT Connection: keep-alive
GET /oz/feeds/invite-media-rtb/tokens/?rt=iframe HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sat, 10 Nov 2012 19:14:51 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=866fb605d4334fc0bcbfd275d22e554d8289f1ec&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Sun, 10-Nov-2013 19:14:51 GMT; Path=/ au=H9D461O5-GR01-10.250.151.242; Domain=.rubiconproject.com; Expires=Sun, 08-Nov-2020 19:14:51 GMT; Path=/ dq=1\|1\|0\|0; Expires=Sun, 10-Nov-2013 19:14:51 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="10 Nov 2012 19:14:51 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=200 Connection: Keep-Alive
GET /dmp/pixelSync?network=Rubicon HTTP/1.1 Host: pixel.sitescout.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Server: Apache-Coyote/1.1 Date: Sat, 10 Nov 2012 19:14:50 GMT
GET /tap.php?v=14965&nid=2731&put=98b06ff7d82e426d9abc9dcdbb39df6c&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=14965&nid=2731&put=98b06ff7d82e426d9abc9dcdbb39df6c&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:51 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%2614965%3D1; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2614965%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.pixel.rubiconproject.com put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9895 Connection: Keep-Alive
GET /p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FSn4^Ehxzkb10I3eXSQPkkOY1ydik999/<AvJ:-; sess=1; icu=ChIIlroHEAoYASABKAEwqs_6hAUQqs_6hAUYAA..	HTTP/1.1 200 OK Content-Type: image/png Server: Apache Etag: "a9daeac0f83c5ce58b932bd0f829631f:1351039989" Last-Modified: Wed, 24 Oct 2012 00:53:09 GMT Accept-Ranges: bytes Content-Length: 5051 Date: Sat, 10 Nov 2012 19:14:51 GMT Connection: keep-alive
GET /tap.php?v=6286&nid=2132&put=E0BD654B2802FCE03AAE63059932DAF6&expires=365 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=6286&nid=2132&put=E0BD654B2802FCE03AAE63059932DAF6&expires=365 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:51 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%266286%3D1; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.pixel.rubiconproject.com put_2132=E0BD654B2802FCE03AAE63059932DAF6; expires=Sun, 10-Nov-2013 19:14:51 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9984 Connection: Keep-Alive
GET /tap.php?v=12224&nid=2530&put=-8875470260323754750&expires=365 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=12224&nid=2530&put=-8875470260323754750&expires=365 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:51 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%2612224%3D1; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2612224%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.pixel.rubiconproject.com put_2530=-8875470260323754750; expires=Sun, 10-Nov-2013 19:14:51 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9926 Connection: Keep-Alive
GET /tap.php?v=15796&nid=2760&put=9d843e45-439b-4b75-857e-b58446eeadd4&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=15796&nid=2760&put=9d843e45-439b-4b75-857e-b58446eeadd4&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:51 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%2615796%3D1; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2615796%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.pixel.rubiconproject.com put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9211 Connection: Keep-Alive
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352574891042&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D15146&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352574891042&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D15146&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146 Cookie: UID=4a9372d-195.159.219.9-1352574890; UIDR=1352574890	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:51 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352574891091&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D15146&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352574891091&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D15146&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146 Cookie: UID=4a9372d-195.159.219.9-1352574890; UIDR=1352574890	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:51 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /tap.php?v=7935&nid=2271&expires=30&put=BkdHLmO1al-6Rdy2LCLAxIUIzM8 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7935&nid=2271&expires=30&put=BkdHLmO1al-6Rdy2LCLAxIUIzM8 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:51 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267935%3D1; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.pixel.rubiconproject.com put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8; expires=Mon, 10-Dec-2012 19:14:51 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9643 Connection: Keep-Alive
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=15146 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sat, 10 Nov 2012 19:14:51 GMT Connection: close Content-Length: 381
GET /m/rc HTTP/1.1 Host: rc.d.chango.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 35 Server: RTB Etag: "0f4e929dd5bb2564f7ab9c76338e04e292a42ace" Pragma: no-cache Cache-Control: no-cache, no-store, max-age=0, must-revalidate P3P: policyref="http://as.chango.com/static/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: _t=e7018658-2b6a-11e2-9516-00259034b9f4; Domain=chango.com; expires=Tue, 08 Nov 2022 19:14:51 GMT; Path=/ Connection: close
GET /cfcm.ashx?providerId=1007&extMatch=1 HTTP/1.1 Host: extmap.rub.ace.advertising.com GET /cfcm.ashx?providerId=1007&extMatch=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found HTTP/1.1 302 Found Date: Sat, 10 Nov 2012 19:14:51 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET X-AspNet-Version: 2.0.50727 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Pragma: no-cache Location: /cfcm.ashx?providerId=1007&extMatch=1&ctst=1 Set-Cookie: ACID=xe520013525748910003; domain=advertising.com; expires=Mon, 10-Nov-2014 19:14:51 GMT; path=/ Cache-Control: private, no-cache, max-age=0 Expires: Sat, 10 Nov 2012 19:14:51 GMT Content-Length: 0
GET /adserver/cookiematch?pnid=3000007 HTTP/1.1 Host: rubicon-rtb.p.veruta.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache-Coyote/1.1 Content-Length: 43 Date: Sat, 10 Nov 2012 19:14:50 GMT
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352574891624&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D46595&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352574891624&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D46595&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=46595 Cookie: UID=4a9372d-195.159.219.9-1352574890; UIDR=1352574890	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sat, 10 Nov 2012 19:14:51 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /c/cse?a=Q&B=17 HTTP/1.1 Host: connexity.net GET /c/cse?a=Q&B=17 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Connexity Transfer-Encoding: chunked Connection: keep-alive Date: Sat, 10 Nov 2012 19:14:51 GMT Cache-Control: no-store, max-age=-1, post-check=0, pre-check=0 Pragma: no-cache Expires: -1 P3P: policyref="/w3c/p3p.xml", CP="CAO PSA OUR CURa DEVa PSDo PSAo BUS COR UNI COM",an.pp="http://www.connexity.com/privacy",an.oo="http://www.connexity.com/privacy",an.bt="N" Set-Cookie: COu=e97b36569a14f57f-064a296082de1b41-2175fb3dd9911197; expires=Thu, 09-Nov-2017 19:14:51 GMT; domain=.connexity.net; path=/ Content-Transfer-Encoding: binary
GET /rubicon_sync?publisher_user_id=866fb605d4334fc0bcbfd275d22e554d8289f1ec&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 Host: pixel.invitemedia.com GET /rubicon_sync?publisher_user_id=866fb605d4334fc0bcbfd275d22e554d8289f1ec&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: text/html Date: Sat, 10 Nov 2012 19:14:51 GMT Set-Cookie: uid=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef;Path=/;Domain=invitemedia.com;Expires=Sun, 10-Nov-2013 19:14:51 GMT impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC" Cache-Control: no-cache Content-Length: 221 Connection: close Server: Jetty(7.3.1.v20110307)
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FSn4^Ehxzkb10I3eXSQPkkOY1ydik999/<AvJ:-; sess=1; icu=ChIIlroHEAoYASABKAEwqs_6hAUQqs_6hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Fri, 08-Feb-2013 19:14:51 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Sun, 11-Nov-2012 19:14:51 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FSn4^Ehxzkb10I3eXSQPkkOY1ydik999/<AvJ:-; path=/; expires=Fri, 08-Feb-2013 19:14:51 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sat, 10 Nov 2012 19:14:51 GMT
GET /images/pixel.gif HTTP/1.1 Host: spe.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Allow: GET Expires: Mon, 12 Nov 2012 19:09:54 GMT Date: Sat, 10 Nov 2012 19:14:52 GMT Connection: keep-alive
GET /cfcm.ashx?providerId=1007&extMatch=1&ctst=1 HTTP/1.1 Host: extmap.rub.ace.advertising.com GET /cfcm.ashx?providerId=1007&extMatch=1&ctst=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: ACID=xe520013525748910003	HTTP/1.1 302 Found HTTP/1.1 302 Found Date: Sat, 10 Nov 2012 19:14:52 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET X-AspNet-Version: 2.0.50727 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Pragma: no-cache Location: http://pixel.rubiconproject.com/tap.php?v=7249%7c%7c11203&nid=2146,2309&put=RUID5qaxja8ccqffeu7zjb8jhdngjuxzkj3euasjbme1ib7odzfoa6zy====&expires=30 Set-Cookie: UMAP=MTAwNzoxMzUyNTc0ODky; domain=advertising.com; expires=Mon, 10-Nov-2014 19:14:52 GMT; path=/ Cache-Control: private, no-cache, max-age=0 Expires: Sat, 10 Nov 2012 19:14:52 GMT Content-Length: 0
GET /ping_match.gif?ei=RUBICON&rurl=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4210%26nid%3D1523%26put%3D_wfivefivec_%26expires%3D10 HTTP/1.1 Host: i.w55c.net GET /ping_match.gif?ei=RUBICON&rurl=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4210%26nid%3D1523%26put%3D_wfivefivec_%26expires%3D10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found HTTP/1.1 302 Found Date: Sat, 10 Nov 2012 19:14:52 GMT Server: Jetty(6.1.22) Set-Cookie: wfivefivec=e0bc4d58-e100-460a-9957-c4eda8435a22;Path=/;Domain=.w55c.net;Expires=Mon, 10-Nov-14 19:14:52 GMT X-Version: DataXu Pixel Tracker v3.3 20120918 Cache-Control: private P3P: policyref="https://cts.w55c.net/ct/p3p_policy_ref.xml", CP="UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI" Content-Length: 0 Location: http://pixel.rubiconproject.com/tap.php?v=4210&nid=1523&put=e0bc4d58-e100-460a-9957-c4eda8435a22&expires=10 Via: 1.1 lhr032172010000 (MII-APC/2.2) Keep-Alive: timeout=2 Connection: Keep-Alive
GET /pull_sync?pid=rubicon HTTP/1.1 Host: www.wtp101.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 26 Jul 1997 05:00:00 GMT Pragma: no-cache Content-Length: 43 Date: Sat, 10 Nov 2012 19:14:52 GMT
GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 Host: user.lucidmedia.com GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Apache-Coyote/1.1 Cache-Control: no-cache, no-store Pragma: no-cache Date: Sat, 10 Nov 2012 19:14:52 GMT Expires: Sat, 10 Nov 2012 19:14:52 GMT P3P: CP="NOI ADM DEV CUR" X-Handled-By: awserh29/127.0.0.1 Set-Cookie: lm_userid=3ffjjYb5eSz; Domain=.lucidmedia.com; Expires=Sun, 10-Nov-2013 19:14:52 GMT; Path=/ Location: http://pixel.rubiconproject.com/tap.php?v=7206&nid=1197&put=4245697051038754751&expires=30 Content-Length: 0 Connection: close
GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 Host: m.xp1.ru4.com GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Sun-Java-System-Web-Server/7.0 Date: Sat, 10 Nov 2012 19:14:50 GMT P3P: policyref="/w3c/p3p.xml", CP="NON DSP COR PSAa OUR STP UNI" Pragma: no-cache Set-Cookie: X1ID=NE-00000002449248265; domain=.ru4.com; path=/; expires=Sat, 10-May-2014 14:14:50 GMT Location: http://pixel.rubiconproject.com/tap.php?v=5671&nid=2081&put=NE-00000002449248265&expires=30 Content-Length: 0
GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353006891&publisher_dsp_id=2101&external_user_id=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef HTTP/1.1 Host: tap.rubiconproject.com GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353006891&publisher_dsp_id=2101&external_user_id=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=866fb605d4334fc0bcbfd275d22e554d8289f1ec&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%267935%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890; cd=false; au=H9D461O5-GR01-10.250.151.242; dq=1\|1\|0\|0; lm="10 Nov 2012 19:14:51 GMT"; put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; put_2132=E0BD654B2802FCE03AAE63059932DAF6; put_2530=-8875470260323754750; put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sat, 10 Nov 2012 19:14:52 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.rubiconproject.com/tap.php?v=5852&nid=2101&put=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Sun, 10-Nov-2013 19:14:52 GMT; Path=/ dq=2\|2\|0\|0; Expires=Sun, 10-Nov-2013 19:14:52 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="10 Nov 2012 19:14:52 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=181 Connection: Keep-Alive
GET /tap.php?v=7249%7c%7c11203&nid=2146,2309&put=RUID5qaxja8ccqffeu7zjb8jhdngjuxzkj3euasjbme1ib7odzfoa6zy====&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7249%7c%7c11203&nid=2146,2309&put=RUID5qaxja8ccqffeu7zjb8jhdngjuxzkj3euasjbme1ib7odzfoa6zy====&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%267935%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890; cd=false; au=H9D461O5-GR01-10.250.151.242; lm="10 Nov 2012 19:14:51 GMT"; put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; put_2132=E0BD654B2802FCE03AAE63059932DAF6; put_2530=-8875470260323754750; put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:52 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267935%3D1%267249%3D1%2611203%3D1; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C%267249%3D25067%2C0%2C1%2C%2C%2611203%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.pixel.rubiconproject.com put_2146=RUID5qaxja8ccqffeu7zjb8jhdngjuxzkj3euasjbme1ib7odzfoa6zy%3D%3D%3D%3D; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com put_2309=RUID5qaxja8ccqffeu7zjb8jhdngjuxzkj3euasjbme1ib7odzfoa6zy%3D%3D%3D%3D; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9875 Connection: Keep-Alive
GET /tap.php?v=4210&nid=1523&put=e0bc4d58-e100-460a-9957-c4eda8435a22&expires=10 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=4210&nid=1523&put=e0bc4d58-e100-460a-9957-c4eda8435a22&expires=10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%267935%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890; cd=false; au=H9D461O5-GR01-10.250.151.242; lm="10 Nov 2012 19:14:51 GMT"; put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; put_2132=E0BD654B2802FCE03AAE63059932DAF6; put_2530=-8875470260323754750; put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:52 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267935%3D1%264210%3D1; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C%264210%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.pixel.rubiconproject.com put_1523=e0bc4d58-e100-460a-9957-c4eda8435a22; expires=Tue, 20-Nov-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9530 Connection: Keep-Alive
GET /tap.php?v=7206&nid=1197&put=4245697051038754751&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7206&nid=1197&put=4245697051038754751&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%267935%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890; cd=false; au=H9D461O5-GR01-10.250.151.242; lm="10 Nov 2012 19:14:51 GMT"; put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; put_2132=E0BD654B2802FCE03AAE63059932DAF6; put_2530=-8875470260323754750; put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:52 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267935%3D1%267206%3D1; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C%267206%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.pixel.rubiconproject.com put_1197=4245697051038754751; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9689 Connection: Keep-Alive
GET /tap.php?v=5852&nid=2101&put=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5852&nid=2101&put=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=866fb605d4334fc0bcbfd275d22e554d8289f1ec&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%267935%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890; cd=false; au=H9D461O5-GR01-10.250.151.242; lm="10 Nov 2012 19:14:52 GMT"; put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; put_2132=E0BD654B2802FCE03AAE63059932DAF6; put_2530=-8875470260323754750; put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:52 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267935%3D1%265852%3D1; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C%265852%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.pixel.rubiconproject.com put_2101=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8937 Connection: Keep-Alive
GET /tap.php?v=5671&nid=2081&put=NE-00000002449248265&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5671&nid=2081&put=NE-00000002449248265&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%267935%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890; cd=false; au=H9D461O5-GR01-10.250.151.242; lm="10 Nov 2012 19:14:51 GMT"; put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; put_2132=E0BD654B2802FCE03AAE63059932DAF6; put_2530=-8875470260323754750; put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 10 Nov 2012 19:14:52 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267935%3D1%265671%3D1; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25067%2C0%2C1%2C%2C%265671%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.pixel.rubiconproject.com put_2081=NE-00000002449248265; expires=Mon, 10-Dec-2012 19:14:52 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8799 Connection: Keep-Alive
GET /cached/creatives/137299/zuhu160yellow.jpg HTTP/1.1 Host: cdn3.cpmstar.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://server.cpmstar.com/view.aspx?poolid=12887&campaignid=56911&creativeid=137299&h=067AA536D333B4853658CF46B8C39A4075DB313C	HTTP/1.1 200 OK Content-Type: image/jpeg Cache-Control: public Server: Microsoft-IIS/7.5 Content-Disposition: inline;filename=137299_zuhu160yellow.jpg X-AspNet-Version: 2.0.50727 P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Via: 1.1 ID-0001544140306215 uproxy-2 Age: 15973 Date: Sat, 10 Nov 2012 19:14:52 GMT Expires: Sun, 11 Nov 2012 14:48:39 GMT Content-Length: 44455 Connection: close
POST / HTTP/1.1 Host: ocsp.verisign.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	HTTP/1.0 200 Ok Content-Type: application/ocsp-response Last-Modified: Fri, 09 Nov 2012 00:41:57 GMT Expires: Fri, 16 Nov 2012 00:41:57 GMT Content-Transfer-Encoding: binary Content-Length: 1814 Cache-Control: max-age=451625, public, no-transform, must-revalidate Date: Sat, 10 Nov 2012 19:14:52 GMT nncoection: close Connection: Keep-Alive
GET /dialog/oauth?client_id=124578887583575&response_type=token%2Csigned_request%2Ccode&display=none&domain=www.mediafire.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Df182ddf5ecd0e92%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff2107650cfc07d2%26domain%3Dwww.mediafire.com%26relation%3Dparent&sdk=joey HTTP/1.1 Host: www.facebook.com GET /dialog/oauth?client_id=124578887583575&response_type=token%2Csigned_request%2Ccode&display=none&domain=www.mediafire.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Df182ddf5ecd0e92%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff2107650cfc07d2%26domain%3Dwww.mediafire.com%26relation%3Dparent&sdk=joey HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Location: http://static.ak.facebook.com/connect/xd_arbiter.php?version=17#cb=f182ddf5ecd0e92&origin=http%3A%2F%2Fwww.mediafire.com%2Ff2107650cfc07d2&domain=www.mediafire.com&relation=parent&error=unknown_user Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-FB-Debug: UA9IJqo/SIWDoic7V7G98hWNOh5L6CJnfvbu9uBJrl0= Date: Sat, 10 Nov 2012 19:14:53 GMT Connection: keep-alive Content-Length: 0
GET /partner/scripts/rubicon/page_parser.js?d=www.mediafire.com HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=73613 Cookie: rpb=14240%3D1%267935%3D1%265671%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509ea7aa50cba8fe7f6723^1^1352574890^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352574890^1352574890; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352574890^1352574890; cd=false; au=H9D461O5-GR01-10.250.151.242; lm="10 Nov 2012 19:14:52 GMT"; put_2731=98b06ff7d82e426d9abc9dcdbb39df6c; put_2132=E0BD654B2802FCE03AAE63059932DAF6; put_2530=-8875470260323754750; put_2760=9d843e45-439b-4b75-857e-b58446eeadd4; put_2271=BkdHLmO1al-6Rdy2LCLAxIUIzM8; put_2146=RUID5qaxja8ccqffeu7zjb8jhdngjuxzkj3euasjbme1ib7odzfoa6zy%3D%3D%3D%3D; put_2309=RUID5qaxja8ccqffeu7zjb8jhdngjuxzkj3euasjbme1ib7odzfoa6zy%3D%3D%3D%3D; put_1523=e0bc4d58-e100-460a-9957-c4eda8435a22; put_1197=4245697051038754751; put_2101=cf574c9c-bf1c-475d-9e1d-5ac7efa380ef; put_2081=NE-00000002449248265	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:56:39 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sat, 10 Nov 2012 20:14:54 GMT Date: Sat, 10 Nov 2012 19:14:54 GMT Content-Length: 5705 Connection: keep-alive Vary: Accept-Encoding
GET /rsfifwb7t0fg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe HTTP/1.1 Host: 205.196.120.181 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 302 Found HTTP/1.1 302 Found Location: http://www.mediafire.com/?4p5wab4oqodaj44 Connection: Close
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1 Host: static.ak.fbcdn.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 Origin: http://www.facebook.com
GET /view.aspx?poolid=12887&campaignid=56911&creativeid=137299&h=067AA536D333B4853658CF46B8C39A4075DB313C HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&campaignid=56911&creativeid=137299&h=067AA536D333B4853658CF46B8C39A4075DB313C HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=46595 Cookie: USER_ID=F%aa%06%09%c6%cbE%3f%f33%88%1d%ec%3b%d9; n15=0,12887,56911,137299,1352574912,0; sm=t=1352488572	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sat, 10 Nov 2012 19:14:53 GMT Connection: close Via: 1.1 ID-0001544140306215 uproxy-5