Overview

URLhttp://205.196.122.8/qgc2klbguwkg/5nwz1uz1r4ddec4/PotPlayerPortable_1.5.34321_Beta_azo.exe
IP205.196.122.8
ASNAS46179 MediaFire, LLC
Location United States
Report completed2012-11-11 03:11:04 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-11 03:10:25 205.196.120.6 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-11 03:10:27 195.159.219.9 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-11 03:10:22 urlQuery Client 173.194.69.952ssp_ssl: Invalid Client HELLO after Server HELLO Detected
2012-11-11 03:10:22 urlQuery Client 173.194.69.952ssp_ssl: Invalid Client HELLO after Server HELLO Detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 205.196.122.8

Date Alerts / IDS URL IP
2013-03-30 18:39:180 / 1http://205.196.122.8/mkgghr692rng/1tfzxkpxrbr3bpe/popitvsetuptr.exe205.196.122.8
2013-03-30 17:41:120 / 1http://205.196.122.8/k1k25jeaknag/1tfzxkpxrbr3bpe/PopiTVsetupTR.exe205.196.122.8
2013-03-29 07:40:480 / 1http://205.196.122.8/sapguhud50sg/1tfzxkpxrbr3bpe/PopiTVsetupTR.exe205.196.122.8
2013-03-29 07:29:380 / 1http://205.196.122.8/4oe7012gh1tg/1tfzxkpxrbr3bpe/popitvsetuptr.exe205.196.122.8
2013-03-28 02:32:590 / 1http://205.196.122.8/5ns5hkvv3bzg/1tfzxkpxrbr3bpe/popitvsetuptr.exe205.196.122.8
2013-03-18 07:24:190 / 1http://205.196.122.8/ngbr283wq7wg/1tfzxkpxrbr3bpe/popitvsetuptr.exe205.196.122.8

Last 6 reports on ASN: AS46179 MediaFire, LLC

Date Alerts / IDS URL IP
2013-04-08 09:23:550 / 3http://205.196.120.133/p6ayblh87t9g/ji0darn95d89i7z/hyves.nl+-+always+in+touch+with+your+friend (...)205.196.120.133
2013-04-08 09:23:430 / 3http://205.196.121.170/zwazvw1ngi4g/omkj493j9jves3q/Driver+SF.exe205.196.121.170
2013-04-08 09:23:350 / 3http://205.196.120.117/ecglu813s9lg/7zihc2drfzd89o2/YoloHop+V1.15+-+Beta.exe205.196.120.117
2013-04-08 07:59:270 / 6http://199.91.154.99/nkayqggqfbwg/9uj7a9yt414cfoi/adobe.photoshop.cs6-patch.exe199.91.154.99
2013-04-08 07:44:570 / 0http://205.196.120.6205.196.120.6
2013-04-08 06:31:040 / 4http://199.91.152.177/mv1ifpaopzfg/nohz2vz0zqy/Head+Shot.exe199.91.152.177

Last 6 reports on domain: 205.196.122.8

Date Alerts / IDS URL IP
2013-03-30 18:39:180 / 1http://205.196.122.8/mkgghr692rng/1tfzxkpxrbr3bpe/popitvsetuptr.exe205.196.122.8
2013-03-30 17:41:120 / 1http://205.196.122.8/k1k25jeaknag/1tfzxkpxrbr3bpe/PopiTVsetupTR.exe205.196.122.8
2013-03-29 07:40:480 / 1http://205.196.122.8/sapguhud50sg/1tfzxkpxrbr3bpe/PopiTVsetupTR.exe205.196.122.8
2013-03-29 07:29:380 / 1http://205.196.122.8/4oe7012gh1tg/1tfzxkpxrbr3bpe/popitvsetuptr.exe205.196.122.8
2013-03-28 02:32:590 / 1http://205.196.122.8/5ns5hkvv3bzg/1tfzxkpxrbr3bpe/popitvsetuptr.exe205.196.122.8
2013-03-18 07:24:190 / 1http://205.196.122.8/ngbr283wq7wg/1tfzxkpxrbr3bpe/popitvsetuptr.exe205.196.122.8



JavaScript

Executed Scripts (70)


Executed Evals (16)

#1 JavaScript::Eval (size: 22, repeated: 1)

processCookies(false);

#2 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(0);

#3 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(1);

#4 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(10);

#5 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(11);

#6 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(12);

#7 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(13);

#8 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(14);

#9 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(15);

#10 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(2);

#11 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(4);

#12 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(5);

#13 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(6);

#14 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(7);

#15 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(8);

#16 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(9);

Executed Writes (43)

#1 JavaScript::Write (size: 216, repeated: 1)

<!-- BEGIN JS TAG - US < - DO NOT MODIFY -->
<SCRIPT SRC="http://ads.cpxinteractive.com/ttj?id=822416&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4" TYPE="text/javascript"></script>
<!-- END TAG -->

#2 JavaScript::Write (size: 245, repeated: 1)

<!-- BEGIN JS TAG - [Mediafire - Rubicon] - Default < - DO NOT MODIFY -->
<SCRIPT SRC="http://ads.cpxinteractive.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4" TYPE="text/javascript"></script>
<!-- END TAG -->

#3 JavaScript::Write (size: 244, repeated: 1)

<!-- BEGIN JS TAG - [Mediafire - Rubicon] - Default < - DO NOT MODIFY -->
<SCRIPT SRC="http://ads.cpxinteractive.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4" TYPE="text/javascript"></script>
<!-- END TAG -->

#4 JavaScript::Write (size: 221, repeated: 1)

<!-- BEGIN STANDARD TAG - 160 x 600 - ROS: NO - DO NOT MODIFY -->
<SCRIPT TYPE="text/javascript" SRC="http://ad.yieldmanager.com/st?ad_type=ad&ad_size=160x600&section=3434596&pub_url=${PUB_URL}"></script>
<!-- END TAG -->

#5 JavaScript::Write (size: 9, repeated: 5)

</script>

#6 JavaScript::Write (size: 123, repeated: 1)

<SCRIPT TYPE="text/javascript" SRC="http://ad.yieldmanager.com/imp?Z=160x600&s=3434596&_salt=2081161936&B=10&r=0"></SCRIPT>

#7 JavaScript::Write (size: 582, repeated: 1)

<a href="http://ib.adnxs.com/click?3smnx7YMoD_eyafHtgygPwAAAEAzM8M_3smnx7YMoD_eyafHtgygP6n5e5QFeABEoArzhH1cTlERCZ9QAAAAAHZYCwAdAgAAHQIAAAIAAAAyVRQAKkACAAAAAQBVU0QAVVNEACwB-gBNUQAAyVAAAgQCAQUAAIIA_CMnOQAAAAA./cnd=%218QTZKgjwvQ8QsqpRGKqACSAE/referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGKnz76PZgJ6ARCIPMTk1LjE1OS4xNDAuMjIxKAE." target="_blank"><img width="300" height="250" style="border-style: none" src="http://cdn.adnxs.com/p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png"/></a>

#8 JavaScript::Write (size: 581, repeated: 1)

<a href="http://ib.adnxs.com/click?4gURqWkXkz_iBRGpaReTPwAAAEAzM8M_4gURqWkXkz_iBRGpaReTPzBw36sIvy9toArzhH1cTlERCZ9QAAAAAHZYCwAdAgAAHQIAAAIAAAA2VRQAKkACAAAAAQBVU0QAVVNEANgCWgBNUQAA8zoAAgQCAQUAAIIAMB07PAAAAAA./cnd=%219QT9KgjwvQ8QtqpRGKqACSAE/referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGLDg_d6K4e-XbSIPMTk1LjE1OS4xNDAuMjIxKAE." target="_blank"><img width="728" height="90" style="border-style: none" src="http://cdn.adnxs.com/p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png"/></a>

#9 JavaScript::Write (size: 586, repeated: 1)

<a href="http://ib.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA_AAAAAAAAAAAAAAAAAAAAACbEadxt4LQSoArzhH1cTlERCZ9QAAAAAJCMDAAdAgAAHQIAAAIAAAAfGzQAKkACAAAAAQBVU0QAVVNEACwB-gCk4QAAEk8AAgQCAQUAAIIAzBHsTAAAAAA./cnd=%21XgUGMQig6yUQn7bQARiqgAkgBA../referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGKaIp-PdjbjaEiIPMTk1LjE1OS4xNDAuMjIxKAE." target="_blank"><img width="300" height="250" style="border-style: none" src="http://cdn.adnxs.com/p/1d/91/36/2d/1d91362d9869e0dc6d15ff75267ecfe5.png"/></a>

#10 JavaScript::Write (size: 58, repeated: 1)

<div id="recaptcha_widget_div" style="display:none"></div>

#11 JavaScript::Write (size: 27, repeated: 1)

<div id="theToolTip"></div>

#12 JavaScript::Write (size: 198, repeated: 3)

<iframe src="http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1" width="1" height="1" frameborder="0" scrolling="No" marginheight="0" marginwidth="0" topmargin="0" leftmargin="0"></iframe>

#13 JavaScript::Write (size: 108, repeated: 1)

<iframe src='http://ad.turn.com/server/pixel.htm?fpid=6&sp=y' width='1' height='1' frameborder='0'></iframe>

#14 JavaScript::Write (size: 101, repeated: 1)

<iframe src='http://cti.w55c.net/ct/rubicon-cms2.html' width='1' height='1' frameborder='0'></iframe>

#15 JavaScript::Write (size: 112, repeated: 1)

<iframe src='http://d.xp1.ru4.com/activity?_o=62795&_t=cm_rub_ex' width='1' height='1' frameborder='0'></iframe>

#16 JavaScript::Write (size: 134, repeated: 1)

<iframe src='http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/?rt=iframe' width='1' height='1' frameborder='0'></iframe>

#17 JavaScript::Write (size: 1209, repeated: 1)

<object type="application/x-shockwave-flash" data="http://content.yieldmanager.edgesuite.net/atoms/2e/f5/2c/0b/2ef52c0b0f67f2d61fbde96e1dfd95cd.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJytj91ugzAMhZ%2DGO4ryB6FCuwhFsK6FrSzVBHesCQUWGtRlYtrTj1HUJ9iRZX32sWwZ4oBACiq%2ExicPulC4JIC4kgK%2EU0KwDYIgwP6aYorAGtmoe1MblOuMsch59tms7WWTjTdk57%2Dkb%2Ewy%2D2GY5OJ18fku37F%2EUfRI8uPC2%2EnuOfJZj1NKuQ7vY0kBy%2DgI0p%2Dy2fOntuAHk%2EJYpS1syiRTey76goddxsMm64rx%2EgdjD7bdGDNYmFkonmIcR6eXoq3q9iqdk%2D6nnpH9oCojPydW7eXD6AmErKsvZVbQg98egKuldoZmWhZfLRwR4HruL1zzbM8%3D%2C" height="600" width="160" loop="false" wmode="opaque"><param name="wmode" value="opaque"><param name="movie" value="http://content.yieldmanager.edgesuite.net/atoms/2e/f5/2c/0b/2ef52c0b0f67f2d61fbde96e1dfd95cd.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJytj91ugzAMhZ%2DGO4ryB6FCuwhFsK6FrSzVBHesCQUWGtRlYtrTj1HUJ9iRZX32sWwZ4oBACiq%2ExicPulC4JIC4kgK%2EU0KwDYIgwP6aYorAGtmoe1MblOuMsch59tms7WWTjTdk57%2Dkb%2Ewy%2D2GY5OJ18fku37F%2EUfRI8uPC2%2EnuOfJZj1NKuQ7vY0kBy%2DgI0p%2Dy2fOntuAHk%2EJYpS1syiRTey76goddxsMm64rx%2EgdjD7bdGDNYmFkonmIcR6eXoq3q9iqdk%2D6nnpH9oCojPydW7eXD6AmErKsvZVbQg98egKuldoZmWhZfLRwR4HruL1zzbM8%3D%2C" /></object>

#18 JavaScript::Write (size: 52, repeated: 1)

<script language="JavaScript" type="text/javascript"

#19 JavaScript::Write (size: 53, repeated: 4)

<script language="JavaScript" type="text/javascript">

#20 JavaScript::Write (size: 87, repeated: 3)

<script type="text/javascript" src="http://ads.rubiconproject.com/ad/3196.js"></script>

#21 JavaScript::Write (size: 234, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/27309-15.js?cb=0.410720456424442&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4"></script>

#22 JavaScript::Write (size: 234, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-15.js?cb=0.3846235072838109&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4"></script>

#23 JavaScript::Write (size: 233, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-2.js?cb=0.6972111557254616&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4"></script>

#24 JavaScript::Write (size: 233, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-9.js?cb=0.8582669129812887&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4"></script>

#25 JavaScript::Write (size: 98, repeated: 1)

<script type="text/javascript" src="http://www.google.com/recaptcha/api/js/recaptcha.js"></script>

#26 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3320011" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#27 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3320015" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#28 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3376926" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=na&co=us" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#29 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3421021" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#30 JavaScript::Write (size: 498, repeated: 3)

<script> var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6035951", c3: "122134" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })(); </script> <noscript> <img src="http://b.scorecardresearch.com/p?c1=8&c2=&c3=&c4=&c5=&c6=&c15=&cv=2.0&cj=1" /> </noscript>

#31 JavaScript::Write (size: 104, repeated: 1)

<script>Recaptcha.widget = Recaptcha.$("recaptcha_widget_div"); Recaptcha.challenge_callback();</script>

#32 JavaScript::Write (size: 69, repeated: 1)

src="http://ads.rubiconproject.com/ad/3196.js?cb=0.8080344725164986">

#33 JavaScript::Write (size: 26, repeated: 3)

var rp_account   = "3196";

#34 JavaScript::Write (size: 24, repeated: 1)

var rp_account = "3196";

#35 JavaScript::Write (size: 24, repeated: 3)

var rp_adtype    = "js";

#36 JavaScript::Write (size: 21, repeated: 1)

var rp_adtype = "js";

#37 JavaScript::Write (size: 26, repeated: 3)

var rp_site      = "3346";

#38 JavaScript::Write (size: 21, repeated: 1)

var rp_site = "3346";

#39 JavaScript::Write (size: 81, repeated: 4)

var rp_smartfile = "http://www.mediafire.com/templates/ads/revv_smart_file.html";

#40 JavaScript::Write (size: 30, repeated: 1)

var rp_zonesize  = "27309-15";

#41 JavaScript::Write (size: 29, repeated: 1)

var rp_zonesize  = "9685-15";

#42 JavaScript::Write (size: 28, repeated: 1)

var rp_zonesize  = "9685-9";

#43 JavaScript::Write (size: 27, repeated: 1)

var rp_zonesize = "9685-2";


HTTP Transactions (165)


Request Response
GET /css/mfv3_85677.php?ver=nonssl HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: text/css
Pragma: public
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 37605
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:21 GMT
Connection: keep-alive
GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1

Host: cdn.mediafire.com
GET /css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: text/css
Pragma: public
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 52116
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:21 GMT
Connection: keep-alive
GET /?5nwz1uz1r4ddec4 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:10:21 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Expires: 0
Set-Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy; expires=Sun, 12-Oct-2014 02:10:21 GMT; path=/; domain=.mediafire.com; httponly
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17021
Connection: close
Server: MediaFire
GET /css?family=Open+Sans:800,400,700 HTTP/1.1

Host: fonts.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: text/css
Expires: Sun, 11 Nov 2012 02:10:22 GMT
Date: Sun, 11 Nov 2012 02:10:22 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Content-Length: 318
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
GET /blank.html HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Last-Modified: Tue, 18 Sep 2012 21:44:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 78
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:22 GMT
Connection: keep-alive
GET /images/icons/ajax-loader-grey_round.gif HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: image/gif
Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT
Accept-Ranges: bytes
Content-Length: 1775
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:22 GMT
Connection: keep-alive
GET /images/buttons/btn_facebook_connect.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT
Accept-Ranges: bytes
Content-Length: 2315
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:22 GMT
Connection: keep-alive
GET /images/buttons/btn_facebook_allowemail.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT
Accept-Ranges: bytes
Content-Length: 941
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:22 GMT
Connection: keep-alive
GET /images/buttons/btn_twitter_connect.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT
Accept-Ranges: bytes
Content-Length: 1799
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:22 GMT
Connection: keep-alive
GET /images/icons/dropdown-arrow-left-white.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT
Accept-Ranges: bytes
Content-Length: 123
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:22 GMT
Connection: keep-alive
GET /images/logos/logo_v2.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Mon, 16 Jul 2012 19:28:31 GMT
Accept-Ranges: bytes
Content-Length: 3708
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:22 GMT
Connection: keep-alive
GET /images/icons/icon-sprite-16-v3.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 02 Oct 2012 17:01:27 GMT
Accept-Ranges: bytes
Content-Length: 61715
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:22 GMT
Connection: keep-alive
GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1

Host: platform.twitter.com
GET /widgets/follow_button.html?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Cache-Control: public, max-age=1800
Last-Modified: Thu, 08 Nov 2012 09:18:41 GMT
Etag: &quot;567a94a4e136d5c4b7bfde258474cfa6&quot;
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 25717
Date: Sun, 11 Nov 2012 02:10:22 GMT
Connection: keep-alive
P3P: CP=&quot;CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT&quot;
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT
HTTP/1.1 200 OK

Content-Type: text/javascript
Content-Length: 14888
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Sat, 10 Nov 2012 20:33:27 GMT
Expires: Sun, 11 Nov 2012 08:33:27 GMT
Vary: Accept-Encoding
Age: 20215
Cache-Control: max-age=43200, public
Server: GFE/2.0
GET /images/favicon/download.ico HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: image/vnd.microsoft.icon
Date: Sun, 11 Nov 2012 02:10:22 GMT
Last-Modified: Thu, 25 Oct 2012 21:59:32 GMT
Accept-Ranges: bytes
Content-Length: 1150
Connection: close
Server: MediaFire
GET /images/icons/information_darkblue.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT
Accept-Ranges: bytes
Content-Length: 722
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:22 GMT
Connection: keep-alive
GET /ajax/libs/jquery/1.7.2/jquery.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT
Date: Fri, 09 Nov 2012 20:33:45 GMT
Expires: Sat, 09 Nov 2013 20:33:45 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 73891
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 106597
GET /images/backgrounds/download/rockmelt/rockmelt_dl_btn.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:44 GMT
Accept-Ranges: bytes
Content-Length: 7653
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:22 GMT
Connection: keep-alive
GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1

Host: cdn.api.twitter.com
GET /1/users/show.json?screen_name=MediaFire&amp;callback=twttr.setFollowersCount HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false
HTTP/1.1 200 OK

Content-Type: application/javascript;charset=utf-8
Last-Modified: Sun, 11 Nov 2012 01:58:10 GMT
Pragma: no-cache
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Status: 200 OK
Content-Encoding: gzip
Content-Length: 897
Server: tfe
Vary: Accept-Encoding
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Expires: Sun, 11 Nov 2012 02:10:22 GMT
Date: Sun, 11 Nov 2012 02:10:22 GMT
Connection: keep-alive
GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1

Host: p.twitter.com
GET /f.gif?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false&amp;twttr_variant=2.0&amp;twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4&amp;twttr_widget=0&amp;twttr_hask=0&amp;twttr_li=0&amp;twttr_pid= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false
HTTP/1.1 200 OK

Content-Type: image/gif
Etag: &quot;377d257f2d2e294916143c069141c1c5:1328738114&quot;
Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT
Accept-Ranges: bytes
Content-Length: 43
Cache-Control: no-cache
P3P: CP=&quot;CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT&quot;
Date: Sun, 11 Nov 2012 02:10:22 GMT
Connection: keep-alive
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1

Host: www.facebook.com
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&amp;send=false&amp;layout=button_count&amp;width=180&amp;show_faces=false&amp;action=like&amp;colorscheme=light&amp;font&amp;height=80 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Cache-Control: private, no-cache, no-store, must-revalidate
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
X-FB-Debug: g79GezftkYRXnORLrG5BMuQ9ZuehDMyri8xMGFJeXOo=
Date: Sun, 11 Nov 2012 02:10:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
GET /recaptcha/api/challenge?k=6LextQUAAAAAALlQv0DSHOYxqF3DftRZxA5yebEe HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: text/javascript
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Date: Sun, 11 Nov 2012 02:10:22 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 465
Server: GSE
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=49708701&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=PotPlayerPortable_1.5.34321_Beta_azo.exe&utmhid=1675120959&utmr=-&utmp=%2F%3F5nwz1uz1r4ddec4&utmac=UA-829541-1&utmcc=__utma%3D213136648.1679732583.1352599822.1352599822.1352599822.1%3B%2B__utmz%3D213136648.1352599822.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.7&amp;utms=1&amp;utmn=49708701&amp;utmhn=www.mediafire.com&amp;utme=8(UserType)9(free)&amp;utmcs=UTF-8&amp;utmsr=1176x885&amp;utmvp=1159x778&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=PotPlayerPortable_1.5.34321_Beta_azo.exe&amp;utmhid=1675120959&amp;utmr=-&amp;utmp=%2F%3F5nwz1uz1r4ddec4&amp;utmac=UA-829541-1&amp;utmcc=__utma%3D213136648.1679732583.1352599822.1352599822.1352599822.1%3B%2B__utmz%3D213136648.1352599822.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmu=qQ~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Fri, 09 Nov 2012 20:33:28 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 106614
Server: GFE/2.0
GET /js/bust_out.js HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 02:10:22 GMT
Last-Modified: Thu, 31 May 2012 19:49:34 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Tue, 11 Dec 2012 02:10:22 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 57
Connection: close
Server: MediaFire
GET /js/master_85677.js HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: text/javascript
Last-Modified: Fri, 09 Nov 2012 23:25:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Server: MediaFire
Content-Length: 143613
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:22 GMT
Connection: keep-alive
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1

Host: static.ak.fbcdn.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&amp;send=false&amp;layout=button_count&amp;width=180&amp;show_faces=false&amp;action=like&amp;colorscheme=light&amp;font&amp;height=80
Origin: http://www.facebook.com
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8
Access-Control-Allow-Origin: *
Last-Modified: Mon, 29 Oct 2012 23:55:41 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
X-FB-Debug: mERPLeHfP4bFbWVj/NJRwm2C8x1Lf8geAnYAfFf24WM=
Content-Length: 37945
Vary: Accept-Encoding
Cache-Control: public, max-age=31147354
Expires: Wed, 06 Nov 2013 14:12:56 GMT
Date: Sun, 11 Nov 2012 02:10:22 GMT
Connection: keep-alive
GET /js/encoder.js HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 02:10:22 GMT
Last-Modified: Thu, 05 Jan 2012 22:41:54 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Tue, 11 Dec 2012 02:10:22 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3695
Connection: close
Server: MediaFire
POST / HTTP/1.1

Host: ocsp.godaddy.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 106
Content-Type: application/ocsp-request
HTTP/1.1 200 OK

Content-Type: application/ocsp-response
Date: Sun, 11 Nov 2012 02:10:22 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=19133, public, no-transform, must-revalidate
Last-Modified: Sun, 11 Nov 2012 01:46:02 GMT
Expires: Sun, 11 Nov 2012 07:46:02 GMT
Etag: &quot;8c6a4b9dee7b1bc21ddf455dd96406348b7e33d2&quot;
P3P: CP=&quot;IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA&quot;
Content-Length: 1923
Connection: close
GET /images/ad-loader.gif HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy; __utma=213136648.1679732583.1352599822.1352599822.1352599822.1; __utmb=213136648.1.10.1352599822; __utmc=213136648; __utmz=213136648.1352599822.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/gif
Last-Modified: Tue, 05 Jun 2012 20:09:03 GMT
Accept-Ranges: bytes
Content-Length: 1786
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:23 GMT
Connection: keep-alive
GET /recaptcha/api/js/recaptcha.js HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Expires: Sun, 11 Nov 2012 02:10:23 GMT
Date: Sun, 11 Nov 2012 02:10:23 GMT
Last-Modified: Tue, 12 Jun 2012 14:07:31 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 17531
Server: GSE
Cache-Control: public, max-age=0
Age: 0
GET /recaptcha/api/img/red/refresh.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sun, 11 Nov 2012 02:50:28 GMT
Date: Sun, 11 Nov 2012 01:50:28 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 974
Server: GSE
Age: 1195
Cache-Control: public, max-age=3600
GET /images/backgrounds/footer/footer_texture.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy; __utma=213136648.1679732583.1352599822.1352599822.1352599822.1; __utmb=213136648.1.10.1352599822; __utmc=213136648; __utmz=213136648.1352599822.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 20:31:25 GMT
Accept-Ranges: bytes
Content-Length: 2649
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:23 GMT
Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_blog.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy; __utma=213136648.1679732583.1352599822.1352599822.1352599822.1; __utmb=213136648.1.10.1352599822; __utmc=213136648; __utmz=213136648.1352599822.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT
Accept-Ranges: bytes
Content-Length: 171
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:23 GMT
Connection: keep-alive
GET /recaptcha/api/image?c=03AHJ_VutidEJEAhvFlKhRGg9wXD36joxr9JN7mqYmoaCgiRM0LcfvAk_rVaNzGneBK-Zh8OYVN-b5f4bBnK_p7sGZdLtSUGVWeXlo5sHQIM3ZZAMxW8v7zpzJaa5DyfJxNQLorkp40VhBdmxbnVJF_stHMkPCtiKPW4JpsxxapZqUF8lH0yYqMjMs1kpHG5WG6hZsDEjRzK74 HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/jpeg
Expires: Sun, 11 Nov 2012 02:20:23 GMT
Date: Sun, 11 Nov 2012 02:10:23 GMT
Cache-Control: public, max-age=600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 3125
Server: GSE
GET /recaptcha/api/img/red/audio.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sun, 11 Nov 2012 03:04:18 GMT
Date: Sun, 11 Nov 2012 02:04:18 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 914
Server: GSE
Age: 365
Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/text.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sun, 11 Nov 2012 02:52:25 GMT
Date: Sun, 11 Nov 2012 01:52:25 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 155
Server: GSE
Age: 1078
Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/help.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sun, 11 Nov 2012 02:58:33 GMT
Date: Sun, 11 Nov 2012 01:58:33 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 367
Server: GSE
Age: 710
Cache-Control: public, max-age=3600
GET /images/backgrounds/footer/icn_footer_gp.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy; __utma=213136648.1679732583.1352599822.1352599822.1352599822.1; __utmb=213136648.1.10.1352599822; __utmc=213136648; __utmz=213136648.1352599822.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Wed, 29 Aug 2012 21:02:04 GMT
Accept-Ranges: bytes
Content-Length: 312
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:23 GMT
Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateFB_v2.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy; __utma=213136648.1679732583.1352599822.1352599822.1352599822.1; __utmb=213136648.1.10.1352599822; __utmc=213136648; __utmz=213136648.1352599822.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT
Accept-Ranges: bytes
Content-Length: 255
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:23 GMT
Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_tw.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy; __utma=213136648.1679732583.1352599822.1352599822.1352599822.1; __utmb=213136648.1.10.1352599822; __utmc=213136648; __utmz=213136648.1352599822.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT
Accept-Ranges: bytes
Content-Length: 274
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:23 GMT
Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateTW_v2.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy; __utma=213136648.1679732583.1352599822.1352599822.1352599822.1; __utmb=213136648.1.10.1352599822; __utmc=213136648; __utmz=213136648.1352599822.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT
Accept-Ranges: bytes
Content-Length: 387
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:23 GMT
Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_fb.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy; __utma=213136648.1679732583.1352599822.1352599822.1352599822.1; __utmb=213136648.1.10.1352599822; __utmc=213136648; __utmz=213136648.1352599822.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT
Accept-Ranges: bytes
Content-Length: 514
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:10:23 GMT
Connection: keep-alive
GET /templates/linkto/default-729x91-default.php?r=51616 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy; __utma=213136648.1679732583.1352599822.1352599822.1352599822.1; __utmb=213136648.1.10.1352599822; __utmc=213136648; __utmz=213136648.1352599822.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:10:23 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 666
Connection: close
Server: MediaFire
GET /templates/linkto/default-337x281-default.php?r=13331 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy; __utma=213136648.1679732583.1352599822.1352599822.1352599822.1; __utmb=213136648.1.10.1352599822; __utmc=213136648; __utmz=213136648.1352599822.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:10:23 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 786
Connection: close
Server: MediaFire
GET /templates/linkto/default-337x281-default2.php?r=58461 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy; __utma=213136648.1679732583.1352599822.1352599822.1352599822.1; __utmb=213136648.1.10.1352599822; __utmc=213136648; __utmz=213136648.1352599822.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:10:23 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 787
Connection: close
Server: MediaFire
GET /en_US/all.js?_=1352599823406 HTTP/1.1

Host: connect.facebook.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8
Etag: &quot;06c9a8ca347f3538149da85e21e875b7&quot;
Content-Encoding: gzip
X-FB-Debug: 4ms1vP9UDg83EXaIJDlwGISqs42bzaN8LPGxcQjchE0=
Content-Length: 58142
Cache-Control: public, max-age=385
Expires: Sun, 11 Nov 2012 02:16:48 GMT
Date: Sun, 11 Nov 2012 02:10:23 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET /templates/linkto/default-161x601-default.php?r=40565 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy; __utma=213136648.1679732583.1352599822.1352599822.1352599822.1; __utmb=213136648.1.10.1352599822; __utmc=213136648; __utmz=213136648.1352599822.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:10:23 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 733
Connection: close
Server: MediaFire
GET /recaptcha/api/img/red/sprite.png HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/png
Expires: Sun, 11 Nov 2012 02:18:09 GMT
Date: Sun, 11 Nov 2012 01:18:09 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 4679
Server: GSE
Age: 3135
Cache-Control: public, max-age=3600
GET /ad/3196.js?cb=0.8080344725164986 HTTP/1.1

Host: ads.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=51616
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.3
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3524
Cneonction: close
Cache-Control: max-age=86400
Expires: Mon, 12 Nov 2012 02:10:25 GMT
Date: Sun, 11 Nov 2012 02:10:25 GMT
Connection: keep-alive
GET /connect/xd_arbiter.php?version=17 HTTP/1.1

Host: static.ak.facebook.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
X-FB-Debug: QpUXNDPC4a/ZS9XMuzc2WDBWEZ8S2oHPsfImau8uouU=
Content-Length: 9847
Vary: Accept-Encoding
Cache-Control: public, max-age=31454754
Expires: Sun, 10 Nov 2013 03:36:19 GMT
Date: Sun, 11 Nov 2012 02:10:25 GMT
Connection: keep-alive
GET /ad/3196.js HTTP/1.1

Host: ads.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=13331
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.3
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3524
Cneonction: close
Cache-Control: max-age=86400
Expires: Mon, 12 Nov 2012 02:10:25 GMT
Date: Sun, 11 Nov 2012 02:10:25 GMT
Connection: keep-alive
GET /helper_01.swf HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
Cookie: ukey=98nslqdbk12ftsqp2155tidpp9wv7quy; __utma=213136648.1679732583.1352599822.1352599822.1352599822.1; __utmb=213136648.1.10.1352599822; __utmc=213136648; __utmz=213136648.1352599822.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Date: Sun, 11 Nov 2012 02:10:25 GMT
Last-Modified: Sat, 15 Oct 2011 19:43:58 GMT
Accept-Ranges: bytes
Content-Length: 1480
Cache-Control: max-age=2592000
Expires: Tue, 11 Dec 2012 02:10:25 GMT
Connection: close
Server: MediaFire
GET /a/3196/3346/9685-15.js?cb=0.3846235072838109&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/9685-15.js?cb=0.3846235072838109&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=13331
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 02:10:25 GMT
Server: RAS/1.3 (Unix)
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;, CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: ruid=592dbfcb509f0911c39f8cdd4444a1^1^1352599825^3282013405; expires=Sat, 09-Feb-2013 02:10:25 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 03:10:25 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 03:10:25 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=107374; path=/; domain=.rubiconproject.com csi15=3204663.js^1^1352599825^1352599825; expires=Sun, 18-Nov-2012 02:10:25 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=62
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /a/3196/3346/9685-2.js?cb=0.6972111557254616&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/9685-2.js?cb=0.6972111557254616&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=51616
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 02:10:25 GMT
Server: RAS/1.3 (Unix)
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;, CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: ruid=592db409509f0911c39f8cdd3f65b6^1^1352599825^3282013405; expires=Sat, 09-Feb-2013 02:10:25 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 03:10:25 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk2=0; expires=Sun, 11-Nov-2012 03:10:25 GMT; max-age=10; path=/; domain=.rubiconproject.com ses2=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=107374; path=/; domain=.rubiconproject.com csi2=3204661.js^1^1352599825^1352599825; expires=Sun, 18-Nov-2012 02:10:25 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=81
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1

Host: secure.gravatar.com
GET /avatar/00000000?s=27&amp;d=mm&amp;f=y HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx
Date: Sun, 11 Nov 2012 02:10:25 GMT
Content-Length: 906
Connection: keep-alive
Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT
Access-Control-Allow-Origin: *
Content-Disposition: inline; filename=&quot;00000000.png&quot;
X-Varnish: 2458218835 2455936932
Via: 1.1 varnish
Expires: Sun, 11 Nov 2012 02:15:25 GMT
Cache-Control: max-age=300
GET /a/3196/3346/27309-15.js?cb=0.410720456424442&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/27309-15.js?cb=0.410720456424442&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=58461
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 02:10:25 GMT
Server: RAS/1.3 (Unix)
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;, CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; expires=Sat, 09-Feb-2013 02:10:25 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 03:10:25 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 03:10:25 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 07:59:59 GMT; max-age=107374; path=/; domain=.rubiconproject.com csi15=3320234.js^1^1352599825^1352599825; expires=Sun, 18-Nov-2012 02:10:25 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

Host: ads.cpxinteractive.com
GET /ttj?id=743542&amp;size=728x90&amp;referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=51616
HTTP/1.1 302 Found

Content-Type: text/html; charset=ISO-8859-1
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Location: http://ib.adnxs.com/ttj?id=743542&amp;size=728x90&amp;referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4
Date: Sun, 11 Nov 2012 02:10:25 GMT
Content-Length: 0
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

Host: ads.cpxinteractive.com
GET /ttj?id=743542&amp;size=300x250&amp;referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=13331
HTTP/1.1 302 Found

Content-Type: text/html; charset=ISO-8859-1
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Location: http://ib.adnxs.com/ttj?id=743542&amp;size=300x250&amp;referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4
Date: Sun, 11 Nov 2012 02:10:25 GMT
Content-Length: 0
GET /connect/xd_arbiter.php?version=17 HTTP/1.1

Host: s-static.ak.facebook.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
X-FB-Debug: JS4qOSg1Dl3AgVtg3MyBP4whcr8SZapA/Vud9cBlDwY=
Content-Length: 9847
Vary: Accept-Encoding
Cache-Control: public, max-age=31454778
Expires: Sun, 10 Nov 2013 03:36:43 GMT
Date: Sun, 11 Nov 2012 02:10:25 GMT
Connection: keep-alive
GET /static/fonts/opensans/v6/k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM.woff HTTP/1.1

Host: themes.googleusercontent.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Open+Sans:800,400,700
Origin: http://www.mediafire.com
HTTP/1.1 200 OK

Content-Type: font/woff
Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT
Date: Fri, 09 Nov 2012 20:33:30 GMT
Expires: Sat, 09 Nov 2013 20:33:30 GMT
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 22748
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 106615
GET /ttj?id=822416&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

Host: ads.cpxinteractive.com
GET /ttj?id=822416&amp;size=300x250&amp;referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=58461
HTTP/1.1 302 Found

Content-Type: text/html; charset=ISO-8859-1
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Location: http://ib.adnxs.com/ttj?id=822416&amp;size=300x250&amp;referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4
Date: Sun, 11 Nov 2012 02:10:25 GMT
Content-Length: 0
GET /a/3196/3346/9685-9.js?cb=0.8582669129812887&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/9685-9.js?cb=0.8582669129812887&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=40565
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f0911c39f8cdd3f65b6^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 02:10:25 GMT
Server: RAS/1.3 (Unix)
Set-Cookie: rdk=3196/3346; expires=Sun, 11-Nov-2012 03:10:25 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk9=0; expires=Sun, 11-Nov-2012 03:10:25 GMT; max-age=10; path=/; domain=.rubiconproject.com ses9=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=107374; path=/; domain=.rubiconproject.com csi9=3348063.js^1^1352599825^1352599825; expires=Sun, 18-Nov-2012 02:10:25 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

Host: ib.adnxs.com
GET /ttj?id=743542&amp;size=728x90&amp;referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=51616
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(G*axlrk5.$WN_]Dl5M7G(nDS'6pnU
HTTP/1.1 200 OK

Content-Type: text/javascript
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:10:25 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:10:25 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwkZL8hAUQkZL8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 02:10:25 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-Emw3QN_/h9oD#(h!#FdgHS0R!o)0VpiH[HCb; path=/; expires=Sat, 09-Feb-2013 02:10:25 GMT; domain=.adnxs.com; HttpOnly
Date: Sun, 11 Nov 2012 02:10:25 GMT
Content-Length: 1349
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

Host: ib.adnxs.com
GET /ttj?id=743542&amp;size=300x250&amp;referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=13331
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(G*axlrk5.$WN_]Dl5M7G(nDS'6pnU
HTTP/1.1 200 OK

Content-Type: text/javascript
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:10:25 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:10:25 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwkZL8hAUQkZL8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 02:10:25 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-Emw3QN_/h9oD#(h!#FdgHS0R!o)0VpiH[HCb; path=/; expires=Sat, 09-Feb-2013 02:10:25 GMT; domain=.adnxs.com; HttpOnly
Date: Sun, 11 Nov 2012 02:10:25 GMT
Content-Length: 1350
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/xml
Server: Apache
Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT
Etag: &quot;87de33-256-4cd617ed12480&quot;
Accept-Ranges: bytes
Content-Length: 598
Date: Sun, 11 Nov 2012 02:10:25 GMT
Connection: keep-alive
GET /ttj?id=822416&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

Host: ib.adnxs.com
GET /ttj?id=822416&amp;size=300x250&amp;referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=58461
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(G*axlrk5.$WN_]Dl5M7G(nDS'6pnU
HTTP/1.1 200 OK

Content-Type: text/javascript
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:10:25 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:10:25 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwkZL8hAUQkZL8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 02:10:25 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-Emw3QN_/h9oD#(h!#FdgHS0R!o)0VpiH[HCb; path=/; expires=Sat, 09-Feb-2013 02:10:25 GMT; domain=.adnxs.com; HttpOnly
Date: Sun, 11 Nov 2012 02:10:25 GMT
Content-Length: 1354
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1

Host: tap2-cdn.rubiconproject.com
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=51616
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Server: TRP Apache-Coyote/1.1
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Last-Modified: Sun, 11 Nov 2012 00:16:00 GMT
Content-Encoding: gzip
Cache-Control: max-age=600
Expires: Sun, 11 Nov 2012 02:20:26 GMT
Date: Sun, 11 Nov 2012 02:10:26 GMT
Content-Length: 5080
Connection: keep-alive
Vary: Accept-Encoding
GET /partner/scripts/rubicon/alice.js HTTP/1.1

Host: tap-cdn.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=51616
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825
HTTP/1.1 200 OK

Content-Type: text/javascript;charset=UTF-8
Server: TRP Apache-Coyote/1.1
Last-Modified: Sat, 10 Nov 2012 13:56:01 GMT
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Content-Encoding: gzip
Cache-Control: max-age=3600
Expires: Sun, 11 Nov 2012 03:10:26 GMT
Date: Sun, 11 Nov 2012 02:10:26 GMT
Content-Length: 5798
Connection: keep-alive
Vary: Accept-Encoding
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1

Host: view.atdmt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=51616
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA
HTTP/1.1 200 OK

Content-Type: text/html
Cache-Control: no-store
Content-Encoding: gzip
Expires: 0
Vary: Accept-Encoding
Date: Sun, 11 Nov 2012 02:10:25 GMT
Connection: close
Content-Length: 381
GET /p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png HTTP/1.1

Host: cdn.adnxs.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=51616
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-Emw3QN_/h9oD#(h!#FdgHS0R!o)0VpiH[HCb; sess=1; icu=ChIIlroHEAoYASABKAEwkZL8hAUQkZL8hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/png
Server: Apache
Etag: &quot;a9daeac0f83c5ce58b932bd0f829631f:1351039989&quot;
Last-Modified: Wed, 24 Oct 2012 00:53:09 GMT
Accept-Ranges: bytes
Content-Length: 5051
Date: Sun, 11 Nov 2012 02:10:26 GMT
Connection: keep-alive
GET /p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png HTTP/1.1

Host: cdn.adnxs.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=13331
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-Emw3QN_/h9oD#(h!#FdgHS0R!o)0VpiH[HCb; sess=1; icu=ChIIlroHEAoYASABKAEwkZL8hAUQkZL8hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/png
Server: Apache
Etag: &quot;05c7006db8c87009c7ef4cebeac987fa:1350137588&quot;
Last-Modified: Sat, 13 Oct 2012 14:13:08 GMT
Accept-Ranges: bytes
Content-Length: 5202
Date: Sun, 11 Nov 2012 02:10:26 GMT
Connection: keep-alive
GET /p/1d/91/36/2d/1d91362d9869e0dc6d15ff75267ecfe5.png HTTP/1.1

Host: cdn.adnxs.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=58461
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-Emw3QN_/h9oD#(h!#FdgHS0R!o)0VpiH[HCb; sess=1; icu=ChIIlroHEAoYASABKAEwkZL8hAUQkZL8hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/png
Server: Apache
Etag: &quot;1d91362d9869e0dc6d15ff75267ecfe5:1349956928&quot;
Last-Modified: Thu, 11 Oct 2012 12:02:08 GMT
Accept-Ranges: bytes
Content-Length: 7952
Date: Sun, 11 Nov 2012 02:10:26 GMT
Connection: keep-alive
GET /beacon.js HTTP/1.1

Host: b.scorecardresearch.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=51616
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Sun, 25 Nov 2012 02:10:26 GMT
Date: Sun, 11 Nov 2012 02:10:26 GMT
Content-Length: 1140
Connection: keep-alive
Cache-Control: private, no-transform, max-age=1209600
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=na&co=us HTTP/1.1

Host: tap2-cdn.rubiconproject.com
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=na&amp;co=us HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=58461
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Server: TRP Apache-Coyote/1.1
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Last-Modified: Sat, 10 Nov 2012 23:41:21 GMT
Content-Encoding: gzip
Cache-Control: max-age=600
Expires: Sun, 11 Nov 2012 02:20:26 GMT
Date: Sun, 11 Nov 2012 02:10:26 GMT
Content-Length: 5080
Connection: keep-alive
Vary: Accept-Encoding
GET /st?ad_type=ad&ad_size=160x600&section=3434596&pub_url=${PUB_URL} HTTP/1.1

Host: ad.yieldmanager.com
GET /st?ad_type=ad&amp;ad_size=160x600&amp;section=3434596&amp;pub_url=${PUB_URL} HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=40565
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Date: Sun, 11 Nov 2012 02:10:26 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor1176.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Sun, 11 Nov 2012 02:10:26 GMT
Expires: Sun, 11 Nov 2012 02:10:26 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /1/gr?url=http%3a//pixel.rubiconproject.com/tap.php%3fv%3d11782%7c1%7c14%26nid%3d2181%26put%3d__EFGCK__%26expires%3d14 HTTP/1.1

Host: pixel.everesttech.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1
Date: Sun, 11 Nov 2012 02:10:26 GMT
Server: Apache
Set-Cookie: everest_session_v2=UJ8JEgAAV5uyss8X; path=/; domain=.everesttech.net everest_g_v2=g_surferid~UJ8JEgAAV5uyss8X; path=/; domain=.everesttech.net; expires=Mon, 06-Oct-2014 12:50:26 GMT
P3P: CP=&quot;NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM&quot;
Cache-Control: no-cache
Location: http://cm.g.doubleclick.net/pixel?google_nid=everest&amp;google_cm&amp;google_sc&amp;ev_rs=1&amp;url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14
Content-Length: 427
Keep-Alive: timeout=15, max=990500
Connection: Keep-Alive
GET /images/pixel.gif HTTP/1.1

Host: spe.atdmt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA
HTTP/1.1 200 OK

Content-Type: image/gif
Content-Length: 42
Allow: GET
Expires: Mon, 12 Nov 2012 19:09:54 GMT
Date: Sun, 11 Nov 2012 02:10:26 GMT
Connection: keep-alive
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352599826456&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D51616&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6035951&amp;c3=122134&amp;ns__t=1352599826456&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D51616&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=51616
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: http://b.scorecardresearch.com/b2?c1=8&amp;c2=6035951&amp;c3=122134&amp;ns__t=1352599826456&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D51616&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4
Date: Sun, 11 Nov 2012 02:10:26 GMT
Connection: keep-alive
Set-Cookie: UID=4c6ec55-195.159.219.9-1352599826; expires=Sat, 01-Nov-2014 02:10:26 GMT; path=/; domain=.scorecardresearch.com UIDR=1352599826; expires=Sat, 01-Nov-2014 02:10:26 GMT; path=/; domain=.scorecardresearch.com
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352599826457&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D51616&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3320011&amp;ns__t=1352599826457&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D51616&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=51616
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: http://b.scorecardresearch.com/b2?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3320011&amp;ns__t=1352599826457&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D51616&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4
Date: Sun, 11 Nov 2012 02:10:26 GMT
Connection: keep-alive
Set-Cookie: UID=4c6ec56-195.159.219.9-1352599826; expires=Sat, 01-Nov-2014 02:10:26 GMT; path=/; domain=.scorecardresearch.com UIDR=1352599826; expires=Sat, 01-Nov-2014 02:10:26 GMT; path=/; domain=.scorecardresearch.com
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

Host: ib.adnxs.com
GET /pxj?bidder=55&amp;action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-Emw3QN_/h9oD#(h!#FdgHS0R!o)0VpiH[HCb; sess=1; icu=ChIIlroHEAoYASABKAEwkZL8hAUQkZL8hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:10:26 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:10:26 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-Emw3QN_/h9oD#(h!#FdgHS0R!o)0VpiH[HCb; path=/; expires=Sat, 09-Feb-2013 02:10:26 GMT; domain=.adnxs.com; HttpOnly
Content-Length: 43
Date: Sun, 11 Nov 2012 02:10:26 GMT
GET /cm?in=1&pub=64 HTTP/1.1

Host: p.rfihub.com
GET /cm?in=1&amp;pub=64 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=na&amp;co=us
HTTP/1.1 302 Found

HTTP/1.1 302 Found
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: s3=1352599826606;Path=/;Domain=.rfihub.com;Expires=Thu, 30-Apr-15 02:10:26 GMT u=&quot;aABS9b42g==AI3Yyfww==AAABOu07cK4=&quot;;Path=/;Domain=.rfihub.com;Expires=Thu, 30-Apr-15 02:10:26 GMT e=cr;Path=/;Domain=.rfihub.com;Expires=Thu, 30-Apr-15 02:10:26 GMT a=c638666723796440208;Path=/;Domain=.rfihub.com;Expires=Thu, 30-Apr-15 02:10:26 GMT j=c638666723796440208;Path=/;Domain=.rfihub.com r=1352599826606;Path=/;Domain=.rfihub.com;Expires=Thu, 30-Apr-15 02:10:26 GMT o=1-InZyB6KB9FFa;Path=/;Domain=.rfihub.com;Expires=Thu, 30-Apr-15 02:10:26 GMT p=1-InZyB6KB9FFa;Path=/;Domain=.rfihub.com
Location: http://pixel.rubiconproject.com/tap.php?v=13490&amp;nid=2596&amp;put=638666723796440208&amp;expires=30
Content-Length: 0
GET /match?p=2 HTTP/1.1

Host: match.rtbidder.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Moved Temporarily

Content-Type: text/plain
Server: rtbidder
Date: Sun, 11 Nov 2012 02:10:26 GMT
Content-Length: 277
P3P: policyref=&quot;http://match.rtbidder.net/p3p.xml&quot;, CP=&quot;NOI DSP COR CURa ADMa DEVa TAIo PSAo PSDo IVAo IVDo CONo HISa TELo OUR STP&quot;
Pragma: no-cache
Set-Cookie: bsuid=%3EsN%27%2F%25MQ5S%27U%40%29y; path=/; domain=.rtbidder.net; expires=Sat, 09-Feb-2013 02:10:26 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-store, no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Location: http://pixel.rubiconproject.com/tap.php?v=5157&amp;nid=2021&amp;put=509f09120ad142ba0e36db88
GET /match?mrbyus=true&excid=17 HTTP/1.1

Host: rubicon.admailtiser.com
GET /match?mrbyus=true&amp;excid=17 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.1.1
Date: Sun, 11 Nov 2012 02:10:26 GMT
Content-Length: 0
Connection: keep-alive
P3P: policyref=&quot;http://admailtiser.com/w3c/p3p.xml&quot;, CP=&quot;NOI IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA NOR UNI&quot;
Set-Cookie: cicouid=f170531f-b55f-49ff-9b00-9df7696b1f5e3cmg81kXQMZorOoFRsziXw; Domain=.admailtiser.com; Expires=Mon, 11-Nov-2013 02:10:26 GMT; Path=/
Location: http://pixel.rubiconproject.com/tap.php?v=12224&amp;nid=2530&amp;put=2909467098864709221&amp;expires=365
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1

Host: view.atdmt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=13331
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA
HTTP/1.1 200 OK

Content-Type: text/html
Cache-Control: no-store
Content-Encoding: gzip
Expires: 0
Vary: Accept-Encoding
Date: Sun, 11 Nov 2012 02:10:25 GMT
Connection: close
Content-Length: 381
GET /imp?Z=160x600&s=3434596&_salt=2081161936&B=10&r=0 HTTP/1.1

Host: ad.yieldmanager.com
GET /imp?Z=160x600&amp;s=3434596&amp;_salt=2081161936&amp;B=10&amp;r=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=40565
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Sun, 11 Nov 2012 02:10:26 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor0080.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Location: http://cookex.amp.yahoo.com/v2/cexposer/SIG=12gjpfchi/*http%3A//ad.yieldmanager.com/imp?Z=160x600&amp;s=3434596&amp;_salt=2081161936&amp;B=10&amp;r=0
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Sun, 11 Nov 2012 02:10:26 GMT
Expires: Sun, 11 Nov 2012 02:10:26 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /c/cse?a=Q&B=17 HTTP/1.1

Host: connexity.net
GET /c/cse?a=Q&amp;B=17 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Connexity
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Nov 2012 02:10:26 GMT
Cache-Control: no-store, max-age=-1, post-check=0, pre-check=0
Pragma: no-cache
Expires: -1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;CAO PSA OUR CURa DEVa PSDo PSAo BUS COR UNI COM&quot;,an.pp=&quot;http://www.connexity.com/privacy&quot;,an.oo=&quot;http://www.connexity.com/privacy&quot;,an.bt=&quot;N&quot;
Set-Cookie: COu=e97b365699e0d294-064a2960812a3caa-2175fb3dda65367c; expires=Fri, 10-Nov-2017 02:10:26 GMT; domain=.connexity.net; path=/
Content-Transfer-Encoding: binary
GET /do-association?rbc&can=20 HTTP/1.1

Host: matcher-rbc.bidder7.mookie1.com
GET /do-association?rbc&amp;can=20 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=na&amp;co=us
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:10:26 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: id=4613164013989199887; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 02:10:26 GMT mdata=1|4613164013989199887|1352599826; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 02:10:26 GMT
Location: /do-association-set?rbc&amp;can=20
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=924
Connection: Keep-Alive
GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1

Host: m.xp1.ru4.com
GET /activity?_o=62795&amp;_t=cm_rub_pre HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=na&amp;co=us
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Server: Sun-Java-System-Web-Server/7.0
Date: Sun, 11 Nov 2012 02:10:26 GMT
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NON DSP COR PSAa OUR STP UNI&quot;
Pragma: no-cache
Set-Cookie: X1ID=AO-00000005680933073; domain=.ru4.com; path=/; expires=Sat, 10-May-2014 21:10:26 GMT
Location: http://pixel.rubiconproject.com/tap.php?v=5671&amp;nid=2081&amp;put=AO-00000005680933073&amp;expires=30
Content-Length: 0
GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=54 HTTP/1.1

Host: pe.intentiq.com
GET /profiles_engine/ProfilesEngineServlet?at=20&amp;mi=10&amp;dpi=54 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=na&amp;co=us
HTTP/1.1 302 Moved Temporarily

Content-Type: image/gif
Server: nginx/1.2.1
Date: Sun, 11 Nov 2012 02:10:26 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: IQver=1.2; Domain=.intentiq.com; Expires=Wed, 09-Nov-2022 02:10:26 GMT; Path=/ intentIQ=cb8a421b-9b8f-44bf-bdb3-6ad32a025a5a; Domain=.intentiq.com; Expires=Wed, 09-Nov-2022 02:10:26 GMT; Path=/
Location: http://pe.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&amp;mi=10&amp;dpi=54&amp;ckls=true
GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352599826456&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D51616&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b2?c1=8&amp;c2=6035951&amp;c3=122134&amp;ns__t=1352599826456&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D51616&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=51616
Cookie: UID=4c6ec55-195.159.219.9-1352599826; UIDR=1352599826
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 02:10:26 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352599826457&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D51616&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b2?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3320011&amp;ns__t=1352599826457&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D51616&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=51616
Cookie: UID=4c6ec56-195.159.219.9-1352599826; UIDR=1352599826
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 02:10:26 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352599826874&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D13331&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6035951&amp;c3=122134&amp;ns__t=1352599826874&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D13331&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=13331
Cookie: UID=4c6ec56-195.159.219.9-1352599826; UIDR=1352599826
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 02:10:26 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352599826875&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D13331&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3320015&amp;ns__t=1352599826875&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D13331&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=13331
Cookie: UID=4c6ec56-195.159.219.9-1352599826; UIDR=1352599826
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 02:10:26 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /tap.php?v=13490&nid=2596&put=638666723796440208&expires=30 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=13490&amp;nid=2596&amp;put=638666723796440208&amp;expires=30 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=na&amp;co=us
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:26 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%2613490%3D1; expires=Tue, 11-Dec-2012 02:10:26 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2613490%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:10:26 GMT; path=/; domain=.pixel.rubiconproject.com put_2596=638666723796440208; expires=Tue, 11-Dec-2012 02:10:26 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9723
Connection: Keep-Alive
GET /pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14 HTTP/1.1

Host: cm.g.doubleclick.net
GET /pixel?google_nid=everest&amp;google_cm&amp;google_sc&amp;ev_rs=1&amp;url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Location: http://pixel2368.everesttech.net/2368/m?cookieid=&amp;ev_rs=1&amp;url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&amp;google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&amp;google_cver=1
Date: Sun, 11 Nov 2012 02:10:26 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: Cookie Matcher
Content-Length: 470
X-XSS-Protection: 1; mode=block
GET /pull_sync?pid=rubicon HTTP/1.1

Host: www.wtp101.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html; charset=UTF-8
Set-Cookie: tuuid=e7249c14-880b-4694-bf6a-096c3266ffaf; path=/; expires=Tue, 11-Nov-2014 02:10:26 GMT; domain=.wtp101.com
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Location: /pull_sync?ul_cb=1&amp;pid=rubicon
Cache-Control: no-cache, no-store, must-revalidate
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
Content-Length: 0
Date: Sun, 11 Nov 2012 02:10:26 GMT
GET /tap.php?v=5157&nid=2021&put=509f09120ad142ba0e36db88 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=5157&amp;nid=2021&amp;put=509f09120ad142ba0e36db88 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:26 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%265157%3D1; expires=Tue, 11-Dec-2012 02:10:26 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265157%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:10:26 GMT; path=/; domain=.pixel.rubiconproject.com put_2021=509f09120ad142ba0e36db88; expires=Tue, 11-Dec-2012 02:10:26 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9614
Connection: Keep-Alive
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352599826937&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D58461&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6035951&amp;c3=122134&amp;ns__t=1352599826937&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D58461&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=58461
Cookie: UID=4c6ec56-195.159.219.9-1352599826; UIDR=1352599826
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 02:10:26 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3376926&ns__t=1352599826939&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D58461&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3376926&amp;ns__t=1352599826939&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D58461&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=58461
Cookie: UID=4c6ec56-195.159.219.9-1352599826; UIDR=1352599826
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 02:10:26 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /pixel/p-e4m3Yko6bFYVc.gif?idmatch=0 HTTP/1.1

Host: pixel.quantserve.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: image/gif
Connection: close
Set-Cookie: mc=509f0912-e1baf-491be-09048; expires=Tue, 13-May-2014 02:10:26 GMT; path=/; domain=.quantserve.com
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV&quot;
Cache-Control: private, no-cache, no-store, proxy-revalidate
Pragma: no-cache
Expires: Fri, 04 Aug 1978 12:00:00 GMT
Content-Length: 35
Date: Sun, 11 Nov 2012 02:10:26 GMT
Server: QS
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

Host: ib.adnxs.com
GET /pxj?bidder=55&amp;action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-Emw3QN_/h9oD#(h!#FdgHS0R!o)0VpiH[HCb; sess=1; icu=ChIIlroHEAoYASABKAEwkZL8hAUQkZL8hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:10:26 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:10:26 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-Emw3QN_/h9oD#(h!#FdgHS0R!o)0VpiH[HCb; path=/; expires=Sat, 09-Feb-2013 02:10:26 GMT; domain=.adnxs.com; HttpOnly
Content-Length: 43
Date: Sun, 11 Nov 2012 02:10:26 GMT
GET /tap.php?v=12224&nid=2530&put=2909467098864709221&expires=365 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=12224&amp;nid=2530&amp;put=2909467098864709221&amp;expires=365 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:26 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%2612224%3D1; expires=Tue, 11-Dec-2012 02:10:26 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2612224%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:10:26 GMT; path=/; domain=.pixel.rubiconproject.com put_2530=2909467098864709221; expires=Mon, 11-Nov-2013 02:10:26 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9867
Connection: Keep-Alive
GET /tap.php?v=5671&nid=2081&put=AO-00000005680933073&expires=30 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=5671&amp;nid=2081&amp;put=AO-00000005680933073&amp;expires=30 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=na&amp;co=us
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:26 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%265671%3D1; expires=Tue, 11-Dec-2012 02:10:26 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:10:26 GMT; path=/; domain=.pixel.rubiconproject.com put_2081=AO-00000005680933073; expires=Tue, 11-Dec-2012 02:10:26 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9931
Connection: Keep-Alive
GET /pull_sync?ul_cb=1&pid=rubicon HTTP/1.1

Host: www.wtp101.com
GET /pull_sync?ul_cb=1&amp;pid=rubicon HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: tuuid=e7249c14-880b-4694-bf6a-096c3266ffaf
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html; charset=UTF-8
Set-Cookie: tuuid=e7249c14-880b-4694-bf6a-096c3266ffaf; path=/; expires=Tue, 11-Nov-2014 02:10:26 GMT; domain=.wtp101.com
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Location: http://pixel.rubiconproject.com/tap.php?v=5328&amp;nid=2025&amp;put=e7249c14-880b-4694-bf6a-096c3266ffaf&amp;expires=730
Cache-Control: no-cache, no-store, must-revalidate
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
Content-Length: 0
Date: Sun, 11 Nov 2012 02:10:26 GMT
GET /tap.php?v=5328&nid=2025&put=e7249c14-880b-4694-bf6a-096c3266ffaf&expires=730 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=5328&amp;nid=2025&amp;put=e7249c14-880b-4694-bf6a-096c3266ffaf&amp;expires=730 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%265671%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825; put_2596=638666723796440208; put_2021=509f09120ad142ba0e36db88; put_2530=2909467098864709221; put_2081=AO-00000005680933073
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:27 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%265671%3D1%265328%3D1; expires=Tue, 11-Dec-2012 02:10:27 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265328%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:10:27 GMT; path=/; domain=.pixel.rubiconproject.com put_2025=e7249c14-880b-4694-bf6a-096c3266ffaf; expires=Tue, 11-Nov-2014 02:10:27 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9887
Connection: Keep-Alive
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1

Host: view.atdmt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=58461
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA
HTTP/1.1 200 OK

Content-Type: text/html
Cache-Control: no-store
Content-Encoding: gzip
Expires: 0
Vary: Accept-Encoding
Date: Sun, 11 Nov 2012 02:10:25 GMT
Connection: close
Content-Length: 381
GET /2368/m?cookieid=&ev_rs=1&url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&google_cver=1 HTTP/1.1

Host: pixel2368.everesttech.net
GET /2368/m?cookieid=&amp;ev_rs=1&amp;url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&amp;google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&amp;google_cver=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: everest_session_v2=UJ8JEgAAV5uyss8X; everest_g_v2=g_surferid~UJ8JEgAAV5uyss8X
HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1
Date: Sun, 11 Nov 2012 02:10:27 GMT
Server: Apache
Set-Cookie: gglck=CAESEHb10AvLIOUdvYC_4Xf0C8w; path=/; domain=.everesttech.net; expires=Tue, 11-Dec-2012 02:10:27 GMT everest_session_v2=UJ8JEgAAV5uyss8X; path=/; domain=.everesttech.net everest_g_v2=g_surferid~UJ8JEgAAV5uyss8X; path=/; domain=.everesttech.net; expires=Mon, 06-Oct-2014 12:50:27 GMT
P3P: CP=&quot;NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM&quot;
Cache-Control: no-cache
Location: http://pixel.rubiconproject.com/tap.php?v=11782|1|14&amp;nid=2181&amp;put=CAESEHb10AvLIOUdvYC_4Xf0C8w&amp;expires=14
Content-Length: 300
Keep-Alive: timeout=15, max=993297
Connection: Keep-Alive
GET /activity?_o=62795&_t=cm_rub_ex HTTP/1.1

Host: d.xp1.ru4.com
GET /activity?_o=62795&amp;_t=cm_rub_ex HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Server: Sun-Java-System-Web-Server/7.0
Date: Sun, 11 Nov 2012 02:10:26 GMT
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NON DSP COR PSAa OUR STP UNI&quot;
Pragma: no-cache
Set-Cookie: X1ID=AM-00000002437996434; domain=.ru4.com; path=/; expires=Sat, 10-May-2014 21:10:27 GMT
Location: http://pixel.rubiconproject.com/tap.php?v=5671&amp;nid=2081&amp;put=AM-00000002437996434&amp;expires=30&amp;next=http%3A%2F%2Fm.xp1.ru4.com%2Fmeta%3F_o%3D179638%26_t%3Ddm%26ssv_p%3Dru%26ssv_u%3DAM-00000002437996434
Content-Length: 0
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

Host: ib.adnxs.com
GET /pxj?bidder=55&amp;action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-Emw3QN_/h9oD#(h!#FdgHS0R!o)0VpiH[HCb; sess=1; icu=ChIIlroHEAoYASABKAEwkZL8hAUQkZL8hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:10:27 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:10:27 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-Emw3QN_/h9oD#(h!#FdgHS0R!o)0VpiH[HCb; path=/; expires=Sat, 09-Feb-2013 02:10:27 GMT; domain=.adnxs.com; HttpOnly
Content-Length: 43
Date: Sun, 11 Nov 2012 02:10:27 GMT
GET /tap.php?v=11782|1|14&nid=2181&put=CAESEHb10AvLIOUdvYC_4Xf0C8w&expires=14 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=11782|1|14&amp;nid=2181&amp;put=CAESEHb10AvLIOUdvYC_4Xf0C8w&amp;expires=14 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%265671%3D1%265328%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265328%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825; put_2596=638666723796440208; put_2021=509f09120ad142ba0e36db88; put_2530=2909467098864709221; put_2081=AO-00000005680933073; put_2025=e7249c14-880b-4694-bf6a-096c3266ffaf
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:27 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%265671%3D1%265328%3D1%2611782%3D1; expires=Tue, 11-Dec-2012 02:10:27 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265328%3D25074%2C0%2C1%2C%2C%2611782%3D25074%2C0%2C1%2C14%2C; expires=Tue, 11-Dec-2012 02:10:27 GMT; path=/; domain=.pixel.rubiconproject.com put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; expires=Sun, 25-Nov-2012 02:10:27 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9991
Connection: Keep-Alive
GET /do-association-set?rbc&can=20 HTTP/1.1

Host: matcher-rbc.bidder7.mookie1.com
GET /do-association-set?rbc&amp;can=20 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=na&amp;co=us
Cookie: id=4613164013989199887; mdata=1|4613164013989199887|1352599826
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:10:27 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://pixel.rubiconproject.com/tap.php?v=7259&amp;nid=2211&amp;put=4613164013989199887&amp;expires=1
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=863
Connection: Keep-Alive
GET /v2/cexposer/SIG=12gjpfchi/*http%3A//ad.yieldmanager.com/imp?Z=160x600&s=3434596&_salt=2081161936&B=10&r=0 HTTP/1.1

Host: cookex.amp.yahoo.com
GET /v2/cexposer/SIG=12gjpfchi/*http%3A//ad.yieldmanager.com/imp?Z=160x600&amp;s=3434596&amp;_salt=2081161936&amp;B=10&amp;r=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=40565
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Date: Sun, 11 Nov 2012 02:10:27 GMT
Set-Cookie: B=aok7f7589u28j&amp;b=3&amp;s=dd; expires=Tue, 12-Nov-2014 20:00:00 GMT; path=/; domain=.yahoo.com
P3P: policyref=&quot;http://info.yahoo.com/w3c/p3p.xml&quot;, CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV&quot;
Location: http://ad.yieldmanager.com/imp?Z=160x600&amp;s=3434596&amp;_salt=2081161936&amp;B=10&amp;r=0&amp;SIG=10vt47ksf;x-cookie=nbx7s7589h28w&amp;o=3&amp;f=qq
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Cache-Control: private
GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=54&ckls=true HTTP/1.1

Host: pe.intentiq.com
GET /profiles_engine/ProfilesEngineServlet?at=20&amp;mi=10&amp;dpi=54&amp;ckls=true HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=na&amp;co=us
Cookie: IQver=1.2; intentIQ=cb8a421b-9b8f-44bf-bdb3-6ad32a025a5a
HTTP/1.1 302 Moved Temporarily

Content-Type: image/gif
Server: nginx/1.2.1
Date: Sun, 11 Nov 2012 02:10:27 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: IQver=1.2; Domain=.intentiq.com; Expires=Wed, 09-Nov-2022 02:10:27 GMT; Path=/ IQPending=pending; Domain=.intentiq.com; Expires=Wed, 09-Nov-2022 02:10:27 GMT; Path=/ intentIQ=cb8a421b-9b8f-44bf-bdb3-6ad32a025a5a; Domain=.intentiq.com; Expires=Wed, 09-Nov-2022 02:10:27 GMT; Path=/ IQPData=3282013405#1352599827069#0#1352599827069; Domain=.intentiq.com; Expires=Wed, 09-Nov-2022 02:10:27 GMT; Path=/ intentUserAgent=1#4#-1650885381#; Domain=.intentiq.com; Expires=Wed, 09-Nov-2022 02:10:27 GMT; Path=/ IQGeo=0#0#0#0#0#0#0#0; Domain=.intentiq.com; Expires=Wed, 09-Nov-2022 02:10:27 GMT; Path=/
Location: http://tags.bluekai.com/site/6684?id=cb8a421b-9b8f-44bf-bdb3-6ad32a025a5a,n
GET /tap.php?v=5671&nid=2081&put=AM-00000002437996434&expires=30&next=http%3A%2F%2Fm.xp1.ru4.com%2Fmeta%3F_o%3D179638%26_t%3Ddm%26ssv_p%3Dru%26ssv_u%3DAM-00000002437996434 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=5671&amp;nid=2081&amp;put=AM-00000002437996434&amp;expires=30&amp;next=http%3A%2F%2Fm.xp1.ru4.com%2Fmeta%3F_o%3D179638%26_t%3Ddm%26ssv_p%3Dru%26ssv_u%3DAM-00000002437996434 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%265671%3D1%265328%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265328%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825; put_2596=638666723796440208; put_2021=509f09120ad142ba0e36db88; put_2530=2909467098864709221; put_2081=AO-00000005680933073; put_2025=e7249c14-880b-4694-bf6a-096c3266ffaf
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:10:27 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%265328%3D1%265671%3D1; expires=Tue, 11-Dec-2012 02:10:27 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C2%2C%2C%265328%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:10:27 GMT; path=/; domain=.pixel.rubiconproject.com put_2081=AM-00000002437996434; expires=Tue, 11-Dec-2012 02:10:27 GMT; path=/; domain=.rubiconproject.com
Location: http://m.xp1.ru4.com/meta?_o=179638&amp;_t=dm&amp;ssv_p=ru&amp;ssv_u=AM-00000002437996434
Content-Length: 0
Keep-Alive: timeout=30, max=9884
Connection: Keep-Alive
GET /tap.php?v=7259&nid=2211&put=4613164013989199887&expires=1 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=7259&amp;nid=2211&amp;put=4613164013989199887&amp;expires=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=na&amp;co=us
Cookie: rpb=14240%3D1%265671%3D1%265328%3D1%2611782%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265328%3D25074%2C0%2C1%2C%2C%2611782%3D25074%2C0%2C1%2C14%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825; put_2596=638666723796440208; put_2021=509f09120ad142ba0e36db88; put_2530=2909467098864709221; put_2081=AO-00000005680933073; put_2025=e7249c14-880b-4694-bf6a-096c3266ffaf; put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:27 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%265671%3D1%265328%3D1%2611782%3D1%267259%3D1; expires=Tue, 11-Dec-2012 02:10:27 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265328%3D25074%2C0%2C1%2C%2C%2611782%3D25074%2C0%2C1%2C14%2C%267259%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:10:27 GMT; path=/; domain=.pixel.rubiconproject.com put_2211=4613164013989199887; expires=Mon, 12-Nov-2012 02:10:27 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9927
Connection: Keep-Alive
GET /adscores/g.pixel?sid=9278242667 HTTP/1.1

Host: adadvisor.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Date: Sun,  11 Nov 2012 02:10:27 GMT
Connection: close
Server: AAWebServer
P3P: policyref=&quot;http://www.adadvisor.net/w3c/p3p.xml&quot;,CP=&quot;NOI NID&quot;
Content-Length: 0
Location: http://tap.rubiconproject.com/oz/feeds/targus/profile?p=targus&amp;oz_source=partner&amp;segment=000&amp;zip=&amp;dob=&amp;gender=&amp;pc=
GET /site/6684?id=cb8a421b-9b8f-44bf-bdb3-6ad32a025a5a,n HTTP/1.1

Host: tags.bluekai.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=na&amp;co=us
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:27 GMT
Server: Apache/2.2.3 (CentOS)
P3P: CP=&quot;NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV&quot;, policyref=&quot;http://tags.bluekai.com/w3c/p3p.xml&quot;
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Set-Cookie: bkc=KJpM8sJQter5QDsRzlT99hOy9FZkDNc8YVCXHQRWU6SvQVcnOuRDdMG64QynxM69U4Am2Q==; expires=Fri, 10-May-2013 02:10:27 GMT; path=/; domain=.bluekai.com bklc=0; expires=Fri, 10-May-2013 02:10:27 GMT; path=/; domain=.bluekai.com bko=; expires=Fri, 10-May-2013 02:10:27 GMT; path=/; domain=.bluekai.com bkp1=; expires=Fri, 10-May-2013 02:10:27 GMT; path=/; domain=.bluekai.com bkst=KJhMRjYHRZOxR6CmLAQ61EJ16gP1LAMEBEaJu+BBuAA0NMPnEeWtuMxy1A66E5EJWISzcy99WeA1J9==; expires=Fri, 10-May-2013 02:10:27 GMT; path=/; domain=.bluekai.com bku=cOG99O1J7N9jilhC; expires=Fri, 10-May-2013 02:10:27 GMT; path=/; domain=.bluekai.com bkw5=; expires=Fri, 10-May-2013 02:10:27 GMT; path=/; domain=.bluekai.com bkdc=wdc; expires=Tue, 11-Dec-2012 02:10:27 GMT; path=/; domain=.bluekai.com
BK-Server: 883a
Content-Length: 62
GET /meta?_o=179638&_t=dm&ssv_p=ru&ssv_u=AM-00000002437996434 HTTP/1.1

Host: m.xp1.ru4.com
GET /meta?_o=179638&amp;_t=dm&amp;ssv_p=ru&amp;ssv_u=AM-00000002437996434 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: X1ID=AM-00000002437996434
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Server: Sun-Java-System-Web-Server/7.0
Date: Sun, 11 Nov 2012 02:10:27 GMT
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NON DSP COR PSAa OUR STP UNI&quot;
Content-Length: 0
Pragma: no-cache
Set-Cookie: 31041217-B31041249=2|31476185|0|0|0|31476182|31476181|-1; domain=.ru4.com; path=/ O179638=0@0@0@0; domain=.ru4.com; path=/; expires=Mon, 01-Jan-2010 12:00:00 GMT C31041217=0@0; domain=.ru4.com; path=/; expires=Mon, 01-Jan-2010 12:00:00 GMT
Location: http://m.xp1.ru4.com/activity?_o=62795&amp;_t=xl_cm_x1&amp;redirect=http%3A%2F%2Floadus.exelator.com%2Fload%2F%3Fp=204%26g=151%26j=0%26buid=~uk~
GET /activity?_o=62795&_t=xl_cm_x1&redirect=http%3A%2F%2Floadus.exelator.com%2Fload%2F%3Fp=204%26g=151%26j=0%26buid=~uk~ HTTP/1.1

Host: m.xp1.ru4.com
GET /activity?_o=62795&amp;_t=xl_cm_x1&amp;redirect=http%3A%2F%2Floadus.exelator.com%2Fload%2F%3Fp=204%26g=151%26j=0%26buid=~uk~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: X1ID=AM-00000002437996434; 31041217-B31041249=2|31476185|0|0|0|31476182|31476181|-1
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Server: Sun-Java-System-Web-Server/7.0
Date: Sun, 11 Nov 2012 02:10:27 GMT
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NON DSP COR PSAa OUR STP UNI&quot;
Pragma: no-cache
Location: http://loadus.exelator.com/load/?p=204&amp;g=151&amp;j=0&amp;buid=AM-00000002437996434
Content-Length: 0
GET /oz/feeds/targus/profile?p=targus&oz_source=partner&segment=000&zip=&dob=&gender=&pc= HTTP/1.1

Host: tap.rubiconproject.com
GET /oz/feeds/targus/profile?p=targus&amp;oz_source=partner&amp;segment=000&amp;zip=&amp;dob=&amp;gender=&amp;pc= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%265671%3D1%265328%3D1%2611782%3D1%267259%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825; put_2596=638666723796440208; put_2021=509f09120ad142ba0e36db88; put_2530=2909467098864709221; put_2081=AM-00000002437996434; put_2025=e7249c14-880b-4694-bf6a-096c3266ffaf; put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; put_2211=4613164013989199887
HTTP/1.1 204 No Content

Content-Type: text/plain; charset=UTF-8
Date: Sun, 11 Nov 2012 02:10:27 GMT
Server: TRP Apache-Coyote/1.1
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Cache-Control: private
Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 02:10:27 GMT; Path=/ au=H9DJ0IHI-K8E7-10.250.151.242; Domain=.rubiconproject.com; Expires=Mon, 09-Nov-2020 02:10:27 GMT; Path=/ dq=1|1|0|0; Expires=Mon, 11-Nov-2013 02:10:27 GMT; Path=/ lm=&quot;11 Nov 2012 02:10:27 GMT&quot;; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Content-Length: 0
Keep-Alive: timeout=5, max=182
Connection: Keep-Alive
GET /load/?p=204&g=151&j=0&buid=AM-00000002437996434 HTTP/1.1

Host: loadus.exelator.com
GET /load/?p=204&amp;g=151&amp;j=0&amp;buid=AM-00000002437996434 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

Content-Type: image/gif
X-Powered-By: PHP/5.3.17
P3P: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA
Set-Cookie: ud=eJxrWVyWWnRgUUnxaccr6odc7q%252FJXBzq6XKLQcEyOdUQCNOMU8xTkpMMDAyTjIzSTIwsLFNMUyzSEs0WF6WkMQIAQxAXbg%253D%253D; expires=Mon, 11-Mar-2013 02:10:27 GMT; path=/; domain=exelator.com
Location: http://loadus.exelator.com/load/?p=204&amp;g=151&amp;j=0&amp;buid=AM-00000002437996434&amp;xl8blockcheck=1
Content-Length: 0
Connection: close
Date: Sun, 11 Nov 2012 02:10:27 GMT
Server: HTTP server
GET /load/?p=204&g=151&j=0&buid=AM-00000002437996434&xl8blockcheck=1 HTTP/1.1

Host: loadus.exelator.com
GET /load/?p=204&amp;g=151&amp;j=0&amp;buid=AM-00000002437996434&amp;xl8blockcheck=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: ud=eJxrWVyWWnRgUUnxaccr6odc7q%252FJXBzq6XKLQcEyOdUQCNOMU8xTkpMMDAyTjIzSTIwsLFNMUyzSEs0WF6WkMQIAQxAXbg%253D%253D
HTTP/1.1 302 Found

Content-Type: image/gif
X-Powered-By: PHP/5.3.17
P3P: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA
Set-Cookie: inv=eJxrXFySlnaHQeLMmTPTmc%252BqcywxMjQxABNn1bkRHAYE88wZBkYkLgMKDwBLMRga; expires=Mon, 11-Mar-2013 02:10:27 GMT; path=/; domain=exelator.com xud=eJyNj81Og0AQxxvjg3DzZLIs38dVKJIAS%252FiIciLA7kYSCglgW88%252BgK9g2iakVuPFJ9CjV0%252FefQ9J4QGcOf1%252F%252Bc1M5mG7pM3ppmu%252F0PfZh%252F77ae%252FWZVc%252BbiNL%252F5lxWk75oZlAFJJnAPAZhEyEqkYkorJUPtwVJAkgEG88%252Fh0552AsKAqKpsmiIL4uE9PAySWO3NCPNy5%252BGYFvmBZ2Nzx8ngQrjHe4Lev9mHUHzSbVw0GI7Ke3MSHfQMM63ZgNZoSSMPaM%252FqKpVy1tDkcyR45lx%252F28aCir1%252F2R4WB%252FXVRksDhlumAF3vCgV69oE9L8lrMqVjeLtCvqigvu244uWg4Fk4x98%252F%252Bya4Qn2whdDRMyYUqWpwRQUeAllUlQAqmkyCBPVapm%252FB%252BegYbM; expires=Mon, 11-Mar-2013 02:10:27 GMT; path=/; domain=exelator.com xudx=eJwBLADT%252F4OjdmVyAqJ0c8tB1CfCROXDTKNldniBzQhcgc5QnwkUl80nCwHMzMyXAQAA2NUTlg%253D%253D; expires=Mon, 11-Mar-2013 02:10:27 GMT; path=/; domain=exelator.com udo=eJyNkMtKw1AQhtMupOBLZNeVkPtleTRpDbQ5IRc0IIQk50QDbQMnsa0P0LVLwZU0hVKruPEJdGm7c%252BXe9zA0eQBnVv%252FPN%252FMzsyinmLSXRf4Fvrsf2u%252FnoMTT%252BeO%252Be9zad646u93u4ahFUav5qBjdl56h%252FVC0GmO26oRHMoojhmEjjksETlGRiJQklLa3KQocjhEuLfYdDE%252BYujiBl1VVEnjhdRr0dRicQc90bX9pwpfasPW%252BAc0lyz03gOH6K5iPsk2ttSGgGtSCjgsGT2%252B1ArYOqnWaTlWkBwLXt%252FT1KclmOSbbg9MDQ2Pgr3spwUk2Xx886Gwu0gmqKFpuEgzHqg60shkmLo5vaGOSZGQcFmk2oZ27vMDjnAZOA0O7%252F3%252FY1N126YHzakJCiRzFIWKwwLOikoicyISiLDFxqGAlYlcZSa%252Brr%252FwBYTeSKw%253D%253D; expires=Mon, 11-Mar-2013 02:10:27 GMT; path=/; domain=exelator.com ud=eJxrWVyWWnRgUUnxaccr6odcnp6%252BujjU0%252BUWg4JlcqohEKYZp5inJCcZGBgmGRmlmRhZWKaYplikJZotyS%252FKTF%252Fk5w8AqXQZsw%253D%253D; expires=Mon, 11-Mar-2013 02:10:27 GMT; path=/; domain=exelator.com
Location: http://load.s3.amazonaws.com/pixel.gif
Content-Length: 0
Connection: close
Date: Sun, 11 Nov 2012 02:10:27 GMT
Server: HTTP server
GET /imp?Z=160x600&s=3434596&_salt=2081161936&B=10&r=0&SIG=10vt47ksf;x-cookie=nbx7s7589h28w&o=3&f=qq HTTP/1.1

Host: ad.yieldmanager.com
GET /imp?Z=160x600&amp;s=3434596&amp;_salt=2081161936&amp;B=10&amp;r=0&amp;SIG=10vt47ksf;x-cookie=nbx7s7589h28w&amp;o=3&amp;f=qq HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=40565
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Date: Sun, 11 Nov 2012 02:10:27 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor0475.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Set-Cookie: BX=aok7f7589u28j&amp;b=3&amp;s=dd&amp;t=315; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT uid=uid=f5d3ee34-2ba4-11e2-a859-3fccb208f27a&amp;_hmacv=1&amp;_salt=337838848&amp;_keyid=k1&amp;_hmac=07c65f0485e71adb03342a14bec8a7a19ce65e88; path=/; expires=Tue, 11-Dec-2012 02:10:27 GMT RMBX=aok7f7589u28j&amp;b=3&amp;s=dd&amp;t=315; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Sun, 11 Nov 2012 02:10:27 GMT
Expires: Sun, 11 Nov 2012 02:10:27 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3421021&ns__t=1352599827744&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D40565&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3421021&amp;ns__t=1352599827744&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D40565&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=40565
Cookie: UID=4c6ec56-195.159.219.9-1352599826; UIDR=1352599826
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 02:10:27 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /atoms/2e/f5/2c/0b/2ef52c0b0f67f2d61fbde96e1dfd95cd.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJytj91ugzAMhZ%2DGO4ryB6FCuwhFsK6FrSzVBHesCQUWGtRlYtrTj1HUJ9iRZX32sWwZ4oBACiq%2ExicPulC4JIC4kgK%2EU0KwDYIgwP6aYorAGtmoe1MblOuMsch59tms7WWTjTdk57%2Dkb%2Ewy%2D2GY5OJ18fku37F%2EUfRI8uPC2%2EnuOfJZj1NKuQ7vY0kBy%2DgI0p%2Dy2fOntuAHk%2EJYpS1syiRTey76goddxsMm64rx%2EgdjD7bdGDNYmFkonmIcR6eXoq3q9iqdk%2D6nnpH9oCojPydW7eXD6AmErKsvZVbQg98egKuldoZmWhZfLRwR4HruL1zzbM8%3D%2C HTTP/1.1

Host: content.yieldmanager.edgesuite.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=40565
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Server: Apache
Etag: &quot;2ef52c0b0f67f2d61fbde96e1dfd95cd:1322579894&quot;
Last-Modified: Tue, 29 Nov 2011 15:18:14 GMT
Accept-Ranges: bytes
Content-Length: 21959
Cache-Control: max-age=31536000
Date: Sun, 11 Nov 2012 02:10:27 GMT
Connection: keep-alive
GET /ct/rubicon-cms2.html HTTP/1.1

Host: cti.w55c.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: text/html
Accept-Ranges: bytes
Cache-Control: no-cache, must-revalidate
Date: Sun, 11 Nov 2012 02:10:27 GMT
Etag: &quot;1430792016&quot;
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Last-Modified: Thu, 18 Oct 2012 15:06:26 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Pragma: no-cache
Server: ECS (arn/46F0)
X-Cache: HIT
Content-Length: 5086
GET /server/pixel.htm?fpid=6&sp=y HTTP/1.1

Host: ad.turn.com
GET /server/pixel.htm?fpid=6&amp;sp=y HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: text/html;charset=UTF-8
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Set-Cookie: uid=3252349652729275564; Domain=.turn.com; Expires=Fri, 10-May-2013 02:10:27 GMT; Path=/
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sun, 11 Nov 2012 02:10:26 GMT
GET /pixel.gif HTTP/1.1

Host: load.s3.amazonaws.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: image/gif
x-amz-id-2: SSQO2nNu5TmcAfpAt0WFSmeMuCv4gA+hL4oTGKztt+3iE5PCCctfSSJRNodY/fRN
x-amz-request-id: 7D4B882801658BEF
Date: Sun, 11 Nov 2012 02:10:28 GMT
x-amz-meta-s3fox-filesize: 43
x-amz-meta-s3fox-modifiedtime: 1297679395316
Last-Modified: Mon, 14 Feb 2011 11:09:26 GMT
Etag: &quot;fc94fb0c3ed8a8f909dbc7630a0987ff&quot;
Accept-Ranges: bytes
Content-Length: 43
Server: AmazonS3
GET /oz/feeds/invite-media-rtb/tokens/?rt=iframe HTTP/1.1

Host: tap.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%265671%3D1%265328%3D1%2611782%3D1%267259%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825; put_2596=638666723796440208; put_2021=509f09120ad142ba0e36db88; put_2530=2909467098864709221; put_2081=AM-00000002437996434; put_2025=e7249c14-880b-4694-bf6a-096c3266ffaf; put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; put_2211=4613164013989199887; cd=false; au=H9DJ0IHI-K8E7-10.250.151.242; dq=1|1|0|0; lm=&quot;11 Nov 2012 02:10:27 GMT&quot;
HTTP/1.1 302 Moved Temporarily

Content-Type: text/plain; charset=UTF-8
Date: Sun, 11 Nov 2012 02:10:27 GMT
Server: TRP Apache-Coyote/1.1
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Location: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=7bc846a7070c2567dd4ff23d1d0c55d6adab698c&amp;publisher_dsp_id=2101&amp;publisher_call_type=iframe&amp;publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/
Content-Length: 0
Cache-Control: private
Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 02:10:27 GMT; Path=/ dq=2|2|0|0; Expires=Mon, 11-Nov-2013 02:10:27 GMT; Path=/ put_2101=&quot;&quot;; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm=&quot;11 Nov 2012 02:10:27 GMT&quot;; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Keep-Alive: timeout=5, max=178
Connection: Keep-Alive
GET /server/ddc.htm?uid=3252349652729275564&rnd=3180292058691347628&fpid=6&nu=y&t=&sp=y&purl=&ctid=3&cyid=11 HTTP/1.1

Host: cdn.turn.com
GET /server/ddc.htm?uid=3252349652729275564&amp;rnd=3180292058691347628&amp;fpid=6&amp;nu=y&amp;t=&amp;sp=y&amp;purl=&amp;ctid=3&amp;cyid=11 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ad.turn.com/server/pixel.htm?fpid=6&amp;sp=y
Cookie: uid=3252349652729275564
HTTP/1.1 200 OK

Content-Type: text/html;charset=UTF-8
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Pragma: no-cache
Content-Encoding: gzip
Cache-Control: private, no-cache, no-store, must-revalidate
Date: Sun, 11 Nov 2012 02:10:27 GMT
Content-Length: 4143
Connection: keep-alive
Vary: Accept-Encoding
GET /ping_match.gif?ei=RUBICON_MATCH HTTP/1.1

Host: i.w55c.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:28 GMT
Server: Jetty(6.1.22)
Set-Cookie: wfivefivec=687628aa-b545-45d0-aec1-35b5e1085687;Path=/;Domain=.w55c.net;Expires=Tue, 11-Nov-14 02:10:28 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Cache-Control: no-store
X-Powered-By: Mirror Image Internet
Content-Length: 42
Via: 1.1 lhr061009 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /tap.php?v=4212&nid=1185&put=3252349652729275564&expires=60 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=4212&amp;nid=1185&amp;put=3252349652729275564&amp;expires=60 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.turn.com/server/ddc.htm?uid=3252349652729275564&amp;rnd=3180292058691347628&amp;fpid=6&amp;nu=y&amp;t=&amp;sp=y&amp;purl=&amp;ctid=3&amp;cyid=11
Cookie: rpb=14240%3D1%265671%3D1%265328%3D1%2611782%3D1%267259%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265328%3D25074%2C0%2C1%2C%2C%2611782%3D25074%2C0%2C1%2C14%2C%267259%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825; put_2596=638666723796440208; put_2021=509f09120ad142ba0e36db88; put_2530=2909467098864709221; put_2081=AM-00000002437996434; put_2025=e7249c14-880b-4694-bf6a-096c3266ffaf; put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; put_2211=4613164013989199887; cd=false; au=H9DJ0IHI-K8E7-10.250.151.242; lm=&quot;11 Nov 2012 02:10:27 GMT&quot;
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:28 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%265671%3D1%265328%3D1%2611782%3D1%267259%3D1%264212%3D1; expires=Tue, 11-Dec-2012 02:10:28 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265328%3D25074%2C0%2C1%2C%2C%2611782%3D25074%2C0%2C1%2C14%2C%267259%3D25074%2C0%2C1%2C%2C%264212%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:10:28 GMT; path=/; domain=.pixel.rubiconproject.com put_1185=3252349652729275564; expires=Thu, 10-Jan-2013 02:10:28 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9938
Connection: Keep-Alive
GET /rubicon_sync?publisher_user_id=7bc846a7070c2567dd4ff23d1d0c55d6adab698c&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1

Host: pixel.invitemedia.com
GET /rubicon_sync?publisher_user_id=7bc846a7070c2567dd4ff23d1d0c55d6adab698c&amp;publisher_dsp_id=2101&amp;publisher_call_type=iframe&amp;publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: text/html
Date: Sun, 11 Nov 2012 02:10:28 GMT
Set-Cookie: uid=bb7b22d3-878f-4381-8773-56e1a549b36c;Path=/;Domain=invitemedia.com;Expires=Mon, 11-Nov-2013 02:10:28 GMT impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC&quot;
Cache-Control: no-cache
Content-Length: 221
Connection: close
Server: Jetty(7.3.1.v20110307)
GET /tap.php?v=4210&nid=1523&expires=10&put=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=4210&amp;nid=1523&amp;expires=10&amp;put=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: rpb=14240%3D1%265671%3D1%265328%3D1%2611782%3D1%267259%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265328%3D25074%2C0%2C1%2C%2C%2611782%3D25074%2C0%2C1%2C14%2C%267259%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825; put_2596=638666723796440208; put_2021=509f09120ad142ba0e36db88; put_2530=2909467098864709221; put_2081=AM-00000002437996434; put_2025=e7249c14-880b-4694-bf6a-096c3266ffaf; put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; put_2211=4613164013989199887; cd=false; au=H9DJ0IHI-K8E7-10.250.151.242; lm=&quot;11 Nov 2012 02:10:27 GMT&quot;
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:28 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%265671%3D1%265328%3D1%2611782%3D1%267259%3D1%264210%3D1; expires=Tue, 11-Dec-2012 02:10:28 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265328%3D25074%2C0%2C1%2C%2C%2611782%3D25074%2C0%2C1%2C14%2C%267259%3D25074%2C0%2C1%2C%2C%264210%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:10:28 GMT; path=/; domain=.pixel.rubiconproject.com put_1523=687628aa-b545-45d0-aec1-35b5e1085687; expires=Wed, 21-Nov-2012 02:10:28 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9698
Connection: Keep-Alive
GET /ct/crwdctrl.html?687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

Host: cti.w55c.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: wfivefivec=687628aa-b545-45d0-aec1-35b5e1085687
HTTP/1.1 200 OK

Content-Type: text/html
Accept-Ranges: bytes
Cache-Control: no-cache, must-revalidate
Date: Sun, 11 Nov 2012 02:10:28 GMT
Etag: &quot;3436325814&quot;
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Last-Modified: Mon, 05 Nov 2012 15:45:31 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Pragma: no-cache
Server: ECS (arn/46E3)
X-Cache: HIT
Content-Length: 1937
GET /site/2964?id=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

Host: tags.bluekai.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: bkc=KJpM8sJQter5QDsRzlT99hOy9FZkDNc8YVCXHQRWU6SvQVcnOuRDdMG64QynxM69U4Am2Q==; bklc=0; bko=; bkp1=; bkst=KJhMRjYHRZOxR6CmLAQ61EJ16gP1LAMEBEaJu+BBuAA0NMPnEeWtuMxy1A66E5EJWISzcy99WeA1J9==; bku=cOG99O1J7N9jilhC; bkw5=; bkdc=wdc
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:28 GMT
Server: Apache/2.2.3 (CentOS)
P3P: CP=&quot;NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV&quot;, policyref=&quot;http://tags.bluekai.com/w3c/p3p.xml&quot;
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Set-Cookie: bkc=KJ0qyLl9LeiRiDsWzlT9/y1eyhxQ7TteWRVFSXi9yG2Cx498rHQR2A87RO9sXCZQdBvo3wyWBe8/cTyF/XU9LmDYWyodcHG4jOI1ey92RC5g; expires=Fri, 10-May-2013 02:10:28 GMT; path=/; domain=.bluekai.com bklc=509f0914; expires=Fri, 10-May-2013 02:10:28 GMT; path=/; domain=.bluekai.com bko=KJyfJXp9/1/8wTYc9x91bQcb; expires=Fri, 10-May-2013 02:10:28 GMT; path=/; domain=.bluekai.com bkst=KJyB00LmQe919BYvsR/WHj9WHjB2tkaryHUSeuu7yUBP8+2pXwR9YtEjzhHPBYjsTroHgh/yL4WPFc9eRdK5erRJR/PiGCueTVa0/8c5SBDuj36o3GILgBLp+wWeaXyVT9==; expires=Fri, 10-May-2013 02:10:28 GMT; path=/; domain=.bluekai.com bkw5=KJhk0ELuyV99HKcMBySH/GVvODCCa5SxKn1c12cjCMNA1TMl5Fpkcqz8h4ZIO8ik5zQZ1sjdQA9dSDcLXxy4Xju5IPrXp5qXJE8iRdTDff9t4TMlVJ74hxzLpHFh/xFpZlMYlwy37ksSUXufamjPWEtFypur7vqX2hdWwEjj; expires=Fri, 10-May-2013 02:10:28 GMT; path=/; domain=.bluekai.com bkdc=wdc; expires=Tue, 11-Dec-2012 02:10:28 GMT; path=/; domain=.bluekai.com
BK-Server: 6554
Content-Length: 62
GET /r/du/id/L21rdC80L21waWQvMzU5ODk3MA/mpuid/687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

Host: d.p-td.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Set-Cookie: uid=8156787485931288621; Domain=.p-td.com; Expires=Fri, 10-May-2013 02:10:28 GMT; Path=/
Content-Length: 43
Date: Sun, 11 Nov 2012 02:10:27 GMT
GET /px/rb.gif HTTP/1.1

Host: ad.yabuka.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 FOUND

Content-Type: text/html; charset=utf-8
Server: nginx/1.1.19
Date: Sun, 11 Nov 2012 02:10:28 GMT
Content-Length: 186
Connection: keep-alive
Location: http://pixel.rubiconproject.com/tap.php?v=9047&amp;nid=2147&amp;put=8y1idK1iSa
Set-Cookie: client_id=8y1idK1iSa; Path=/ tc=&quot;84Hp/dJh4Ku/XNFog1IPAPAE8Xc=?_expires=STEzNTMwMTAyMjgKLg==&amp;client_id=Uyc4eTFpZEsxaVNhJwpwMQou&quot;; Domain=.yabuka.com; expires=Thu, 15-Nov-2012 20:10:28 GMT; Path=/
Cache-Control: no-cache
Pragma: no-cache
GET /setuid?entity=17&code=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

Host: ib.adnxs.com
GET /setuid?entity=17&amp;code=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-Emw3QN_/h9oD#(h!#FdgHS0R!o)0VpiH[HCb; sess=1; icu=ChIIlroHEAoYASABKAEwkZL8hAUQkZL8hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:10:28 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:10:28 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG68%Cxrx)0s]#%2L_'x%SEV/hnJPh4FV-Emw3QN_/h9oD#(h!#Fdh+7@te5Q)#:$I%l2M!8uh2d_3_&gt;; path=/; expires=Sat, 09-Feb-2013 02:10:28 GMT; domain=.adnxs.com; HttpOnly
Content-Length: 43
Date: Sun, 11 Nov 2012 02:10:28 GMT
GET /tap.php?v=9047&nid=2147&put=8y1idK1iSa HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=9047&amp;nid=2147&amp;put=8y1idK1iSa HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%265671%3D1%265328%3D1%2611782%3D1%267259%3D1%264210%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265328%3D25074%2C0%2C1%2C%2C%2611782%3D25074%2C0%2C1%2C14%2C%267259%3D25074%2C0%2C1%2C%2C%264210%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825; put_2596=638666723796440208; put_2021=509f09120ad142ba0e36db88; put_2530=2909467098864709221; put_2081=AM-00000002437996434; put_2025=e7249c14-880b-4694-bf6a-096c3266ffaf; put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; put_2211=4613164013989199887; cd=false; au=H9DJ0IHI-K8E7-10.250.151.242; lm=&quot;11 Nov 2012 02:10:27 GMT&quot;; put_1185=3252349652729275564; put_1523=687628aa-b545-45d0-aec1-35b5e1085687
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:28 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%265671%3D1%265328%3D1%2611782%3D1%267259%3D1%264210%3D1%269047%3D1; expires=Tue, 11-Dec-2012 02:10:28 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265328%3D25074%2C0%2C1%2C%2C%2611782%3D25074%2C0%2C1%2C14%2C%267259%3D25074%2C0%2C1%2C%2C%264210%3D25074%2C0%2C1%2C%2C%269047%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:10:28 GMT; path=/; domain=.pixel.rubiconproject.com put_2147=8y1idK1iSa; expires=Tue, 11-Dec-2012 02:10:28 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9730
Connection: Keep-Alive
GET /5/c=1818/pe=y/var=ccauds HTTP/1.1

Host: ad.crwdcntrl.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/crwdctrl.html?687628aa-b545-45d0-aec1-35b5e1085687
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Sun, 11 Nov 2012 02:10:28 GMT
Cache-Control: no-cache
Expires: 0
Pragma: no-cache
P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
X-Server: 172.25.10.85
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 71
GET /adserver/vdi/830697?r=http%3A%2F%2Fi.w55c.net%2Fm.gif%3Fid%3D8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33%26ei%3DADBRITE%26cver%3D1%26euid%3D&d=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

Host: ads.adbrite.com
GET /adserver/vdi/830697?r=http%3A%2F%2Fi.w55c.net%2Fm.gif%3Fid%3D8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33%26ei%3DADBRITE%26cver%3D1%26euid%3D&amp;d=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Accept-Ranges: none
Cache-Control: no-cache, no-store, must-revalidate
Date: Sun, 11 Nov 2012 02:10:28 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Location: http://i.w55c.net/m.gif?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&amp;ei=ADBRITE&amp;cver=1&amp;euid=MTY4MzYyMDgxeDAuMjQ5IDEzNTI1OTk4Mjh4MjEyMzk1Nzk5Ng
P3P: policyref=&quot;http://files.adbrite.com/w3c/p3p.xml&quot;,CP=&quot;NOI PSA PSD OUR IND UNI NAV DEM STA OTC&quot;
Server: XPEHb/1.2
Set-Cookie: Apache=&quot;168362081x0.249+1352599828x2123957996&quot;; path=/; domain=.adbrite.com; expires=Sat, 06-Nov-2032 02:10:28 GMT rb2=CjUKBjgzMDY5NxiZkvOwwgEiJDY4NzYyOGFhLWI1NDUtNDVkMC1hZWMxLTM1YjVlMTA4NTY4NxAB; path=/; domain=.adbrite.com; expires=Sat, 09-Feb-2013 02:10:28 GMT
Content-Length: 0
GET /fr/u.php?p=441981302501808&m=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

Host: www.facebook.com
GET /fr/u.php?p=441981302501808&amp;m=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Cache-Control: public, max-age=0
Date: Sat, 10 Nov 2012 18:10:28 PST
Expires: Sat, 10 Nov 2012 18:10:28 PST
Location: http://i.w55c.net/rs?id=d777fecd6cb849b4bab0bfe71d57747a&amp;t=product&amp;name=FBX_NotMatched
Pragma: public
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-FB-Debug: R3T1F5xsiZizCsH5c3KyrEYJ3RA8Pjxyp5bDsnp7Sho=
Connection: keep-alive
Content-Length: 0
GET /360787.gif?partner_uid=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

Host: idsync.rlcdn.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, no-cache, no-store
Date: Sun, 11 Nov 2012 02:10:28 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://idsync.rlcdn.com/360787.gif?redirect=1&amp;rl=72b6c94279fc9863b71be59506e33e990072260d41dacbb876f009401ef848e2fd902b7f109e3e344b025e7dc8f24bd4815e976a1799d4dd
P3P: CP: &quot;NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE&quot;, CP: &quot;NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE&quot;
Set-Cookie: ck1=ck1;Domain=.rlcdn.com;Expires=Fri, 10-May-2013 02:10:26 GMT
Content-Length: 0
Connection: keep-alive
GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353031828&publisher_dsp_id=2101&external_user_id=bb7b22d3-878f-4381-8773-56e1a549b36c HTTP/1.1

Host: tap.rubiconproject.com
GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353031828&amp;publisher_dsp_id=2101&amp;external_user_id=bb7b22d3-878f-4381-8773-56e1a549b36c HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=7bc846a7070c2567dd4ff23d1d0c55d6adab698c&amp;publisher_dsp_id=2101&amp;publisher_call_type=iframe&amp;publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/
Cookie: rpb=14240%3D1%265671%3D1%265328%3D1%2611782%3D1%267259%3D1%264212%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825; put_2596=638666723796440208; put_2021=509f09120ad142ba0e36db88; put_2530=2909467098864709221; put_2081=AM-00000002437996434; put_2025=e7249c14-880b-4694-bf6a-096c3266ffaf; put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; put_2211=4613164013989199887; cd=false; au=H9DJ0IHI-K8E7-10.250.151.242; dq=2|2|0|0; lm=&quot;11 Nov 2012 02:10:27 GMT&quot;; put_1185=3252349652729275564
HTTP/1.1 302 Moved Temporarily

Content-Type: text/plain; charset=UTF-8
Date: Sun, 11 Nov 2012 02:10:28 GMT
Server: TRP Apache-Coyote/1.1
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Location: http://pixel.rubiconproject.com/tap.php?v=5852&amp;nid=2101&amp;put=bb7b22d3-878f-4381-8773-56e1a549b36c
Content-Length: 0
Cache-Control: private
Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 02:10:28 GMT; Path=/ dq=3|3|0|0; Expires=Mon, 11-Nov-2013 02:10:28 GMT; Path=/ put_2101=&quot;&quot;; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm=&quot;11 Nov 2012 02:10:28 GMT&quot;; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Keep-Alive: timeout=5, max=169
Connection: Keep-Alive
GET /r/p/1056?uid=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

Host: pix.bit.ly

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:10:28 GMT
Location: http://pix.bit.ly/s/1x1.gif?id=GVo3IYEfhxKjEI6Pws7TAWWNmhc%3D
Server: nginx
Set-Cookie: _1056=1; Path=/
Content-Length: 0
Connection: keep-alive
GET /tap.php?v=5852&nid=2101&put=bb7b22d3-878f-4381-8773-56e1a549b36c HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=5852&amp;nid=2101&amp;put=bb7b22d3-878f-4381-8773-56e1a549b36c HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=7bc846a7070c2567dd4ff23d1d0c55d6adab698c&amp;publisher_dsp_id=2101&amp;publisher_call_type=iframe&amp;publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/
Cookie: rpb=14240%3D1%265671%3D1%265328%3D1%2611782%3D1%267259%3D1%264210%3D1%269047%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265328%3D25074%2C0%2C1%2C%2C%2611782%3D25074%2C0%2C1%2C14%2C%267259%3D25074%2C0%2C1%2C%2C%264210%3D25074%2C0%2C1%2C%2C%269047%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825; put_2596=638666723796440208; put_2021=509f09120ad142ba0e36db88; put_2530=2909467098864709221; put_2081=AM-00000002437996434; put_2025=e7249c14-880b-4694-bf6a-096c3266ffaf; put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; put_2211=4613164013989199887; cd=false; au=H9DJ0IHI-K8E7-10.250.151.242; lm=&quot;11 Nov 2012 02:10:28 GMT&quot;; put_1185=3252349652729275564; put_1523=687628aa-b545-45d0-aec1-35b5e1085687; put_2147=8y1idK1iSa
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:28 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%265671%3D1%265328%3D1%2611782%3D1%267259%3D1%264210%3D1%269047%3D1%265852%3D1; expires=Tue, 11-Dec-2012 02:10:28 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25074%2C0%2C1%2C%2C%265328%3D25074%2C0%2C1%2C%2C%2611782%3D25074%2C0%2C1%2C14%2C%267259%3D25074%2C0%2C1%2C%2C%264210%3D25074%2C0%2C1%2C%2C%269047%3D25074%2C0%2C1%2C%2C%265852%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:10:28 GMT; path=/; domain=.pixel.rubiconproject.com put_2101=bb7b22d3-878f-4381-8773-56e1a549b36c; expires=Tue, 11-Dec-2012 02:10:28 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9865
Connection: Keep-Alive
GET /cms/v1?esig=1~d1b7a0970db7c0b314d942e728461f2b03f1f713&nwid=10000343293&sigv=1 HTTP/1.1

Host: ad.yieldmanager.com
GET /cms/v1?esig=1~d1b7a0970db7c0b314d942e728461f2b03f1f713&amp;nwid=10000343293&amp;sigv=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: BX=aok7f7589u28j&amp;b=3&amp;s=dd&amp;t=315; uid=uid=f5d3ee34-2ba4-11e2-a859-3fccb208f27a&amp;_hmacv=1&amp;_salt=337838848&amp;_keyid=k1&amp;_hmac=07c65f0485e71adb03342a14bec8a7a19ce65e88; RMBX=aok7f7589u28j&amp;b=3&amp;s=dd&amp;t=315
HTTP/1.1 302 Found

Content-Type: text/plain; charset=utf-8
Date: Sun, 11 Nov 2012 02:10:28 GMT
P3P: policyref=&quot;http://p3p.yahoo.com/w3c/p3p.xml&quot;, CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV&quot;
Location: http://i.w55c.net/m_yahoo.gif?xid=4klyKYksDSDbJtKniTGXZCV_
Cache-Control: private
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: YTS/1.20.13
GET /rum?cm_dsp_id=47&expiration=30&external_user_id=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

Host: r.casalemedia.com
GET /rum?cm_dsp_id=47&amp;expiration=30&amp;external_user_id=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Expires: Sun, 11 Nov 2012 02:10:28 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 11 Nov 2012 02:10:28 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: CMID=sEohXUPS1IwAABmNlZ8AAAAI;domain=casalemedia.com;path=/;expires=Mon, 11 Nov 2013 02:10:28 GMT CMPS=133;domain=casalemedia.com;path=/;expires=Sat, 09 Feb 2013 02:10:28 GMT CMPP=007;domain=casalemedia.com;path=/;expires=Sat, 09 Feb 2013 02:10:28 GMT CMRUM2=2f0000001e687628aa-b545-45d0-aec1-35b5e1085687;domain=casalemedia.com;path=/;expires=Mon, 11 Nov 2013 02:10:28 GMT CMST=UJ8JFFCfCRQA;domain=casalemedia.com;path=/;expires=Mon, 12 Nov 2012 02:10:28 GMT CMSC=UJ8JFA**;domain=casalemedia.com;path=/; CMDD=;domain=casalemedia.com;path=/;expires=Mon, 12 Nov 2012 02:10:28 GMT
GET /m.gif?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&ei=ADBRITE&cver=1&euid=MTY4MzYyMDgxeDAuMjQ5IDEzNTI1OTk4Mjh4MjEyMzk1Nzk5Ng HTTP/1.1

Host: i.w55c.net
GET /m.gif?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&amp;ei=ADBRITE&amp;cver=1&amp;euid=MTY4MzYyMDgxeDAuMjQ5IDEzNTI1OTk4Mjh4MjEyMzk1Nzk5Ng HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: wfivefivec=687628aa-b545-45d0-aec1-35b5e1085687; matchrubicon=1; matchbluekai=1; matchaccuen=1; matchappnexus=1; matchcrwdctrl=1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:28 GMT
Server: Jetty(6.1.22)
Set-Cookie: wfivefivec=687628aa-b545-45d0-aec1-35b5e1085687;Path=/;Domain=.w55c.net;Expires=Tue, 11-Nov-14 02:10:28 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Cache-Control: no-store
X-Powered-By: Mirror Image Internet
Content-Length: 42
Via: 1.1 lhr061010 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /adscores/g.pixel?sid=9232829800 HTTP/1.1

Host: adadvisor.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Date: Sun,  11 Nov 2012 02:10:28 GMT
Connection: close
Server: AAWebServer
P3P: policyref=&quot;http://www.adadvisor.net/w3c/p3p.xml&quot;,CP=&quot;NOI NID&quot;
Content-Length: 0
Location: http://i.w55c.net/d.gif?t=4&amp;ei=targus&amp;id=7c5d7c864bda4aeaafe2ae21fc29867b&amp;t.score=000&amp;t.zip=&amp;t.in1.age=&amp;t.in1.gender=&amp;t.in1.timestamp=&amp;t.in2.age=&amp;t.in2.gender=&amp;t.in2.timestamp=
GET /rs?id=d777fecd6cb849b4bab0bfe71d57747a&t=product&name=FBX_NotMatched HTTP/1.1

Host: i.w55c.net
GET /rs?id=d777fecd6cb849b4bab0bfe71d57747a&amp;t=product&amp;name=FBX_NotMatched HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: wfivefivec=687628aa-b545-45d0-aec1-35b5e1085687; matchrubicon=1; matchbluekai=1; matchaccuen=1; matchappnexus=1; matchcrwdctrl=1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:28 GMT
Server: Jetty(6.1.22)
Set-Cookie: wfivefivec=687628aa-b545-45d0-aec1-35b5e1085687;Path=/;Domain=.w55c.net;Expires=Tue, 11-Nov-14 02:10:28 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Cache-Control: no-store
X-Powered-By: Mirror Image Internet
Content-Length: 42
Via: 1.1 lhr061006 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /sync?type=TYPE&key=dataxu&uid=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

Host: sync.adap.tv
GET /sync?type=TYPE&amp;key=dataxu&amp;uid=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: text/plain
Server: adaptv/1.0
Connection: Keep-Alive
Set-Cookie: rtbData0=&quot;key=dataxu:value=687628aa-b545-45d0-aec1-35b5e1085687:expiresAt=Wed+Jan+09+18%3A10%3A28+PST+2013:32-Compatible=true&quot;;Path=/;Domain=.adap.tv;Expires=Tue, 11-Nov-2014 02:10:28 GMT
Content-Length: 0
GET /pixel.gif/687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

Host: dx3723.tinyurl.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/gif
Accept-Ranges: bytes
Etag: &quot;851117096&quot;
Last-Modified: Tue, 12 Jul 2011 17:09:05 GMT
Content-Length: 43
Connection: close
Date: Sun, 11 Nov 2012 02:10:28 GMT
Server: TinyURL/1.6
GET /d.gif?t=4&ei=targus&id=7c5d7c864bda4aeaafe2ae21fc29867b&t.score=000&t.zip=&t.in1.age=&t.in1.gender=&t.in1.timestamp=&t.in2.age=&t.in2.gender=&t.in2.timestamp= HTTP/1.1

Host: i.w55c.net
GET /d.gif?t=4&amp;ei=targus&amp;id=7c5d7c864bda4aeaafe2ae21fc29867b&amp;t.score=000&amp;t.zip=&amp;t.in1.age=&amp;t.in1.gender=&amp;t.in1.timestamp=&amp;t.in2.age=&amp;t.in2.gender=&amp;t.in2.timestamp= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: wfivefivec=687628aa-b545-45d0-aec1-35b5e1085687; matchrubicon=1; matchbluekai=1; matchaccuen=1; matchappnexus=1; matchcrwdctrl=1; matchcasale=1; matchadbrite=1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:28 GMT
Server: Jetty(6.1.22)
Set-Cookie: wfivefivec=687628aa-b545-45d0-aec1-35b5e1085687;Path=/;Domain=.w55c.net;Expires=Tue, 11-Nov-14 02:10:28 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Cache-Control: no-store
X-Powered-By: Mirror Image Internet
Content-Length: 42
Via: 1.1 lhr061012 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /360787.gif?redirect=1&rl=72b6c94279fc9863b71be59506e33e990072260d41dacbb876f009401ef848e2fd902b7f109e3e344b025e7dc8f24bd4815e976a1799d4dd HTTP/1.1

Host: idsync.rlcdn.com
GET /360787.gif?redirect=1&amp;rl=72b6c94279fc9863b71be59506e33e990072260d41dacbb876f009401ef848e2fd902b7f109e3e344b025e7dc8f24bd4815e976a1799d4dd HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: ck1=ck1
HTTP/1.1 200 OK

Content-Type: image/gif; charset=ISO-8859-1
Cache-Control: no-cache, no-store
Date: Sun, 11 Nov 2012 02:10:28 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP: &quot;NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE&quot;
Set-Cookie: rlas3=&quot;rhCFvhep7WvgCLxTzUAPvZYmzI8YdnkEUS0Y7fFTVVA=&quot;;Version=1;Domain=.rlcdn.com;Expires=Fri, 10-May-2013 02:10:28 GMT;Max-Age=15552000 rtn1=a0f4d9677eb6b375a82b3317c7815564;Domain=.rlcdn.com;Expires=Fri, 10-May-2013 02:10:28 GMT
Content-Length: 43
Connection: keep-alive
GET /s/1x1.gif?id=GVo3IYEfhxKjEI6Pws7TAWWNmhc%3D HTTP/1.1

Host: pix.bit.ly

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: _1056=1
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: public
Date: Sun, 11 Nov 2012 02:10:28 GMT
Etag: &quot;69a45cc1c6776232fc42b5f36986a69da596d501&quot;
Last-Modified: Thu, 09 Aug 2012 18:44:33 GMT
Server: nginx
Content-Length: 52
Connection: keep-alive
GET /m_yahoo.gif?xid=4klyKYksDSDbJtKniTGXZCV_ HTTP/1.1

Host: i.w55c.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: wfivefivec=687628aa-b545-45d0-aec1-35b5e1085687; matchrubicon=1; matchbluekai=1; matchaccuen=1; matchappnexus=1; matchcrwdctrl=1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:10:28 GMT
Server: Jetty(6.1.22)
Set-Cookie: wfivefivec=687628aa-b545-45d0-aec1-35b5e1085687;Path=/;Domain=.w55c.net;Expires=Tue, 11-Nov-14 02:10:28 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Cache-Control: no-store
X-Powered-By: Mirror Image Internet
Content-Length: 42
Via: 1.1 lhr061012 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /red/usync?pid=5&puid=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

Host: su.addthis.com
GET /red/usync?pid=5&amp;puid=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/png
Server: Apache-Coyote/1.1
Set-Cookie: di=%7B%225%22%3A%22687628aa-b545-45d0-aec1-35b5e1085687%22%7D..; Domain=.addthis.com; Expires=Tue, 11-Nov-2014 02:10:28 GMT; Path=/ uid=509f0914641bba5c; Domain=.addthis.com; Expires=Tue, 11-Nov-2014 02:10:28 GMT; Path=/
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NON ADM OUR DEV IND COM STA&quot;
Content-Length: 67
Date: Sun, 11 Nov 2012 02:10:28 GMT
Connection: close
GET /e/dataxu_sync.xgi?na_exid=687628aa-b545-45d0-aec1-35b5e1085687 HTTP/1.1

Host: e.nexac.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Found

Content-Type: text/html
Expires: Wed Sep 15 09:14:42 MDT 2010
Pragma: no-cache
P3P: policyref=&quot;http://www.nextaction.net/P3P/PolicyReferences.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa TAIo PSAo PSDo HISa OUR DELa SAMo UNRo OTRo BUS UNI PUR COM NAV INT DEM STA PRE&quot;
Set-Cookie: na_tc=Y; expires=Sat, 30-Nov-2013 22:00:00 GMT; domain=.nexac.com; path=/
Location: http://e.nexac.com/e/xrefid.xgi?na_exid=687628aa-b545-45d0-aec1-35b5e1085687&amp;na_pid=2460
Content-Length: 0
Date: Sun, 11 Nov 2012 02:10:28 GMT
Server: lighttpd/1.4.31
GET /e/xrefid.xgi?na_exid=687628aa-b545-45d0-aec1-35b5e1085687&na_pid=2460 HTTP/1.1

Host: e.nexac.com
GET /e/xrefid.xgi?na_exid=687628aa-b545-45d0-aec1-35b5e1085687&amp;na_pid=2460 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: na_tc=Y
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Wed Sep 15 09:14:42 MDT 2010
Pragma: no-cache
P3P: policyref=&quot;http://www.nextaction.net/P3P/PolicyReferences.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa TAIo PSAo PSDo HISa OUR DELa SAMo UNRo OTRo BUS UNI PUR COM NAV INT DEM STA PRE&quot;
Set-Cookie: na_tc=Y; expires=Sat, 30-Nov-2013 22:00:00 GMT; domain=.nexac.com; path=/
X-Powered-By: Jigawatts
Content-Length: 43
Date: Sun, 11 Nov 2012 02:10:28 GMT
Server: lighttpd/1.4.31
GET /partner/scripts/rubicon/page_parser.js?d=www.mediafire.com HTTP/1.1

Host: tap-cdn.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=51616
Cookie: rpb=14240%3D1%265671%3D1%265328%3D1%2611782%3D1%267259%3D1%264210%3D1%269047%3D1%265852%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db40d509f0911c39f8cdd523f92^1^1352599825^3282013405; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3320234.js^1^1352599825^1352599825; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352599825^1352599825; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352599825^1352599825; put_2596=638666723796440208; put_2021=509f09120ad142ba0e36db88; put_2530=2909467098864709221; put_2081=AM-00000002437996434; put_2025=e7249c14-880b-4694-bf6a-096c3266ffaf; put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; put_2211=4613164013989199887; cd=false; au=H9DJ0IHI-K8E7-10.250.151.242; lm=&quot;11 Nov 2012 02:10:28 GMT&quot;; put_1185=3252349652729275564; put_1523=687628aa-b545-45d0-aec1-35b5e1085687; put_2147=8y1idK1iSa; put_2101=bb7b22d3-878f-4381-8773-56e1a549b36c
HTTP/1.1 200 OK

Content-Type: text/javascript;charset=UTF-8
Server: TRP Apache-Coyote/1.1
Last-Modified: Sat, 10 Nov 2012 13:56:39 GMT
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Content-Encoding: gzip
Cache-Control: max-age=3600
Expires: Sun, 11 Nov 2012 03:10:29 GMT
Date: Sun, 11 Nov 2012 02:10:29 GMT
Content-Length: 5705
Connection: keep-alive
Vary: Accept-Encoding
POST / HTTP/1.1

Host: ocsp.verisign.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
HTTP/1.0 200 Ok

Content-Type: application/ocsp-response
Last-Modified: Fri, 09 Nov 2012 00:41:57 GMT
Expires: Fri, 16 Nov 2012 00:41:57 GMT
Content-Transfer-Encoding: binary
Content-Length: 1814
Cache-Control: max-age=426688, public, no-transform, must-revalidate
Date: Sun, 11 Nov 2012 02:10:29 GMT
nncoection: close
Connection: Keep-Alive
GET /dialog/oauth?client_id=124578887583575&response_type=token%2Csigned_request%2Ccode&display=none&domain=www.mediafire.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Df311719c1dc1bca%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff146ab6b8e0d656%26domain%3Dwww.mediafire.com%26relation%3Dparent&sdk=joey HTTP/1.1

Host: www.facebook.com
GET /dialog/oauth?client_id=124578887583575&amp;response_type=token%2Csigned_request%2Ccode&amp;display=none&amp;domain=www.mediafire.com&amp;origin=1&amp;redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Df311719c1dc1bca%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff146ab6b8e0d656%26domain%3Dwww.mediafire.com%26relation%3Dparent&amp;sdk=joey HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Cache-Control: private, no-cache, no-store, must-revalidate
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: http://static.ak.facebook.com/connect/xd_arbiter.php?version=17#cb=f311719c1dc1bca&amp;origin=http%3A%2F%2Fwww.mediafire.com%2Ff146ab6b8e0d656&amp;domain=www.mediafire.com&amp;relation=parent&amp;error=unknown_user
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-FB-Debug: KWT+Iw7KjmxQcIur+o+nPXwF/JE6SOU4bEbf99nMIoE=
Date: Sun, 11 Nov 2012 02:10:29 GMT
Connection: keep-alive
Content-Length: 0
GET /qgc2klbguwkg/5nwz1uz1r4ddec4/PotPlayerPortable_1.5.34321_Beta_azo.exe HTTP/1.1

Host: 205.196.122.8

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Location: http://www.mediafire.com/?5nwz1uz1r4ddec4
Connection: Close