urlquery.net - Free url scanner

Overview

URL	http://205.196.122.113/42bovq53a8zg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe
IP	205.196.122.113
ASN	AS46179 MediaFire, LLC
Location	United States
Report completed	2012-11-11 03:06:49 CET
Status	Loading report..
urlQuery Alerts	No alerts detected

Settings

UserAgent	Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader	8.0
Java	1.6.0_26

Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Source IP	Destination IP	Severity	Alert
2012-11-11 03:06:15	205.196.120.6	urlQuery Client	3	FILEMAGIC Macromedia Flash data (compressed),
2012-11-11 03:06:17	87.248.207.253	urlQuery Client	3	FILEMAGIC Macromedia Flash data (compressed),

Snort /w Sourcefire VRT

Timestamp	Source IP	Destination IP	Severity	Alert
2012-11-11 03:06:12	urlQuery Client	173.194.69.95	2	ssp_ssl: Invalid Client HELLO after Server HELLO Detected
2012-11-11 03:06:12	urlQuery Client	173.194.69.95	2	ssp_ssl: Invalid Client HELLO after Server HELLO Detected

Recent reports on same IP/ASN/Domain

Last 5 reports on IP: 205.196.122.113

Date	Alerts / IDS	URL	IP
2012-11-11 13:56:21	0 / 4	http://205.196.122.113/vf9u6415m49g/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.122.113
2012-11-11 08:09:02	0 / 7	http://205.196.122.113/cvamgbv8v7sg/5nwz1uz1r4ddec4/PotPlayerPortable_1.5.34321_Beta_ (...)	205.196.122.113
2012-11-11 03:07:47	0 / 4	http://205.196.122.113/22qno8uacylg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.122.113
2012-11-11 01:05:23	0 / 2	http://205.196.122.113/c9443azfea0g/5nwz1uz1r4ddec4/PotPlayerPortable_1.5.34321_Beta_ (...)	205.196.122.113
2012-11-10 22:26:27	0 / 3	http://205.196.122.113/s95g2ea4g5qg/5nwz1uz1r4ddec4/PotPlayerPortable_1.5.34321_Beta_ (...)	205.196.122.113

Last 6 reports on ASN: AS46179 MediaFire, LLC

Date	Alerts / IDS	URL	IP
2013-04-03 20:12:29	0 / 4	http://205.196.123.74/l92ib41gvscg/468ayv521l9tadm/Facebook+Hacker+Free+V2.6.exe	205.196.123.74
2013-04-03 20:12:14	0 / 6	http://205.196.121.203/be6k6njra0vg/au5dn2gjdjm/Seafight+Pearl+Hack.exe	205.196.121.203
2013-04-03 19:44:21	0 / 4	http://205.196.123.74/l92ib41gvscg/468ayv521l9tadm/Facebook+Hacker+Free+V2.6.exe	205.196.123.74
2013-04-03 19:43:58	0 / 3	http://205.196.121.203/be6k6njra0vg/au5dn2gjdjm/Seafight+Pearl+Hack.exe	205.196.121.203
2013-04-03 19:41:29	0 / 5	http://205.196.122.253/4245e0dsnjug/b8bwx0a9fp93lag/IceColdFacebookFreezer.exe	205.196.122.253
2013-04-03 19:31:57	0 / 2	http://205.196.121.104/67r0j91engdg/zccu2211s7spswb/MyModLauncher.exe	205.196.121.104

Last 5 reports on domain: 205.196.122.113

Date	Alerts / IDS	URL	IP
2012-11-11 13:56:21	0 / 4	http://205.196.122.113/vf9u6415m49g/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.122.113
2012-11-11 08:09:02	0 / 7	http://205.196.122.113/cvamgbv8v7sg/5nwz1uz1r4ddec4/PotPlayerPortable_1.5.34321_Beta_azo.exe	205.196.122.113
2012-11-11 03:07:47	0 / 4	http://205.196.122.113/22qno8uacylg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.122.113
2012-11-11 01:05:23	0 / 2	http://205.196.122.113/c9443azfea0g/5nwz1uz1r4ddec4/PotPlayerPortable_1.5.34321_Beta_azo.exe	205.196.122.113
2012-11-10 22:26:27	0 / 3	http://205.196.122.113/s95g2ea4g5qg/5nwz1uz1r4ddec4/PotPlayerPortable_1.5.34321_Beta_azo.exe	205.196.122.113

JavaScript

Executed Scripts (63)

Executed Evals (0)

Executed Writes (49)

#1 JavaScript::Write (size: 9, repeated: 1)

 </EMBED>

#2 JavaScript::Write (size: 10, repeated: 1)

 </OBJECT>

#3 JavaScript::Write (size: 254, repeated: 1)

 <EMBED src="http://cdn3.cpmstar.com/cached/creatives/163844/160x600 (2).swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d66048%26creativeid%3d163844%26url%3d" wmode=opaque menu=false quality=high

#4 JavaScript::Write (size: 325, repeated: 1)

 <PARAM NAME=movie VALUE="http://cdn3.cpmstar.com/cached/creatives/163844/160x600 (2).swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d66048%26creativeid%3d163844%26url%3d"> <PARAM NAME=wmode VALUE=opaque> <PARAM NAME=menu VALUE=false> <PARAM NAME=quality VALUE=high>

#5 JavaScript::Write (size: 69, repeated: 1)

 ID=ad_banner_example WIDTH=160 HEIGHT=600 style="line-height: 1px;">

#6 JavaScript::Write (size: 133, repeated: 1)

 TYPE="application/x-shockwave-flash" PLUGINSPAGE="//www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash">

#7 JavaScript::Write (size: 91, repeated: 1)

 codebase="//download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=3,0,0,0"

#8 JavaScript::Write (size: 41, repeated: 1)

 swLiveConnect=FALSE WIDTH=160 HEIGHT=600

#9 JavaScript::Write (size: 245, repeated: 2)

<!-- BEGIN JS TAG - [Mediafire - Rubicon] - Default < - DO NOT MODIFY -->
<SCRIPT SRC="http://ads.cpxinteractive.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44" TYPE="text/javascript"></script>
<!-- END TAG -->

#10 JavaScript::Write (size: 244, repeated: 1)

<!-- BEGIN JS TAG - [Mediafire - Rubicon] - Default < - DO NOT MODIFY -->
<SCRIPT SRC="http://ads.cpxinteractive.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44" TYPE="text/javascript"></script>
<!-- END TAG -->

#11 JavaScript::Write (size: 9, repeated: 5)

</script>

#12 JavaScript::Write (size: 60, repeated: 1)

<OBJECT classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"

#13 JavaScript::Write (size: 274, repeated: 1)

<SCRIPT language="Javascript">
var cpmstar_rnd=Math.round(Math.random()*999999);
var cpmstar_pid=12887;
document.writeln("<SCR"+"IPT language='Javascript' src='http://server.cpmstar.com/view.aspx?poolid="+cpmstar_pid+"&script=1&rnd="+cpmstar_rnd+"'></SCR"+"IPT>");
</script>

#14 JavaScript::Write (size: 114, repeated: 1)

<SCRIPT language='Javascript' src='http://server.cpmstar.com/view.aspx?poolid=12887&script=1&rnd=385749'></SCRIPT>

#15 JavaScript::Write (size: 582, repeated: 1)

<a href="http://ib.adnxs.com/click?2LrUCP1MnT_YutQI_UydPwAAAEAzM8M_2LrUCP1MnT_YutQI_UydP-MM3bp3TEsioArzhH1cTlEYCJ9QAAAAAHZYCwAdAgAAHQIAAAIAAAAyVRQAKkACAAAAAQBVU0QAVVNEACwB-gBNUQAAUFAAAgQCAQUAAIIAQSMbCAAAAAA./cnd=%218QTZKgjwvQ8QsqpRGKqACSAE/referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGOOZ9Nb7jtOlIiIOODAuMjAzLjE2OC4yNTQoAQ.." target="_blank"><img width="300" height="250" style="border-style: none" src="http://cdn.adnxs.com/p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png"/></a>

#16 JavaScript::Write (size: 581, repeated: 1)

<a href="http://ib.adnxs.com/click?KlQ3F3_bkz8qVDcXf9uTPwAAAEAzM8M_KlQ3F3_bkz8qVDcXf9uTP4JqvfQSogY-oArzhH1cTlEbCJ9QAAAAAHZYCwAdAgAAHQIAAAIAAAA2VRQAKkACAAAAAQBVU0QAVVNEANgCWgBNUQAA8z8AAgQCAQUAAIIAWh12QAAAAAA./cnd=%219QT9KgjwvQ8QtqpRGKqACSAE/referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGILV9aWvwqiDPiIOODAuMjAzLjE2OC4yNTQoAQ.." target="_blank"><img width="728" height="90" style="border-style: none" src="http://cdn.adnxs.com/p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png"/></a>

#17 JavaScript::Write (size: 582, repeated: 1)

<a href="http://ib.adnxs.com/click?rabria4Lnz-tpuuJrgufPwAAAEAzM8M_rabria4Lnz-tpuuJrgufP4pltFPr6KoxoArzhH1cTlEYCJ9QAAAAAHZYCwAdAgAAHQIAAAIAAAAyVRQAKkACAAAAAQBVU0QAVVNEACwB-gBNUQAAt08AAgQCAQUAAIIAwSMzAgAAAAA./cnd=%218QTZKgjwvQ8QsqpRGKqACSAE/referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGIrL0Z21nbrVMSIOODAuMjAzLjE2OC4yNTQoAQ.." target="_blank"><img width="300" height="250" style="border-style: none" src="http://cdn.adnxs.com/p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png"/></a>

#18 JavaScript::Write (size: 58, repeated: 1)

<div id="recaptcha_widget_div" style="display:none"></div>

#19 JavaScript::Write (size: 27, repeated: 1)

<div id="theToolTip"></div>

#20 JavaScript::Write (size: 198, repeated: 2)

<iframe src="http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1" width="1" height="1" frameborder="0" scrolling="No" marginheight="0" marginwidth="0" topmargin="0" leftmargin="0"></iframe>

#21 JavaScript::Write (size: 134, repeated: 1)

<iframe src='http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/?rt=iframe' width='1' height='1' frameborder='0'></iframe>

#22 JavaScript::Write (size: 139, repeated: 1)

<img src="http://ad.yieldmanager.com/cms/v1?esig=1~17e68b1b86afcfd8436104fe567484ccc2161b0f&nwid=10000602235&sigv=1" width="1" height="1"/>

#23 JavaScript::Write (size: 52, repeated: 1)

<script language="JavaScript" type="text/javascript"

#24 JavaScript::Write (size: 53, repeated: 4)

<script language="JavaScript" type="text/javascript">

#25 JavaScript::Write (size: 131, repeated: 1)

<script type="text/javascript" SRC="http://tap.rubiconproject.com/partner/agent/rubicon/channels.js?cb=oz_onPixelsLoaded"></script>

#26 JavaScript::Write (size: 87, repeated: 3)

<script type="text/javascript" src="http://ads.rubiconproject.com/ad/3196.js"></script>

#27 JavaScript::Write (size: 235, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/27309-15.js?cb=0.3005276760127775&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#28 JavaScript::Write (size: 234, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-15.js?cb=0.8593571709509745&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#29 JavaScript::Write (size: 233, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-2.js?cb=0.3002700114946988&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#30 JavaScript::Write (size: 233, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-9.js?cb=0.8407720520245247&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#31 JavaScript::Write (size: 98, repeated: 1)

<script type="text/javascript" src="http://www.google.com/recaptcha/api/js/recaptcha.js"></script>

#32 JavaScript::Write (size: 1029, repeated: 1)

<script type="text/javascript">
//20121025
var cpmstarfa12_flashurl="http://cdn3.cpmstar.com/cached/creatives/163844/160x600 (2).swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d66048%26creativeid%3d163844%26url%3d";
var cpmstarfa12_width=160, width=160;
var cpmstarfa12_height=600, height=600;
var cpmstarfa12_imageurl="";
var cpmstarfa12_videourl="";
if(cpmstarfa12_videourl!="")cpmstarfa12_flashurl+="&videourl="+encodeURI(cpmstarfa12_videourl);
var cpmstarfa12_flashvars="";
if(cpmstarfa12_flashvars!="")cpmstarfa12_flashurl+="&"+cpmstarfa12_flashvars;
var cpmstarfa12_simpleclickurl="http://server.cpmstar.com/click.aspx?poolid=12887&subpoolid=0&campaignid=66048&creativeid=163844&url=";
var cpmstarfa12_pixelUrl = "";
if (cpmstarfa12_pixelUrl!="")document.write('<IMG SRC="'+cpmstarfa12_pixelUrl+'" width="0" height="0" border="0" />\n');
</script>
<script type="text/javascript" src="http://cdn3.cpmstar.com/cached/js/flashadv12.pack.js">
</script>

#33 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3176583" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#34 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3320011" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#35 JavaScript::Write (size: 903, repeated: 2)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3320015" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#36 JavaScript::Write (size: 498, repeated: 3)

<script> var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6035951", c3: "122134" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })(); </script> <noscript> <img src="http://b.scorecardresearch.com/p?c1=8&c2=&c3=&c4=&c5=&c6=&c15=&cv=2.0&cj=1" /> </noscript>

#37 JavaScript::Write (size: 104, repeated: 1)

<script>Recaptcha.widget = Recaptcha.$("recaptcha_widget_div"); Recaptcha.challenge_callback();</script>

#38 JavaScript::Write (size: 69, repeated: 1)

src="http://ads.rubiconproject.com/ad/3196.js?cb=0.5937820403212366">

#39 JavaScript::Write (size: 26, repeated: 3)

var rp_account   = "3196";

#40 JavaScript::Write (size: 24, repeated: 1)

var rp_account = "3196";

#41 JavaScript::Write (size: 24, repeated: 3)

var rp_adtype    = "js";

#42 JavaScript::Write (size: 21, repeated: 1)

var rp_adtype = "js";

#43 JavaScript::Write (size: 26, repeated: 3)

var rp_site      = "3346";

#44 JavaScript::Write (size: 21, repeated: 1)

var rp_site = "3346";

#45 JavaScript::Write (size: 81, repeated: 4)

var rp_smartfile = "http://www.mediafire.com/templates/ads/revv_smart_file.html";

#46 JavaScript::Write (size: 30, repeated: 1)

var rp_zonesize  = "27309-15";

#47 JavaScript::Write (size: 29, repeated: 1)

var rp_zonesize  = "9685-15";

#48 JavaScript::Write (size: 28, repeated: 1)

var rp_zonesize  = "9685-9";

#49 JavaScript::Write (size: 27, repeated: 1)

var rp_zonesize = "9685-2";

HTTP Transactions (119)

Request	Response
GET /css/mfv3_85677.php?ver=nonssl HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 37605 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /?4p5wab4oqodaj44 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:11 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: 0 Set-Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8; expires=Sun, 12-Oct-2014 02:06:11 GMT; path=/; domain=.mediafire.com; httponly Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 17021 Connection: close Server: MediaFire
GET /images/favicon/download.ico HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Date: Sun, 11 Nov 2012 02:06:12 GMT Last-Modified: Thu, 25 Oct 2012 21:59:32 GMT Accept-Ranges: bytes Content-Length: 1150 Connection: close Server: MediaFire
GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 Host: cdn.mediafire.com GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 52116 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /css?family=Open+Sans:800,400,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/css Expires: Sun, 11 Nov 2012 02:06:12 GMT Date: Sun, 11 Nov 2012 02:06:12 GMT Cache-Control: private, max-age=86400 Content-Encoding: gzip Content-Length: 318 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE
GET /blank.html HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Last-Modified: Tue, 18 Sep 2012 21:44:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 78 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/icons/ajax-loader-grey_round.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 1775 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/logos/logo_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 16 Jul 2012 19:28:31 GMT Accept-Ranges: bytes Content-Length: 3708 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 2315 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_allowemail.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 941 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/buttons/btn_twitter_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 1799 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/icons/dropdown-arrow-left-white.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 123 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/icons/icon-sprite-16-v3.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 02 Oct 2012 17:01:27 GMT Accept-Ranges: bytes Content-Length: 61715 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/backgrounds/download/rockmelt/rockmelt_dl_btn.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:44 GMT Accept-Ranges: bytes Content-Length: 7653 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 Host: platform.twitter.com GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: public, max-age=1800 Last-Modified: Thu, 08 Nov 2012 09:18:41 GMT Etag: "567a94a4e136d5c4b7bfde258474cfa6" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 25717 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
GET /recaptcha/api/challenge?k=6LextQUAAAAAALlQv0DSHOYxqF3DftRZxA5yebEe HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Date: Sun, 11 Nov 2012 02:06:13 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 466 Server: GSE
POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 106 Content-Type: application/ocsp-request	HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 11 Nov 2012 02:06:13 GMT Server: Apache Content-Transfer-Encoding: Binary Cache-Control: max-age=19369, public, no-transform, must-revalidate Last-Modified: Sun, 11 Nov 2012 01:46:02 GMT Expires: Sun, 11 Nov 2012 07:46:02 GMT Etag: "8c6a4b9dee7b1bc21ddf455dd96406348b7e33d2" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" Content-Length: 1923 Connection: close
GET /js/master_85677.js HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/javascript Last-Modified: Fri, 09 Nov 2012 23:25:30 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Server: MediaFire Content-Length: 143613 Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /ajax/libs/jquery/1.7.2/jquery.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Content-Encoding: gzip Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT Date: Fri, 09 Nov 2012 20:33:45 GMT Expires: Sat, 09 Nov 2013 20:33:45 GMT X-Content-Type-Options: nosniff Server: sffe Content-Length: 73891 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 106347
GET /js/encoder.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 02:06:13 GMT Last-Modified: Thu, 05 Jan 2012 22:41:54 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 02:06:13 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3695 Connection: close Server: MediaFire
GET /js/bust_out.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 02:06:13 GMT Last-Modified: Thu, 31 May 2012 19:49:34 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 02:06:13 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 57 Connection: close Server: MediaFire
GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 Host: p.twitter.com GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: image/gif Etag: "377d257f2d2e294916143c069141c1c5:1328738114" Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT Accept-Ranges: bytes Content-Length: 43 Cache-Control: no-cache P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 Host: cdn.api.twitter.com GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Last-Modified: Sun, 11 Nov 2012 01:58:31 GMT Pragma: no-cache X-Frame-Options: SAMEORIGIN Status: 200 OK Content-Encoding: gzip Content-Length: 897 Server: tfe Vary: Accept-Encoding Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Expires: Sun, 11 Nov 2012 02:06:13 GMT Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /images/ad-loader.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:09:03 GMT Accept-Ranges: bytes Content-Length: 1786 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /recaptcha/api/js/recaptcha.js HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: application/x-javascript Expires: Sun, 11 Nov 2012 02:06:13 GMT Date: Sun, 11 Nov 2012 02:06:13 GMT Last-Modified: Tue, 12 Jun 2012 14:07:31 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 17531 Server: GSE Cache-Control: public, max-age=0 Age: 0
GET /recaptcha/api/img/red/refresh.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 03:00:43 GMT Date: Sun, 11 Nov 2012 02:00:43 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 974 Server: GSE Age: 330 Cache-Control: public, max-age=3600
GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 Host: secure.gravatar.com GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx Date: Sun, 11 Nov 2012 02:06:13 GMT Content-Length: 906 Connection: keep-alive Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Access-Control-Allow-Origin: * Content-Disposition: inline; filename="00000000.png" X-Varnish: 2458061421 2455936932 Via: 1.1 varnish Expires: Sun, 11 Nov 2012 02:11:13 GMT Cache-Control: max-age=300
GET /images/backgrounds/footer/footer_texture.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 20:31:25 GMT Accept-Ranges: bytes Content-Length: 2649 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_blog.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 171 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_gp.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 29 Aug 2012 21:02:04 GMT Accept-Ranges: bytes Content-Length: 312 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_tw.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 274 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_fb.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 514 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /templates/linkto/default-729x91-default.php?r=97780 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:13 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 666 Connection: close Server: MediaFire
GET /templates/linkto/default-337x281-default.php?r=50671 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:13 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 786 Connection: close Server: MediaFire
GET /recaptcha/api/img/red/audio.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 03:05:22 GMT Date: Sun, 11 Nov 2012 02:05:22 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 914 Server: GSE Age: 51 Cache-Control: public, max-age=3600
GET /images/backgrounds/newHome/loginActivateFB_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 255 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateTW_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 387 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /templates/linkto/default-337x281-default2.php?r=40383 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:13 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 787 Connection: close Server: MediaFire
GET /recaptcha/api/img/red/text.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 02:57:29 GMT Date: Sun, 11 Nov 2012 01:57:29 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 155 Server: GSE Age: 524 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/help.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 03:06:13 GMT Date: Sun, 11 Nov 2012 02:06:13 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 367 Server: GSE Cache-Control: public, max-age=3600 Age: 0
GET /recaptcha/api/image?c=03AHJ_Vuv2hniZPGk_cn3UEMvG7kkMwIhsmea-SyNp1NhFZ6VvRTiq5YfMFfLeCAgBSRPwHY3q3-xsBlf2w480XHRb6f_xW4AT67tMzn_uHu-uT_8W4Tkav--bPfkABhkoRWcb_3GjAxLeBhWqGGL3Oa7GxYtztn1Cf8xixcAwuqAYSBVcRwp5dxY43eZzWppdRptP2gkPXhm9 HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Sun, 11 Nov 2012 02:16:13 GMT Date: Sun, 11 Nov 2012 02:06:13 GMT Cache-Control: public, max-age=600 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 3050 Server: GSE
GET /templates/linkto/default-161x601-default.php?r=69089 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:13 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 733 Connection: close Server: MediaFire
GET /en_US/all.js?_=1352599573906 HTTP/1.1 Host: connect.facebook.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Etag: "06c9a8ca347f3538149da85e21e875b7" Content-Encoding: gzip X-FB-Debug: 4ms1vP9UDg83EXaIJDlwGISqs42bzaN8LPGxcQjchE0= Content-Length: 58142 Cache-Control: public, max-age=635 Expires: Sun, 11 Nov 2012 02:16:48 GMT Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive Vary: Accept-Encoding
GET /recaptcha/api/img/red/sprite.png HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/png Expires: Sun, 11 Nov 2012 02:28:13 GMT Date: Sun, 11 Nov 2012 01:28:13 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 4679 Server: GSE Age: 2281 Cache-Control: public, max-age=3600
GET /ad/3196.js?cb=0.5937820403212366 HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=97780 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 02:06:15 GMT Date: Sun, 11 Nov 2012 02:06:15 GMT Connection: keep-alive
GET /ad/3196.js HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 02:06:15 GMT Date: Sun, 11 Nov 2012 02:06:15 GMT Connection: keep-alive
GET /helper_01.swf HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Date: Sun, 11 Nov 2012 02:06:15 GMT Last-Modified: Sat, 15 Oct 2011 19:43:58 GMT Accept-Ranges: bytes Content-Length: 1480 Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 02:06:15 GMT Connection: close Server: MediaFire
GET /images/icons/information_darkblue.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 722 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:15 GMT Connection: keep-alive
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: QpUXNDPC4a/ZS9XMuzc2WDBWEZ8S2oHPsfImau8uouU= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31455056 Expires: Sun, 10 Nov 2013 03:37:11 GMT Date: Sun, 11 Nov 2012 02:06:15 GMT Connection: keep-alive
GET /static/fonts/opensans/v6/k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM.woff HTTP/1.1 Host: themes.googleusercontent.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://fonts.googleapis.com/css?family=Open+Sans:800,400,700 Origin: http://www.mediafire.com	HTTP/1.1 200 OK Content-Type: font/woff Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT Date: Fri, 09 Nov 2012 20:33:30 GMT Expires: Sat, 09 Nov 2013 20:33:30 GMT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: sffe Content-Length: 22748 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 106365
GET /a/3196/3346/9685-15.js?cb=0.8593571709509745&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-15.js?cb=0.8593571709509745&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 02:06:15 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592dbbd5509f081750cba8fe1da009^1^1352599575^1355524350; expires=Sat, 09-Feb-2013 02:06:15 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=107624; path=/; domain=.rubiconproject.com csi15=3204663.js^1^1352599575^1352599575; expires=Sun, 18-Nov-2012 02:06:15 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=69 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/9685-2.js?cb=0.3002700114946988&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-2.js?cb=0.3002700114946988&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=97780 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 02:06:15 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592dbbd5509f081750cba8fe703862^1^1352599575^1355524350; expires=Sat, 09-Feb-2013 02:06:15 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk2=0; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=10; path=/; domain=.rubiconproject.com ses2=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=107624; path=/; domain=.rubiconproject.com csi2=3204661.js^1^1352599575^1352599575; expires=Sun, 18-Nov-2012 02:06:15 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Transfer-Encoding: chunked
GET /ga.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 14888 Content-Encoding: gzip Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT X-Content-Type-Options: nosniff, nosniff Date: Sat, 10 Nov 2012 20:33:27 GMT Expires: Sun, 11 Nov 2012 08:33:27 GMT Vary: Accept-Encoding Age: 19968 Cache-Control: max-age=43200, public Server: GFE/2.0
GET /a/3196/3346/9685-9.js?cb=0.8407720520245247&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-9.js?cb=0.8407720520245247&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=69089 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 02:06:15 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db40b509f081750cba8fe099937^1^1352599575^1355524350; expires=Sat, 09-Feb-2013 02:06:15 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk9=0; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=10; path=/; domain=.rubiconproject.com ses9=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=107624; path=/; domain=.rubiconproject.com csi9=3165520.js^1^1352599575^1352599575; expires=Sun, 18-Nov-2012 02:06:15 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=57 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/27309-15.js?cb=0.3005276760127775&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/27309-15.js?cb=0.3005276760127775&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=40383 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 02:06:15 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; expires=Sat, 09-Feb-2013 02:06:15 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=107624; path=/; domain=.rubiconproject.com csi15=3204663.js^1^1352599575^1352599575; expires=Sun, 18-Nov-2012 02:06:15 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=48 Connection: Keep-Alive Transfer-Encoding: chunked
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 Host: www.facebook.com GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 Content-Encoding: gzip X-FB-Debug: Jh+EMGu/43pboTi1u50BL0R6TUsfOgnRM1L0kxwRUZs= Date: Sun, 11 Nov 2012 02:06:16 GMT Transfer-Encoding: chunked Connection: keep-alive
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 02:06:16 GMT Content-Length: 0
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=1671394818&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=1088492129&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.1917869790.1352599576.1352599576.1352599576.1%3B%2B__utmz%3D213136648.1352599576.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 Host: www.google-analytics.com GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=1671394818&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=1088492129&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.1917869790.1352599576.1352599576.1352599576.1%3B%2B__utmz%3D213136648.1352599576.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 09 Nov 2012 20:33:50 GMT Content-Length: 35 X-Content-Type-Options: nosniff Pragma: no-cache Expires: Wed, 19 Apr 2000 11:43:00 GMT Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Age: 106346 Server: GFE/2.0
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=40383	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 02:06:16 GMT Content-Length: 0
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: s-static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: JS4qOSg1Dl3AgVtg3MyBP4whcr8SZapA/Vud9cBlDwY= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31454965 Expires: Sun, 10 Nov 2013 03:35:41 GMT Date: Sun, 11 Nov 2012 02:06:16 GMT Connection: keep-alive
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:16 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:06:16 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwmJD8hAUQmJD8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 02:06:16 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; path=/; expires=Sat, 09-Feb-2013 02:06:16 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 02:06:16 GMT Content-Length: 1350
GET /view.aspx?poolid=12887&script=1&rnd=385749 HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&script=1&rnd=385749 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=69089	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: /view.aspx?poolid=12887&script=1&rnd=385749&test=1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: USER_ID=%3e%d3i)CI%b2%e3N%80%b9%84%d0%e9%88; domain=.server.cpmstar.com; expires=Thu, 11-Nov-2032 02:06:38 GMT; path=/ P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sun, 11 Nov 2012 02:06:37 GMT Content-Length: 185 Connection: Keep-alive Keep-Alive: timeout=15, max=100 Via: 1.1 ID-0001544140306215 uproxy-4
GET /p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; sess=1; icu=ChIIlroHEAoYASABKAEwmJD8hAUQmJD8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/png Server: Apache Etag: "05c7006db8c87009c7ef4cebeac987fa:1350137588" Last-Modified: Sat, 13 Oct 2012 14:13:08 GMT Accept-Ranges: bytes Content-Length: 5202 Date: Sun, 11 Nov 2012 02:06:16 GMT Connection: keep-alive
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=40383 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:16 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:06:16 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwmJD8hAUQmJD8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 02:06:16 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; path=/; expires=Sat, 09-Feb-2013 02:06:16 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 02:06:16 GMT Content-Length: 1350
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 Host: tap2-cdn.rubiconproject.com GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Last-Modified: Sun, 11 Nov 2012 00:16:00 GMT Content-Encoding: gzip Cache-Control: max-age=600 Expires: Sun, 11 Nov 2012 02:16:16 GMT Date: Sun, 11 Nov 2012 02:06:16 GMT Content-Length: 5080 Connection: keep-alive Vary: Accept-Encoding
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 02:06:16 GMT Connection: close Content-Length: 381
GET /partner/scripts/rubicon/alice.js HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:56:01 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sun, 11 Nov 2012 03:06:16 GMT Date: Sun, 11 Nov 2012 02:06:16 GMT Content-Length: 5798 Connection: keep-alive Vary: Accept-Encoding
GET /getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30 HTTP/1.1 Host: ib.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; sess=1; icu=ChIIlroHEAoYASABKAEwmJD8hAUQmJD8hAUYAA..	HTTP/1.1 302 Moved Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:16 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:06:16 GMT; domain=.adnxs.com; HttpOnly Location: http://pixel.rubiconproject.com/tap.php?v=4894&nid=1986&put=5858721859426781856&expires=30 Date: Sun, 11 Nov 2012 02:06:16 GMT Content-Length: 0
GET /images/pixel.gif HTTP/1.1 Host: spe.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Allow: GET Expires: Mon, 12 Nov 2012 19:09:54 GMT Date: Sun, 11 Nov 2012 02:06:17 GMT Connection: keep-alive
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; sess=1; icu=ChIIlroHEAoYASABKAEwmJD8hAUQmJD8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:17 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:06:17 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; path=/; expires=Sat, 09-Feb-2013 02:06:17 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 02:06:17 GMT
GET /tap.php?v=4894&nid=1986&put=5858721859426781856&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=4894&nid=1986&put=5858721859426781856&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_1986=5858721859426781856; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9989 Connection: Keep-Alive
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=40383 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 02:06:17 GMT Connection: close Content-Length: 381
GET /int/integration?pixel=303852&nid=302660 HTTP/1.1 Host: i.ctnsnet.com GET /int/integration?pixel=303852&nid=302660 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_1444938286484d40a99ac39507b8808d=1; path=/; domain=.ctnsnet.com; expires=Mon, 11-Nov-2013 02:06:17 GMT; px=AAAEouxQxpUZ; path=/; domain=.ctnsnet.com; expires=Mon, 11-Mar-2013 02:06:17 GMT; pb=AAAEowJQxpUZ; path=/; domain=.ctnsnet.com; expires=Thu, 10-Jan-2013 02:06:17 GMT; opt=0; path=/; domain=.ctnsnet.com; expires=Mon, 11-Nov-2013 02:06:17 GMT; Pragma: no-cache Cache-Control: private, no-cache, no-store, max-age=0 Location: http://pixel.rubiconproject.com/tap.php?v=14965&nid=2731&put=1444938286484d40a99ac39507b8808d&expires=30 Content-Length: 0 Date: Sun, 11 Nov 2012 02:06:16 GMT Connection: close
GET /r1/ruum HTTP/1.1 Host: rp.gwallet.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: application/octet-stream Content-Length: 0 Server: radiumone/1.2 Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Expires: Tue, 29 Oct 2002 19:50:44 GMT Location: http://pixel.rubiconproject.com/tap.php?v=7935&nid=2271&expires=30&put=Ru80gk_K9RjmA369kmHvydFnZgw Pragma: no-cache P3P: CP="RadiumOne does not have a P3P policy. For information on our privacy policy please visit http://radiumone.com/about/privacy.html" Set-Cookie: ra1_uid=5553974476608538880; Expires=Mon, 11-Nov-2013 02:06:17 GMT; Path=/; Domain=gwallet.com; Version=1
GET /cached/js/flashadv12.pack.js HTTP/1.1 Host: cdn3.cpmstar.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=69089	HTTP/1.1 200 OK Content-Type: application/x-javascript Cache-Control: max-age=259200 Accept-Ranges: bytes Server: Microsoft-IIS/7.5 P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Via: 1.1 ID-0001544140306215 uproxy-3 Content-Encoding: gzip Vary: Accept-Encoding Age: 83336 Date: Sun, 11 Nov 2012 02:06:17 GMT Last-Modified: Fri, 26 Oct 2012 02:43:57 GMT Expires: Tue, 13 Nov 2012 02:57:21 GMT Content-Length: 876 Connection: close
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; sess=1; icu=ChIIlroHEAoYASABKAEwmJD8hAUQmJD8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:17 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:06:17 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; path=/; expires=Sat, 09-Feb-2013 02:06:17 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 02:06:17 GMT
GET /dmm/rubicon/match HTTP/1.1 Host: rubicon-match.dotomi.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 204 No Content Content-Type: text/plain Date: Sun, 11 Nov 2012 02:06:17 GMT X-Name: dtiad01rtb17p.int Cache-Control: max-age=0, no-store Content-Length: 0 Connection: close
GET /tap.php?v=14965&nid=2731&put=1444938286484d40a99ac39507b8808d&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=14965&nid=2731&put=1444938286484d40a99ac39507b8808d&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_2731=1444938286484d40a99ac39507b8808d; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9921 Connection: Keep-Alive
GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 Host: user.lucidmedia.com GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Apache-Coyote/1.1 Cache-Control: no-cache, no-store Pragma: no-cache Date: Sun, 11 Nov 2012 02:06:17 GMT Expires: Sun, 11 Nov 2012 02:06:17 GMT P3P: CP="NOI ADM DEV CUR" X-Handled-By: awserh25/127.0.0.1 Set-Cookie: lm_userid=3fhBu-f-Ekp; Domain=.lucidmedia.com; Expires=Mon, 11-Nov-2013 02:06:17 GMT; Path=/ Location: http://pixel.rubiconproject.com/tap.php?v=7206&nid=1197&put=4246111195476069429&expires=30 Content-Length: 0 Connection: close
GET /redirect?ex=11 HTTP/1.1 Host: cm.netseer.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:16 GMT Location: http://cm.netseer.com/redirect?ex=11&cookie=2 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Server: Apache-Coyote/1.1 Set-Cookie: netseer_v3_vi=H4sIAAAAAAAAADOyKi0uMk5LSU4xTbRMSTFNNbVMTrQyNDY1MrW0NDU3NzS1BACFo2mhIwAAAA; Domain=.netseer.com; Expires=Tue, 11-Nov-2014 02:06:17 GMT; Path=/ Content-Length: 0 Connection: keep-alive
GET /tap.php?v=7935&nid=2271&expires=30&put=Ru80gk_K9RjmA369kmHvydFnZgw HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7935&nid=2271&expires=30&put=Ru80gk_K9RjmA369kmHvydFnZgw HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%267935%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%267935%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9881 Connection: Keep-Alive
GET /dmp/pixelSync?network=Rubicon HTTP/1.1 Host: pixel.sitescout.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Server: Apache-Coyote/1.1 Date: Sun, 11 Nov 2012 02:06:16 GMT
GET /cached/creatives/163844/160x600%20(2).swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d66048%26creativeid%3d163844%26url%3d HTTP/1.1 Host: cdn3.cpmstar.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=69089	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Cache-Control: public Server: Microsoft-IIS/7.5 Content-Disposition: inline;filename=163844_160x600 (2).swf X-AspNet-Version: 2.0.50727 P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Via: 1.1 ID-0001544140306215 uproxy-5 Age: 41973 Date: Sun, 11 Nov 2012 02:06:17 GMT Expires: Sun, 11 Nov 2012 14:26:44 GMT Content-Length: 26088 Connection: close
GET /px/rb.gif HTTP/1.1 Host: ad.yabuka.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 FOUND Content-Type: text/html; charset=utf-8 Server: nginx/1.1.19 Date: Sun, 11 Nov 2012 02:06:17 GMT Content-Length: 186 Connection: keep-alive Location: http://pixel.rubiconproject.com/tap.php?v=9047&nid=2147&put=6TiCbwNAlj Set-Cookie: client_id=6TiCbwNAlj; Path=/ tc="2Ub5rdQnNa4MYOvfx7FJnVgBRGI=?_expires=STEzNTMwMDk5NzcKLg==&client_id=Uyc2VGlDYndOQWxqJwpwMQou"; Domain=.yabuka.com; expires=Thu, 15-Nov-2012 20:06:17 GMT; Path=/ Cache-Control: no-cache Pragma: no-cache
GET /tap.php?v=7206&nid=1197&put=4246111195476069429&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7206&nid=1197&put=4246111195476069429&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_1197=4246111195476069429; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9871 Connection: Keep-Alive
GET /erb HTTP/1.1 Host: px.owneriq.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/html Server: Apache/2.2.3 (CentOS) Content-Length: 153 Location: http://px.owneriq.net/fr/epx.gif X-Powered-By: PHP/5.2.17 P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Vary: Accept-Encoding Cache-Control: max-age=16178 Date: Sun, 11 Nov 2012 02:06:17 GMT Connection: keep-alive
GET /redirect?ex=11&cookie=2 HTTP/1.1 Host: cm.netseer.com GET /redirect?ex=11&cookie=2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: netseer_v3_vi=H4sIAAAAAAAAADOyKi0uMk5LSU4xTbRMSTFNNbVMTrQyNDY1MrW0NDU3NzS1BACFo2mhIwAAAA	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:17 GMT Location: http://pixel.rubiconproject.com/tap.php?v=6073&nid=2100&expires=30&put=usr3fdcd5a9dd5e59ca P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Server: Apache-Coyote/1.1 Set-Cookie: netseer_v3_vi=H4sIAAAAAAAAADOyKi0uMk5LSU4xTbRMSTFNNbVMTrQyNDY1MrW0NDU3NzS11DE0tHKNCHEN8nP0QZIxMTACAB6olgs9AAAA; Domain=.netseer.com; Expires=Tue, 11-Nov-2014 02:06:17 GMT; Path=/ Content-Length: 0 Connection: keep-alive
GET /load/?p=204&g=141&j=0 HTTP/1.1 Host: loadm.exelator.com GET /load/?p=204&g=141&j=0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: image/gif X-Powered-By: PHP/5.3.17 P3P: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA Set-Cookie: ud=eJxrWVyWWnRgUUnxaccr6ofYYsXmLA71dLnFoGBqZJloZmFskmhhbmZqmpKYmGaQnJaaYmpgmWRmYGFosLgoJY0RAPkVFY4%253D; expires=Mon, 11-Mar-2013 02:06:17 GMT; path=/; domain=exelator.com Location: http://loadm.exelator.com/load/?p=204&g=141&j=0&xl8blockcheck=1 Content-Length: 0 Connection: close Date: Sun, 11 Nov 2012 02:06:17 GMT Server: HTTP server
GET /match?mrbyus=true&excid=17 HTTP/1.1 Host: rubicon.admailtiser.com GET /match?mrbyus=true&excid=17 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: nginx/1.1.1 Date: Sun, 11 Nov 2012 02:06:17 GMT Content-Length: 0 Connection: keep-alive P3P: policyref="http://admailtiser.com/w3c/p3p.xml", CP="NOI IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA NOR UNI" Set-Cookie: cicouid=4599d1d8-df39-47b7-bc13-d7914719d356GuJCv8XI7SsmpZ-rglCNWw; Domain=.admailtiser.com; Expires=Mon, 11-Nov-2013 02:06:17 GMT; Path=/ Location: http://pixel.rubiconproject.com/tap.php?v=12224&nid=2530&put=1372681696652335748&expires=365
GET /tap.php?v=9047&nid=2147&put=6TiCbwNAlj HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=9047&nid=2147&put=6TiCbwNAlj HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%267935%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%267935%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%267935%3D1%269047%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%267935%3D25074%2C0%2C1%2C%2C%269047%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_2147=6TiCbwNAlj; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8971 Connection: Keep-Alive
GET /tap.php?v=6073&nid=2100&expires=30&put=usr3fdcd5a9dd5e59ca HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=6073&nid=2100&expires=30&put=usr3fdcd5a9dd5e59ca HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_2100=usr3fdcd5a9dd5e59ca; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9910 Connection: Keep-Alive
GET /fr/epx.gif HTTP/1.1 Host: px.owneriq.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache/2.2.3 (CentOS) Content-Length: 43 X-Powered-By: PHP/5.2.17 P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Cache-Control: max-age=16178 Expires: Sun, 11 Nov 2012 06:35:55 GMT Date: Sun, 11 Nov 2012 02:06:17 GMT Connection: keep-alive
GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 Host: m.xp1.ru4.com GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Sun-Java-System-Web-Server/7.0 Date: Sun, 11 Nov 2012 02:06:17 GMT P3P: policyref="/w3c/p3p.xml", CP="NON DSP COR PSAa OUR STP UNI" Pragma: no-cache Set-Cookie: X1ID=AO-00000005680884373; domain=.ru4.com; path=/; expires=Sat, 10-May-2014 21:06:17 GMT Location: http://pixel.rubiconproject.com/tap.php?v=5671&nid=2081&put=AO-00000005680884373&expires=30 Content-Length: 0
GET /tap.php?v=12224&nid=2530&put=1372681696652335748&expires=365 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=12224&nid=2530&put=1372681696652335748&expires=365 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%2612224%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%2612224%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_2530=1372681696652335748; expires=Mon, 11-Nov-2013 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9769 Connection: Keep-Alive
GET /tap.php?v=5671&nid=2081&put=AO-00000005680884373&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5671&nid=2081&put=AO-00000005680884373&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_2081=AO-00000005680884373; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8711 Connection: Keep-Alive
GET /load/?p=204&g=141&j=0&xl8blockcheck=1 HTTP/1.1 Host: loadm.exelator.com GET /load/?p=204&g=141&j=0&xl8blockcheck=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: ud=eJxrWVyWWnRgUUnxaccr6ofYYsXmLA71dLnFoGBqZJloZmFskmhhbmZqmpKYmGaQnJaaYmpgmWRmYGFosLgoJY0RAPkVFY4%253D	HTTP/1.1 302 Found Content-Type: image/gif X-Powered-By: PHP/5.3.17 P3P: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA Set-Cookie: inv=eJxrXFySlnaHQeLMmTO9zGfVOZYYGZoYgImz6twIDgOCeeYMAyMSlwGFBwBIiRgQ; expires=Mon, 11-Mar-2013 02:06:17 GMT; path=/; domain=exelator.com xud=eJxFj81qg0AURiWUPkCfwF23o3HULKfVWCE64g%252FFTWXUGSJYBSOp20LXfQaJAUnT0HfotnTXVZ%252BmEoXu7j338H3cl25Lq4tdvflCP9efl%252Bv1w77J6%252Fy1C0ztl%252BOhuCCyOpeIqsgQpoQwkDCaQrCIZaAK4LSNDB1HtziwfTfc2fh9BK5umNhu36az6YftYZw1C3GT5GDPR6v2Y9yQq6MhSNO5wQxQ5IeO3t9U5dOGVsczWSLLXIX9MqsoK5v%252BzLB3uM%252BKdLB4ZWowPedk06Y2aOHTnEfexLFrHK2CPpZFlvxTW%252FdnXYDuhmfllClxQlJApbkAVQZFCAhUZJAQlaqx0MWMPX%252FPrvaiIIE%252FRLpunQ%253D%253D; expires=Mon, 11-Mar-2013 02:06:17 GMT; path=/; domain=exelator.com xudx=eJwBMADP%252F4OjdmVyAqJ0c8tB1CfCBmhoXqNldniBzQhcgc5Qnwgamc0nCwHMzMyNAQABzQISAgk6E3M%253D; expires=Mon, 11-Mar-2013 02:06:17 GMT; path=/; domain=exelator.com udo=eJxrXVyWWsS0qKT4tOMV9UNsGRlxi1PLKuacVedmPMsRw3HmzJleNkYGxrNMQkxLKnJKcvoWh3q63GJQMDWyTDSzMDZJtDA3MzVNSUxMM0hOS00xNbBMMjOwMDRYWxbv7uof7%252Bwf6hcSFLnIz38NRCDI1d3T32%252FBKqi0Z0jkgpUQtouvIwNUUYB%252FcIijz4L1EJ5jkKsj0CAXVwagylDH%252BJDIANflTkX55cWpRavBIm6Ovp4%252BkcvdMotS0%252FIrloPF%252FINXhmfmpQBVKZhDbfAMDljrl1pR4p6aF5Kao%252BAYDBX3D3Jf7ZuXmpufl5mMEPVzDWFaHOroAfSsWUqaeVJyYopBqomxoalFmqmRqUGiqbmZQXKiRapFkuGS%252FKLMdKAfATcGdjk%253D; expires=Mon, 11-Mar-2013 02:06:17 GMT; path=/; domain=exelator.com ud=eJxrWVyWWnRgUUnxaccr6ofYMgoDFod6utxiUDA1skw0szA2SbQwNzM1TUlMTDNITktNMTWwTDIzsDA0WJJflJm%252ByM8fAEPeF1w%253D; expires=Mon, 11-Mar-2013 02:06:17 GMT; path=/; domain=exelator.com Location: http://tap.rubiconproject.com/oz/feeds/exelate/tokens?afu=529a6834a87655daaf0cfed509b60810 Content-Length: 0 Connection: close Date: Sun, 11 Nov 2012 02:06:17 GMT Server: HTTP server
GET /oz/feeds/exelate/tokens?afu=529a6834a87655daaf0cfed509b60810 HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373	HTTP/1.1 204 No Content Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:17 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 02:06:17 GMT; Path=/ au=H9DIV5RK-47QK-10.78.51.231; Domain=.rubiconproject.com; Expires=Mon, 09-Nov-2020 02:06:17 GMT; Path=/ dq=1\|1\|0\|0; Expires=Mon, 11-Nov-2013 02:06:17 GMT; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Content-Length: 0 Keep-Alive: timeout=5, max=154 Connection: Keep-Alive
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=97780	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 02:06:18 GMT Content-Length: 0
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=97780 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; sess=1; icu=ChIIlroHEAoYASABKAEwmJD8hAUQmJD8hAUYAA..	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:19 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:06:19 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYAiACKAIwm5D8hAUQm5D8hAUYAQ..; path=/; expires=Sat, 09-Feb-2013 02:06:19 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG68%Cxrx)0s]#%2L_'x%SEV/hnJPh4FV-`mw3QN_/h9oD#)/.#FbNC'TxPT>I:8+sVL/Eh>#X=!<SYmqQusg; path=/; expires=Sat, 09-Feb-2013 02:06:19 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 02:06:19 GMT Content-Length: 1290
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 Host: fpdownload2.macromedia.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/xml Server: Apache Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT Etag: "87de33-256-4cd617ed12480" Accept-Ranges: bytes Content-Length: 598 Date: Sun, 11 Nov 2012 02:06:19 GMT Connection: keep-alive
GET /p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=97780 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG68%Cxrx)0s]#%2L_'x%SEV/hnJPh4FV-`mw3QN_/h9oD#)/.#FbNC'TxPT>I:8+sVL/Eh>#X=!<SYmqQusg; sess=1; icu=ChIIlroHEAoYAiACKAIwm5D8hAUQm5D8hAUYAQ..	HTTP/1.1 200 OK Content-Type: image/png Server: Apache Etag: "a9daeac0f83c5ce58b932bd0f829631f:1351039989" Last-Modified: Wed, 24 Oct 2012 00:53:09 GMT Accept-Ranges: bytes Content-Length: 5051 Date: Sun, 11 Nov 2012 02:06:19 GMT Connection: keep-alive
GET /partner/agent/rubicon/channels.js?cb=oz_onPixelsLoaded HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373; cd=false; au=H9DIV5RK-47QK-10.78.51.231; dq=1\|1\|0\|0	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:19 GMT Server: TRP Apache-Coyote/1.1 Cache-Control: no-store, no-cache, must-revalidate, private Content-Length: 536 Set-Cookie: khaos=H9DIV5UG-12-HJJB; Domain=.rubiconproject.com; Expires=Mon, 09-Nov-2020 02:06:19 GMT; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=136 Connection: Keep-Alive
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1 Host: static.ak.fbcdn.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 Origin: http://www.facebook.com	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 29 Oct 2012 23:55:41 GMT X-Content-Type-Options: nosniff Content-Encoding: gzip X-FB-Debug: mERPLeHfP4bFbWVj/NJRwm2C8x1Lf8geAnYAfFf24WM= Content-Length: 37945 Vary: Accept-Encoding Cache-Control: public, max-age=31147604 Expires: Wed, 06 Nov 2013 14:13:03 GMT Date: Sun, 11 Nov 2012 02:06:19 GMT Connection: keep-alive
GET /cms/v1?esig=1~17e68b1b86afcfd8436104fe567484ccc2161b0f&nwid=10000602235&sigv=1 HTTP/1.1 Host: ad.yieldmanager.com GET /cms/v1?esig=1~17e68b1b86afcfd8436104fe567484ccc2161b0f&nwid=10000602235&sigv=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=97780	HTTP/1.1 302 Found Content-Type: text/plain; charset=utf-8 Date: Sun, 11 Nov 2012 02:06:19 GMT P3P: policyref="http://p3p.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV" Location: http://ib.adnxs.com/ymapuid?xid=E0 Cache-Control: private Age: 0 Transfer-Encoding: chunked Connection: keep-alive Server: YTS/1.20.13
GET /oz/feeds/invite-media-rtb/tokens/?rt=iframe HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373; cd=false; au=H9DIV5RK-47QK-10.78.51.231; dq=1\|1\|0\|0; khaos=H9DIV5UG-12-HJJB	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:19 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=2eb451963645f9caff1ce917f608f3ae5c90d3f7&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 02:06:19 GMT; Path=/ dq=2\|2\|0\|0; Expires=Mon, 11-Nov-2013 02:06:19 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 02:06:19 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=129 Connection: Keep-Alive
GET /di.php?v=2372\|\|2373\|0\|\|2374\|0\|\|&r=3761\|0,3169,3578,3577,2110,2195,2196,2197,2579,2198,4134,3734,2199,2364,2362,2363,2200,3810,2111,2494,2201,3513,2202,2496,2202,2496,2203,2204,2189,2112,2497,2205,2355,2495,5838,3811,3512,2109,3812,2239,2190,2206,2113,2206,2113,4552,2765,6184,2240,4105,4193,2372,2373,2374,2375, HTTP/1.1 Host: pixel.rubiconproject.com GET /di.php?v=2372\|\|2373\|0\|\|2374\|0\|\|&r=3761\|0,3169,3578,3577,2110,2195,2196,2197,2579,2198,4134,3734,2199,2364,2362,2363,2200,3810,2111,2494,2201,3513,2202,2496,2202,2496,2203,2204,2189,2112,2497,2205,2355,2495,5838,3811,3512,2109,3812,2239,2190,2206,2113,2206,2113,4552,2765,6184,2240,4105,4193,2372,2373,2374,2375, HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373; cd=false; au=H9DIV5RK-47QK-10.78.51.231; khaos=H9DIV5UG-12-HJJB	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:19 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1%262372%3D1; expires=Fri, 10-May-2013 02:06:19 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9998 Connection: Keep-Alive
GET /adscores/g.pixel?sid=9278242667 HTTP/1.1 Host: adadvisor.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Date: Sun, 11 Nov 2012 02:06:19 GMT Connection: close Server: AAWebServer P3P: policyref="http://www.adadvisor.net/w3c/p3p.xml",CP="NOI NID" Content-Length: 0 Location: http://tap.rubiconproject.com/oz/feeds/targus/profile?p=targus&oz_source=partner&segment=000&zip=&dob=&gender=&pc=
GET /ymapuid?xid=E0 HTTP/1.1 Host: ib.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=97780 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG68%Cxrx)0s]#%2L_'x%SEV/hnJPh4FV-`mw3QN_/h9oD#)/.#FbNC'TxPT>I:8+sVL/Eh>#X=!<SYmqQusg; sess=1; icu=ChIIlroHEAoYAiACKAIwm5D8hAUQm5D8hAUYAQ..	HTTP/1.1 200 OK Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:19 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:06:19 GMT; domain=.adnxs.com; HttpOnly uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:19 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 02:06:19 GMT Content-Length: 0
GET /rubicon_sync?publisher_user_id=2eb451963645f9caff1ce917f608f3ae5c90d3f7&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 Host: pixel.invitemedia.com GET /rubicon_sync?publisher_user_id=2eb451963645f9caff1ce917f608f3ae5c90d3f7&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: text/html Date: Sun, 11 Nov 2012 02:06:19 GMT Set-Cookie: uid=2c5f5d77-d638-4a96-80d4-a940c54379e0;Path=/;Domain=invitemedia.com;Expires=Mon, 11-Nov-2013 02:06:19 GMT impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC" Cache-Control: no-cache Content-Length: 221 Connection: close Server: Jetty(7.3.1.v20110307)
GET /oz/feeds/targus/profile?p=targus&oz_source=partner&segment=000&zip=&dob=&gender=&pc= HTTP/1.1 Host: tap.rubiconproject.com GET /oz/feeds/targus/profile?p=targus&oz_source=partner&segment=000&zip=&dob=&gender=&pc= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1%262372%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373; cd=false; au=H9DIV5RK-47QK-10.78.51.231; dq=2\|2\|0\|0; khaos=H9DIV5UG-12-HJJB; lm="11 Nov 2012 02:06:19 GMT"	HTTP/1.1 204 No Content Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:19 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 02:06:20 GMT; Path=/ dq=3\|3\|0\|0; Expires=Mon, 11-Nov-2013 02:06:20 GMT; Path=/ lm="11 Nov 2012 02:06:20 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Content-Length: 0 Keep-Alive: timeout=5, max=83 Connection: Keep-Alive
GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353031579&publisher_dsp_id=2101&external_user_id=2c5f5d77-d638-4a96-80d4-a940c54379e0 HTTP/1.1 Host: tap.rubiconproject.com GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353031579&publisher_dsp_id=2101&external_user_id=2c5f5d77-d638-4a96-80d4-a940c54379e0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=2eb451963645f9caff1ce917f608f3ae5c90d3f7&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1%262372%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373; cd=false; au=H9DIV5RK-47QK-10.78.51.231; dq=2\|2\|0\|0; khaos=H9DIV5UG-12-HJJB; lm="11 Nov 2012 02:06:19 GMT"	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:20 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.rubiconproject.com/tap.php?v=5852&nid=2101&put=2c5f5d77-d638-4a96-80d4-a940c54379e0 Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 02:06:20 GMT; Path=/ dq=3\|3\|0\|0; Expires=Mon, 11-Nov-2013 02:06:20 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 02:06:20 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=164 Connection: Keep-Alive
GET /tap.php?v=5852&nid=2101&put=2c5f5d77-d638-4a96-80d4-a940c54379e0 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5852&nid=2101&put=2c5f5d77-d638-4a96-80d4-a940c54379e0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=2eb451963645f9caff1ce917f608f3ae5c90d3f7&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1%262372%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373; cd=false; au=H9DIV5RK-47QK-10.78.51.231; khaos=H9DIV5UG-12-HJJB; lm="11 Nov 2012 02:06:20 GMT"	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:20 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1%262372%3D1%265852%3D1; expires=Tue, 11-Dec-2012 02:06:20 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265852%3D25074%2C0%2C1%2C%2C%262372%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:20 GMT; path=/; domain=.pixel.rubiconproject.com put_2101=2c5f5d77-d638-4a96-80d4-a940c54379e0; expires=Tue, 11-Dec-2012 02:06:20 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9326 Connection: Keep-Alive
GET /1/gr?url=http%3a//pixel.rubiconproject.com/tap.php%3fv%3d11782%7c1%7c14%26nid%3d2181%26put%3d__EFGCK__%26expires%3d14 HTTP/1.1 Host: pixel.everesttech.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: text/html; charset=iso-8859-1 Date: Sun, 11 Nov 2012 02:06:22 GMT Server: Apache Set-Cookie: everest_session_v2=UJ8IHgAAQKqYavHB; path=/; domain=.everesttech.net everest_g_v2=g_surferid~UJ8IHgAAQKqYavHB; path=/; domain=.everesttech.net; expires=Mon, 06-Oct-2014 12:46:22 GMT P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM" Cache-Control: no-cache Location: http://cm.g.doubleclick.net/pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14 Content-Length: 427 Keep-Alive: timeout=15, max=964564 Connection: Keep-Alive
GET /pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14 HTTP/1.1 Host: cm.g.doubleclick.net GET /pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: http://pixel2368.everesttech.net/2368/m?cookieid=&ev_rs=1&url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&google_cver=1 Date: Sun, 11 Nov 2012 02:06:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Server: Cookie Matcher Content-Length: 470 X-XSS-Protection: 1; mode=block
GET /2368/m?cookieid=&ev_rs=1&url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&google_cver=1 HTTP/1.1 Host: pixel2368.everesttech.net GET /2368/m?cookieid=&ev_rs=1&url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&google_cver=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: everest_session_v2=UJ8IHgAAQKqYavHB; everest_g_v2=g_surferid~UJ8IHgAAQKqYavHB	HTTP/1.1 302 Found Content-Type: text/html; charset=iso-8859-1 Date: Sun, 11 Nov 2012 02:06:22 GMT Server: Apache Set-Cookie: gglck=CAESEHb10AvLIOUdvYC_4Xf0C8w; path=/; domain=.everesttech.net; expires=Tue, 11-Dec-2012 02:06:22 GMT everest_session_v2=UJ8IHgAAQKqYavHB; path=/; domain=.everesttech.net everest_g_v2=g_surferid~UJ8IHgAAQKqYavHB; path=/; domain=.everesttech.net; expires=Mon, 06-Oct-2014 12:46:22 GMT P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM" Cache-Control: no-cache Location: http://pixel.rubiconproject.com/tap.php?v=11782\|1\|14&nid=2181&put=CAESEHb10AvLIOUdvYC_4Xf0C8w&expires=14 Content-Length: 300 Keep-Alive: timeout=15, max=998750 Connection: Keep-Alive
GET /tap.php?v=11782\|1\|14&nid=2181&put=CAESEHb10AvLIOUdvYC_4Xf0C8w&expires=14 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=11782\|1\|14&nid=2181&put=CAESEHb10AvLIOUdvYC_4Xf0C8w&expires=14 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1%262372%3D1%265852%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265852%3D25074%2C0%2C1%2C%2C%262372%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373; cd=false; au=H9DIV5RK-47QK-10.78.51.231; khaos=H9DIV5UG-12-HJJB; lm="11 Nov 2012 02:06:20 GMT"; put_2101=2c5f5d77-d638-4a96-80d4-a940c54379e0	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:22 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1%262372%3D1%265852%3D1%2611782%3D1; expires=Tue, 11-Dec-2012 02:06:22 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265852%3D25074%2C0%2C1%2C%2C%262372%3D25074%2C0%2C1%2C%2C%2611782%3D25074%2C0%2C1%2C14%2C; expires=Tue, 11-Dec-2012 02:06:22 GMT; path=/; domain=.pixel.rubiconproject.com put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; expires=Sun, 25-Nov-2012 02:06:22 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8936 Connection: Keep-Alive
GET /42bovq53a8zg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe HTTP/1.1 Host: 205.196.122.113 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 302 Found HTTP/1.1 302 Found Location: http://www.mediafire.com/?4p5wab4oqodaj44 Connection: Close
GET /beacon.js HTTP/1.1 Host: b.scorecardresearch.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671
GET /view.aspx?poolid=12887&script=1&rnd=385749&test=1 HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&script=1&rnd=385749&test=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=69089 Cookie: USER_ID=%3e%d3i)CI%b2%e3N%80%b9%84%d0%e9%88	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: n15=0,12887,66048,163844,1352599578,0; domain=.server.cpmstar.com; expires=Tue, 11-Dec-2012 02:06:18 GMT; path=/ sm=t=1352513238; domain=.server.cpmstar.com; expires=Mon, 12-Nov-2012 02:06:18 GMT; path=/ P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sun, 11 Nov 2012 02:06:17 GMT Connection: close Via: 1.1 ID-0001544140306215 uproxy-2

Request	Response
GET /css/mfv3_85677.php?ver=nonssl HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 37605 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /?4p5wab4oqodaj44 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:11 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: 0 Set-Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8; expires=Sun, 12-Oct-2014 02:06:11 GMT; path=/; domain=.mediafire.com; httponly Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 17021 Connection: close Server: MediaFire
GET /images/favicon/download.ico HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Date: Sun, 11 Nov 2012 02:06:12 GMT Last-Modified: Thu, 25 Oct 2012 21:59:32 GMT Accept-Ranges: bytes Content-Length: 1150 Connection: close Server: MediaFire
GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 Host: cdn.mediafire.com GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 52116 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /css?family=Open+Sans:800,400,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/css Expires: Sun, 11 Nov 2012 02:06:12 GMT Date: Sun, 11 Nov 2012 02:06:12 GMT Cache-Control: private, max-age=86400 Content-Encoding: gzip Content-Length: 318 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE
GET /blank.html HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Last-Modified: Tue, 18 Sep 2012 21:44:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 78 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/icons/ajax-loader-grey_round.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 1775 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/logos/logo_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 16 Jul 2012 19:28:31 GMT Accept-Ranges: bytes Content-Length: 3708 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 2315 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_allowemail.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 941 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/buttons/btn_twitter_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 1799 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/icons/dropdown-arrow-left-white.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 123 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/icons/icon-sprite-16-v3.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 02 Oct 2012 17:01:27 GMT Accept-Ranges: bytes Content-Length: 61715 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /images/backgrounds/download/rockmelt/rockmelt_dl_btn.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:44 GMT Accept-Ranges: bytes Content-Length: 7653 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 Host: platform.twitter.com GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: public, max-age=1800 Last-Modified: Thu, 08 Nov 2012 09:18:41 GMT Etag: "567a94a4e136d5c4b7bfde258474cfa6" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 25717 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
GET /recaptcha/api/challenge?k=6LextQUAAAAAALlQv0DSHOYxqF3DftRZxA5yebEe HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Date: Sun, 11 Nov 2012 02:06:13 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 466 Server: GSE
POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 106 Content-Type: application/ocsp-request	HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 11 Nov 2012 02:06:13 GMT Server: Apache Content-Transfer-Encoding: Binary Cache-Control: max-age=19369, public, no-transform, must-revalidate Last-Modified: Sun, 11 Nov 2012 01:46:02 GMT Expires: Sun, 11 Nov 2012 07:46:02 GMT Etag: "8c6a4b9dee7b1bc21ddf455dd96406348b7e33d2" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" Content-Length: 1923 Connection: close
GET /js/master_85677.js HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/javascript Last-Modified: Fri, 09 Nov 2012 23:25:30 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Server: MediaFire Content-Length: 143613 Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:12 GMT Connection: keep-alive
GET /ajax/libs/jquery/1.7.2/jquery.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Content-Encoding: gzip Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT Date: Fri, 09 Nov 2012 20:33:45 GMT Expires: Sat, 09 Nov 2013 20:33:45 GMT X-Content-Type-Options: nosniff Server: sffe Content-Length: 73891 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 106347
GET /js/encoder.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 02:06:13 GMT Last-Modified: Thu, 05 Jan 2012 22:41:54 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 02:06:13 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3695 Connection: close Server: MediaFire
GET /js/bust_out.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 02:06:13 GMT Last-Modified: Thu, 31 May 2012 19:49:34 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 02:06:13 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 57 Connection: close Server: MediaFire
GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 Host: p.twitter.com GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: image/gif Etag: "377d257f2d2e294916143c069141c1c5:1328738114" Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT Accept-Ranges: bytes Content-Length: 43 Cache-Control: no-cache P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 Host: cdn.api.twitter.com GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Last-Modified: Sun, 11 Nov 2012 01:58:31 GMT Pragma: no-cache X-Frame-Options: SAMEORIGIN Status: 200 OK Content-Encoding: gzip Content-Length: 897 Server: tfe Vary: Accept-Encoding Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Expires: Sun, 11 Nov 2012 02:06:13 GMT Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /images/ad-loader.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:09:03 GMT Accept-Ranges: bytes Content-Length: 1786 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /recaptcha/api/js/recaptcha.js HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: application/x-javascript Expires: Sun, 11 Nov 2012 02:06:13 GMT Date: Sun, 11 Nov 2012 02:06:13 GMT Last-Modified: Tue, 12 Jun 2012 14:07:31 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 17531 Server: GSE Cache-Control: public, max-age=0 Age: 0
GET /recaptcha/api/img/red/refresh.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 03:00:43 GMT Date: Sun, 11 Nov 2012 02:00:43 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 974 Server: GSE Age: 330 Cache-Control: public, max-age=3600
GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 Host: secure.gravatar.com GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx Date: Sun, 11 Nov 2012 02:06:13 GMT Content-Length: 906 Connection: keep-alive Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Access-Control-Allow-Origin: * Content-Disposition: inline; filename="00000000.png" X-Varnish: 2458061421 2455936932 Via: 1.1 varnish Expires: Sun, 11 Nov 2012 02:11:13 GMT Cache-Control: max-age=300
GET /images/backgrounds/footer/footer_texture.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 20:31:25 GMT Accept-Ranges: bytes Content-Length: 2649 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_blog.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 171 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_gp.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 29 Aug 2012 21:02:04 GMT Accept-Ranges: bytes Content-Length: 312 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_tw.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 274 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_fb.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 514 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /templates/linkto/default-729x91-default.php?r=97780 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:13 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 666 Connection: close Server: MediaFire
GET /templates/linkto/default-337x281-default.php?r=50671 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:13 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 786 Connection: close Server: MediaFire
GET /recaptcha/api/img/red/audio.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 03:05:22 GMT Date: Sun, 11 Nov 2012 02:05:22 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 914 Server: GSE Age: 51 Cache-Control: public, max-age=3600
GET /images/backgrounds/newHome/loginActivateFB_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 255 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateTW_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 387 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive
GET /templates/linkto/default-337x281-default2.php?r=40383 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:13 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 787 Connection: close Server: MediaFire
GET /recaptcha/api/img/red/text.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 02:57:29 GMT Date: Sun, 11 Nov 2012 01:57:29 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 155 Server: GSE Age: 524 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/help.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 03:06:13 GMT Date: Sun, 11 Nov 2012 02:06:13 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 367 Server: GSE Cache-Control: public, max-age=3600 Age: 0
GET /recaptcha/api/image?c=03AHJ_Vuv2hniZPGk_cn3UEMvG7kkMwIhsmea-SyNp1NhFZ6VvRTiq5YfMFfLeCAgBSRPwHY3q3-xsBlf2w480XHRb6f_xW4AT67tMzn_uHu-uT_8W4Tkav--bPfkABhkoRWcb_3GjAxLeBhWqGGL3Oa7GxYtztn1Cf8xixcAwuqAYSBVcRwp5dxY43eZzWppdRptP2gkPXhm9 HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Sun, 11 Nov 2012 02:16:13 GMT Date: Sun, 11 Nov 2012 02:06:13 GMT Cache-Control: public, max-age=600 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 3050 Server: GSE
GET /templates/linkto/default-161x601-default.php?r=69089 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:13 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 733 Connection: close Server: MediaFire
GET /en_US/all.js?_=1352599573906 HTTP/1.1 Host: connect.facebook.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Etag: "06c9a8ca347f3538149da85e21e875b7" Content-Encoding: gzip X-FB-Debug: 4ms1vP9UDg83EXaIJDlwGISqs42bzaN8LPGxcQjchE0= Content-Length: 58142 Cache-Control: public, max-age=635 Expires: Sun, 11 Nov 2012 02:16:48 GMT Date: Sun, 11 Nov 2012 02:06:13 GMT Connection: keep-alive Vary: Accept-Encoding
GET /recaptcha/api/img/red/sprite.png HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/png Expires: Sun, 11 Nov 2012 02:28:13 GMT Date: Sun, 11 Nov 2012 01:28:13 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 4679 Server: GSE Age: 2281 Cache-Control: public, max-age=3600
GET /ad/3196.js?cb=0.5937820403212366 HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=97780 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 02:06:15 GMT Date: Sun, 11 Nov 2012 02:06:15 GMT Connection: keep-alive
GET /ad/3196.js HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 02:06:15 GMT Date: Sun, 11 Nov 2012 02:06:15 GMT Connection: keep-alive
GET /helper_01.swf HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Date: Sun, 11 Nov 2012 02:06:15 GMT Last-Modified: Sat, 15 Oct 2011 19:43:58 GMT Accept-Ranges: bytes Content-Length: 1480 Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 02:06:15 GMT Connection: close Server: MediaFire
GET /images/icons/information_darkblue.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=5bo2jai5ipm0l73xgg26a7a01pggtvg8	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 722 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 02:06:15 GMT Connection: keep-alive
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: QpUXNDPC4a/ZS9XMuzc2WDBWEZ8S2oHPsfImau8uouU= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31455056 Expires: Sun, 10 Nov 2013 03:37:11 GMT Date: Sun, 11 Nov 2012 02:06:15 GMT Connection: keep-alive
GET /static/fonts/opensans/v6/k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM.woff HTTP/1.1 Host: themes.googleusercontent.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://fonts.googleapis.com/css?family=Open+Sans:800,400,700 Origin: http://www.mediafire.com	HTTP/1.1 200 OK Content-Type: font/woff Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT Date: Fri, 09 Nov 2012 20:33:30 GMT Expires: Sat, 09 Nov 2013 20:33:30 GMT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: sffe Content-Length: 22748 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 106365
GET /a/3196/3346/9685-15.js?cb=0.8593571709509745&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-15.js?cb=0.8593571709509745&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 02:06:15 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592dbbd5509f081750cba8fe1da009^1^1352599575^1355524350; expires=Sat, 09-Feb-2013 02:06:15 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=107624; path=/; domain=.rubiconproject.com csi15=3204663.js^1^1352599575^1352599575; expires=Sun, 18-Nov-2012 02:06:15 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=69 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/9685-2.js?cb=0.3002700114946988&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-2.js?cb=0.3002700114946988&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=97780 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 02:06:15 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592dbbd5509f081750cba8fe703862^1^1352599575^1355524350; expires=Sat, 09-Feb-2013 02:06:15 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk2=0; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=10; path=/; domain=.rubiconproject.com ses2=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=107624; path=/; domain=.rubiconproject.com csi2=3204661.js^1^1352599575^1352599575; expires=Sun, 18-Nov-2012 02:06:15 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Transfer-Encoding: chunked
GET /ga.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 14888 Content-Encoding: gzip Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT X-Content-Type-Options: nosniff, nosniff Date: Sat, 10 Nov 2012 20:33:27 GMT Expires: Sun, 11 Nov 2012 08:33:27 GMT Vary: Accept-Encoding Age: 19968 Cache-Control: max-age=43200, public Server: GFE/2.0
GET /a/3196/3346/9685-9.js?cb=0.8407720520245247&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-9.js?cb=0.8407720520245247&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=69089 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 02:06:15 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db40b509f081750cba8fe099937^1^1352599575^1355524350; expires=Sat, 09-Feb-2013 02:06:15 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk9=0; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=10; path=/; domain=.rubiconproject.com ses9=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=107624; path=/; domain=.rubiconproject.com csi9=3165520.js^1^1352599575^1352599575; expires=Sun, 18-Nov-2012 02:06:15 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=57 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/27309-15.js?cb=0.3005276760127775&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/27309-15.js?cb=0.3005276760127775&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=40383 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 02:06:15 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; expires=Sat, 09-Feb-2013 02:06:15 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 03:06:15 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=107624; path=/; domain=.rubiconproject.com csi15=3204663.js^1^1352599575^1352599575; expires=Sun, 18-Nov-2012 02:06:15 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=48 Connection: Keep-Alive Transfer-Encoding: chunked
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 Host: www.facebook.com GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 Content-Encoding: gzip X-FB-Debug: Jh+EMGu/43pboTi1u50BL0R6TUsfOgnRM1L0kxwRUZs= Date: Sun, 11 Nov 2012 02:06:16 GMT Transfer-Encoding: chunked Connection: keep-alive
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 02:06:16 GMT Content-Length: 0
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=1671394818&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=1088492129&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.1917869790.1352599576.1352599576.1352599576.1%3B%2B__utmz%3D213136648.1352599576.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 Host: www.google-analytics.com GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=1671394818&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=1088492129&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.1917869790.1352599576.1352599576.1352599576.1%3B%2B__utmz%3D213136648.1352599576.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 09 Nov 2012 20:33:50 GMT Content-Length: 35 X-Content-Type-Options: nosniff Pragma: no-cache Expires: Wed, 19 Apr 2000 11:43:00 GMT Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Age: 106346 Server: GFE/2.0
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=40383	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 02:06:16 GMT Content-Length: 0
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: s-static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: JS4qOSg1Dl3AgVtg3MyBP4whcr8SZapA/Vud9cBlDwY= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31454965 Expires: Sun, 10 Nov 2013 03:35:41 GMT Date: Sun, 11 Nov 2012 02:06:16 GMT Connection: keep-alive
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:16 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:06:16 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwmJD8hAUQmJD8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 02:06:16 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; path=/; expires=Sat, 09-Feb-2013 02:06:16 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 02:06:16 GMT Content-Length: 1350
GET /view.aspx?poolid=12887&script=1&rnd=385749 HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&script=1&rnd=385749 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=69089	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: /view.aspx?poolid=12887&script=1&rnd=385749&test=1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: USER_ID=%3e%d3i)CI%b2%e3N%80%b9%84%d0%e9%88; domain=.server.cpmstar.com; expires=Thu, 11-Nov-2032 02:06:38 GMT; path=/ P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sun, 11 Nov 2012 02:06:37 GMT Content-Length: 185 Connection: Keep-alive Keep-Alive: timeout=15, max=100 Via: 1.1 ID-0001544140306215 uproxy-4
GET /p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; sess=1; icu=ChIIlroHEAoYASABKAEwmJD8hAUQmJD8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/png Server: Apache Etag: "05c7006db8c87009c7ef4cebeac987fa:1350137588" Last-Modified: Sat, 13 Oct 2012 14:13:08 GMT Accept-Ranges: bytes Content-Length: 5202 Date: Sun, 11 Nov 2012 02:06:16 GMT Connection: keep-alive
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=40383 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:16 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:06:16 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwmJD8hAUQmJD8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 02:06:16 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; path=/; expires=Sat, 09-Feb-2013 02:06:16 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 02:06:16 GMT Content-Length: 1350
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 Host: tap2-cdn.rubiconproject.com GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Last-Modified: Sun, 11 Nov 2012 00:16:00 GMT Content-Encoding: gzip Cache-Control: max-age=600 Expires: Sun, 11 Nov 2012 02:16:16 GMT Date: Sun, 11 Nov 2012 02:06:16 GMT Content-Length: 5080 Connection: keep-alive Vary: Accept-Encoding
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 02:06:16 GMT Connection: close Content-Length: 381
GET /partner/scripts/rubicon/alice.js HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:56:01 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sun, 11 Nov 2012 03:06:16 GMT Date: Sun, 11 Nov 2012 02:06:16 GMT Content-Length: 5798 Connection: keep-alive Vary: Accept-Encoding
GET /getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30 HTTP/1.1 Host: ib.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; sess=1; icu=ChIIlroHEAoYASABKAEwmJD8hAUQmJD8hAUYAA..	HTTP/1.1 302 Moved Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:16 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:06:16 GMT; domain=.adnxs.com; HttpOnly Location: http://pixel.rubiconproject.com/tap.php?v=4894&nid=1986&put=5858721859426781856&expires=30 Date: Sun, 11 Nov 2012 02:06:16 GMT Content-Length: 0
GET /images/pixel.gif HTTP/1.1 Host: spe.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Allow: GET Expires: Mon, 12 Nov 2012 19:09:54 GMT Date: Sun, 11 Nov 2012 02:06:17 GMT Connection: keep-alive
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; sess=1; icu=ChIIlroHEAoYASABKAEwmJD8hAUQmJD8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:17 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:06:17 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; path=/; expires=Sat, 09-Feb-2013 02:06:17 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 02:06:17 GMT
GET /tap.php?v=4894&nid=1986&put=5858721859426781856&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=4894&nid=1986&put=5858721859426781856&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_1986=5858721859426781856; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9989 Connection: Keep-Alive
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=40383 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 02:06:17 GMT Connection: close Content-Length: 381
GET /int/integration?pixel=303852&nid=302660 HTTP/1.1 Host: i.ctnsnet.com GET /int/integration?pixel=303852&nid=302660 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_1444938286484d40a99ac39507b8808d=1; path=/; domain=.ctnsnet.com; expires=Mon, 11-Nov-2013 02:06:17 GMT; px=AAAEouxQxpUZ; path=/; domain=.ctnsnet.com; expires=Mon, 11-Mar-2013 02:06:17 GMT; pb=AAAEowJQxpUZ; path=/; domain=.ctnsnet.com; expires=Thu, 10-Jan-2013 02:06:17 GMT; opt=0; path=/; domain=.ctnsnet.com; expires=Mon, 11-Nov-2013 02:06:17 GMT; Pragma: no-cache Cache-Control: private, no-cache, no-store, max-age=0 Location: http://pixel.rubiconproject.com/tap.php?v=14965&nid=2731&put=1444938286484d40a99ac39507b8808d&expires=30 Content-Length: 0 Date: Sun, 11 Nov 2012 02:06:16 GMT Connection: close
GET /r1/ruum HTTP/1.1 Host: rp.gwallet.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: application/octet-stream Content-Length: 0 Server: radiumone/1.2 Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Expires: Tue, 29 Oct 2002 19:50:44 GMT Location: http://pixel.rubiconproject.com/tap.php?v=7935&nid=2271&expires=30&put=Ru80gk_K9RjmA369kmHvydFnZgw Pragma: no-cache P3P: CP="RadiumOne does not have a P3P policy. For information on our privacy policy please visit http://radiumone.com/about/privacy.html" Set-Cookie: ra1_uid=5553974476608538880; Expires=Mon, 11-Nov-2013 02:06:17 GMT; Path=/; Domain=gwallet.com; Version=1
GET /cached/js/flashadv12.pack.js HTTP/1.1 Host: cdn3.cpmstar.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=69089	HTTP/1.1 200 OK Content-Type: application/x-javascript Cache-Control: max-age=259200 Accept-Ranges: bytes Server: Microsoft-IIS/7.5 P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Via: 1.1 ID-0001544140306215 uproxy-3 Content-Encoding: gzip Vary: Accept-Encoding Age: 83336 Date: Sun, 11 Nov 2012 02:06:17 GMT Last-Modified: Fri, 26 Oct 2012 02:43:57 GMT Expires: Tue, 13 Nov 2012 02:57:21 GMT Content-Length: 876 Connection: close
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; sess=1; icu=ChIIlroHEAoYASABKAEwmJD8hAUQmJD8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:17 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:06:17 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; path=/; expires=Sat, 09-Feb-2013 02:06:17 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 02:06:17 GMT
GET /dmm/rubicon/match HTTP/1.1 Host: rubicon-match.dotomi.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 204 No Content Content-Type: text/plain Date: Sun, 11 Nov 2012 02:06:17 GMT X-Name: dtiad01rtb17p.int Cache-Control: max-age=0, no-store Content-Length: 0 Connection: close
GET /tap.php?v=14965&nid=2731&put=1444938286484d40a99ac39507b8808d&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=14965&nid=2731&put=1444938286484d40a99ac39507b8808d&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_2731=1444938286484d40a99ac39507b8808d; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9921 Connection: Keep-Alive
GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 Host: user.lucidmedia.com GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Apache-Coyote/1.1 Cache-Control: no-cache, no-store Pragma: no-cache Date: Sun, 11 Nov 2012 02:06:17 GMT Expires: Sun, 11 Nov 2012 02:06:17 GMT P3P: CP="NOI ADM DEV CUR" X-Handled-By: awserh25/127.0.0.1 Set-Cookie: lm_userid=3fhBu-f-Ekp; Domain=.lucidmedia.com; Expires=Mon, 11-Nov-2013 02:06:17 GMT; Path=/ Location: http://pixel.rubiconproject.com/tap.php?v=7206&nid=1197&put=4246111195476069429&expires=30 Content-Length: 0 Connection: close
GET /redirect?ex=11 HTTP/1.1 Host: cm.netseer.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:16 GMT Location: http://cm.netseer.com/redirect?ex=11&cookie=2 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Server: Apache-Coyote/1.1 Set-Cookie: netseer_v3_vi=H4sIAAAAAAAAADOyKi0uMk5LSU4xTbRMSTFNNbVMTrQyNDY1MrW0NDU3NzS1BACFo2mhIwAAAA; Domain=.netseer.com; Expires=Tue, 11-Nov-2014 02:06:17 GMT; Path=/ Content-Length: 0 Connection: keep-alive
GET /tap.php?v=7935&nid=2271&expires=30&put=Ru80gk_K9RjmA369kmHvydFnZgw HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7935&nid=2271&expires=30&put=Ru80gk_K9RjmA369kmHvydFnZgw HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%267935%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%267935%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9881 Connection: Keep-Alive
GET /dmp/pixelSync?network=Rubicon HTTP/1.1 Host: pixel.sitescout.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Server: Apache-Coyote/1.1 Date: Sun, 11 Nov 2012 02:06:16 GMT
GET /cached/creatives/163844/160x600%20(2).swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d66048%26creativeid%3d163844%26url%3d HTTP/1.1 Host: cdn3.cpmstar.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=69089	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Cache-Control: public Server: Microsoft-IIS/7.5 Content-Disposition: inline;filename=163844_160x600 (2).swf X-AspNet-Version: 2.0.50727 P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Via: 1.1 ID-0001544140306215 uproxy-5 Age: 41973 Date: Sun, 11 Nov 2012 02:06:17 GMT Expires: Sun, 11 Nov 2012 14:26:44 GMT Content-Length: 26088 Connection: close
GET /px/rb.gif HTTP/1.1 Host: ad.yabuka.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 FOUND Content-Type: text/html; charset=utf-8 Server: nginx/1.1.19 Date: Sun, 11 Nov 2012 02:06:17 GMT Content-Length: 186 Connection: keep-alive Location: http://pixel.rubiconproject.com/tap.php?v=9047&nid=2147&put=6TiCbwNAlj Set-Cookie: client_id=6TiCbwNAlj; Path=/ tc="2Ub5rdQnNa4MYOvfx7FJnVgBRGI=?_expires=STEzNTMwMDk5NzcKLg==&client_id=Uyc2VGlDYndOQWxqJwpwMQou"; Domain=.yabuka.com; expires=Thu, 15-Nov-2012 20:06:17 GMT; Path=/ Cache-Control: no-cache Pragma: no-cache
GET /tap.php?v=7206&nid=1197&put=4246111195476069429&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7206&nid=1197&put=4246111195476069429&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_1197=4246111195476069429; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9871 Connection: Keep-Alive
GET /erb HTTP/1.1 Host: px.owneriq.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/html Server: Apache/2.2.3 (CentOS) Content-Length: 153 Location: http://px.owneriq.net/fr/epx.gif X-Powered-By: PHP/5.2.17 P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Vary: Accept-Encoding Cache-Control: max-age=16178 Date: Sun, 11 Nov 2012 02:06:17 GMT Connection: keep-alive
GET /redirect?ex=11&cookie=2 HTTP/1.1 Host: cm.netseer.com GET /redirect?ex=11&cookie=2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: netseer_v3_vi=H4sIAAAAAAAAADOyKi0uMk5LSU4xTbRMSTFNNbVMTrQyNDY1MrW0NDU3NzS1BACFo2mhIwAAAA	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:17 GMT Location: http://pixel.rubiconproject.com/tap.php?v=6073&nid=2100&expires=30&put=usr3fdcd5a9dd5e59ca P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Server: Apache-Coyote/1.1 Set-Cookie: netseer_v3_vi=H4sIAAAAAAAAADOyKi0uMk5LSU4xTbRMSTFNNbVMTrQyNDY1MrW0NDU3NzS11DE0tHKNCHEN8nP0QZIxMTACAB6olgs9AAAA; Domain=.netseer.com; Expires=Tue, 11-Nov-2014 02:06:17 GMT; Path=/ Content-Length: 0 Connection: keep-alive
GET /load/?p=204&g=141&j=0 HTTP/1.1 Host: loadm.exelator.com GET /load/?p=204&g=141&j=0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: image/gif X-Powered-By: PHP/5.3.17 P3P: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA Set-Cookie: ud=eJxrWVyWWnRgUUnxaccr6ofYYsXmLA71dLnFoGBqZJloZmFskmhhbmZqmpKYmGaQnJaaYmpgmWRmYGFosLgoJY0RAPkVFY4%253D; expires=Mon, 11-Mar-2013 02:06:17 GMT; path=/; domain=exelator.com Location: http://loadm.exelator.com/load/?p=204&g=141&j=0&xl8blockcheck=1 Content-Length: 0 Connection: close Date: Sun, 11 Nov 2012 02:06:17 GMT Server: HTTP server
GET /match?mrbyus=true&excid=17 HTTP/1.1 Host: rubicon.admailtiser.com GET /match?mrbyus=true&excid=17 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: nginx/1.1.1 Date: Sun, 11 Nov 2012 02:06:17 GMT Content-Length: 0 Connection: keep-alive P3P: policyref="http://admailtiser.com/w3c/p3p.xml", CP="NOI IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA NOR UNI" Set-Cookie: cicouid=4599d1d8-df39-47b7-bc13-d7914719d356GuJCv8XI7SsmpZ-rglCNWw; Domain=.admailtiser.com; Expires=Mon, 11-Nov-2013 02:06:17 GMT; Path=/ Location: http://pixel.rubiconproject.com/tap.php?v=12224&nid=2530&put=1372681696652335748&expires=365
GET /tap.php?v=9047&nid=2147&put=6TiCbwNAlj HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=9047&nid=2147&put=6TiCbwNAlj HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%267935%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%267935%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%267935%3D1%269047%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%267935%3D25074%2C0%2C1%2C%2C%269047%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_2147=6TiCbwNAlj; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8971 Connection: Keep-Alive
GET /tap.php?v=6073&nid=2100&expires=30&put=usr3fdcd5a9dd5e59ca HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=6073&nid=2100&expires=30&put=usr3fdcd5a9dd5e59ca HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_2100=usr3fdcd5a9dd5e59ca; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9910 Connection: Keep-Alive
GET /fr/epx.gif HTTP/1.1 Host: px.owneriq.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache/2.2.3 (CentOS) Content-Length: 43 X-Powered-By: PHP/5.2.17 P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Cache-Control: max-age=16178 Expires: Sun, 11 Nov 2012 06:35:55 GMT Date: Sun, 11 Nov 2012 02:06:17 GMT Connection: keep-alive
GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 Host: m.xp1.ru4.com GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Sun-Java-System-Web-Server/7.0 Date: Sun, 11 Nov 2012 02:06:17 GMT P3P: policyref="/w3c/p3p.xml", CP="NON DSP COR PSAa OUR STP UNI" Pragma: no-cache Set-Cookie: X1ID=AO-00000005680884373; domain=.ru4.com; path=/; expires=Sat, 10-May-2014 21:06:17 GMT Location: http://pixel.rubiconproject.com/tap.php?v=5671&nid=2081&put=AO-00000005680884373&expires=30 Content-Length: 0
GET /tap.php?v=12224&nid=2530&put=1372681696652335748&expires=365 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=12224&nid=2530&put=1372681696652335748&expires=365 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%2612224%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%2612224%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_2530=1372681696652335748; expires=Mon, 11-Nov-2013 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9769 Connection: Keep-Alive
GET /tap.php?v=5671&nid=2081&put=AO-00000005680884373&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5671&nid=2081&put=AO-00000005680884373&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:17 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.pixel.rubiconproject.com put_2081=AO-00000005680884373; expires=Tue, 11-Dec-2012 02:06:17 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8711 Connection: Keep-Alive
GET /load/?p=204&g=141&j=0&xl8blockcheck=1 HTTP/1.1 Host: loadm.exelator.com GET /load/?p=204&g=141&j=0&xl8blockcheck=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: ud=eJxrWVyWWnRgUUnxaccr6ofYYsXmLA71dLnFoGBqZJloZmFskmhhbmZqmpKYmGaQnJaaYmpgmWRmYGFosLgoJY0RAPkVFY4%253D	HTTP/1.1 302 Found Content-Type: image/gif X-Powered-By: PHP/5.3.17 P3P: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA Set-Cookie: inv=eJxrXFySlnaHQeLMmTO9zGfVOZYYGZoYgImz6twIDgOCeeYMAyMSlwGFBwBIiRgQ; expires=Mon, 11-Mar-2013 02:06:17 GMT; path=/; domain=exelator.com xud=eJxFj81qg0AURiWUPkCfwF23o3HULKfVWCE64g%252FFTWXUGSJYBSOp20LXfQaJAUnT0HfotnTXVZ%252BmEoXu7j338H3cl25Lq4tdvflCP9efl%252Bv1w77J6%252Fy1C0ztl%252BOhuCCyOpeIqsgQpoQwkDCaQrCIZaAK4LSNDB1HtziwfTfc2fh9BK5umNhu36az6YftYZw1C3GT5GDPR6v2Y9yQq6MhSNO5wQxQ5IeO3t9U5dOGVsczWSLLXIX9MqsoK5v%252BzLB3uM%252BKdLB4ZWowPedk06Y2aOHTnEfexLFrHK2CPpZFlvxTW%252FdnXYDuhmfllClxQlJApbkAVQZFCAhUZJAQlaqx0MWMPX%252FPrvaiIIE%252FRLpunQ%253D%253D; expires=Mon, 11-Mar-2013 02:06:17 GMT; path=/; domain=exelator.com xudx=eJwBMADP%252F4OjdmVyAqJ0c8tB1CfCBmhoXqNldniBzQhcgc5Qnwgamc0nCwHMzMyNAQABzQISAgk6E3M%253D; expires=Mon, 11-Mar-2013 02:06:17 GMT; path=/; domain=exelator.com udo=eJxrXVyWWsS0qKT4tOMV9UNsGRlxi1PLKuacVedmPMsRw3HmzJleNkYGxrNMQkxLKnJKcvoWh3q63GJQMDWyTDSzMDZJtDA3MzVNSUxMM0hOS00xNbBMMjOwMDRYWxbv7uof7%252Bwf6hcSFLnIz38NRCDI1d3T32%252FBKqi0Z0jkgpUQtouvIwNUUYB%252FcIijz4L1EJ5jkKsj0CAXVwagylDH%252BJDIANflTkX55cWpRavBIm6Ovp4%252BkcvdMotS0%252FIrloPF%252FINXhmfmpQBVKZhDbfAMDljrl1pR4p6aF5Kao%252BAYDBX3D3Jf7ZuXmpufl5mMEPVzDWFaHOroAfSsWUqaeVJyYopBqomxoalFmqmRqUGiqbmZQXKiRapFkuGS%252FKLMdKAfATcGdjk%253D; expires=Mon, 11-Mar-2013 02:06:17 GMT; path=/; domain=exelator.com ud=eJxrWVyWWnRgUUnxaccr6ofYMgoDFod6utxiUDA1skw0szA2SbQwNzM1TUlMTDNITktNMTWwTDIzsDA0WJJflJm%252ByM8fAEPeF1w%253D; expires=Mon, 11-Mar-2013 02:06:17 GMT; path=/; domain=exelator.com Location: http://tap.rubiconproject.com/oz/feeds/exelate/tokens?afu=529a6834a87655daaf0cfed509b60810 Content-Length: 0 Connection: close Date: Sun, 11 Nov 2012 02:06:17 GMT Server: HTTP server
GET /oz/feeds/exelate/tokens?afu=529a6834a87655daaf0cfed509b60810 HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373	HTTP/1.1 204 No Content Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:17 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 02:06:17 GMT; Path=/ au=H9DIV5RK-47QK-10.78.51.231; Domain=.rubiconproject.com; Expires=Mon, 09-Nov-2020 02:06:17 GMT; Path=/ dq=1\|1\|0\|0; Expires=Mon, 11-Nov-2013 02:06:17 GMT; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Content-Length: 0 Keep-Alive: timeout=5, max=154 Connection: Keep-Alive
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=97780	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 02:06:18 GMT Content-Length: 0
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=97780 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-`mw3QN_/h9oD#)/.#FdgHS0R!o)0VpiH1J5'; sess=1; icu=ChIIlroHEAoYASABKAEwmJD8hAUQmJD8hAUYAA..	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:19 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:06:19 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYAiACKAIwm5D8hAUQm5D8hAUYAQ..; path=/; expires=Sat, 09-Feb-2013 02:06:19 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG68%Cxrx)0s]#%2L_'x%SEV/hnJPh4FV-`mw3QN_/h9oD#)/.#FbNC'TxPT>I:8+sVL/Eh>#X=!<SYmqQusg; path=/; expires=Sat, 09-Feb-2013 02:06:19 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 02:06:19 GMT Content-Length: 1290
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 Host: fpdownload2.macromedia.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/xml Server: Apache Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT Etag: "87de33-256-4cd617ed12480" Accept-Ranges: bytes Content-Length: 598 Date: Sun, 11 Nov 2012 02:06:19 GMT Connection: keep-alive
GET /p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=97780 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG68%Cxrx)0s]#%2L_'x%SEV/hnJPh4FV-`mw3QN_/h9oD#)/.#FbNC'TxPT>I:8+sVL/Eh>#X=!<SYmqQusg; sess=1; icu=ChIIlroHEAoYAiACKAIwm5D8hAUQm5D8hAUYAQ..	HTTP/1.1 200 OK Content-Type: image/png Server: Apache Etag: "a9daeac0f83c5ce58b932bd0f829631f:1351039989" Last-Modified: Wed, 24 Oct 2012 00:53:09 GMT Accept-Ranges: bytes Content-Length: 5051 Date: Sun, 11 Nov 2012 02:06:19 GMT Connection: keep-alive
GET /partner/agent/rubicon/channels.js?cb=oz_onPixelsLoaded HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373; cd=false; au=H9DIV5RK-47QK-10.78.51.231; dq=1\|1\|0\|0	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:19 GMT Server: TRP Apache-Coyote/1.1 Cache-Control: no-store, no-cache, must-revalidate, private Content-Length: 536 Set-Cookie: khaos=H9DIV5UG-12-HJJB; Domain=.rubiconproject.com; Expires=Mon, 09-Nov-2020 02:06:19 GMT; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=136 Connection: Keep-Alive
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1 Host: static.ak.fbcdn.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 Origin: http://www.facebook.com	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 29 Oct 2012 23:55:41 GMT X-Content-Type-Options: nosniff Content-Encoding: gzip X-FB-Debug: mERPLeHfP4bFbWVj/NJRwm2C8x1Lf8geAnYAfFf24WM= Content-Length: 37945 Vary: Accept-Encoding Cache-Control: public, max-age=31147604 Expires: Wed, 06 Nov 2013 14:13:03 GMT Date: Sun, 11 Nov 2012 02:06:19 GMT Connection: keep-alive
GET /cms/v1?esig=1~17e68b1b86afcfd8436104fe567484ccc2161b0f&nwid=10000602235&sigv=1 HTTP/1.1 Host: ad.yieldmanager.com GET /cms/v1?esig=1~17e68b1b86afcfd8436104fe567484ccc2161b0f&nwid=10000602235&sigv=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=97780	HTTP/1.1 302 Found Content-Type: text/plain; charset=utf-8 Date: Sun, 11 Nov 2012 02:06:19 GMT P3P: policyref="http://p3p.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV" Location: http://ib.adnxs.com/ymapuid?xid=E0 Cache-Control: private Age: 0 Transfer-Encoding: chunked Connection: keep-alive Server: YTS/1.20.13
GET /oz/feeds/invite-media-rtb/tokens/?rt=iframe HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373; cd=false; au=H9DIV5RK-47QK-10.78.51.231; dq=1\|1\|0\|0; khaos=H9DIV5UG-12-HJJB	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:19 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=2eb451963645f9caff1ce917f608f3ae5c90d3f7&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 02:06:19 GMT; Path=/ dq=2\|2\|0\|0; Expires=Mon, 11-Nov-2013 02:06:19 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 02:06:19 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=129 Connection: Keep-Alive
GET /di.php?v=2372\|\|2373\|0\|\|2374\|0\|\|&r=3761\|0,3169,3578,3577,2110,2195,2196,2197,2579,2198,4134,3734,2199,2364,2362,2363,2200,3810,2111,2494,2201,3513,2202,2496,2202,2496,2203,2204,2189,2112,2497,2205,2355,2495,5838,3811,3512,2109,3812,2239,2190,2206,2113,2206,2113,4552,2765,6184,2240,4105,4193,2372,2373,2374,2375, HTTP/1.1 Host: pixel.rubiconproject.com GET /di.php?v=2372\|\|2373\|0\|\|2374\|0\|\|&r=3761\|0,3169,3578,3577,2110,2195,2196,2197,2579,2198,4134,3734,2199,2364,2362,2363,2200,3810,2111,2494,2201,3513,2202,2496,2202,2496,2203,2204,2189,2112,2497,2205,2355,2495,5838,3811,3512,2109,3812,2239,2190,2206,2113,2206,2113,4552,2765,6184,2240,4105,4193,2372,2373,2374,2375, HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373; cd=false; au=H9DIV5RK-47QK-10.78.51.231; khaos=H9DIV5UG-12-HJJB	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:19 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1%262372%3D1; expires=Fri, 10-May-2013 02:06:19 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9998 Connection: Keep-Alive
GET /adscores/g.pixel?sid=9278242667 HTTP/1.1 Host: adadvisor.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Date: Sun, 11 Nov 2012 02:06:19 GMT Connection: close Server: AAWebServer P3P: policyref="http://www.adadvisor.net/w3c/p3p.xml",CP="NOI NID" Content-Length: 0 Location: http://tap.rubiconproject.com/oz/feeds/targus/profile?p=targus&oz_source=partner&segment=000&zip=&dob=&gender=&pc=
GET /ymapuid?xid=E0 HTTP/1.1 Host: ib.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=97780 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG68%Cxrx)0s]#%2L_'x%SEV/hnJPh4FV-`mw3QN_/h9oD#)/.#FbNC'TxPT>I:8+sVL/Eh>#X=!<SYmqQusg; sess=1; icu=ChIIlroHEAoYAiACKAIwm5D8hAUQm5D8hAUYAQ..	HTTP/1.1 200 OK Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:19 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:06:19 GMT; domain=.adnxs.com; HttpOnly uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:06:19 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 02:06:19 GMT Content-Length: 0
GET /rubicon_sync?publisher_user_id=2eb451963645f9caff1ce917f608f3ae5c90d3f7&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 Host: pixel.invitemedia.com GET /rubicon_sync?publisher_user_id=2eb451963645f9caff1ce917f608f3ae5c90d3f7&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: text/html Date: Sun, 11 Nov 2012 02:06:19 GMT Set-Cookie: uid=2c5f5d77-d638-4a96-80d4-a940c54379e0;Path=/;Domain=invitemedia.com;Expires=Mon, 11-Nov-2013 02:06:19 GMT impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC" Cache-Control: no-cache Content-Length: 221 Connection: close Server: Jetty(7.3.1.v20110307)
GET /oz/feeds/targus/profile?p=targus&oz_source=partner&segment=000&zip=&dob=&gender=&pc= HTTP/1.1 Host: tap.rubiconproject.com GET /oz/feeds/targus/profile?p=targus&oz_source=partner&segment=000&zip=&dob=&gender=&pc= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1%262372%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373; cd=false; au=H9DIV5RK-47QK-10.78.51.231; dq=2\|2\|0\|0; khaos=H9DIV5UG-12-HJJB; lm="11 Nov 2012 02:06:19 GMT"	HTTP/1.1 204 No Content Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:19 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 02:06:20 GMT; Path=/ dq=3\|3\|0\|0; Expires=Mon, 11-Nov-2013 02:06:20 GMT; Path=/ lm="11 Nov 2012 02:06:20 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Content-Length: 0 Keep-Alive: timeout=5, max=83 Connection: Keep-Alive
GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353031579&publisher_dsp_id=2101&external_user_id=2c5f5d77-d638-4a96-80d4-a940c54379e0 HTTP/1.1 Host: tap.rubiconproject.com GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353031579&publisher_dsp_id=2101&external_user_id=2c5f5d77-d638-4a96-80d4-a940c54379e0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=2eb451963645f9caff1ce917f608f3ae5c90d3f7&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1%262372%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373; cd=false; au=H9DIV5RK-47QK-10.78.51.231; dq=2\|2\|0\|0; khaos=H9DIV5UG-12-HJJB; lm="11 Nov 2012 02:06:19 GMT"	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 02:06:20 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.rubiconproject.com/tap.php?v=5852&nid=2101&put=2c5f5d77-d638-4a96-80d4-a940c54379e0 Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 02:06:20 GMT; Path=/ dq=3\|3\|0\|0; Expires=Mon, 11-Nov-2013 02:06:20 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 02:06:20 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=164 Connection: Keep-Alive
GET /tap.php?v=5852&nid=2101&put=2c5f5d77-d638-4a96-80d4-a940c54379e0 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5852&nid=2101&put=2c5f5d77-d638-4a96-80d4-a940c54379e0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=2eb451963645f9caff1ce917f608f3ae5c90d3f7&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1%262372%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373; cd=false; au=H9DIV5RK-47QK-10.78.51.231; khaos=H9DIV5UG-12-HJJB; lm="11 Nov 2012 02:06:20 GMT"	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:20 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1%262372%3D1%265852%3D1; expires=Tue, 11-Dec-2012 02:06:20 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265852%3D25074%2C0%2C1%2C%2C%262372%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:06:20 GMT; path=/; domain=.pixel.rubiconproject.com put_2101=2c5f5d77-d638-4a96-80d4-a940c54379e0; expires=Tue, 11-Dec-2012 02:06:20 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9326 Connection: Keep-Alive
GET /1/gr?url=http%3a//pixel.rubiconproject.com/tap.php%3fv%3d11782%7c1%7c14%26nid%3d2181%26put%3d__EFGCK__%26expires%3d14 HTTP/1.1 Host: pixel.everesttech.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: text/html; charset=iso-8859-1 Date: Sun, 11 Nov 2012 02:06:22 GMT Server: Apache Set-Cookie: everest_session_v2=UJ8IHgAAQKqYavHB; path=/; domain=.everesttech.net everest_g_v2=g_surferid~UJ8IHgAAQKqYavHB; path=/; domain=.everesttech.net; expires=Mon, 06-Oct-2014 12:46:22 GMT P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM" Cache-Control: no-cache Location: http://cm.g.doubleclick.net/pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14 Content-Length: 427 Keep-Alive: timeout=15, max=964564 Connection: Keep-Alive
GET /pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14 HTTP/1.1 Host: cm.g.doubleclick.net GET /pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: http://pixel2368.everesttech.net/2368/m?cookieid=&ev_rs=1&url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&google_cver=1 Date: Sun, 11 Nov 2012 02:06:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Server: Cookie Matcher Content-Length: 470 X-XSS-Protection: 1; mode=block
GET /2368/m?cookieid=&ev_rs=1&url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&google_cver=1 HTTP/1.1 Host: pixel2368.everesttech.net GET /2368/m?cookieid=&ev_rs=1&url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&google_cver=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: everest_session_v2=UJ8IHgAAQKqYavHB; everest_g_v2=g_surferid~UJ8IHgAAQKqYavHB	HTTP/1.1 302 Found Content-Type: text/html; charset=iso-8859-1 Date: Sun, 11 Nov 2012 02:06:22 GMT Server: Apache Set-Cookie: gglck=CAESEHb10AvLIOUdvYC_4Xf0C8w; path=/; domain=.everesttech.net; expires=Tue, 11-Dec-2012 02:06:22 GMT everest_session_v2=UJ8IHgAAQKqYavHB; path=/; domain=.everesttech.net everest_g_v2=g_surferid~UJ8IHgAAQKqYavHB; path=/; domain=.everesttech.net; expires=Mon, 06-Oct-2014 12:46:22 GMT P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM" Cache-Control: no-cache Location: http://pixel.rubiconproject.com/tap.php?v=11782\|1\|14&nid=2181&put=CAESEHb10AvLIOUdvYC_4Xf0C8w&expires=14 Content-Length: 300 Keep-Alive: timeout=15, max=998750 Connection: Keep-Alive
GET /tap.php?v=11782\|1\|14&nid=2181&put=CAESEHb10AvLIOUdvYC_4Xf0C8w&expires=14 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=11782\|1\|14&nid=2181&put=CAESEHb10AvLIOUdvYC_4Xf0C8w&expires=14 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1%262372%3D1%265852%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265852%3D25074%2C0%2C1%2C%2C%262372%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db406509f081750cba8fe4bf4d6^1^1352599575^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599575^1352599575; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599575^1352599575; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352599575^1352599575; put_1986=5858721859426781856; put_2731=1444938286484d40a99ac39507b8808d; put_2271=Ru80gk_K9RjmA369kmHvydFnZgw; put_1197=4246111195476069429; put_2147=6TiCbwNAlj; put_2100=usr3fdcd5a9dd5e59ca; put_2530=1372681696652335748; put_2081=AO-00000005680884373; cd=false; au=H9DIV5RK-47QK-10.78.51.231; khaos=H9DIV5UG-12-HJJB; lm="11 Nov 2012 02:06:20 GMT"; put_2101=2c5f5d77-d638-4a96-80d4-a940c54379e0	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 02:06:22 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264894%3D1%2614965%3D1%267206%3D1%266073%3D1%265671%3D1%262372%3D1%265852%3D1%2611782%3D1; expires=Tue, 11-Dec-2012 02:06:22 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25074%2C0%2C1%2C%2C%2614965%3D25074%2C0%2C1%2C%2C%267206%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265852%3D25074%2C0%2C1%2C%2C%262372%3D25074%2C0%2C1%2C%2C%2611782%3D25074%2C0%2C1%2C14%2C; expires=Tue, 11-Dec-2012 02:06:22 GMT; path=/; domain=.pixel.rubiconproject.com put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; expires=Sun, 25-Nov-2012 02:06:22 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8936 Connection: Keep-Alive
GET /42bovq53a8zg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe HTTP/1.1 Host: 205.196.122.113 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 302 Found HTTP/1.1 302 Found Location: http://www.mediafire.com/?4p5wab4oqodaj44 Connection: Close
GET /beacon.js HTTP/1.1 Host: b.scorecardresearch.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=50671
GET /view.aspx?poolid=12887&script=1&rnd=385749&test=1 HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&script=1&rnd=385749&test=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=69089 Cookie: USER_ID=%3e%d3i)CI%b2%e3N%80%b9%84%d0%e9%88	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: n15=0,12887,66048,163844,1352599578,0; domain=.server.cpmstar.com; expires=Tue, 11-Dec-2012 02:06:18 GMT; path=/ sm=t=1352513238; domain=.server.cpmstar.com; expires=Mon, 12-Nov-2012 02:06:18 GMT; path=/ P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sun, 11 Nov 2012 02:06:17 GMT Connection: close Via: 1.1 ID-0001544140306215 uproxy-2