Overview

URLhttp://199.91.154.25/5i8wlnb9nang/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe
IP199.91.154.25
ASNAS46179 MediaFire, LLC
Location United States
Report completed2012-11-10 20:21:02 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-10 20:20:20 205.196.120.6 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-10 20:20:24 87.248.207.253 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-10 20:20:31 urlQuery Client 66.220.152.162ssp_ssl: Invalid Client HELLO after Server HELLO Detected
2012-11-10 20:20:31 urlQuery Client 66.220.152.162ssp_ssl: Invalid Client HELLO after Server HELLO Detected


Recent reports on same IP/ASN/Domain

Last 3 reports on IP: 199.91.154.25

Date Alerts / IDS URL IP
2013-01-31 13:16:020 / 5http://199.91.154.25/ekcnrq6m8bmg/2ykgdvzikl9lamb/OSHFusion_1.1.4.rar199.91.154.25
2013-01-28 04:20:450 / 3http://199.91.154.25/427d6tw1kvrg/2ykgdvzikl9lamb/oshfusion_1.1.4.rar199.91.154.25
2012-11-10 23:13:410 / 2http://199.91.154.25/fjb8ddkju2wg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe199.91.154.25

Last 6 reports on ASN: AS46179 MediaFire, LLC

Date Alerts / IDS URL IP
2013-03-29 03:45:030 / 4http://205.196.121.95/m1kuwx8019eg/t15jap7tkqs8tpl/MineDestroy.v.31.exe205.196.121.95
2013-03-29 03:07:380 / 4http://205.196.122.151/scghzsc8xz1g/j9sdax2se33b0k0/mc+patcher.exe205.196.122.151
2013-03-29 01:53:330 / 3http://199.91.154.56/tb3etntws0ig/tkxr649sp00zvnf/AMRTS+Mods.exe199.91.154.56
2013-03-28 22:22:550 / 5http://205.196.122.131/8wb31an4q9qg/cfqyicwb2cbxu11/gamebooster.exe205.196.122.131
2013-03-28 18:46:410 / 4http://205.196.122.86/gdem20dxcfzg/a7cdkrh9wzwpyhj/Riotphuck.exe205.196.122.86
2013-03-28 18:46:370 / 5http://205.196.123.102/b3lyota3nlkg/101acz9ocbi29hf/setup1.exe205.196.123.102

Last 3 reports on domain: 199.91.154.25

Date Alerts / IDS URL IP
2013-01-31 13:16:020 / 5http://199.91.154.25/ekcnrq6m8bmg/2ykgdvzikl9lamb/OSHFusion_1.1.4.rar199.91.154.25
2013-01-28 04:20:450 / 3http://199.91.154.25/427d6tw1kvrg/2ykgdvzikl9lamb/oshfusion_1.1.4.rar199.91.154.25
2012-11-10 23:13:410 / 2http://199.91.154.25/fjb8ddkju2wg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe199.91.154.25



JavaScript

Executed Scripts (68)


Executed Evals (16)

#1 JavaScript::Eval (size: 22, repeated: 1)

processCookies(false);

#2 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(0);

#3 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(1);

#4 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(10);

#5 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(11);

#6 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(12);

#7 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(13);

#8 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(14);

#9 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(15);

#10 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(2);

#11 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(4);

#12 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(5);

#13 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(6);

#14 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(7);

#15 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(8);

#16 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(9);

Executed Writes (48)

#1 JavaScript::Write (size: 9, repeated: 1)

 </EMBED>

#2 JavaScript::Write (size: 10, repeated: 1)

 </OBJECT>

#3 JavaScript::Write (size: 275, repeated: 1)

 <EMBED src="http://cdn3.cpmstar.com/cached/creatives/203391/Kone-XTD_Banner_160x600_Clicktag.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d82398%26creativeid%3d203391%26url%3d" wmode=opaque menu=false quality=high 

#4 JavaScript::Write (size: 346, repeated: 1)

 <PARAM NAME=movie VALUE="http://cdn3.cpmstar.com/cached/creatives/203391/Kone-XTD_Banner_160x600_Clicktag.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d82398%26creativeid%3d203391%26url%3d"> <PARAM NAME=wmode VALUE=opaque> <PARAM NAME=menu VALUE=false> <PARAM NAME=quality VALUE=high> 

#5 JavaScript::Write (size: 69, repeated: 1)

 ID=ad_banner_example WIDTH=160 HEIGHT=600 style="line-height: 1px;">

#6 JavaScript::Write (size: 133, repeated: 1)

 TYPE="application/x-shockwave-flash" PLUGINSPAGE="//www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash">

#7 JavaScript::Write (size: 91, repeated: 1)

 codebase="//download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=3,0,0,0" 

#8 JavaScript::Write (size: 41, repeated: 1)

 swLiveConnect=FALSE WIDTH=160 HEIGHT=600

#9 JavaScript::Write (size: 244, repeated: 1)

<!-- BEGIN JS TAG - [Mediafire - Rubicon] - Default < - DO NOT MODIFY -->
<SCRIPT SRC="http://ads.cpxinteractive.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44" TYPE="text/javascript"></script>
<!-- END TAG -->

#10 JavaScript::Write (size: 9, repeated: 5)

</script>

#11 JavaScript::Write (size: 60, repeated: 1)

<OBJECT classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"

#12 JavaScript::Write (size: 274, repeated: 1)

<SCRIPT language="Javascript">
var cpmstar_rnd=Math.round(Math.random()*999999);
var cpmstar_pid=12887;
document.writeln("<SCR"+"IPT language='Javascript' src='http://server.cpmstar.com/view.aspx?poolid="+cpmstar_pid+"&script=1&rnd="+cpmstar_rnd+"'></SCR"+"IPT>");
</script>

#13 JavaScript::Write (size: 114, repeated: 1)

<SCRIPT language='Javascript' src='http://server.cpmstar.com/view.aspx?poolid=12887&script=1&rnd=882028'></SCRIPT>

#14 JavaScript::Write (size: 581, repeated: 1)

<a href="http://ib.adnxs.com/click?a2EW2jnNkj9rYRbaOc2SPwAAAEAzM8M_a2EW2jnNkj9rYRbaOc2SPy4V4rxzY5oboArzhH1cTlH1qJ5QAAAAAHZYCwAdAgAAHQIAAAIAAAA2VRQAKkACAAAAAQBVU0QAVVNEANgCWgBNUQAA_kwAAgQCAQUAAIIALiERqAAAAAA./cnd=%219QT9KgjwvQ8QtqpRGKqACSAE/referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGK6qiOe77pjNGyIOODAuMjAzLjE2OC4yNTQoAQ.." target="_blank"><img width="728" height="90" style="border-style: none" src="http://cdn.adnxs.com/p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png"/></a>

#15 JavaScript::Write (size: 58, repeated: 1)

<div id="recaptcha_widget_div" style="display:none"></div>

#16 JavaScript::Write (size: 27, repeated: 1)

<div id="theToolTip"></div>

#17 JavaScript::Write (size: 904, repeated: 1)

<html><head>            <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
            <meta http-equiv="Expires" content="Tue, 01 Jan 2000 12:12:12 GMT">
            <meta http-equiv="Pragma" content="no-cache">
    </head>
<body> <img src="http://92.61.254.229/rubicon/px/aid:a968524cc4ef7fe546c322c64dc6b29399b41acf;c:7A04E12E6E4E1123;s:6bdb00c88686993b;cid:33664;ts:1352575220394" width="1" height="1" style="position: absolute; left: -150px;" />
<a href="http://clickserv.sitescout.com/clk/d0191780efa4c07c/9878732a8e2f50e0/1-3346/2/www.mediafire.com%2F//cidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw" target="_blank">    <img src="http://dspads.sitescout.netdna-cdn.com/3900/3859/boxing-pans_300x250.-19DAAB3.gif" alt="" border="0" /></a> <img src="http://pixel.quantserve.com/pixel/p-01nD5uD1pGDW2.gif" border="0" height="1" width="1" style="display:none;" /></body></html>

#18 JavaScript::Write (size: 1718, repeated: 1)

<html><head>            <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
            <meta http-equiv="Expires" content="Tue, 01 Jan 2000 12:12:12 GMT">
            <meta http-equiv="Pragma" content="no-cache">
    </head>
<body> <img src="http://92.61.254.231/rubicon/px/aid:1c475d8885b9e4abe1fc5e4d4c098ce6bd9e1850;c:7A04E12E6E4E1123;s:6bdb00c88686993b;cid:33664;ts:1352575220417" width="1" height="1" style="position: absolute; left: -150px;" />
<object classid='clsid:D27CDB6E-AE6D-11cf-96B8-444553540000' width='300' height='250' id='player1' name='player1'>
   <param name='movie' value='http://dspads.sitescout.netdna-cdn.com/3900/3859/300x250.-ACA343C.swf?clickTag=http%3A%2F%2Fclickserv.sitescout.com%2Fclk%2F04713701195c110a%2F9878732a8e2f50e0%2F1-3346%2F2%2Fwww.mediafire.com%252F%2F%2FcidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw' />
   <param name='allowfullscreen' value='false' />
   <param name='allowscriptaccess' value='sameDomain' />
   <param name="swfversion" value="6.0.65.0" />
   <param name='WMODE' value='opaque' />
   <embed id='player1'
          swfversion='6.0.65.0'
          name='player1'
          src='http://dspads.sitescout.netdna-cdn.com/3900/3859/300x250.-ACA343C.swf?clickTag=http%3A%2F%2Fclickserv.sitescout.com%2Fclk%2F04713701195c110a%2F9878732a8e2f50e0%2F1-3346%2F2%2Fwww.mediafire.com%252F%2F%2FcidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw'
          width='300'
          height='250'
          allowscriptaccess='sameDomain'
          allowfullscreen='false'
          WMODE='opaque' 
   />
</object> <img src="http://pixel.quantserve.com/pixel/p-01nD5uD1pGDW2.gif" border="0" height="1" width="1" style="display:none;" /></body></html>

#19 JavaScript::Write (size: 198, repeated: 1)

<iframe src="http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1" width="1" height="1" frameborder="0" scrolling="No" marginheight="0" marginwidth="0" topmargin="0" leftmargin="0"></iframe>

#20 JavaScript::Write (size: 108, repeated: 1)

<iframe src='http://ad.turn.com/server/pixel.htm?fpid=6&sp=y' width='1' height='1' frameborder='0'></iframe>

#21 JavaScript::Write (size: 101, repeated: 1)

<iframe src='http://cti.w55c.net/ct/rubicon-cms2.html' width='1' height='1' frameborder='0'></iframe>

#22 JavaScript::Write (size: 134, repeated: 1)

<iframe src='http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/?rt=iframe' width='1' height='1' frameborder='0'></iframe>

#23 JavaScript::Write (size: 52, repeated: 1)

<script language="JavaScript" type="text/javascript"

#24 JavaScript::Write (size: 53, repeated: 4)

<script language="JavaScript" type="text/javascript">

#25 JavaScript::Write (size: 87, repeated: 3)

<script type="text/javascript" src="http://ads.rubiconproject.com/ad/3196.js"></script>

#26 JavaScript::Write (size: 235, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/27309-15.js?cb=0.5952914908988028&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#27 JavaScript::Write (size: 235, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-15.js?cb=0.47410549370966193&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#28 JavaScript::Write (size: 233, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-2.js?cb=0.5244477312383385&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#29 JavaScript::Write (size: 233, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-9.js?cb=0.7664232776852339&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#30 JavaScript::Write (size: 98, repeated: 1)

<script type="text/javascript" src="http://www.google.com/recaptcha/api/js/recaptcha.js"></script>

#31 JavaScript::Write (size: 1140, repeated: 1)

<script type="text/javascript">
//20121025
var cpmstarfa12_flashurl="http://cdn3.cpmstar.com/cached/creatives/203391/Kone-XTD_Banner_160x600_Clicktag.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d82398%26creativeid%3d203391%26url%3d";
var cpmstarfa12_width=160, width=160;
var cpmstarfa12_height=600, height=600;
var cpmstarfa12_imageurl="http://cdn3.cpmstar.com/cached/creatives/203391/Kone-XTD_Banner_Animiertes_Gif_160x600.gif";
var cpmstarfa12_videourl="";
if(cpmstarfa12_videourl!="")cpmstarfa12_flashurl+="&videourl="+encodeURI(cpmstarfa12_videourl);
var cpmstarfa12_flashvars="";
if(cpmstarfa12_flashvars!="")cpmstarfa12_flashurl+="&"+cpmstarfa12_flashvars;
var cpmstarfa12_simpleclickurl="http://server.cpmstar.com/click.aspx?poolid=12887&subpoolid=0&campaignid=82398&creativeid=203391&url=";
var cpmstarfa12_pixelUrl = "";
if (cpmstarfa12_pixelUrl!="")document.write('<IMG SRC="'+cpmstarfa12_pixelUrl+'" width="0" height="0" border="0" />\n');
</script>
<script type="text/javascript" src="http://cdn3.cpmstar.com/cached/js/flashadv12.pack.js">
</script>

#32 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3176583" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#33 JavaScript::Write (size: 903, repeated: 2)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3228674" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#34 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3320011" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#35 JavaScript::Write (size: 498, repeated: 1)

<script> var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6035951", c3: "122134" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })(); </script> <noscript> <img src="http://b.scorecardresearch.com/p?c1=8&c2=&c3=&c4=&c5=&c6=&c15=&cv=2.0&cj=1" /> </noscript>

#36 JavaScript::Write (size: 104, repeated: 1)

<script>Recaptcha.widget = Recaptcha.$("recaptcha_widget_div"); Recaptcha.challenge_callback();</script>

#37 JavaScript::Write (size: 69, repeated: 1)

src="http://ads.rubiconproject.com/ad/3196.js?cb=0.4294701714085023">

#38 JavaScript::Write (size: 26, repeated: 3)

var rp_account   = "3196";

#39 JavaScript::Write (size: 24, repeated: 1)

var rp_account = "3196";

#40 JavaScript::Write (size: 24, repeated: 3)

var rp_adtype    = "js";

#41 JavaScript::Write (size: 21, repeated: 1)

var rp_adtype = "js";

#42 JavaScript::Write (size: 26, repeated: 3)

var rp_site      = "3346";

#43 JavaScript::Write (size: 21, repeated: 1)

var rp_site = "3346";

#44 JavaScript::Write (size: 81, repeated: 4)

var rp_smartfile = "http://www.mediafire.com/templates/ads/revv_smart_file.html";

#45 JavaScript::Write (size: 30, repeated: 1)

var rp_zonesize  = "27309-15";

#46 JavaScript::Write (size: 29, repeated: 1)

var rp_zonesize  = "9685-15";

#47 JavaScript::Write (size: 28, repeated: 1)

var rp_zonesize  = "9685-9";

#48 JavaScript::Write (size: 27, repeated: 1)

var rp_zonesize = "9685-2";


HTTP Transactions (160)


Request Response
GET /css/mfv3_85677.php?ver=nonssl HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: text/css
Pragma: public
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 37605
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:17 GMT
Connection: keep-alive
GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1

Host: cdn.mediafire.com
GET /css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: text/css
Pragma: public
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 52116
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:17 GMT
Connection: keep-alive
GET /?4p5wab4oqodaj44 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:17 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Expires: 0
Set-Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr; expires=Sat, 11-Oct-2014 19:20:17 GMT; path=/; domain=.mediafire.com; httponly
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17014
Connection: close
Server: MediaFire
GET /css?family=Open+Sans:800,400,700 HTTP/1.1

Host: fonts.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: text/css
Expires: Sat, 10 Nov 2012 19:20:17 GMT
Date: Sat, 10 Nov 2012 19:20:17 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Content-Length: 318
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
GET /blank.html HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Last-Modified: Tue, 18 Sep 2012 21:44:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 78
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:17 GMT
Connection: keep-alive
GET /images/icons/ajax-loader-grey_round.gif HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: image/gif
Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT
Accept-Ranges: bytes
Content-Length: 1775
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:17 GMT
Connection: keep-alive
GET /images/favicon/download.ico HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: image/vnd.microsoft.icon
Date: Sat, 10 Nov 2012 19:20:17 GMT
Last-Modified: Thu, 25 Oct 2012 21:59:32 GMT
Accept-Ranges: bytes
Content-Length: 1150
Connection: close
Server: MediaFire
GET /images/logos/logo_v2.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Mon, 16 Jul 2012 19:28:31 GMT
Accept-Ranges: bytes
Content-Length: 3708
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:17 GMT
Connection: keep-alive
GET /images/buttons/btn_facebook_connect.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT
Accept-Ranges: bytes
Content-Length: 2315
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:17 GMT
Connection: keep-alive
GET /images/buttons/btn_facebook_allowemail.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT
Accept-Ranges: bytes
Content-Length: 941
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:17 GMT
Connection: keep-alive
GET /images/buttons/btn_twitter_connect.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT
Accept-Ranges: bytes
Content-Length: 1799
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:17 GMT
Connection: keep-alive
GET /images/icons/dropdown-arrow-left-white.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT
Accept-Ranges: bytes
Content-Length: 123
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:18 GMT
Connection: keep-alive
GET /images/icons/information_darkblue.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT
Accept-Ranges: bytes
Content-Length: 722
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:18 GMT
Connection: keep-alive
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT
HTTP/1.1 200 OK

Content-Type: text/javascript
Content-Length: 14888
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Sat, 10 Nov 2012 08:33:28 GMT
Expires: Sat, 10 Nov 2012 20:33:28 GMT
Vary: Accept-Encoding
Age: 38810
Cache-Control: max-age=43200, public
Server: GFE/2.0
GET /images/icons/icon-sprite-16-v3.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 02 Oct 2012 17:01:27 GMT
Accept-Ranges: bytes
Content-Length: 61715
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:17 GMT
Connection: keep-alive
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1

Host: www.facebook.com
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&amp;send=false&amp;layout=button_count&amp;width=180&amp;show_faces=false&amp;action=like&amp;colorscheme=light&amp;font&amp;height=80 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Cache-Control: private, no-cache, no-store, must-revalidate
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
X-FB-Debug: e7PWSBsnK7n3OPgHzu4Dkw8y9VX3J5Y+oUvCR3yThCc=
Date: Sat, 10 Nov 2012 19:20:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
GET /ajax/libs/jquery/1.7.2/jquery.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT
Date: Fri, 09 Nov 2012 20:33:45 GMT
Expires: Sat, 09 Nov 2013 20:33:45 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 73891
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 81993
GET /recaptcha/api/challenge?k=6LextQUAAAAAALlQv0DSHOYxqF3DftRZxA5yebEe HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: text/javascript
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Date: Sat, 10 Nov 2012 19:20:18 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 450
Server: GSE
GET /images/backgrounds/download/rockmelt/rockmelt_dl_btn.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:44 GMT
Accept-Ranges: bytes
Content-Length: 7653
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:18 GMT
Connection: keep-alive
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=652923355&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=1255697013&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.1817814594.1352575218.1352575218.1352575218.1%3B%2B__utmz%3D213136648.1352575218.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.7&amp;utms=1&amp;utmn=652923355&amp;utmhn=www.mediafire.com&amp;utme=8(UserType)9(free)&amp;utmcs=UTF-8&amp;utmsr=1176x885&amp;utmvp=1159x778&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=KMPlayerPortable_3.4.0.59_azo.exe&amp;utmhid=1255697013&amp;utmr=-&amp;utmp=%2F%3F4p5wab4oqodaj44&amp;utmac=UA-829541-1&amp;utmcc=__utma%3D213136648.1817814594.1352575218.1352575218.1352575218.1%3B%2B__utmz%3D213136648.1352575218.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmu=qQ~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Fri, 09 Nov 2012 20:33:28 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 82010
Server: GFE/2.0
GET /js/bust_out.js HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sat, 10 Nov 2012 19:20:18 GMT
Last-Modified: Thu, 31 May 2012 19:49:34 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Mon, 10 Dec 2012 19:20:18 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 57
Connection: close
Server: MediaFire
GET /js/master_85677.js HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: text/javascript
Last-Modified: Fri, 09 Nov 2012 23:25:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Server: MediaFire
Content-Length: 143613
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:18 GMT
Connection: keep-alive
POST / HTTP/1.1

Host: ocsp.godaddy.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 106
Content-Type: application/ocsp-request
HTTP/1.1 200 OK

Content-Type: application/ocsp-response
Date: Sat, 10 Nov 2012 19:20:18 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=19530, public, no-transform, must-revalidate
Last-Modified: Sat, 10 Nov 2012 19:02:56 GMT
Expires: Sun, 11 Nov 2012 01:02:56 GMT
Etag: &quot;ca94b5b0bc8fe27adc5ccc8258d3ea091798f863&quot;
P3P: CP=&quot;IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA&quot;
Content-Length: 1923
Connection: close
GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1

Host: platform.twitter.com
GET /widgets/follow_button.html?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Cache-Control: public, max-age=1800
Last-Modified: Thu, 08 Nov 2012 09:18:41 GMT
Etag: &quot;567a94a4e136d5c4b7bfde258474cfa6&quot;
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sat, 10 Nov 2012 19:20:18 GMT
Content-Length: 25717
Connection: keep-alive
P3P: CP=&quot;CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT&quot;
GET /images/ad-loader.gif HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr; __utma=213136648.1817814594.1352575218.1352575218.1352575218.1; __utmb=213136648.1.10.1352575218; __utmc=213136648; __utmz=213136648.1352575218.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/gif
Last-Modified: Tue, 05 Jun 2012 20:09:03 GMT
Accept-Ranges: bytes
Content-Length: 1786
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:18 GMT
Connection: keep-alive
GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1

Host: p.twitter.com
GET /f.gif?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false&amp;twttr_variant=2.0&amp;twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&amp;twttr_widget=0&amp;twttr_hask=0&amp;twttr_li=0&amp;twttr_pid= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false
HTTP/1.1 200 OK

Content-Type: image/gif
Etag: &quot;377d257f2d2e294916143c069141c1c5:1328738114&quot;
Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT
Accept-Ranges: bytes
Content-Length: 43
Cache-Control: no-cache
P3P: CP=&quot;CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT&quot;
Date: Sat, 10 Nov 2012 19:20:18 GMT
Connection: keep-alive
GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1

Host: cdn.api.twitter.com
GET /1/users/show.json?screen_name=MediaFire&amp;callback=twttr.setFollowersCount HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false
HTTP/1.1 200 OK

Content-Type: application/javascript;charset=utf-8
Last-Modified: Sat, 10 Nov 2012 19:06:15 GMT
Pragma: no-cache
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Status: 200 OK
Content-Encoding: gzip
Content-Length: 897
Server: tfe
Vary: Accept-Encoding
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Expires: Sat, 10 Nov 2012 19:20:18 GMT
Date: Sat, 10 Nov 2012 19:20:18 GMT
Connection: keep-alive
GET /recaptcha/api/js/recaptcha.js HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Expires: Sat, 10 Nov 2012 19:20:18 GMT
Date: Sat, 10 Nov 2012 19:20:18 GMT
Last-Modified: Tue, 12 Jun 2012 14:07:31 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 17531
Server: GSE
Cache-Control: public, max-age=0
Age: 0
GET /recaptcha/api/img/red/refresh.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sat, 10 Nov 2012 19:50:01 GMT
Date: Sat, 10 Nov 2012 18:50:01 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 974
Server: GSE
Age: 1817
Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/audio.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sat, 10 Nov 2012 19:51:05 GMT
Date: Sat, 10 Nov 2012 18:51:05 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 914
Server: GSE
Age: 1754
Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/text.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sat, 10 Nov 2012 19:50:06 GMT
Date: Sat, 10 Nov 2012 18:50:06 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 155
Server: GSE
Age: 1813
Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/help.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sat, 10 Nov 2012 19:59:01 GMT
Date: Sat, 10 Nov 2012 18:59:01 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 367
Server: GSE
Age: 1278
Cache-Control: public, max-age=3600
GET /recaptcha/api/image?c=03AHJ_VuuEguf3065E7mjCfeGSQ4bTaZYtm_4TciAPXZ7UZMlvojQWMlIU7K6Ao01w-rSxqRXIMOSt0EiUvBLj3kZvybPA_iXkJY6y-0fbB5dYujhN6cdk4GsrbAanxGVyRyOi5DFtzLzfrt8E52_fTXx88QHbJc5AO-e7mf1HTbX5h-9TvkaKGck HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/jpeg
Expires: Sat, 10 Nov 2012 19:30:19 GMT
Date: Sat, 10 Nov 2012 19:20:19 GMT
Cache-Control: public, max-age=600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 3468
Server: GSE
GET /templates/linkto/default-729x91-default.php?r=28932 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr; __utma=213136648.1817814594.1352575218.1352575218.1352575218.1; __utmb=213136648.1.10.1352575218; __utmc=213136648; __utmz=213136648.1352575218.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:19 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 666
Connection: close
Server: MediaFire
GET /templates/linkto/default-337x281-default.php?r=50622 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr; __utma=213136648.1817814594.1352575218.1352575218.1352575218.1; __utmb=213136648.1.10.1352575218; __utmc=213136648; __utmz=213136648.1352575218.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:19 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 786
Connection: close
Server: MediaFire
GET /templates/linkto/default-337x281-default2.php?r=24168 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr; __utma=213136648.1817814594.1352575218.1352575218.1352575218.1; __utmb=213136648.1.10.1352575218; __utmc=213136648; __utmz=213136648.1352575218.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:19 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 787
Connection: close
Server: MediaFire
GET /templates/linkto/default-161x601-default.php?r=43781 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr; __utma=213136648.1817814594.1352575218.1352575218.1352575218.1; __utmb=213136648.1.10.1352575218; __utmc=213136648; __utmz=213136648.1352575218.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:19 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 733
Connection: close
Server: MediaFire
GET /ad/3196.js?cb=0.4294701714085023 HTTP/1.1

Host: ads.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=28932
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.3
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3524
Cneonction: close
Cache-Control: max-age=86400
Expires: Sun, 11 Nov 2012 19:20:20 GMT
Date: Sat, 10 Nov 2012 19:20:20 GMT
Connection: keep-alive
GET /ad/3196.js HTTP/1.1

Host: ads.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50622
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.3
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3524
Cneonction: close
Cache-Control: max-age=86400
Expires: Sun, 11 Nov 2012 19:20:20 GMT
Date: Sat, 10 Nov 2012 19:20:20 GMT
Connection: keep-alive
GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1

Host: secure.gravatar.com
GET /avatar/00000000?s=27&amp;d=mm&amp;f=y HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx
Date: Sat, 10 Nov 2012 19:20:20 GMT
Content-Length: 906
Connection: keep-alive
Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT
Access-Control-Allow-Origin: *
Content-Disposition: inline; filename=&quot;00000000.png&quot;
X-Varnish: 2442243369 2442139672
Via: 1.1 varnish
Expires: Sat, 10 Nov 2012 19:25:20 GMT
Cache-Control: max-age=300
GET /a/3196/3346/9685-15.js?cb=0.47410549370966193&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/9685-15.js?cb=0.47410549370966193&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50622
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sat, 10 Nov 2012 19:20:20 GMT
Server: RAS/1.3 (Unix)
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;, CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: ruid=592db404509ea8f450cba8fe330705^1^1352575220^1355524350; expires=Fri, 08-Feb-2013 19:20:20 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sat, 10-Nov-2012 20:20:20 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sat, 10-Nov-2012 20:20:20 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Sun, 11-Nov-2012 00:59:59 GMT; max-age=45579; path=/; domain=.rubiconproject.com
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /a/3196/3346/9685-2.js?cb=0.5244477312383385&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/9685-2.js?cb=0.5244477312383385&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=28932
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sat, 10 Nov 2012 19:20:20 GMT
Server: RAS/1.3 (Unix)
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;, CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: ruid=592dc3af509ea8f450cba8fe207224^1^1352575220^1355524350; expires=Fri, 08-Feb-2013 19:20:20 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sat, 10-Nov-2012 20:20:20 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk2=0; expires=Sat, 10-Nov-2012 20:20:20 GMT; max-age=10; path=/; domain=.rubiconproject.com ses2=3346^1; expires=Sun, 11-Nov-2012 00:59:59 GMT; max-age=45579; path=/; domain=.rubiconproject.com csi2=3204661.js^1^1352575220^1352575220; expires=Sat, 17-Nov-2012 19:20:20 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=63
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /a/3196/3346/27309-15.js?cb=0.5952914908988028&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/27309-15.js?cb=0.5952914908988028&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=24168
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sat, 10 Nov 2012 19:20:20 GMT
Server: RAS/1.3 (Unix)
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;, CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: ruid=592db7f0509ea8f450cba8fe09f26a^1^1352575220^1355524350; expires=Fri, 08-Feb-2013 19:20:20 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sat, 10-Nov-2012 20:20:20 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sat, 10-Nov-2012 20:20:20 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Sun, 11-Nov-2012 00:59:59 GMT; max-age=45579; path=/; domain=.rubiconproject.com
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /beacon.js HTTP/1.1

Host: b.scorecardresearch.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50622
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Sat, 24 Nov 2012 19:20:20 GMT
Date: Sat, 10 Nov 2012 19:20:20 GMT
Content-Length: 1140
Connection: keep-alive
Cache-Control: private, no-transform, max-age=1209600
GET /a/3196/3346/9685-9.js?cb=0.7664232776852339&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/9685-9.js?cb=0.7664232776852339&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43781
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sat, 10 Nov 2012 19:20:20 GMT
Server: RAS/1.3 (Unix)
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;, CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: ruid=592dbbd5509ea8f450cba8fe304854^1^1352575220^1355524350; expires=Fri, 08-Feb-2013 19:20:20 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sat, 10-Nov-2012 20:20:20 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk9=0; expires=Sat, 10-Nov-2012 20:20:20 GMT; max-age=10; path=/; domain=.rubiconproject.com ses9=3346^1; expires=Sun, 11-Nov-2012 00:59:59 GMT; max-age=45579; path=/; domain=.rubiconproject.com csi9=3165520.js^1^1352575220^1352575220; expires=Sat, 17-Nov-2012 19:20:20 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=19
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /helper_01.swf HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr; __utma=213136648.1817814594.1352575218.1352575218.1352575218.1; __utmb=213136648.1.10.1352575218; __utmc=213136648; __utmz=213136648.1352575218.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Date: Sat, 10 Nov 2012 19:20:20 GMT
Last-Modified: Sat, 15 Oct 2011 19:43:58 GMT
Accept-Ranges: bytes
Content-Length: 1480
Cache-Control: max-age=2592000
Expires: Mon, 10 Dec 2012 19:20:20 GMT
Connection: close
Server: MediaFire
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1

Host: tap2-cdn.rubiconproject.com
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50622
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db404509ea8f450cba8fe330705^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Server: TRP Apache-Coyote/1.1
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Last-Modified: Fri, 09 Nov 2012 22:36:18 GMT
Content-Encoding: gzip
Cache-Control: max-age=600
Expires: Sat, 10 Nov 2012 19:30:20 GMT
Date: Sat, 10 Nov 2012 19:20:20 GMT
Content-Length: 5080
Connection: keep-alive
Vary: Accept-Encoding
GET /pixel/p-01nD5uD1pGDW2.gif HTTP/1.1

Host: pixel.quantserve.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50622
HTTP/1.1 200 OK

Content-Type: image/gif
Connection: close
Set-Cookie: mc=509ea8f4-9ce95-166b0-ab24d; expires=Mon, 12-May-2014 19:20:20 GMT; path=/; domain=.quantserve.com
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV&quot;
Cache-Control: private, no-cache, no-store, proxy-revalidate
Pragma: no-cache
Expires: Fri, 04 Aug 1978 12:00:00 GMT
Content-Length: 35
Date: Sat, 10 Nov 2012 19:20:20 GMT
Server: QS
GET /rubicon/px/aid:a968524cc4ef7fe546c322c64dc6b29399b41acf;c:7A04E12E6E4E1123;s:6bdb00c88686993b;cid:33664;ts:1352575220394 HTTP/1.1

Host: 92.61.254.229

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50622
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache-Coyote/1.1
Cache-Control: max-age=0,no-cache,no-store
Pragma: no-cache
Expires: Tue, 11 Oct 1977 12:34:56 GMT
Connection: close
Content-Length: 807
Date: Sat, 10 Nov 2012 19:20:19 GMT
GET /partner/scripts/rubicon/alice.js HTTP/1.1

Host: tap-cdn.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50622
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db404509ea8f450cba8fe330705^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1
HTTP/1.1 200 OK

Content-Type: text/javascript;charset=UTF-8
Server: TRP Apache-Coyote/1.1
Last-Modified: Sat, 10 Nov 2012 13:56:02 GMT
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Content-Encoding: gzip
Cache-Control: max-age=3600
Expires: Sat, 10 Nov 2012 20:20:20 GMT
Date: Sat, 10 Nov 2012 19:20:20 GMT
Content-Length: 5798
Connection: keep-alive
Vary: Accept-Encoding
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352575220651&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D50622&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3228674&amp;ns__t=1352575220651&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D50622&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50622
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: http://b.scorecardresearch.com/b2?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3228674&amp;ns__t=1352575220651&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D50622&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44
Date: Sat, 10 Nov 2012 19:20:20 GMT
Connection: keep-alive
Set-Cookie: UID=4a91421-195.159.219.8-1352575220; expires=Fri, 31-Oct-2014 19:20:20 GMT; path=/; domain=.scorecardresearch.com UIDR=1352575220; expires=Fri, 31-Oct-2014 19:20:20 GMT; path=/; domain=.scorecardresearch.com
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /rubicon/px/aid:1c475d8885b9e4abe1fc5e4d4c098ce6bd9e1850;c:7A04E12E6E4E1123;s:6bdb00c88686993b;cid:33664;ts:1352575220417 HTTP/1.1

Host: 92.61.254.231

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=24168
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache-Coyote/1.1
Cache-Control: max-age=0,no-cache,no-store
Pragma: no-cache
Expires: Tue, 11 Oct 1977 12:34:56 GMT
Connection: close
Content-Length: 807
Date: Sat, 10 Nov 2012 19:20:20 GMT
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1

Host: ads.cpxinteractive.com
GET /ttj?id=743542&amp;size=728x90&amp;referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=28932
HTTP/1.1 302 Found

Content-Type: text/html; charset=ISO-8859-1
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Location: http://ib.adnxs.com/ttj?id=743542&amp;size=728x90&amp;referrer=http://www.mediafire.com/?4p5wab4oqodaj44
Date: Sat, 10 Nov 2012 19:20:20 GMT
Content-Length: 0
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352575220677&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D24168&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3228674&amp;ns__t=1352575220677&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D24168&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=24168
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: http://b.scorecardresearch.com/b2?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3228674&amp;ns__t=1352575220677&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D24168&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44
Date: Sat, 10 Nov 2012 19:20:20 GMT
Connection: keep-alive
Set-Cookie: UID=4a9143d-195.159.219.8-1352575220; expires=Fri, 31-Oct-2014 19:20:20 GMT; path=/; domain=.scorecardresearch.com UIDR=1352575220; expires=Fri, 31-Oct-2014 19:20:20 GMT; path=/; domain=.scorecardresearch.com
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /3900/3859/300x250.-ACA343C.swf?clickTag=http%3A%2F%2Fclickserv.sitescout.com%2Fclk%2F04713701195c110a%2F9878732a8e2f50e0%2F1-3346%2F2%2Fwww.mediafire.com%252F%2F%2FcidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw HTTP/1.1

Host: dspads.sitescout.netdna-cdn.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=24168
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Date: Sat, 10 Nov 2012 19:20:20 GMT
Content-Length: 54403
Connection: keep-alive
Etag: W/&quot;54403-1342719889000&quot;
Last-Modified: Thu, 19 Jul 2012 17:44:49 GMT
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /3900/3859/boxing-pans_300x250.-19DAAB3.gif HTTP/1.1

Host: dspads.sitescout.netdna-cdn.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50622
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:20 GMT
Content-Length: 148194
Connection: keep-alive
Etag: W/&quot;148194-1349288539000&quot;
Last-Modified: Wed, 03 Oct 2012 18:22:19 GMT
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes
GET /pixel/p-01nD5uD1pGDW2.gif HTTP/1.1

Host: pixel.quantserve.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=24168
HTTP/1.1 200 OK

Content-Type: image/gif
Connection: close
Set-Cookie: mc=509ea8f4-e1667-52047-21e91; expires=Mon, 12-May-2014 19:20:20 GMT; path=/; domain=.quantserve.com
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV&quot;
Cache-Control: private, no-cache, no-store, proxy-revalidate
Pragma: no-cache
Expires: Fri, 04 Aug 1978 12:00:00 GMT
Content-Length: 35
Date: Sat, 10 Nov 2012 19:20:20 GMT
Server: QS
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352575220651&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D50622&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b2?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3228674&amp;ns__t=1352575220651&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D50622&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50622
Cookie: UID=4a91421-195.159.219.8-1352575220; UIDR=1352575220
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sat, 10 Nov 2012 19:20:20 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /rb_match HTTP/1.1

Host: um.simpli.fi

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Moved Temporarily

Content-Type: text/plain
Server: nginx
Date: Sat, 10 Nov 2012 19:20:20 GMT
Transfer-Encoding: chunked
Connection: close
Set-Cookie: uid=lYmtk4gb0O8RO4qu652672%3D%3D; path=/; expires=Sun, 10 Nov 2013 19:20:20 GMT; domain=.simpli.fi
Location: http://pixel.rubiconproject.com/tap.php?v=6286&amp;nid=2132&amp;put=93AD8995EFD01B88AE8A3B11EFBA9DEB&amp;expires=365
P3P: policyref=&quot;http://www.simplifi.com/w3c/Policies.xml&quot;, CP=&quot;ADMa DEVa PSAa PSDa OUR IND DSP NON COR&quot;
GET /oz/feeds/invite-media-rtb/tokens/?rt=iframe HTTP/1.1

Host: tap.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd5509ea8f450cba8fe304854^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352575220^1352575220; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352575220^1352575220
HTTP/1.1 302 Moved Temporarily

Content-Type: text/plain; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:21 GMT
Server: TRP Apache-Coyote/1.1
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Location: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=5d23e35230568cd9ae0a6fffcf0186ba17011891&amp;publisher_dsp_id=2101&amp;publisher_call_type=iframe&amp;publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/
Content-Length: 0
Cache-Control: private
Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Sun, 10-Nov-2013 19:20:21 GMT; Path=/ au=H9D4D40N-99MP-10.115.51.191; Domain=.rubiconproject.com; Expires=Sun, 08-Nov-2020 19:20:21 GMT; Path=/ dq=1|1|0|0; Expires=Sun, 10-Nov-2013 19:20:21 GMT; Path=/ put_2101=&quot;&quot;; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm=&quot;10 Nov 2012 19:20:21 GMT&quot;; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
GET /server/pixel.htm?fpid=6&sp=y HTTP/1.1

Host: ad.turn.com
GET /server/pixel.htm?fpid=6&amp;sp=y HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: text/html;charset=UTF-8
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Set-Cookie: uid=3612595131433083545; Domain=.turn.com; Expires=Thu, 09-May-2013 19:20:21 GMT; Path=/
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sat, 10 Nov 2012 19:20:20 GMT
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352575220677&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D24168&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b2?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3228674&amp;ns__t=1352575220677&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D24168&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=24168
Cookie: UID=4a9143d-195.159.219.8-1352575220; UIDR=1352575220
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sat, 10 Nov 2012 19:20:21 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /track/cmf/rubicon HTTP/1.1

Host: match.adsrvr.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

Content-Type: text/html
Cache-Control: private,no-cache, must-revalidate
Date: Sat, 10 Nov 2012 19:20:20 GMT
Location: http://match.adsrvr.org/track/cmb/rubicon?
P3P: CP=&quot;NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV&quot;
Pragma: no-cache
Server: Microsoft-IIS/7.5
Set-Cookie: TDID=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9; domain=.adsrvr.org; expires=Sun, 10-Nov-2013 19:20:21 GMT; path=/ TDCPM=CAEYBSgCMgsI4rLwqsnmhjAQBQ==; domain=.adsrvr.org; expires=Sun, 10-Nov-2013 19:20:21 GMT; path=/
X-AspNet-Version: 4.0.30319
Content-Length: 115
Connection: keep-alive
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/xml
Server: Apache
Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT
Etag: &quot;87de33-256-4cd617ed12480&quot;
Accept-Ranges: bytes
Content-Length: 598
Date: Sat, 10 Nov 2012 19:20:21 GMT
Connection: keep-alive
GET /server/ddc.htm?uid=3612595131433083545&rnd=3684652725471011481&fpid=6&nu=y&t=&sp=y&purl=&ctid=3&cyid=11 HTTP/1.1

Host: cdn.turn.com
GET /server/ddc.htm?uid=3612595131433083545&amp;rnd=3684652725471011481&amp;fpid=6&amp;nu=y&amp;t=&amp;sp=y&amp;purl=&amp;ctid=3&amp;cyid=11 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ad.turn.com/server/pixel.htm?fpid=6&amp;sp=y
Cookie: uid=3612595131433083545
HTTP/1.1 200 OK

Content-Type: text/html;charset=UTF-8
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Pragma: no-cache
Content-Encoding: gzip
Cache-Control: private, no-cache, no-store, must-revalidate
Date: Sat, 10 Nov 2012 19:20:21 GMT
Content-Length: 4143
Connection: keep-alive
Vary: Accept-Encoding
GET /tap.php?v=6286&nid=2132&put=93AD8995EFD01B88AE8A3B11EFBA9DEB&expires=365 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=6286&amp;nid=2132&amp;put=93AD8995EFD01B88AE8A3B11EFBA9DEB&amp;expires=365 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd5509ea8f450cba8fe304854^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352575220^1352575220; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352575220^1352575220
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:21 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%266286%3D1; expires=Mon, 10-Dec-2012 19:20:21 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:20:21 GMT; path=/; domain=.pixel.rubiconproject.com put_2132=93AD8995EFD01B88AE8A3B11EFBA9DEB; expires=Sun, 10-Nov-2013 19:20:21 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9768
Connection: Keep-Alive
GET /do-association?rbc&can=20 HTTP/1.1

Host: matcher-rbc.bidder7.mookie1.com
GET /do-association?rbc&amp;can=20 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:21 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: id=4612108586589028770; path=/; domain=.mookie1.com; expires=Thu, 05-Dec-2013 19:20:21 GMT mdata=1|4612108586589028770|1352575221; path=/; domain=.mookie1.com; expires=Thu, 05-Dec-2013 19:20:21 GMT
Location: /do-association-set?rbc&amp;can=20
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=880
Connection: Keep-Alive
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1

Host: ib.adnxs.com
GET /ttj?id=743542&amp;size=728x90&amp;referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=28932
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(G*axlrk5.$WN_]Dl5M7G(nDS'6pnU
HTTP/1.1 200 OK

Content-Type: text/javascript
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Fri, 08-Feb-2013 19:20:21 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Sun, 11-Nov-2012 19:20:21 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEw9dH6hAUQ9dH6hAUYAA..; path=/; expires=Fri, 08-Feb-2013 19:20:21 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FSn'^Ehxzkb10I3eX.EPkkOY1ydik999/&gt;VPn`); path=/; expires=Fri, 08-Feb-2013 19:20:21 GMT; domain=.adnxs.com; HttpOnly
Date: Sat, 10 Nov 2012 19:20:21 GMT
Content-Length: 1349
GET /cfcm.ashx?providerId=1007&extMatch=1 HTTP/1.1

Host: extmap.rub.ace.advertising.com
GET /cfcm.ashx?providerId=1007&amp;extMatch=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Sat, 10 Nov 2012 19:20:20 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
Pragma: no-cache
Location: /cfcm.ashx?providerId=1007&amp;extMatch=1&amp;ctst=1
Set-Cookie: ACID=HS210013525752200017; domain=advertising.com; expires=Mon, 10-Nov-2014 19:20:20 GMT; path=/
Cache-Control: private, no-cache, max-age=0
Expires: Sat, 10 Nov 2012 19:20:20 GMT
Content-Length: 0
GET /rubicon_sync?publisher_user_id=5d23e35230568cd9ae0a6fffcf0186ba17011891&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1

Host: pixel.invitemedia.com
GET /rubicon_sync?publisher_user_id=5d23e35230568cd9ae0a6fffcf0186ba17011891&amp;publisher_dsp_id=2101&amp;publisher_call_type=iframe&amp;publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: text/html
Date: Sat, 10 Nov 2012 19:20:21 GMT
Set-Cookie: uid=1507de89-57c4-49ff-b7bd-dcb7c3df22f0;Path=/;Domain=invitemedia.com;Expires=Sun, 10-Nov-2013 19:20:21 GMT impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC&quot;
Cache-Control: no-cache
Content-Length: 221
Connection: close
Server: Jetty(7.3.1.v20110307)
GET /track/cmb/rubicon? HTTP/1.1

Host: match.adsrvr.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: TDID=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9; TDCPM=CAEYBSgCMgsI4rLwqsnmhjAQBQ==
HTTP/1.1 302 Found

Content-Type: text/html
Cache-Control: private,no-cache, must-revalidate
Date: Sat, 10 Nov 2012 19:20:20 GMT
Location: http://pixel.rubiconproject.com/tap.php?v=8981&amp;nid=2307&amp;put=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9&amp;expires=30
P3P: CP=&quot;NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV&quot;
Pragma: no-cache
Server: Microsoft-IIS/7.5
Set-Cookie: TDID=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9; domain=.adsrvr.org; expires=Sun, 10-Nov-2013 19:20:21 GMT; path=/ TDCPM=CAESFgoHcnViaWNvbhILCOj4vv+y5oYwEAUYBSABKAIyCwjisvCqyeaGMBAF; domain=.adsrvr.org; expires=Sun, 10-Nov-2013 19:20:21 GMT; path=/
X-AspNet-Version: 4.0.30319
Content-Length: 245
Connection: keep-alive
GET /tap.php?v=4212&nid=1185&put=3612595131433083545&expires=60 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=4212&amp;nid=1185&amp;put=3612595131433083545&amp;expires=60 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=3612595131433083545&amp;rnd=3684652725471011481&amp;fpid=6&amp;nu=y&amp;t=&amp;sp=y&amp;purl=&amp;ctid=3&amp;cyid=11
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd5509ea8f450cba8fe304854^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352575220^1352575220; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352575220^1352575220; cd=false; au=H9D4D40N-99MP-10.115.51.191; lm=&quot;10 Nov 2012 19:20:21 GMT&quot;
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:21 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%264212%3D1; expires=Mon, 10-Dec-2012 19:20:21 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264212%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:20:21 GMT; path=/; domain=.pixel.rubiconproject.com put_1185=3612595131433083545; expires=Wed, 09-Jan-2013 19:20:21 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9828
Connection: Keep-Alive
GET /js/encoder.js HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sat, 10 Nov 2012 19:20:21 GMT
Last-Modified: Thu, 05 Jan 2012 22:41:54 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Mon, 10 Dec 2012 19:20:21 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3695
Connection: close
Server: MediaFire
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352575221380&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D28932&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6035951&amp;c3=122134&amp;ns__t=1352575221380&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D28932&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=28932
Cookie: UID=4a9143d-195.159.219.8-1352575220; UIDR=1352575220
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sat, 10 Nov 2012 19:20:21 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png HTTP/1.1

Host: cdn.adnxs.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=28932
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FSn'^Ehxzkb10I3eX.EPkkOY1ydik999/&gt;VPn`); sess=1; icu=ChIIlroHEAoYASABKAEw9dH6hAUQ9dH6hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/png
Server: Apache
Etag: &quot;a9daeac0f83c5ce58b932bd0f829631f:1351039989&quot;
Last-Modified: Wed, 24 Oct 2012 00:53:09 GMT
Accept-Ranges: bytes
Content-Length: 5051
Date: Sat, 10 Nov 2012 19:20:21 GMT
Connection: keep-alive
GET /tap.php?v=8981&nid=2307&put=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9&expires=30 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=8981&amp;nid=2307&amp;put=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9&amp;expires=30 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%266286%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd5509ea8f450cba8fe304854^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352575220^1352575220; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352575220^1352575220; cd=false; au=H9D4D40N-99MP-10.115.51.191; lm=&quot;10 Nov 2012 19:20:21 GMT&quot;; put_2132=93AD8995EFD01B88AE8A3B11EFBA9DEB
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:21 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%266286%3D1%268981%3D1; expires=Mon, 10-Dec-2012 19:20:21 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:20:21 GMT; path=/; domain=.pixel.rubiconproject.com put_2307=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9; expires=Mon, 10-Dec-2012 19:20:21 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9943
Connection: Keep-Alive
GET /do-association-set?rbc&can=20 HTTP/1.1

Host: matcher-rbc.bidder7.mookie1.com
GET /do-association-set?rbc&amp;can=20 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4612108586589028770; mdata=1|4612108586589028770|1352575221
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:21 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://pixel.rubiconproject.com/tap.php?v=7259&amp;nid=2211&amp;put=4612108586589028770&amp;expires=1
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=875
Connection: Keep-Alive
GET /cfcm.ashx?providerId=1007&extMatch=1&ctst=1 HTTP/1.1

Host: extmap.rub.ace.advertising.com
GET /cfcm.ashx?providerId=1007&amp;extMatch=1&amp;ctst=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: ACID=HS210013525752200017
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Sat, 10 Nov 2012 19:20:21 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 2.0.50727
P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
Pragma: no-cache
Location: http://pixel.rubiconproject.com/tap.php?v=7249%7c%7c11203&amp;nid=2146,2309&amp;put=RUIDaayo9fnxc9np4bigh8ijsymqb6r7q8fon1drxukikipe7em7t6xo====&amp;expires=30
Set-Cookie: UMAP=MTAwNzoxMzUyNTc1MjIy; domain=advertising.com; expires=Mon, 10-Nov-2014 19:20:21 GMT; path=/
Cache-Control: private, no-cache, max-age=0
Expires: Sat, 10 Nov 2012 19:20:21 GMT
Content-Length: 0
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352575221394&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D28932&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3320011&amp;ns__t=1352575221394&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D28932&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=28932
Cookie: UID=4a9143d-195.159.219.8-1352575220; UIDR=1352575220
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sat, 10 Nov 2012 19:20:21 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1

Host: view.atdmt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=28932
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA
HTTP/1.1 200 OK

Content-Type: text/html
Cache-Control: no-store
Content-Encoding: gzip
Expires: 0
Vary: Accept-Encoding
Date: Sat, 10 Nov 2012 19:20:20 GMT
Connection: close
Content-Length: 381
GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353007221&publisher_dsp_id=2101&external_user_id=1507de89-57c4-49ff-b7bd-dcb7c3df22f0 HTTP/1.1

Host: tap.rubiconproject.com
GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353007221&amp;publisher_dsp_id=2101&amp;external_user_id=1507de89-57c4-49ff-b7bd-dcb7c3df22f0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=5d23e35230568cd9ae0a6fffcf0186ba17011891&amp;publisher_dsp_id=2101&amp;publisher_call_type=iframe&amp;publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/
Cookie: rpb=14240%3D1%266286%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd5509ea8f450cba8fe304854^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352575220^1352575220; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352575220^1352575220; cd=false; au=H9D4D40N-99MP-10.115.51.191; dq=1|1|0|0; lm=&quot;10 Nov 2012 19:20:21 GMT&quot;; put_2132=93AD8995EFD01B88AE8A3B11EFBA9DEB
HTTP/1.1 302 Moved Temporarily

Content-Type: text/plain; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:21 GMT
Server: TRP Apache-Coyote/1.1
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Location: http://pixel.rubiconproject.com/tap.php?v=5852&amp;nid=2101&amp;put=1507de89-57c4-49ff-b7bd-dcb7c3df22f0
Content-Length: 0
Cache-Control: private
Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Sun, 10-Nov-2013 19:20:21 GMT; Path=/ dq=2|2|0|0; Expires=Sun, 10-Nov-2013 19:20:21 GMT; Path=/ put_2101=&quot;&quot;; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm=&quot;10 Nov 2012 19:20:21 GMT&quot;; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Keep-Alive: timeout=5, max=191
Connection: Keep-Alive
GET /images/backgrounds/footer/footer_texture.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr; __utma=213136648.1817814594.1352575218.1352575218.1352575218.1; __utmb=213136648.1.10.1352575218; __utmc=213136648; __utmz=213136648.1352575218.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 20:31:25 GMT
Accept-Ranges: bytes
Content-Length: 2649
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:21 GMT
Connection: keep-alive
GET /ct/rubicon-cms2.html HTTP/1.1

Host: cti.w55c.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: text/html
Accept-Ranges: bytes
Cache-Control: no-cache, must-revalidate
Date: Sat, 10 Nov 2012 19:20:21 GMT
Etag: &quot;1430792016&quot;
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Last-Modified: Thu, 18 Oct 2012 15:06:26 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Pragma: no-cache
Server: ECS (arn/46F0)
X-Cache: HIT
Content-Length: 5086
GET /images/backgrounds/footer/icn_footer_blog.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr; __utma=213136648.1817814594.1352575218.1352575218.1352575218.1; __utmb=213136648.1.10.1352575218; __utmc=213136648; __utmz=213136648.1352575218.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT
Accept-Ranges: bytes
Content-Length: 171
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:21 GMT
Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_gp.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr; __utma=213136648.1817814594.1352575218.1352575218.1352575218.1; __utmb=213136648.1.10.1352575218; __utmc=213136648; __utmz=213136648.1352575218.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Wed, 29 Aug 2012 21:02:04 GMT
Accept-Ranges: bytes
Content-Length: 312
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:21 GMT
Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_tw.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr; __utma=213136648.1817814594.1352575218.1352575218.1352575218.1; __utmb=213136648.1.10.1352575218; __utmc=213136648; __utmz=213136648.1352575218.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT
Accept-Ranges: bytes
Content-Length: 274
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:21 GMT
Connection: keep-alive
GET /cm?in=1&pub=64 HTTP/1.1

Host: p.rfihub.com
GET /cm?in=1&amp;pub=64 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

HTTP/1.1 302 Found
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: s3=1352575221616;Path=/;Domain=.rfihub.com;Expires=Wed, 29-Apr-15 19:20:21 GMT u=&quot;aABPFSRDQ==AI_qjLUA==AAABOuvD_3A=&quot;;Path=/;Domain=.rfihub.com;Expires=Wed, 29-Apr-15 19:20:21 GMT e=cr;Path=/;Domain=.rfihub.com;Expires=Wed, 29-Apr-15 19:20:21 GMT a=c638666723793147223;Path=/;Domain=.rfihub.com;Expires=Wed, 29-Apr-15 19:20:21 GMT j=c638666723793147223;Path=/;Domain=.rfihub.com r=1352575221615;Path=/;Domain=.rfihub.com;Expires=Wed, 29-Apr-15 19:20:21 GMT o=1--mAM_UZw8maj;Path=/;Domain=.rfihub.com;Expires=Wed, 29-Apr-15 19:20:21 GMT p=1--mAM_UZw8maj;Path=/;Domain=.rfihub.com
Location: http://pixel.rubiconproject.com/tap.php?v=13490&amp;nid=2596&amp;put=638666723793147223&amp;expires=30
Content-Length: 0
GET /images/backgrounds/footer/icn_footer_fb.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr; __utma=213136648.1817814594.1352575218.1352575218.1352575218.1; __utmb=213136648.1.10.1352575218; __utmc=213136648; __utmz=213136648.1352575218.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT
Accept-Ranges: bytes
Content-Length: 514
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:21 GMT
Connection: keep-alive
GET /match?p=2 HTTP/1.1

Host: match.rtbidder.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Moved Temporarily

Content-Type: text/plain
Server: rtbidder
Date: Sat, 10 Nov 2012 19:20:21 GMT
Content-Length: 277
P3P: policyref=&quot;http://match.rtbidder.net/p3p.xml&quot;, CP=&quot;NOI DSP COR CURa ADMa DEVa TAIo PSAo PSDo IVAo IVDo CONo HISa TELo OUR STP&quot;
Pragma: no-cache
Set-Cookie: bsuid=%3EsJ%5B%5E%25MQ5S%27UDUg; path=/; domain=.rtbidder.net; expires=Fri, 08-Feb-2013 19:20:21 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-store, no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Location: http://pixel.rubiconproject.com/tap.php?v=5157&amp;nid=2021&amp;put=509ea8f50ad142ba0e375a4c
GET /images/backgrounds/newHome/loginActivateTW_v2.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr; __utma=213136648.1817814594.1352575218.1352575218.1352575218.1; __utmb=213136648.1.10.1352575218; __utmc=213136648; __utmz=213136648.1352575218.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT
Accept-Ranges: bytes
Content-Length: 387
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:21 GMT
Connection: keep-alive
GET /tap.php?v=7259&nid=2211&put=4612108586589028770&expires=1 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=7259&amp;nid=2211&amp;put=4612108586589028770&amp;expires=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%266286%3D1%268981%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd5509ea8f450cba8fe304854^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352575220^1352575220; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352575220^1352575220; cd=false; au=H9D4D40N-99MP-10.115.51.191; lm=&quot;10 Nov 2012 19:20:21 GMT&quot;; put_2132=93AD8995EFD01B88AE8A3B11EFBA9DEB; put_1185=3612595131433083545; put_2307=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:21 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%266286%3D1%268981%3D1%267259%3D1; expires=Mon, 10-Dec-2012 19:20:21 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C%267259%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:20:21 GMT; path=/; domain=.pixel.rubiconproject.com put_2211=4612108586589028770; expires=Sun, 11-Nov-2012 19:20:21 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9803
Connection: Keep-Alive
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

Host: ib.adnxs.com
GET /pxj?bidder=55&amp;action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FSn'^Ehxzkb10I3eX.EPkkOY1ydik999/&gt;VPn`); sess=1; icu=ChIIlroHEAoYASABKAEw9dH6hAUQ9dH6hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Fri, 08-Feb-2013 19:20:21 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Sun, 11-Nov-2012 19:20:21 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FSn'^Ehxzkb10I3eX.EPkkOY1ydik999/&gt;VPn`); path=/; expires=Fri, 08-Feb-2013 19:20:21 GMT; domain=.adnxs.com; HttpOnly
Content-Length: 43
Date: Sat, 10 Nov 2012 19:20:21 GMT
GET /images/pixel.gif HTTP/1.1

Host: spe.atdmt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA
HTTP/1.1 200 OK

Content-Type: image/gif
Content-Length: 42
Allow: GET
Expires: Mon, 12 Nov 2012 19:09:54 GMT
Date: Sat, 10 Nov 2012 19:20:21 GMT
Connection: keep-alive
GET /c/cse?a=Q&B=17 HTTP/1.1

Host: connexity.net
GET /c/cse?a=Q&amp;B=17 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Connexity
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 10 Nov 2012 19:20:21 GMT
Cache-Control: no-store, max-age=-1, post-check=0, pre-check=0
Pragma: no-cache
Expires: -1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;CAO PSA OUR CURa DEVa PSDo PSAo BUS COR UNI COM&quot;,an.pp=&quot;http://www.connexity.com/privacy&quot;,an.oo=&quot;http://www.connexity.com/privacy&quot;,an.bt=&quot;N&quot;
Set-Cookie: COu=e97b36569a1b73bc-064a296082d19d82-2175fb3dd99e9754; expires=Thu, 09-Nov-2017 19:20:21 GMT; domain=.connexity.net; path=/
Content-Transfer-Encoding: binary
GET /tap.php?v=7249%7c%7c11203&nid=2146,2309&put=RUIDaayo9fnxc9np4bigh8ijsymqb6r7q8fon1drxukikipe7em7t6xo====&expires=30 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=7249%7c%7c11203&amp;nid=2146,2309&amp;put=RUIDaayo9fnxc9np4bigh8ijsymqb6r7q8fon1drxukikipe7em7t6xo====&amp;expires=30 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%266286%3D1%268981%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd5509ea8f450cba8fe304854^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352575220^1352575220; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352575220^1352575220; cd=false; au=H9D4D40N-99MP-10.115.51.191; lm=&quot;10 Nov 2012 19:20:21 GMT&quot;; put_2132=93AD8995EFD01B88AE8A3B11EFBA9DEB; put_1185=3612595131433083545; put_2307=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:22 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%266286%3D1%268981%3D1%267249%3D1%2611203%3D1; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C%267249%3D25067%2C0%2C1%2C%2C%2611203%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.pixel.rubiconproject.com put_2146=RUIDaayo9fnxc9np4bigh8ijsymqb6r7q8fon1drxukikipe7em7t6xo%3D%3D%3D%3D; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.rubiconproject.com put_2309=RUIDaayo9fnxc9np4bigh8ijsymqb6r7q8fon1drxukikipe7em7t6xo%3D%3D%3D%3D; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9856
Connection: Keep-Alive
GET /recaptcha/api/img/red/sprite.png HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/png
Expires: Sat, 10 Nov 2012 19:50:13 GMT
Date: Sat, 10 Nov 2012 18:50:13 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 4679
Server: GSE
Age: 1809
Cache-Control: public, max-age=3600
GET /tap.php?v=5157&nid=2021&put=509ea8f50ad142ba0e375a4c HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=5157&amp;nid=2021&amp;put=509ea8f50ad142ba0e375a4c HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%266286%3D1%268981%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd5509ea8f450cba8fe304854^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352575220^1352575220; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352575220^1352575220; cd=false; au=H9D4D40N-99MP-10.115.51.191; lm=&quot;10 Nov 2012 19:20:21 GMT&quot;; put_2132=93AD8995EFD01B88AE8A3B11EFBA9DEB; put_1185=3612595131433083545; put_2307=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:22 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%266286%3D1%268981%3D1%265157%3D1; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C%265157%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.pixel.rubiconproject.com put_2021=509ea8f50ad142ba0e375a4c; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9932
Connection: Keep-Alive
GET /ping_match.gif?ei=RUBICON_MATCH HTTP/1.1

Host: i.w55c.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:22 GMT
Server: Jetty(6.1.22)
Set-Cookie: wfivefivec=61d0fa58-980f-404f-8a1c-5fedb15ec8bb;Path=/;Domain=.w55c.net;Expires=Mon, 10-Nov-14 19:20:22 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Cache-Control: no-store
X-Powered-By: Mirror Image Internet
Content-Length: 42
Via: 1.1 lhr032172010000 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /tap.php?v=13490&nid=2596&put=638666723793147223&expires=30 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=13490&amp;nid=2596&amp;put=638666723793147223&amp;expires=30 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%266286%3D1%268981%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd5509ea8f450cba8fe304854^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352575220^1352575220; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352575220^1352575220; cd=false; au=H9D4D40N-99MP-10.115.51.191; lm=&quot;10 Nov 2012 19:20:21 GMT&quot;; put_2132=93AD8995EFD01B88AE8A3B11EFBA9DEB; put_1185=3612595131433083545; put_2307=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:22 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%266286%3D1%268981%3D1%2613490%3D1; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C%2613490%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.pixel.rubiconproject.com put_2596=638666723793147223; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=8582
Connection: Keep-Alive
GET /tap.php?v=5852&nid=2101&put=1507de89-57c4-49ff-b7bd-dcb7c3df22f0 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=5852&amp;nid=2101&amp;put=1507de89-57c4-49ff-b7bd-dcb7c3df22f0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=5d23e35230568cd9ae0a6fffcf0186ba17011891&amp;publisher_dsp_id=2101&amp;publisher_call_type=iframe&amp;publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/
Cookie: rpb=14240%3D1%266286%3D1%268981%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd5509ea8f450cba8fe304854^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352575220^1352575220; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352575220^1352575220; cd=false; au=H9D4D40N-99MP-10.115.51.191; lm=&quot;10 Nov 2012 19:20:21 GMT&quot;; put_2132=93AD8995EFD01B88AE8A3B11EFBA9DEB; put_1185=3612595131433083545; put_2307=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:22 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%266286%3D1%268981%3D1%265852%3D1; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C%265852%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.pixel.rubiconproject.com put_2101=1507de89-57c4-49ff-b7bd-dcb7c3df22f0; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9871
Connection: Keep-Alive
GET /tap.php?v=4210&nid=1523&expires=10&put=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=4210&amp;nid=1523&amp;expires=10&amp;put=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: rpb=14240%3D1%266286%3D1%268981%3D1%265852%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C%265852%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd5509ea8f450cba8fe304854^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352575220^1352575220; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352575220^1352575220; cd=false; au=H9D4D40N-99MP-10.115.51.191; lm=&quot;10 Nov 2012 19:20:21 GMT&quot;; put_2132=93AD8995EFD01B88AE8A3B11EFBA9DEB; put_1185=3612595131433083545; put_2307=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9; put_2211=4612108586589028770; put_2146=RUIDaayo9fnxc9np4bigh8ijsymqb6r7q8fon1drxukikipe7em7t6xo%3D%3D%3D%3D; put_2309=RUIDaayo9fnxc9np4bigh8ijsymqb6r7q8fon1drxukikipe7em7t6xo%3D%3D%3D%3D; put_2021=509ea8f50ad142ba0e375a4c; put_2596=638666723793147223; put_2101=1507de89-57c4-49ff-b7bd-dcb7c3df22f0
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:22 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%266286%3D1%268981%3D1%265852%3D1%264210%3D1; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C%265852%3D25067%2C0%2C1%2C%2C%264210%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.pixel.rubiconproject.com put_1523=61d0fa58-980f-404f-8a1c-5fedb15ec8bb; expires=Tue, 20-Nov-2012 19:20:22 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9783
Connection: Keep-Alive
GET /static/fonts/opensans/v6/k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM.woff HTTP/1.1

Host: themes.googleusercontent.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Open+Sans:800,400,700
Origin: http://www.mediafire.com
HTTP/1.1 200 OK

Content-Type: font/woff
Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT
Date: Fri, 09 Nov 2012 20:33:30 GMT
Expires: Sat, 09 Nov 2013 20:33:30 GMT
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 22748
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 82012
GET /en_US/all.js?_=1352575221651 HTTP/1.1

Host: connect.facebook.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8
Etag: &quot;06c9a8ca347f3538149da85e21e875b7&quot;
Content-Encoding: gzip
X-FB-Debug: bLoxzRw2uyOFV594j4i53vOybs+x8JMUl2VgoDFJeKY=
Content-Length: 58143
Cache-Control: public, max-age=1153
Expires: Sat, 10 Nov 2012 19:39:34 GMT
Date: Sat, 10 Nov 2012 19:20:21 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET /ct/crwdctrl.html?61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

Host: cti.w55c.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: wfivefivec=61d0fa58-980f-404f-8a1c-5fedb15ec8bb
HTTP/1.1 200 OK

Content-Type: text/html
Accept-Ranges: bytes
Cache-Control: no-cache, must-revalidate
Date: Sat, 10 Nov 2012 19:20:22 GMT
Etag: &quot;3436325814&quot;
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Last-Modified: Mon, 05 Nov 2012 15:45:31 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Pragma: no-cache
Server: ECS (arn/46E3)
X-Cache: HIT
Content-Length: 1937
GET /r/du/id/L21rdC80L21waWQvMzU5ODk3MA/mpuid/61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

Host: d.p-td.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Set-Cookie: uid=2747941539447509570; Domain=.p-td.com; Expires=Thu, 09-May-2013 19:20:22 GMT; Path=/
Content-Length: 43
Date: Sat, 10 Nov 2012 19:20:21 GMT
GET /setuid?entity=17&code=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

Host: ib.adnxs.com
GET /setuid?entity=17&amp;code=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FSn'^Ehxzkb10I3eX.EPkkOY1ydik999/&gt;VPn`); sess=1; icu=ChIIlroHEAoYASABKAEw9dH6hAUQ9dH6hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Fri, 08-Feb-2013 19:20:22 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Sun, 11-Nov-2012 19:20:22 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG68%Cxrx)0s]#%2L_'x%SEV/hnJPh4FSn'^Ehxzkb10I3eX.EPkoZ%:QT^58C&lt;!M=I_J?[q^tW; path=/; expires=Fri, 08-Feb-2013 19:20:22 GMT; domain=.adnxs.com; HttpOnly
Content-Length: 43
Date: Sat, 10 Nov 2012 19:20:22 GMT
GET /fr/u.php?p=441981302501808&m=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

Host: www.facebook.com
GET /fr/u.php?p=441981302501808&amp;m=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Cache-Control: public, max-age=0
Date: Sat, 10 Nov 2012 11:20:22 PST
Expires: Sat, 10 Nov 2012 11:20:22 PST
Location: http://i.w55c.net/rs?id=d777fecd6cb849b4bab0bfe71d57747a&amp;t=product&amp;name=FBX_NotMatched
Pragma: public
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-FB-Debug: mXaCFBDc4kvSqjcojjY33hEbTORFb6jb0rPQEt8sNAg=
Connection: keep-alive
Content-Length: 0
GET /site/2964?id=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

Host: tags.bluekai.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:22 GMT
Server: Apache/2.2.3 (CentOS)
P3P: CP=&quot;NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV&quot;, policyref=&quot;http://tags.bluekai.com/w3c/p3p.xml&quot;
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Set-Cookie: bkc=KJpM8sJQtem5QKcqi7AOeWe9YKuUEAUkJbehsHAxdY7ze90nQ8kxIsyzMYCXUDBD2EWLYeT9mCTzxx==; expires=Thu, 09-May-2013 19:20:22 GMT; path=/; domain=.bluekai.com bklc=0; expires=Thu, 09-May-2013 19:20:22 GMT; path=/; domain=.bluekai.com bko=; expires=Thu, 09-May-2013 19:20:22 GMT; path=/; domain=.bluekai.com bkp1=; expires=Thu, 09-May-2013 19:20:22 GMT; path=/; domain=.bluekai.com bkst=KJhMRjMYpzYQyZOZZsvxkZC3GV+oRjYZStJQA3jgAViRgsrSko3ujsiSZZ0HkwH+hqy999a0ePA=; expires=Thu, 09-May-2013 19:20:22 GMT; path=/; domain=.bluekai.com bku=k9L99wSG7keN/G5R; expires=Thu, 09-May-2013 19:20:22 GMT; path=/; domain=.bluekai.com bkw5=; expires=Thu, 09-May-2013 19:20:22 GMT; path=/; domain=.bluekai.com bkdc=wdc; expires=Mon, 10-Dec-2012 19:20:22 GMT; path=/; domain=.bluekai.com
BK-Server: d969
Content-Length: 62
GET /360787.gif?partner_uid=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

Host: idsync.rlcdn.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, no-cache, no-store
Date: Sat, 10 Nov 2012 19:20:22 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://idsync.rlcdn.com/360787.gif?redirect=1&amp;rl=72b6c94279fc98635fd866f038010e56daad8683d2c5457ca6d5143e554e8665cca7cbcfa0ce09f72353a9872ddababb815e976a1799d4dd
P3P: CP: &quot;NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE&quot;, CP: &quot;NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE&quot;
Set-Cookie: ck1=ck1;Domain=.rlcdn.com;Expires=Thu, 09-May-2013 19:20:21 GMT
Content-Length: 0
Connection: keep-alive
GET /sync?type=TYPE&key=dataxu&uid=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

Host: sync.adap.tv
GET /sync?type=TYPE&amp;key=dataxu&amp;uid=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: text/plain
Server: adaptv/1.0
Connection: Keep-Alive
Set-Cookie: rtbData0=&quot;key=dataxu:value=61d0fa58-980f-404f-8a1c-5fedb15ec8bb:expiresAt=Wed+Jan+09+11%3A20%3A22+PST+2013:32-Compatible=true&quot;;Path=/;Domain=.adap.tv;Expires=Mon, 10-Nov-2014 19:20:22 GMT
Content-Length: 0
GET /adscores/g.pixel?sid=9232829800 HTTP/1.1

Host: adadvisor.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Date: Sat,  10 Nov 2012 19:20:22 GMT
Connection: close
Server: AAWebServer
P3P: policyref=&quot;http://www.adadvisor.net/w3c/p3p.xml&quot;,CP=&quot;NOI NID&quot;
Content-Length: 0
Location: http://i.w55c.net/d.gif?t=4&amp;ei=targus&amp;id=7c5d7c864bda4aeaafe2ae21fc29867b&amp;t.score=000&amp;t.zip=&amp;t.in1.age=&amp;t.in1.gender=&amp;t.in1.timestamp=&amp;t.in2.age=&amp;t.in2.gender=&amp;t.in2.timestamp=
GET /rum?cm_dsp_id=47&expiration=30&external_user_id=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

Host: r.casalemedia.com
GET /rum?cm_dsp_id=47&amp;expiration=30&amp;external_user_id=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Expires: Sat, 10 Nov 2012 19:20:22 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 10 Nov 2012 19:20:22 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: CMID=9bBTKK3LtdAAAC035ScAAABg;domain=casalemedia.com;path=/;expires=Sun, 10 Nov 2013 19:20:22 GMT CMPS=066;domain=casalemedia.com;path=/;expires=Fri, 08 Feb 2013 19:20:22 GMT CMPP=013;domain=casalemedia.com;path=/;expires=Fri, 08 Feb 2013 19:20:22 GMT CMRUM2=2f0000001e61d0fa58-980f-404f-8a1c-5fedb15ec8bb;domain=casalemedia.com;path=/;expires=Sun, 10 Nov 2013 19:20:22 GMT CMST=UJ6o9lCeqPYA;domain=casalemedia.com;path=/;expires=Sun, 11 Nov 2012 19:20:22 GMT CMSC=UJ6o9g**;domain=casalemedia.com;path=/; CMDD=;domain=casalemedia.com;path=/;expires=Sun, 11 Nov 2012 19:20:22 GMT
GET /adserver/vdi/830697?r=http%3A%2F%2Fi.w55c.net%2Fm.gif%3Fid%3D8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33%26ei%3DADBRITE%26cver%3D1%26euid%3D&d=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

Host: ads.adbrite.com
GET /adserver/vdi/830697?r=http%3A%2F%2Fi.w55c.net%2Fm.gif%3Fid%3D8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33%26ei%3DADBRITE%26cver%3D1%26euid%3D&amp;d=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Accept-Ranges: none
Cache-Control: no-cache, no-store, must-revalidate
Date: Sat, 10 Nov 2012 19:20:22 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Location: http://i.w55c.net/m.gif?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&amp;ei=ADBRITE&amp;cver=1&amp;euid=MTY4MzYyMTI5eDAuNjQxIDEzNTI1NzUyMjJ4Mzc1Njg1MDg2
P3P: policyref=&quot;http://files.adbrite.com/w3c/p3p.xml&quot;,CP=&quot;NOI PSA PSD OUR IND UNI NAV DEM STA OTC&quot;
Server: XPEHb/1.2
Set-Cookie: Apache=&quot;168362129x0.641+1352575222x375685086&quot;; path=/; domain=.adbrite.com; expires=Fri, 05-Nov-2032 19:20:22 GMT rb2=CjUKBjgzMDY5NxjxqpWlwgEiJDYxZDBmYTU4LTk4MGYtNDA0Zi04YTFjLTVmZWRiMTVlYzhiYhAB; path=/; domain=.adbrite.com; expires=Fri, 08-Feb-2013 19:20:22 GMT
Content-Length: 0
GET /images/backgrounds/newHome/loginActivateFB_v2.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=aim8icaza39biv9b36yfz72flpjfvkpr; __utma=213136648.1817814594.1352575218.1352575218.1352575218.1; __utmb=213136648.1.10.1352575218; __utmc=213136648; __utmz=213136648.1352575218.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT
Accept-Ranges: bytes
Content-Length: 255
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sat, 10 Nov 2012 19:20:22 GMT
Connection: keep-alive
GET /cms/v1?esig=1~d1b7a0970db7c0b314d942e728461f2b03f1f713&nwid=10000343293&sigv=1 HTTP/1.1

Host: ad.yieldmanager.com
GET /cms/v1?esig=1~d1b7a0970db7c0b314d942e728461f2b03f1f713&amp;nwid=10000343293&amp;sigv=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Found

Content-Type: text/plain; charset=utf-8
Date: Sat, 10 Nov 2012 19:20:23 GMT
P3P: policyref=&quot;http://p3p.yahoo.com/w3c/p3p.xml&quot;, CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV&quot;
Location: http://i.w55c.net/m_yahoo.gif?xid=E0
Cache-Control: private
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: YTS/1.20.13
GET /r/p/1056?uid=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

Host: pix.bit.ly

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:23 GMT
Location: http://pix.bit.ly/s/1x1.gif?id=2g2vzVAguJwV%2B%2B7c4ibN%2Bc6cwnE%3D
Server: nginx
Set-Cookie: _1056=1; Path=/
Content-Length: 0
Connection: keep-alive
GET /e/dataxu_sync.xgi?na_exid=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

Host: e.nexac.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Found

Content-Type: text/html
Expires: Wed Sep 15 09:14:42 MDT 2010
Pragma: no-cache
P3P: policyref=&quot;http://www.nextaction.net/P3P/PolicyReferences.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa TAIo PSAo PSDo HISa OUR DELa SAMo UNRo OTRo BUS UNI PUR COM NAV INT DEM STA PRE&quot;
Set-Cookie: na_tc=Y; expires=Sat, 30-Nov-2013 22:00:00 GMT; domain=.nexac.com; path=/
Location: http://e.nexac.com/e/xrefid.xgi?na_exid=61d0fa58-980f-404f-8a1c-5fedb15ec8bb&amp;na_pid=2460
Content-Length: 0
Date: Sat, 10 Nov 2012 19:20:23 GMT
Server: lighttpd/1.4.31
GET /red/usync?pid=5&puid=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

Host: su.addthis.com
GET /red/usync?pid=5&amp;puid=61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/png
Server: Apache-Coyote/1.1
Set-Cookie: di=%7B%225%22%3A%2261d0fa58-980f-404f-8a1c-5fedb15ec8bb%22%7D..; Domain=.addthis.com; Expires=Mon, 10-Nov-2014 19:20:23 GMT; Path=/ uid=509ea8f790ef6c12; Domain=.addthis.com; Expires=Mon, 10-Nov-2014 19:20:23 GMT; Path=/
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NON ADM OUR DEV IND COM STA&quot;
Content-Length: 67
Date: Sat, 10 Nov 2012 19:20:22 GMT
Connection: close
GET /pixel.gif/61d0fa58-980f-404f-8a1c-5fedb15ec8bb HTTP/1.1

Host: dx3723.tinyurl.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/gif
Accept-Ranges: bytes
Etag: &quot;851148392&quot;
Last-Modified: Tue, 12 Jul 2011 17:09:05 GMT
Content-Length: 43
Connection: close
Date: Sat, 10 Nov 2012 19:20:23 GMT
Server: TinyURL/1.6
GET /connect/xd_arbiter.php?version=17 HTTP/1.1

Host: static.ak.facebook.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
X-FB-Debug: QpUXNDPC4a/ZS9XMuzc2WDBWEZ8S2oHPsfImau8uouU=
Content-Length: 9847
Vary: Accept-Encoding
Cache-Control: public, max-age=31479356
Expires: Sun, 10 Nov 2013 03:36:19 GMT
Date: Sat, 10 Nov 2012 19:20:23 GMT
Connection: keep-alive
GET /360787.gif?redirect=1&rl=72b6c94279fc98635fd866f038010e56daad8683d2c5457ca6d5143e554e8665cca7cbcfa0ce09f72353a9872ddababb815e976a1799d4dd HTTP/1.1

Host: idsync.rlcdn.com
GET /360787.gif?redirect=1&amp;rl=72b6c94279fc98635fd866f038010e56daad8683d2c5457ca6d5143e554e8665cca7cbcfa0ce09f72353a9872ddababb815e976a1799d4dd HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: ck1=ck1
HTTP/1.1 200 OK

Content-Type: image/gif; charset=ISO-8859-1
Cache-Control: no-cache, no-store
Date: Sat, 10 Nov 2012 19:20:23 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP: &quot;NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE&quot;
Set-Cookie: rlas3=&quot;sTrzoUKsHkgd41QFyNwqvlGqLSdO5bLo6hZSmS7Cyy8=&quot;;Version=1;Domain=.rlcdn.com;Expires=Thu, 09-May-2013 19:20:23 GMT;Max-Age=15552000 rtn1=a0f4d9677eb6b375308956f6325b746f;Domain=.rlcdn.com;Expires=Thu, 09-May-2013 19:20:23 GMT
Content-Length: 43
Connection: keep-alive
GET /d.gif?t=4&ei=targus&id=7c5d7c864bda4aeaafe2ae21fc29867b&t.score=000&t.zip=&t.in1.age=&t.in1.gender=&t.in1.timestamp=&t.in2.age=&t.in2.gender=&t.in2.timestamp= HTTP/1.1

Host: i.w55c.net
GET /d.gif?t=4&amp;ei=targus&amp;id=7c5d7c864bda4aeaafe2ae21fc29867b&amp;t.score=000&amp;t.zip=&amp;t.in1.age=&amp;t.in1.gender=&amp;t.in1.timestamp=&amp;t.in2.age=&amp;t.in2.gender=&amp;t.in2.timestamp= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: wfivefivec=61d0fa58-980f-404f-8a1c-5fedb15ec8bb; matchrubicon=1; matchaccuen=1; matchappnexus=1; matchbluekai=1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:23 GMT
Server: Jetty(6.1.22)
Set-Cookie: wfivefivec=61d0fa58-980f-404f-8a1c-5fedb15ec8bb;Path=/;Domain=.w55c.net;Expires=Mon, 10-Nov-14 19:20:23 GMT
Cache-Control: no-store
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Content-Length: 42
X-Powered-By: Mirror Image Internet
Via: 1.1 lhr061008 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /m.gif?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&ei=ADBRITE&cver=1&euid=MTY4MzYyMTI5eDAuNjQxIDEzNTI1NzUyMjJ4Mzc1Njg1MDg2 HTTP/1.1

Host: i.w55c.net
GET /m.gif?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&amp;ei=ADBRITE&amp;cver=1&amp;euid=MTY4MzYyMTI5eDAuNjQxIDEzNTI1NzUyMjJ4Mzc1Njg1MDg2 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: wfivefivec=61d0fa58-980f-404f-8a1c-5fedb15ec8bb; matchrubicon=1; matchaccuen=1; matchappnexus=1; matchbluekai=1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:23 GMT
Server: Jetty(6.1.22)
Set-Cookie: wfivefivec=61d0fa58-980f-404f-8a1c-5fedb15ec8bb;Path=/;Domain=.w55c.net;Expires=Mon, 10-Nov-14 19:20:23 GMT
Cache-Control: no-store
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Content-Length: 42
X-Powered-By: Mirror Image Internet
Via: 1.1 lhr061011 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /rs?id=d777fecd6cb849b4bab0bfe71d57747a&t=product&name=FBX_NotMatched HTTP/1.1

Host: i.w55c.net
GET /rs?id=d777fecd6cb849b4bab0bfe71d57747a&amp;t=product&amp;name=FBX_NotMatched HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: wfivefivec=61d0fa58-980f-404f-8a1c-5fedb15ec8bb; matchrubicon=1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:23 GMT
Server: Jetty(6.1.22)
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Cache-Control: no-store
X-Powered-By: Mirror Image Internet
Content-Length: 42
Set-Cookie: wfivefivec=61d0fa58-980f-404f-8a1c-5fedb15ec8bb;Path=/;Domain=.w55c.net;Expires=Mon, 10-Nov-14 19:20:23 GMT
Via: 1.1 lhr032174010000 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /5/c=1818/pe=y/var=ccauds HTTP/1.1

Host: ad.crwdcntrl.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/crwdctrl.html?61d0fa58-980f-404f-8a1c-5fedb15ec8bb
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Sat, 10 Nov 2012 19:20:23 GMT
Cache-Control: no-cache
Expires: 0
Pragma: no-cache
P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
X-Server: 172.25.11.62
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 71
GET /m_yahoo.gif?xid=E0 HTTP/1.1

Host: i.w55c.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: wfivefivec=61d0fa58-980f-404f-8a1c-5fedb15ec8bb; matchrubicon=1; matchaccuen=1; matchappnexus=1; matchbluekai=1; matchcasale=1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:23 GMT
Server: Jetty(6.1.22)
Set-Cookie: wfivefivec=61d0fa58-980f-404f-8a1c-5fedb15ec8bb;Path=/;Domain=.w55c.net;Expires=Mon, 10-Nov-14 19:20:23 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Cache-Control: no-store
X-Powered-By: Mirror Image Internet
Content-Length: 42
Via: 1.1 lhr032174010000 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /e/xrefid.xgi?na_exid=61d0fa58-980f-404f-8a1c-5fedb15ec8bb&na_pid=2460 HTTP/1.1

Host: e.nexac.com
GET /e/xrefid.xgi?na_exid=61d0fa58-980f-404f-8a1c-5fedb15ec8bb&amp;na_pid=2460 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: na_tc=Y
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Wed Sep 15 09:14:42 MDT 2010
Pragma: no-cache
P3P: policyref=&quot;http://www.nextaction.net/P3P/PolicyReferences.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa TAIo PSAo PSDo HISa OUR DELa SAMo UNRo OTRo BUS UNI PUR COM NAV INT DEM STA PRE&quot;
Set-Cookie: na_tc=Y; expires=Sat, 30-Nov-2013 22:00:00 GMT; domain=.nexac.com; path=/
X-Powered-By: Jigawatts
Content-Length: 43
Date: Sat, 10 Nov 2012 19:20:23 GMT
Server: lighttpd/1.4.31
GET /connect/xd_arbiter.php?version=17 HTTP/1.1

Host: s-static.ak.facebook.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
X-FB-Debug: JS4qOSg1Dl3AgVtg3MyBP4whcr8SZapA/Vud9cBlDwY=
Content-Length: 9847
Vary: Accept-Encoding
Cache-Control: public, max-age=31479318
Expires: Sun, 10 Nov 2013 03:35:41 GMT
Date: Sat, 10 Nov 2012 19:20:23 GMT
Connection: keep-alive
GET /s/1x1.gif?id=2g2vzVAguJwV%2B%2B7c4ibN%2Bc6cwnE%3D HTTP/1.1

Host: pix.bit.ly

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: _1056=1
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: public
Date: Sat, 10 Nov 2012 19:20:23 GMT
Etag: &quot;69a45cc1c6776232fc42b5f36986a69da596d501&quot;
Last-Modified: Tue, 10 Jul 2012 20:44:36 GMT
Server: nginx
Content-Length: 52
Connection: keep-alive
GET /pull_sync?pid=rubicon HTTP/1.1

Host: www.wtp101.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: image/gif
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Cache-Control: no-cache, no-store, must-revalidate
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
Content-Length: 43
Date: Sat, 10 Nov 2012 19:20:23 GMT
GET /sync?ssp=rubicon HTTP/1.1

Host: x.bidswitch.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html; charset=UTF-8
Set-Cookie: tuuid=84319dbd-a089-48f4-9d5a-3413fd8f9a5c; path=/; expires=Mon, 10-Nov-2014 19:20:23 GMT
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Location: /sync?ul_cb=1&amp;ssp=rubicon
Cache-Control: no-cache, no-store, must-revalidate
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
Content-Length: 0
Date: Sat, 10 Nov 2012 19:20:23 GMT
GET /sync?ul_cb=1&ssp=rubicon HTTP/1.1

Host: x.bidswitch.net
GET /sync?ul_cb=1&amp;ssp=rubicon HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: tuuid=84319dbd-a089-48f4-9d5a-3413fd8f9a5c
HTTP/1.1 200 OK

Content-Type: image/gif
Set-Cookie: tuuid=84319dbd-a089-48f4-9d5a-3413fd8f9a5c; path=/; expires=Mon, 10-Nov-2014 19:20:23 GMT
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Cache-Control: no-cache, no-store, must-revalidate
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
Content-Length: 43
Date: Sat, 10 Nov 2012 19:20:23 GMT
GET /view.aspx?poolid=12887&script=1&rnd=882028 HTTP/1.1

Host: server.cpmstar.com
GET /view.aspx?poolid=12887&amp;script=1&amp;rnd=882028 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43781
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Cache-Control: private,no-store, no-cache, must-revalidate
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: /view.aspx?poolid=12887&amp;script=1&amp;rnd=882028&amp;test=1
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
Set-Cookie: USER_ID=%17%a6%8bL%b4r%23%5e%c37%e7%18'%bd%d5; domain=.server.cpmstar.com; expires=Wed, 10-Nov-2032 19:20:25 GMT; path=/
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA&quot;
Date: Sat, 10 Nov 2012 19:20:25 GMT
Content-Length: 185
Connection: Keep-alive
Keep-Alive: timeout=15, max=100
Via: 1.1 ID-0001544140306215 uproxy-2
GET /partner/scripts/rubicon/page_parser.js?d=www.mediafire.com HTTP/1.1

Host: tap-cdn.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=24168
Cookie: rpb=14240%3D1%266286%3D1%268981%3D1%265852%3D1%264210%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd5509ea8f450cba8fe304854^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352575220^1352575220; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352575220^1352575220; cd=false; au=H9D4D40N-99MP-10.115.51.191; lm=&quot;10 Nov 2012 19:20:21 GMT&quot;; put_2132=93AD8995EFD01B88AE8A3B11EFBA9DEB; put_1185=3612595131433083545; put_2307=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9; put_2211=4612108586589028770; put_2146=RUIDaayo9fnxc9np4bigh8ijsymqb6r7q8fon1drxukikipe7em7t6xo%3D%3D%3D%3D; put_2309=RUIDaayo9fnxc9np4bigh8ijsymqb6r7q8fon1drxukikipe7em7t6xo%3D%3D%3D%3D; put_2021=509ea8f50ad142ba0e375a4c; put_2596=638666723793147223; put_2101=1507de89-57c4-49ff-b7bd-dcb7c3df22f0; put_1523=61d0fa58-980f-404f-8a1c-5fedb15ec8bb
HTTP/1.1 200 OK

Content-Type: text/javascript;charset=UTF-8
Server: TRP Apache-Coyote/1.1
Last-Modified: Sat, 10 Nov 2012 13:56:16 GMT
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Content-Encoding: gzip
Cache-Control: max-age=3600
Expires: Sat, 10 Nov 2012 20:20:24 GMT
Date: Sat, 10 Nov 2012 19:20:24 GMT
Content-Length: 5705
Connection: keep-alive
Vary: Accept-Encoding
GET /cached/js/flashadv12.pack.js HTTP/1.1

Host: cdn3.cpmstar.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43781
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Cache-Control: max-age=259200
Accept-Ranges: bytes
Server: Microsoft-IIS/7.5
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA&quot;
Via: 1.1 ID-0001544140306215 uproxy-3
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 58983
Date: Sat, 10 Nov 2012 19:20:24 GMT
Last-Modified: Fri, 26 Oct 2012 02:43:57 GMT
Expires: Tue, 13 Nov 2012 02:57:21 GMT
Content-Length: 876
Connection: close
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352575224402&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D43781&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3176583&amp;ns__t=1352575224402&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D43781&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43781
Cookie: UID=4a9143d-195.159.219.8-1352575220; UIDR=1352575220
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sat, 10 Nov 2012 19:20:24 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /cached/creatives/203391/Kone-XTD_Banner_160x600_Clicktag.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d82398%26creativeid%3d203391%26url%3d HTTP/1.1

Host: cdn3.cpmstar.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43781
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Cache-Control: public
Server: Microsoft-IIS/7.5
Content-Disposition: inline;filename=203391_Kone-XTD_Banner_160x600_Clicktag.swf
X-AspNet-Version: 2.0.50727
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA&quot;
Via: 1.1 ID-0001544140306215 uproxy-5
Age: 56168
Date: Sat, 10 Nov 2012 19:20:24 GMT
Expires: Sun, 11 Nov 2012 03:44:16 GMT
Content-Length: 77907
Connection: close
GET /adserver/cookiematch?pnid=3000007 HTTP/1.1

Host: rubicon-rtb.p.veruta.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache-Coyote/1.1
Content-Length: 43
Date: Sat, 10 Nov 2012 19:20:27 GMT
GET /px/rb.gif HTTP/1.1

Host: ad.yabuka.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 FOUND

Content-Type: text/html; charset=utf-8
Server: nginx/1.1.19
Date: Sat, 10 Nov 2012 19:20:27 GMT
Content-Length: 186
Connection: keep-alive
Location: http://pixel.rubiconproject.com/tap.php?v=9047&amp;nid=2147&amp;put=iOURXTFY7e
Set-Cookie: client_id=iOURXTFY7e; Path=/ tc=&quot;tA6CIMcbd5JH7FKMw0uF2ba6ETg=?_expires=STEzNTI5ODU2MjcKLg==&amp;client_id=UydpT1VSWFRGWTdlJwpwMQou&quot;; Domain=.yabuka.com; expires=Thu, 15-Nov-2012 13:20:27 GMT; Path=/
Cache-Control: no-cache
Pragma: no-cache
GET /do-association?rbc HTTP/1.1

Host: matcher-rbc.bidder7.mookie1.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4612108586589028770; mdata=1|4612108586589028770|1352575221
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:27 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://cm.g.doubleclick.net/pixel?google_nid=themig&amp;google_cm&amp;google_sc&amp;can=ffffffffffffffff&amp;v2
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=645
Connection: Keep-Alive
GET /1/gr?url=http%3a//pixel.rubiconproject.com/tap.php%3fv%3d11782%7c1%7c14%26nid%3d2181%26put%3d__EFGCK__%26expires%3d14 HTTP/1.1

Host: pixel.everesttech.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1
Date: Sat, 10 Nov 2012 19:20:27 GMT
Server: Apache
Set-Cookie: everest_session_v2=UJ6o@wAADxgvjRDf; path=/; domain=.everesttech.net everest_g_v2=g_surferid~UJ6o@wAADxgvjRDf; path=/; domain=.everesttech.net; expires=Mon, 06-Oct-2014 06:00:27 GMT
P3P: CP=&quot;NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM&quot;
Cache-Control: no-cache
Location: http://cm.g.doubleclick.net/pixel?google_nid=everest&amp;google_cm&amp;google_sc&amp;ev_rs=1&amp;url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14
Content-Length: 427
Keep-Alive: timeout=15, max=998931
Connection: Keep-Alive
GET /tap.php?v=9047&nid=2147&put=iOURXTFY7e HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=9047&amp;nid=2147&amp;put=iOURXTFY7e HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%266286%3D1%268981%3D1%265852%3D1%264210%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C%265852%3D25067%2C0%2C1%2C%2C%264210%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd5509ea8f450cba8fe304854^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352575220^1352575220; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352575220^1352575220; cd=false; au=H9D4D40N-99MP-10.115.51.191; lm=&quot;10 Nov 2012 19:20:21 GMT&quot;; put_2132=93AD8995EFD01B88AE8A3B11EFBA9DEB; put_1185=3612595131433083545; put_2307=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9; put_2211=4612108586589028770; put_2146=RUIDaayo9fnxc9np4bigh8ijsymqb6r7q8fon1drxukikipe7em7t6xo%3D%3D%3D%3D; put_2309=RUIDaayo9fnxc9np4bigh8ijsymqb6r7q8fon1drxukikipe7em7t6xo%3D%3D%3D%3D; put_2021=509ea8f50ad142ba0e375a4c; put_2596=638666723793147223; put_2101=1507de89-57c4-49ff-b7bd-dcb7c3df22f0; put_1523=61d0fa58-980f-404f-8a1c-5fedb15ec8bb
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:27 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%266286%3D1%268981%3D1%265852%3D1%264210%3D1%269047%3D1; expires=Mon, 10-Dec-2012 19:20:27 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C%265852%3D25067%2C0%2C1%2C%2C%264210%3D25067%2C0%2C1%2C%2C%269047%3D25067%2C0%2C1%2C%2C; expires=Mon, 10-Dec-2012 19:20:27 GMT; path=/; domain=.pixel.rubiconproject.com put_2147=iOURXTFY7e; expires=Mon, 10-Dec-2012 19:20:27 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9395
Connection: Keep-Alive
GET /pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14 HTTP/1.1

Host: cm.g.doubleclick.net
GET /pixel?google_nid=everest&amp;google_cm&amp;google_sc&amp;ev_rs=1&amp;url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Location: http://pixel2368.everesttech.net/2368/m?cookieid=&amp;ev_rs=1&amp;url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&amp;google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&amp;google_cver=1
Date: Sat, 10 Nov 2012 19:20:27 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: Cookie Matcher
Content-Length: 470
X-XSS-Protection: 1; mode=block
GET /pixel?google_nid=themig&google_cm&google_sc&can=ffffffffffffffff&v2 HTTP/1.1

Host: cm.g.doubleclick.net
GET /pixel?google_nid=themig&amp;google_cm&amp;google_sc&amp;can=ffffffffffffffff&amp;v2 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Location: http://matcher.bidder7.mookie1.com/google?id=&amp;can=ffffffffffffffff&amp;v2=&amp;google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&amp;google_cver=1
Date: Sat, 10 Nov 2012 19:20:27 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: Cookie Matcher
Content-Length: 336
X-XSS-Protection: 1; mode=block
GET /2368/m?cookieid=&ev_rs=1&url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&google_cver=1 HTTP/1.1

Host: pixel2368.everesttech.net
GET /2368/m?cookieid=&amp;ev_rs=1&amp;url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&amp;google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&amp;google_cver=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: everest_session_v2=UJ6o@wAADxgvjRDf; everest_g_v2=g_surferid~UJ6o@wAADxgvjRDf
HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1
Date: Sat, 10 Nov 2012 19:20:28 GMT
Server: Apache
Set-Cookie: gglck=CAESEHb10AvLIOUdvYC_4Xf0C8w; path=/; domain=.everesttech.net; expires=Mon, 10-Dec-2012 19:20:28 GMT everest_session_v2=UJ6o@wAADxgvjRDf; path=/; domain=.everesttech.net everest_g_v2=g_surferid~UJ6o@wAADxgvjRDf; path=/; domain=.everesttech.net; expires=Mon, 06-Oct-2014 06:00:28 GMT
P3P: CP=&quot;NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM&quot;
Cache-Control: no-cache
Location: http://pixel.rubiconproject.com/tap.php?v=11782|1|14&amp;nid=2181&amp;put=CAESEHb10AvLIOUdvYC_4Xf0C8w&amp;expires=14
Content-Length: 300
Keep-Alive: timeout=15, max=999049
Connection: Keep-Alive
GET /google?id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 HTTP/1.1

Host: matcher.bidder7.mookie1.com
GET /google?id=&amp;can=ffffffffffffffff&amp;v2=&amp;google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&amp;google_cver=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4612108586589028770; mdata=1|4612108586589028770|1352575221
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:28 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://matcher.bidder8.mookie1.com/google?zap-redir&amp;id=&amp;can=ffffffffffffffff&amp;v2=&amp;google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&amp;google_cver=1
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=774
Connection: Keep-Alive
GET /tap.php?v=11782|1|14&nid=2181&put=CAESEHb10AvLIOUdvYC_4Xf0C8w&expires=14 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=11782|1|14&amp;nid=2181&amp;put=CAESEHb10AvLIOUdvYC_4Xf0C8w&amp;expires=14 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%266286%3D1%268981%3D1%265852%3D1%264210%3D1%269047%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C%265852%3D25067%2C0%2C1%2C%2C%264210%3D25067%2C0%2C1%2C%2C%269047%3D25067%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd5509ea8f450cba8fe304854^1^1352575220^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352575220^1352575220; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352575220^1352575220; cd=false; au=H9D4D40N-99MP-10.115.51.191; lm=&quot;10 Nov 2012 19:20:21 GMT&quot;; put_2132=93AD8995EFD01B88AE8A3B11EFBA9DEB; put_1185=3612595131433083545; put_2307=74cdd64c-c53c-468e-9cbf-7c2a63cd44e9; put_2211=4612108586589028770; put_2146=RUIDaayo9fnxc9np4bigh8ijsymqb6r7q8fon1drxukikipe7em7t6xo%3D%3D%3D%3D; put_2309=RUIDaayo9fnxc9np4bigh8ijsymqb6r7q8fon1drxukikipe7em7t6xo%3D%3D%3D%3D; put_2021=509ea8f50ad142ba0e375a4c; put_2596=638666723793147223; put_2101=1507de89-57c4-49ff-b7bd-dcb7c3df22f0; put_1523=61d0fa58-980f-404f-8a1c-5fedb15ec8bb; put_2147=iOURXTFY7e
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:28 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%266286%3D1%268981%3D1%265852%3D1%264210%3D1%269047%3D1%2611782%3D1; expires=Mon, 10-Dec-2012 19:20:28 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25067%2C0%2C1%2C%2C%268981%3D25067%2C0%2C1%2C%2C%265852%3D25067%2C0%2C1%2C%2C%264210%3D25067%2C0%2C1%2C%2C%269047%3D25067%2C0%2C1%2C%2C%2611782%3D25067%2C0%2C1%2C14%2C; expires=Mon, 10-Dec-2012 19:20:28 GMT; path=/; domain=.pixel.rubiconproject.com put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; expires=Sat, 24-Nov-2012 19:20:28 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=8636
Connection: Keep-Alive
GET /google?zap-redir&id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 HTTP/1.1

Host: matcher.bidder8.mookie1.com
GET /google?zap-redir&amp;id=&amp;can=ffffffffffffffff&amp;v2=&amp;google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&amp;google_cver=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4612108586589028770; mdata=1|4612108586589028770|1352575221
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:28 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://ib.adnxs.com/getuid?http://matcher-apx.bidder7.mookie1.com/appnexus?can=fffffffffffffffe%26adnxs_uid=$UID
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=996
Connection: Keep-Alive
GET /getuid?http://matcher-apx.bidder7.mookie1.com/appnexus?can=fffffffffffffffe%26adnxs_uid=$UID HTTP/1.1

Host: ib.adnxs.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG68%Cxrx)0s]#%2L_'x%SEV/hnJPh4FSn'^Ehxzkb10I3eX.EPkoZ%:QT^58C&lt;!M=I_J?[q^tW; sess=1; icu=ChIIlroHEAoYASABKAEw9dH6hAUQ9dH6hAUYAA..
HTTP/1.1 302 Moved

Content-Type: text/html; charset=ISO-8859-1
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Fri, 08-Feb-2013 19:20:28 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Sun, 11-Nov-2012 19:20:28 GMT; domain=.adnxs.com; HttpOnly
Location: http://matcher-apx.bidder7.mookie1.com/appnexus?can=fffffffffffffffe&amp;adnxs_uid=5858721859426781856
Date: Sat, 10 Nov 2012 19:20:28 GMT
Content-Length: 0
GET /appnexus?can=fffffffffffffffe&adnxs_uid=5858721859426781856 HTTP/1.1

Host: matcher-apx.bidder7.mookie1.com
GET /appnexus?can=fffffffffffffffe&amp;adnxs_uid=5858721859426781856 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4612108586589028770; mdata=1|4612108586589028770|1352575221
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:29 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://matcher.bidder8.mookie1.com/appnexus?zap-redir&amp;can=fffffffffffffffe&amp;adnxs_uid=5858721859426781856
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=988
Connection: Keep-Alive
GET /appnexus?zap-redir&can=fffffffffffffffe&adnxs_uid=5858721859426781856 HTTP/1.1

Host: matcher.bidder8.mookie1.com
GET /appnexus?zap-redir&amp;can=fffffffffffffffe&amp;adnxs_uid=5858721859426781856 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4612108586589028770; mdata=1|4612108586589028770|1352575221
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:29 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://bh.contextweb.com/bh/rtset?do=add&amp;pid=536088&amp;ev=4612108586589028770&amp;rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=fffffffffffffff6
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=390
Connection: Keep-Alive
GET /bh/rtset?do=add&pid=536088&ev=4612108586589028770&rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=fffffffffffffff6 HTTP/1.1

Host: bh.contextweb.com
GET /bh/rtset?do=add&amp;pid=536088&amp;ev=4612108586589028770&amp;rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=fffffffffffffff6 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html;charset=ISO-8859-1
Cache-Control: private, max-age=0, no-cache, no-store
Content-Language: en-US
CW-Server: ip-10-205-49-80
Date: Sat, 10 Nov 2012 19:20:29 GMT
Expires: -1
Location: http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb&amp;can=fffffffffffffff6
P3P: policyref=&quot;/bh/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT&quot;
Server: GlassFish v3
Set-Cookie: V=aO2IfwyJGlTU; Domain=.contextweb.com; Expires=Tue, 05-Nov-2013 19:20:30 GMT; Path=/ pb_rtb_ev=2-536088.4612108586589028770.0.0.1352575230195; Domain=.contextweb.com; Expires=Sun, 10-Nov-2013 19:20:30 GMT; Path=/
Content-Length: 242
Connection: keep-alive
GET /do-association?return=ctxweb&can=fffffffffffffff6 HTTP/1.1

Host: matcher-cwb.bidder7.mookie1.com
GET /do-association?return=ctxweb&amp;can=fffffffffffffff6 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4612108586589028770; mdata=1|4612108586589028770|1352575221
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sat, 10 Nov 2012 19:20:30 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI0NzgmdGw9MTI5NjAw&amp;piggybackCookie=uid:4612108586589028770&amp;r=http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=930
Connection: Keep-Alive
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI0NzgmdGw9MTI5NjAw&piggybackCookie=uid:4612108586589028770&r=http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6 HTTP/1.1

Host: image2.pubmatic.com
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI0NzgmdGw9MTI5NjAw&amp;piggybackCookie=uid:4612108586589028770&amp;r=http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1
Date: Sat, 10 Nov 2012 19:20:30 GMT
Server: Apache/2.2.4 (Unix) DAV/2 mod_ssl/2.2.4 OpenSSL/0.9.7a mod_fastcgi/2.4.2
Set-Cookie: KRTBCOOKIE_262=4781-uid:4612108586589028770; domain=pubmatic.com; expires=Mon, 10-Nov-2014 19:20:30 GMT; path=/ PUBRETARGET=2478_1360351230; domain=pubmatic.com; expires=Fri, 08-Feb-2013 19:20:30 GMT; path=/
Location: http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic&amp;can=ffffffffffffffe6
Content-Length: 413
Connection: close
GET /do-association?return=pubmatic&can=ffffffffffffffe6 HTTP/1.1

Host: matcher-pbm.bidder7.mookie1.com
GET /do-association?return=pubmatic&amp;can=ffffffffffffffe6 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4612108586589028770; mdata=1|4612108586589028770|1352575221
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sat, 10 Nov 2012 19:20:30 GMT
Server: Apache/2.2.3 (Red Hat)
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 43
Keep-Alive: timeout=1, max=467
Connection: Keep-Alive
POST / HTTP/1.1

Host: ocsp.verisign.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
HTTP/1.0 200 Ok

Content-Type: application/ocsp-response
Last-Modified: Fri, 09 Nov 2012 00:41:57 GMT
Expires: Fri, 16 Nov 2012 00:41:57 GMT
Content-Transfer-Encoding: binary
Content-Length: 1814
Cache-Control: max-age=451286, public, no-transform, must-revalidate
Date: Sat, 10 Nov 2012 19:20:31 GMT
nncoection: close
Connection: Keep-Alive
GET /dialog/oauth?client_id=124578887583575&response_type=token%2Csigned_request%2Ccode&display=none&domain=www.mediafire.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Df286ca7e7bc2c02%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ffd2695f0fb057e%26domain%3Dwww.mediafire.com%26relation%3Dparent&sdk=joey HTTP/1.1

Host: www.facebook.com
GET /dialog/oauth?client_id=124578887583575&amp;response_type=token%2Csigned_request%2Ccode&amp;display=none&amp;domain=www.mediafire.com&amp;origin=1&amp;redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Df286ca7e7bc2c02%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ffd2695f0fb057e%26domain%3Dwww.mediafire.com%26relation%3Dparent&amp;sdk=joey HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Cache-Control: private, no-cache, no-store, must-revalidate
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: http://static.ak.facebook.com/connect/xd_arbiter.php?version=17#cb=f286ca7e7bc2c02&amp;origin=http%3A%2F%2Fwww.mediafire.com%2Ffd2695f0fb057e&amp;domain=www.mediafire.com&amp;relation=parent&amp;error=unknown_user
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-FB-Debug: 6f7RLLf7z7P311B2NDNFkTOsRnqJlZJxLPp1nZrB+M4=
Date: Sat, 10 Nov 2012 19:20:31 GMT
Connection: keep-alive
Content-Length: 0
GET /5i8wlnb9nang/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe HTTP/1.1

Host: 199.91.154.25

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Location: http://www.mediafire.com/?4p5wab4oqodaj44
Connection: Close
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1

Host: static.ak.fbcdn.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&amp;send=false&amp;layout=button_count&amp;width=180&amp;show_faces=false&amp;action=like&amp;colorscheme=light&amp;font&amp;height=80
Origin: http://www.facebook.com


GET /view.aspx?poolid=12887&script=1&rnd=882028&test=1 HTTP/1.1

Host: server.cpmstar.com
GET /view.aspx?poolid=12887&amp;script=1&amp;rnd=882028&amp;test=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43781
Cookie: USER_ID=%17%a6%8bL%b4r%23%5e%c37%e7%18'%bd%d5
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Cache-Control: private,no-store, no-cache, must-revalidate
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
Set-Cookie: n15=0,12887,82398,203391,1352575225,0; domain=.server.cpmstar.com; expires=Mon, 10-Dec-2012 19:20:25 GMT; path=/ sm=t=1352488885; domain=.server.cpmstar.com; expires=Sun, 11-Nov-2012 19:20:25 GMT; path=/
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA&quot;
Date: Sat, 10 Nov 2012 19:20:24 GMT
Connection: close
Via: 1.1 ID-0001544140306215 uproxy-2