Overview

URLhttp://199.91.153.36/b4v0hf1h02cg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe
IP199.91.153.36
ASNAS46179 MediaFire, LLC
Location United States
Report completed2012-11-11 03:14:31 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-11 03:13:37 205.196.120.8 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-11 03:13:39 217.115.140.114 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-11 03:13:40 173.194.69.100 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-11 03:13:40 195.159.219.9 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
2012-11-11 03:13:40 173.194.69.95 urlQuery Client3FILEMAGIC Macromedia Flash data (compressed),
Snort /w Sourcefire VRT
Timestamp Source IP Destination IP Severity Alert
2012-11-11 03:13:38 urlQuery Client 72.233.61.1232ssp_ssl: Invalid Client HELLO after Server HELLO Detected
2012-11-11 03:13:38 urlQuery Client 72.233.61.1232ssp_ssl: Invalid Client HELLO after Server HELLO Detected


Recent reports on same IP/ASN/Domain

Last 5 reports on IP: 199.91.153.36

Date Alerts / IDS URL IP
2013-03-08 01:52:120 / 3http://199.91.153.36/x5at4ttwk7jg/1tfzxkpxrbr3bpe/PopiTVsetupTR.exe199.91.153.36
2013-03-07 08:30:111 / 3http://199.91.153.36/vss4ka2ccyqg/a8w7po5zbwrt3lb/The_Hackers_Underground_Handbook.pd (...)199.91.153.36
2012-11-11 13:44:070 / 4http://199.91.153.36/89lh826qu6qg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe199.91.153.36
2012-11-11 13:43:360 / 4http://199.91.153.36/xflxpvungsfg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe199.91.153.36
2012-11-11 06:11:000 / 5http://199.91.153.36/1m5io04cblvg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe199.91.153.36

Last 6 reports on ASN: AS46179 MediaFire, LLC

Date Alerts / IDS URL IP
2013-03-18 06:48:160 / 0http://199.91.153.178/7gql7pi034ag/ox9699g479blej9/popitvsetupws.exe199.91.153.178
2013-03-18 06:48:020 / 1http://199.91.152.73/1egps15xx0ug/ox9699g479blej9/PopiTVsetupWS.exe199.91.152.73
2013-03-18 06:47:330 / 1http://199.91.153.26/6d64uz513u7g/1tfzxkpxrbr3bpe/popitvsetuptr.exe199.91.153.26
2013-03-18 06:47:320 / 1http://205.196.122.239/sj677b2o7jkg/1tfzxkpxrbr3bpe/popitvsetuptr.exe205.196.122.239
2013-03-18 06:44:210 / 1http://199.91.153.60/7hfhcqsxeueg/1tfzxkpxrbr3bpe/popitvsetuptr.exe199.91.153.60
2013-03-18 06:44:080 / 1http://199.91.152.73/j6nbtj598w2g/ox9699g479blej9/popitvsetupws.exe199.91.152.73

Last 5 reports on domain: 199.91.153.36

Date Alerts / IDS URL IP
2013-03-08 01:52:120 / 3http://199.91.153.36/x5at4ttwk7jg/1tfzxkpxrbr3bpe/PopiTVsetupTR.exe199.91.153.36
2013-03-07 08:30:111 / 3http://199.91.153.36/vss4ka2ccyqg/a8w7po5zbwrt3lb/The_Hackers_Underground_Handbook.pdf199.91.153.36
2012-11-11 13:44:070 / 4http://199.91.153.36/89lh826qu6qg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe199.91.153.36
2012-11-11 13:43:360 / 4http://199.91.153.36/xflxpvungsfg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe199.91.153.36
2012-11-11 06:11:000 / 5http://199.91.153.36/1m5io04cblvg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe199.91.153.36



JavaScript

Executed Scripts (69)


Executed Evals (15)

#1 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(0);

#2 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(1);

#3 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(10);

#4 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(11);

#5 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(12);

#6 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(13);

#7 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(14);

#8 JavaScript::Eval (size: 21, repeated: 1)

setMatcherCookie(15);

#9 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(2);

#10 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(4);

#11 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(5);

#12 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(6);

#13 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(7);

#14 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(8);

#15 JavaScript::Eval (size: 20, repeated: 1)

setMatcherCookie(9);

Executed Writes (41)

#1 JavaScript::Write (size: 245, repeated: 1)

<!-- BEGIN JS TAG - [Mediafire - Rubicon] - Default < - DO NOT MODIFY -->
<SCRIPT SRC="http://ads.cpxinteractive.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44" TYPE="text/javascript"></script>
<!-- END TAG -->

#2 JavaScript::Write (size: 244, repeated: 1)

<!-- BEGIN JS TAG - [Mediafire - Rubicon] - Default < - DO NOT MODIFY -->
<SCRIPT SRC="http://ads.cpxinteractive.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44" TYPE="text/javascript"></script>
<!-- END TAG -->

#3 JavaScript::Write (size: 221, repeated: 1)

<!-- BEGIN STANDARD TAG - 160 x 600 - ROS: NO - DO NOT MODIFY -->
<SCRIPT TYPE="text/javascript" SRC="http://ad.yieldmanager.com/st?ad_type=ad&ad_size=160x600&section=3434596&pub_url=${PUB_URL}"></script>
<!-- END TAG -->

#4 JavaScript::Write (size: 9, repeated: 5)

</script>

#5 JavaScript::Write (size: 123, repeated: 1)

<SCRIPT TYPE="text/javascript" SRC="http://ad.yieldmanager.com/imp?Z=160x600&s=3434596&_salt=1669402311&B=10&r=0"></SCRIPT>

#6 JavaScript::Write (size: 582, repeated: 1)

<a href="http://ib.adnxs.com/click?A7aDEfsEoD8DtoMR-wSgPwAAAEAzM8M_A7aDEfsEoD8DtoMR-wSgP5pmgWZrqVBroArzhH1cTlHSCZ9QAAAAAHZYCwAdAgAAHQIAAAIAAAAyVRQAKkACAAAAAQBVU0QAVVNEACwB-gBNUQAAuUkAAgQCAQUAAIIAvh500wAAAAA./cnd=%218QTZKgjwvQ8QsqpRGKqACSAE/referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGJrNhbS2raqoayIPMTk1LjE1OS4xNDAuMjIyKAE." target="_blank"><img width="300" height="250" style="border-style: none" src="http://cdn.adnxs.com/p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png"/></a>

#7 JavaScript::Write (size: 581, repeated: 1)

<a href="http://ib.adnxs.com/click?N4lBYOXQkj83iUFg5dCSPwAAAEAzM8M_N4lBYOXQkj83iUFg5dCSP2NQ1UltzSR0oArzhH1cTlHSCZ9QAAAAAHZYCwAdAgAAHQIAAAIAAAA2VRQAKkACAAAAAQBVU0QAVVNEANgCWgBNUQAAnkwAAgQCAQUAAIIAlCE0CQAAAAA./cnd=%219QT9KgjwvQ8QtqpRGKqACSAE/referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGOOg1c7UrbOSdCIPMTk1LjE1OS4xNDAuMjIyKAE." target="_blank"><img width="728" height="90" style="border-style: none" src="http://cdn.adnxs.com/p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png"/></a>

#8 JavaScript::Write (size: 58, repeated: 1)

<div id="recaptcha_widget_div" style="display:none"></div>

#9 JavaScript::Write (size: 27, repeated: 1)

<div id="theToolTip"></div>

#10 JavaScript::Write (size: 198, repeated: 2)

<iframe src="http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1" width="1" height="1" frameborder="0" scrolling="No" marginheight="0" marginwidth="0" topmargin="0" leftmargin="0"></iframe>

#11 JavaScript::Write (size: 101, repeated: 1)

<iframe src='http://cti.w55c.net/ct/rubicon-cms2.html' width='1' height='1' frameborder='0'></iframe>

#12 JavaScript::Write (size: 767, repeated: 1)

<iframe width="300" height="250" noresize="noresize" scrolling="no"
        frameborder="0" marginheight="0" marginwidth="0"
        src="http://mymedia.adspirit.de/adframe.php?pid=11&ord=0.773610935288184&rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/9685-15.3338758.3406494?url="
        ALLOWTRANSPARENCY="true">
 <a href="http://mymedia.adspirit.de/adnoclick.php?pid=11&ord=0.773610935288184&rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/9685-15.3338758.3406494?url=" target="_top">
  <img src="http://mymedia.adspirit.de/adnoframe.php?pid=11&ord=0.773610935288184&rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/9685-15.3338758.3406494?url="
       alt="Hier klicken!" border="0" width="300" height="250" />
 </a>
</noscript>

#13 JavaScript::Write (size: 1177, repeated: 1)

<object type="application/x-shockwave-flash" data="http://content.yieldmanager.edgesuite.net/atoms/2e/f5/2c/0b/2ef52c0b0f67f2d61fbde96e1dfd95cd.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJytjdlugzAQRb8mb4C8sQn1wYTSkgTaUEeRH63YCU4hoNSVq3x9KUHtD%2ERqNDozdxaIE%2DKDWMhYSoFC4YMwgVgoiVXgR6EDkiQJQRAQDKLYQed9u0R1X1GaeS8RnVRclpW9Iz39pP7Or5Ofpk%2D1fJt9tq7X9F%2DUPZN6N3Mx%2ET1lEQ3Q1g1Zn%2E6NccJvB8zRI9mwleZsZ0qWt6WGuuq2drOvdMlWTXXmiN8KUtrfzQfHaYwZFpguUD6GtdbrlNTiqK%2EKO%2ETd2DOqG1ph1MfIrb68m34EqY7iszUuDOBXAKA7197QjMfy6wJnEQIYfQNKLWxT%2C" height="600" width="160" loop="false" wmode="opaque"><param name="wmode" value="opaque"><param name="movie" value="http://content.yieldmanager.edgesuite.net/atoms/2e/f5/2c/0b/2ef52c0b0f67f2d61fbde96e1dfd95cd.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJytjdlugzAQRb8mb4C8sQn1wYTSkgTaUEeRH63YCU4hoNSVq3x9KUHtD%2ERqNDozdxaIE%2DKDWMhYSoFC4YMwgVgoiVXgR6EDkiQJQRAQDKLYQed9u0R1X1GaeS8RnVRclpW9Iz39pP7Or5Ofpk%2D1fJt9tq7X9F%2DUPZN6N3Mx%2ET1lEQ3Q1g1Zn%2E6NccJvB8zRI9mwleZsZ0qWt6WGuuq2drOvdMlWTXXmiN8KUtrfzQfHaYwZFpguUD6GtdbrlNTiqK%2EKO%2ETd2DOqG1ph1MfIrb68m34EqY7iszUuDOBXAKA7197QjMfy6wJnEQIYfQNKLWxT%2C" /></object>

#14 JavaScript::Write (size: 52, repeated: 1)

<script language="JavaScript" type="text/javascript"

#15 JavaScript::Write (size: 53, repeated: 4)

<script language="JavaScript" type="text/javascript">

#16 JavaScript::Write (size: 131, repeated: 1)

<script type="text/javascript" SRC="http://tap.rubiconproject.com/partner/agent/rubicon/channels.js?cb=oz_onPixelsLoaded"></script>

#17 JavaScript::Write (size: 87, repeated: 3)

<script type="text/javascript" src="http://ads.rubiconproject.com/ad/3196.js"></script>

#18 JavaScript::Write (size: 235, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/27309-15.js?cb=0.2238489817705117&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#19 JavaScript::Write (size: 232, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-15.js?cb=0.78294849709648&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#20 JavaScript::Write (size: 234, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-2.js?cb=0.38740446134792095&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#21 JavaScript::Write (size: 234, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-9.js?cb=0.30820219968579354&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#22 JavaScript::Write (size: 98, repeated: 1)

<script type="text/javascript" src="http://www.google.com/recaptcha/api/js/recaptcha.js"></script>

#23 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3320011" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#24 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3320015" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#25 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3406494" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#26 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3421021" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#27 JavaScript::Write (size: 498, repeated: 2)

<script> var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6035951", c3: "122134" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })(); </script> <noscript> <img src="http://b.scorecardresearch.com/p?c1=8&c2=&c3=&c4=&c5=&c6=&c15=&cv=2.0&cj=1" /> </noscript>

#28 JavaScript::Write (size: 104, repeated: 1)

<script>Recaptcha.widget = Recaptcha.$("recaptcha_widget_div"); Recaptcha.challenge_callback();</script>

#29 JavaScript::Write (size: 1901, repeated: 1)

<span id="asmspan_6292722" class="asm_flash" style="font-size:1px;"><object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"  codebase="https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=9,0,0,0" id="adspiritflash6292722" width="300" height="250"> <param name="movie" value="http://img17.adspirit.de/banner/mymedia/6/2012-07-20/0_NO_forgeofempire_eng_300x250.swf"> <param name="flashvars" value="&clickTAG=http%3A%2F%2Foptimized-by.rubiconproject.com%2Ft%2F3196%2F3346%2F9685-15.3338758.3406494%3Furl%3Dhttp%253A%252F%252Fmymedia.adspirit.de%252Fadclick.php%253Ftz%253D1352600018%253Bpid%253D11%253Bkid%253D6%253Bwmid%253D32%253Bwsid%253D4%253Buid%253D1%253Bord%253D1352600018%253Bct%253D0%253Btarget%253D&&id=adspiritflash6292722">  <param name="quality" value="autohigh">  <param name="transparency" value="yes">  <param name="allowFullScreen" value="true">  <param name="allowScriptAccess" value="always">  <param name="allowNetworking" value="all">  <param name="wmode" value="transparent">  <param name="swLiveConnect" value="true">  <embed src="http://img17.adspirit.de/banner/mymedia/6/2012-07-20/0_NO_forgeofempire_eng_300x250.swf" flashvars="&clickTAG=http%3A%2F%2Foptimized-by.rubiconproject.com%2Ft%2F3196%2F3346%2F9685-15.3338758.3406494%3Furl%3Dhttp%253A%252F%252Fmymedia.adspirit.de%252Fadclick.php%253Ftz%253D1352600018%253Bpid%253D11%253Bkid%253D6%253Bwmid%253D32%253Bwsid%253D4%253Buid%253D1%253Bord%253D1352600018%253Bct%253D0%253Btarget%253D&&id=adspiritflash6292722" allowNetworking="all" allowFullScreen="true" allowScriptAccess="always" name="adspiritflash6292722"  transperency="yes" swLiveConnect="true" width="300" height="250" quality="autohigh" type="application/x-shockwave-flash"  pluginspage="https://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash"  wmode="transparent"  menu="false"> </embed></object></span>

#30 JavaScript::Write (size: 70, repeated: 1)

src="http://ads.rubiconproject.com/ad/3196.js?cb=0.20642726443399506">

#31 JavaScript::Write (size: 26, repeated: 3)

var rp_account   = "3196";

#32 JavaScript::Write (size: 24, repeated: 1)

var rp_account = "3196";

#33 JavaScript::Write (size: 24, repeated: 3)

var rp_adtype    = "js";

#34 JavaScript::Write (size: 21, repeated: 1)

var rp_adtype = "js";

#35 JavaScript::Write (size: 26, repeated: 3)

var rp_site      = "3346";

#36 JavaScript::Write (size: 21, repeated: 1)

var rp_site = "3346";

#37 JavaScript::Write (size: 81, repeated: 4)

var rp_smartfile = "http://www.mediafire.com/templates/ads/revv_smart_file.html";

#38 JavaScript::Write (size: 30, repeated: 1)

var rp_zonesize  = "27309-15";

#39 JavaScript::Write (size: 29, repeated: 1)

var rp_zonesize  = "9685-15";

#40 JavaScript::Write (size: 28, repeated: 1)

var rp_zonesize  = "9685-9";

#41 JavaScript::Write (size: 27, repeated: 1)

var rp_zonesize = "9685-2";


HTTP Transactions (164)


Request Response
GET /css/mfv3_85677.php?ver=nonssl HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: text/css
Pragma: public
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 37605
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1

Host: cdn.mediafire.com
GET /css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: text/css
Pragma: public
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 52116
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /?4p5wab4oqodaj44 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:32 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Expires: 0
Set-Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt; expires=Sun, 12-Oct-2014 02:13:32 GMT; path=/; domain=.mediafire.com; httponly
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17018
Connection: close
Server: MediaFire
GET /css?family=Open+Sans:800,400,700 HTTP/1.1

Host: fonts.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: text/css
Expires: Sun, 11 Nov 2012 02:13:33 GMT
Date: Sun, 11 Nov 2012 02:13:33 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Content-Length: 318
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
GET /blank.html HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Last-Modified: Tue, 18 Sep 2012 21:44:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 78
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /images/icons/ajax-loader-grey_round.gif HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: image/gif
Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT
Accept-Ranges: bytes
Content-Length: 1775
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /images/buttons/btn_facebook_connect.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT
Accept-Ranges: bytes
Content-Length: 2315
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /images/buttons/btn_facebook_allowemail.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT
Accept-Ranges: bytes
Content-Length: 941
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /images/buttons/btn_twitter_connect.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT
Accept-Ranges: bytes
Content-Length: 1799
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /images/icons/dropdown-arrow-left-white.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT
Accept-Ranges: bytes
Content-Length: 123
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /images/logos/logo_v2.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Mon, 16 Jul 2012 19:28:31 GMT
Accept-Ranges: bytes
Content-Length: 3708
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /images/icons/icon-sprite-16-v3.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 02 Oct 2012 17:01:27 GMT
Accept-Ranges: bytes
Content-Length: 61715
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1

Host: platform.twitter.com
GET /widgets/follow_button.html?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Cache-Control: public, max-age=1800
Last-Modified: Thu, 08 Nov 2012 09:18:41 GMT
Etag: &quot;567a94a4e136d5c4b7bfde258474cfa6&quot;
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 25717
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
P3P: CP=&quot;CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT&quot;
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT
HTTP/1.1 200 OK

Content-Type: text/javascript
Content-Length: 14888
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Sat, 10 Nov 2012 20:33:27 GMT
Expires: Sun, 11 Nov 2012 08:33:27 GMT
Vary: Accept-Encoding
Age: 20406
Cache-Control: max-age=43200, public
Server: GFE/2.0
GET /ajax/libs/jquery/1.7.2/jquery.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT
Date: Fri, 09 Nov 2012 20:33:45 GMT
Expires: Sat, 09 Nov 2013 20:33:45 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 73891
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 106788
GET /images/icons/information_darkblue.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT
Accept-Ranges: bytes
Content-Length: 722
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /images/backgrounds/download/rockmelt/rockmelt_dl_btn.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Tue, 05 Jun 2012 20:08:44 GMT
Accept-Ranges: bytes
Content-Length: 7653
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /images/favicon/download.ico HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: image/vnd.microsoft.icon
Date: Sun, 11 Nov 2012 02:13:33 GMT
Last-Modified: Thu, 25 Oct 2012 21:59:32 GMT
Accept-Ranges: bytes
Content-Length: 1150
Connection: close
Server: MediaFire
GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1

Host: p.twitter.com
GET /f.gif?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false&amp;twttr_variant=2.0&amp;twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&amp;twttr_widget=0&amp;twttr_hask=0&amp;twttr_li=0&amp;twttr_pid= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false
HTTP/1.1 200 OK

Content-Type: image/gif
Etag: &quot;377d257f2d2e294916143c069141c1c5:1328738114&quot;
Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT
Accept-Ranges: bytes
Content-Length: 43
Cache-Control: no-cache
P3P: CP=&quot;CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT&quot;
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1

Host: www.facebook.com
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&amp;send=false&amp;layout=button_count&amp;width=180&amp;show_faces=false&amp;action=like&amp;colorscheme=light&amp;font&amp;height=80 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Cache-Control: private, no-cache, no-store, must-revalidate
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
X-FB-Debug: uEUXM/XwRa/JFkWh3EsjFyu37dW0FiA/XL8v5OETKcE=
Date: Sun, 11 Nov 2012 02:13:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1

Host: cdn.api.twitter.com
GET /1/users/show.json?screen_name=MediaFire&amp;callback=twttr.setFollowersCount HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&amp;show_count=true&amp;show_screen_name=false
HTTP/1.1 200 OK

Content-Type: application/javascript;charset=utf-8
Last-Modified: Sun, 11 Nov 2012 01:58:31 GMT
Pragma: no-cache
X-Frame-Options: SAMEORIGIN
Status: 200 OK
Content-Encoding: gzip
Content-Length: 897
Server: tfe
Vary: Accept-Encoding
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Expires: Sun, 11 Nov 2012 02:13:33 GMT
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /recaptcha/api/challenge?k=6LextQUAAAAAALlQv0DSHOYxqF3DftRZxA5yebEe HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: text/javascript
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Date: Sun, 11 Nov 2012 02:13:33 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 449
Server: GSE
GET /js/bust_out.js HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 02:13:33 GMT
Last-Modified: Thu, 31 May 2012 19:49:34 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Tue, 11 Dec 2012 02:13:33 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 57
Connection: close
Server: MediaFire
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=302758125&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=473458404&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.1656220837.1352600014.1352600014.1352600014.1%3B%2B__utmz%3D213136648.1352600014.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.7&amp;utms=1&amp;utmn=302758125&amp;utmhn=www.mediafire.com&amp;utme=8(UserType)9(free)&amp;utmcs=UTF-8&amp;utmsr=1176x885&amp;utmvp=1159x778&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=KMPlayerPortable_3.4.0.59_azo.exe&amp;utmhid=473458404&amp;utmr=-&amp;utmp=%2F%3F4p5wab4oqodaj44&amp;utmac=UA-829541-1&amp;utmcc=__utma%3D213136648.1656220837.1352600014.1352600014.1352600014.1%3B%2B__utmz%3D213136648.1352600014.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmu=qQ~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Fri, 09 Nov 2012 20:33:28 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 106805
Server: GFE/2.0
GET /js/encoder.js HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 02:13:33 GMT
Last-Modified: Thu, 05 Jan 2012 22:41:54 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Tue, 11 Dec 2012 02:13:33 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3695
Connection: close
Server: MediaFire
GET /js/master_85677.js HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt
HTTP/1.1 200 OK

Content-Type: text/javascript
Last-Modified: Fri, 09 Nov 2012 23:25:30 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Server: MediaFire
Content-Length: 143613
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1

Host: static.ak.fbcdn.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&amp;send=false&amp;layout=button_count&amp;width=180&amp;show_faces=false&amp;action=like&amp;colorscheme=light&amp;font&amp;height=80
Origin: http://www.facebook.com
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8
Access-Control-Allow-Origin: *
Last-Modified: Mon, 29 Oct 2012 23:55:41 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
X-FB-Debug: mERPLeHfP4bFbWVj/NJRwm2C8x1Lf8geAnYAfFf24WM=
Content-Length: 37945
Vary: Accept-Encoding
Cache-Control: public, max-age=31147170
Expires: Wed, 06 Nov 2013 14:13:03 GMT
Date: Sun, 11 Nov 2012 02:13:33 GMT
Connection: keep-alive
GET /images/ad-loader.gif HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt; __utma=213136648.1656220837.1352600014.1352600014.1352600014.1; __utmb=213136648.1.10.1352600014; __utmc=213136648; __utmz=213136648.1352600014.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/gif
Last-Modified: Tue, 05 Jun 2012 20:09:03 GMT
Accept-Ranges: bytes
Content-Length: 1786
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:34 GMT
Connection: keep-alive
GET /recaptcha/api/js/recaptcha.js HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Expires: Sun, 11 Nov 2012 02:13:34 GMT
Date: Sun, 11 Nov 2012 02:13:34 GMT
Last-Modified: Tue, 12 Jun 2012 14:07:31 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 17531
Server: GSE
Cache-Control: public, max-age=0
Age: 0
POST / HTTP/1.1

Host: ocsp.godaddy.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 106
Content-Type: application/ocsp-request
HTTP/1.1 200 OK

Content-Type: application/ocsp-response
Date: Sun, 11 Nov 2012 02:13:34 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=18950, public, no-transform, must-revalidate
Last-Modified: Sun, 11 Nov 2012 01:46:02 GMT
Expires: Sun, 11 Nov 2012 07:46:02 GMT
Etag: &quot;8c6a4b9dee7b1bc21ddf455dd96406348b7e33d2&quot;
P3P: CP=&quot;IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA&quot;
Content-Length: 1923
Connection: close
GET /templates/linkto/default-729x91-default.php?r=90794 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt; __utma=213136648.1656220837.1352600014.1352600014.1352600014.1; __utmb=213136648.1.10.1352600014; __utmc=213136648; __utmz=213136648.1352600014.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:34 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 666
Connection: close
Server: MediaFire
GET /templates/linkto/default-337x281-default2.php?r=46472 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt; __utma=213136648.1656220837.1352600014.1352600014.1352600014.1; __utmb=213136648.1.10.1352600014; __utmc=213136648; __utmz=213136648.1352600014.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:34 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 787
Connection: close
Server: MediaFire
GET /templates/linkto/default-337x281-default.php?r=45973 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt; __utma=213136648.1656220837.1352600014.1352600014.1352600014.1; __utmb=213136648.1.10.1352600014; __utmc=213136648; __utmz=213136648.1352600014.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:34 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 786
Connection: close
Server: MediaFire
GET /recaptcha/api/img/red/refresh.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sun, 11 Nov 2012 03:00:43 GMT
Date: Sun, 11 Nov 2012 02:00:43 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 974
Server: GSE
Age: 771
Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/audio.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sun, 11 Nov 2012 03:01:22 GMT
Date: Sun, 11 Nov 2012 02:01:22 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 914
Server: GSE
Age: 732
Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/help.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sun, 11 Nov 2012 02:52:43 GMT
Date: Sun, 11 Nov 2012 01:52:43 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 367
Server: GSE
Age: 1251
Cache-Control: public, max-age=3600
GET /images/backgrounds/footer/icn_footer_blog.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt; __utma=213136648.1656220837.1352600014.1352600014.1352600014.1; __utmb=213136648.1.10.1352600014; __utmc=213136648; __utmz=213136648.1352600014.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT
Accept-Ranges: bytes
Content-Length: 171
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:34 GMT
Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_gp.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt; __utma=213136648.1656220837.1352600014.1352600014.1352600014.1; __utmb=213136648.1.10.1352600014; __utmc=213136648; __utmz=213136648.1352600014.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Wed, 29 Aug 2012 21:02:04 GMT
Accept-Ranges: bytes
Content-Length: 312
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:34 GMT
Connection: keep-alive
GET /images/backgrounds/footer/footer_texture.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt; __utma=213136648.1656220837.1352600014.1352600014.1352600014.1; __utmb=213136648.1.10.1352600014; __utmc=213136648; __utmz=213136648.1352600014.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 20:31:25 GMT
Accept-Ranges: bytes
Content-Length: 2649
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:34 GMT
Connection: keep-alive
GET /recaptcha/api/img/red/text.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Sun, 11 Nov 2012 03:02:49 GMT
Date: Sun, 11 Nov 2012 02:02:49 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 155
Server: GSE
Age: 645
Cache-Control: public, max-age=3600
GET /images/backgrounds/newHome/loginActivateFB_v2.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt; __utma=213136648.1656220837.1352600014.1352600014.1352600014.1; __utmb=213136648.1.10.1352600014; __utmc=213136648; __utmz=213136648.1352600014.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT
Accept-Ranges: bytes
Content-Length: 255
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:34 GMT
Connection: keep-alive
GET /recaptcha/api/image?c=03AHJ_VuvO_iR2R0f5EnBxkTFeMwVgjbpZuy0bFcaUuXpyr-93_i1rRnxNsOuTZ29wW94pgHKmqXlYj-mdpPXZNG1_zH3EoqkVHxxhtzq_ss8mK2TcVUn9LLVUpLWmXXvMhH2kCCyG537lPIpNcozj9at6JS02ug5Y-r8mLEaouLuPwau4uxjvkPY HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/jpeg
Expires: Sun, 11 Nov 2012 02:23:34 GMT
Date: Sun, 11 Nov 2012 02:13:34 GMT
Cache-Control: public, max-age=600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 2783
Server: GSE
GET /images/backgrounds/footer/icn_footer_tw.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt; __utma=213136648.1656220837.1352600014.1352600014.1352600014.1; __utmb=213136648.1.10.1352600014; __utmc=213136648; __utmz=213136648.1352600014.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT
Accept-Ranges: bytes
Content-Length: 274
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:34 GMT
Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_fb.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt; __utma=213136648.1656220837.1352600014.1352600014.1352600014.1; __utmb=213136648.1.10.1352600014; __utmc=213136648; __utmz=213136648.1352600014.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT
Accept-Ranges: bytes
Content-Length: 514
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:34 GMT
Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateTW_v2.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&amp;date=2012-11-10
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt; __utma=213136648.1656220837.1352600014.1352600014.1352600014.1; __utmb=213136648.1.10.1352600014; __utmc=213136648; __utmz=213136648.1352600014.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: image/png
Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT
Accept-Ranges: bytes
Content-Length: 387
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 02:13:34 GMT
Connection: keep-alive
GET /ad/3196.js?cb=0.20642726443399506 HTTP/1.1

Host: ads.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=90794
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.3
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3524
Cneonction: close
Cache-Control: max-age=86400
Expires: Mon, 12 Nov 2012 02:13:34 GMT
Date: Sun, 11 Nov 2012 02:13:34 GMT
Connection: keep-alive
GET /ad/3196.js HTTP/1.1

Host: ads.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=46472
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.3
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3524
Cneonction: close
Cache-Control: max-age=86400
Expires: Mon, 12 Nov 2012 02:13:34 GMT
Date: Sun, 11 Nov 2012 02:13:34 GMT
Connection: keep-alive
GET /recaptcha/api/img/red/sprite.png HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK
HTTP/1.1 200 OK

Content-Type: image/png
Expires: Sun, 11 Nov 2012 02:28:13 GMT
Date: Sun, 11 Nov 2012 01:28:13 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 4679
Server: GSE
Age: 2722
Cache-Control: public, max-age=3600
GET /templates/linkto/default-161x601-default.php?r=82032 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt; __utma=213136648.1656220837.1352600014.1352600014.1352600014.1; __utmb=213136648.1.10.1352600014; __utmc=213136648; __utmz=213136648.1352600014.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:34 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 733
Connection: close
Server: MediaFire
GET /en_US/all.js?_=1352600014986 HTTP/1.1

Host: connect.facebook.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: application/x-javascript; charset=utf-8
Etag: &quot;06c9a8ca347f3538149da85e21e875b7&quot;
Content-Encoding: gzip
X-FB-Debug: umo9lwlw6xf6cdd53+B7RQfgyy7CwGvydaHsiGKkdeE=
Content-Length: 58143
Cache-Control: public, max-age=1199
Expires: Sun, 11 Nov 2012 02:33:34 GMT
Date: Sun, 11 Nov 2012 02:13:35 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET /a/3196/3346/9685-2.js?cb=0.38740446134792095&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/9685-2.js?cb=0.38740446134792095&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=90794
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 02:13:37 GMT
Server: RAS/1.3 (Unix)
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;, CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: ruid=592dbbd8509f09d1c39f8cde5e4d54^1^1352600017^3282013406; expires=Sat, 09-Feb-2013 02:13:37 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 03:13:37 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk2=0; expires=Sun, 11-Nov-2012 03:13:37 GMT; max-age=10; path=/; domain=.rubiconproject.com ses2=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=107182; path=/; domain=.rubiconproject.com csi2=3204661.js^1^1352600017^1352600017; expires=Sun, 18-Nov-2012 02:13:37 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=39
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /connect/xd_arbiter.php?version=17 HTTP/1.1

Host: static.ak.facebook.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
X-FB-Debug: QpUXNDPC4a/ZS9XMuzc2WDBWEZ8S2oHPsfImau8uouU=
Content-Length: 9847
Vary: Accept-Encoding
Cache-Control: public, max-age=31454614
Expires: Sun, 10 Nov 2013 03:37:11 GMT
Date: Sun, 11 Nov 2012 02:13:37 GMT
Connection: keep-alive
GET /a/3196/3346/27309-15.js?cb=0.2238489817705117&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/27309-15.js?cb=0.2238489817705117&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=46472
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 02:13:37 GMT
Server: RAS/1.3 (Unix)
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;, CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; expires=Sat, 09-Feb-2013 02:13:37 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 03:13:37 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 03:13:37 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=107182; path=/; domain=.rubiconproject.com csi15=3204663.js^1^1352600017^1352600017; expires=Sun, 18-Nov-2012 02:13:37 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /helper_01.swf HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=8dyxc0a27marnpwn83uqbak7rgmisapt; __utma=213136648.1656220837.1352600014.1352600014.1352600014.1; __utmb=213136648.1.10.1352600014; __utmc=213136648; __utmz=213136648.1352600014.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Date: Sun, 11 Nov 2012 02:13:37 GMT
Last-Modified: Sat, 15 Oct 2011 19:43:58 GMT
Accept-Ranges: bytes
Content-Length: 1480
Cache-Control: max-age=2592000
Expires: Tue, 11 Dec 2012 02:13:37 GMT
Connection: close
Server: MediaFire
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1

Host: ads.cpxinteractive.com
GET /ttj?id=743542&amp;size=728x90&amp;referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=90794
HTTP/1.1 302 Found

Content-Type: text/html; charset=ISO-8859-1
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Location: http://ib.adnxs.com/ttj?id=743542&amp;size=728x90&amp;referrer=http://www.mediafire.com/?4p5wab4oqodaj44
Date: Sun, 11 Nov 2012 02:13:37 GMT
Content-Length: 0
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1

Host: ads.cpxinteractive.com
GET /ttj?id=743542&amp;size=300x250&amp;referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=46472
HTTP/1.1 302 Found

Content-Type: text/html; charset=ISO-8859-1
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Location: http://ib.adnxs.com/ttj?id=743542&amp;size=300x250&amp;referrer=http://www.mediafire.com/?4p5wab4oqodaj44
Date: Sun, 11 Nov 2012 02:13:37 GMT
Content-Length: 0
GET /a/3196/3346/9685-15.js?cb=0.78294849709648&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/9685-15.js?cb=0.78294849709648&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=45973
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352600017^1352600017; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352600017^1352600017
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 02:13:38 GMT
Server: RAS/1.3 (Unix)
Set-Cookie: rdk=3196/3346; expires=Sun, 11-Nov-2012 03:13:38 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 03:13:38 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^2; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=107181; path=/; domain=.rubiconproject.com csi15=3338758.js^1^1352600018^1352600018&amp;3204663.js^1^1352600017^1352600017; expires=Sun, 18-Nov-2012 02:13:38 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=79
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1

Host: secure.gravatar.com
GET /avatar/00000000?s=27&amp;d=mm&amp;f=y HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: image/jpeg
Server: nginx
Date: Sun, 11 Nov 2012 02:13:38 GMT
Content-Length: 906
Connection: keep-alive
Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT
Access-Control-Allow-Origin: *
Content-Disposition: inline; filename=&quot;00000000.png&quot;
X-Varnish: 2458339694 2455936932
Via: 1.1 varnish
Expires: Sun, 11 Nov 2012 02:18:38 GMT
Cache-Control: max-age=300
GET /static/fonts/opensans/v6/k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM.woff HTTP/1.1

Host: themes.googleusercontent.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Open+Sans:800,400,700
Origin: http://www.mediafire.com
HTTP/1.1 200 OK

Content-Type: font/woff
Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT
Date: Fri, 09 Nov 2012 20:33:30 GMT
Expires: Sat, 09 Nov 2013 20:33:30 GMT
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 22748
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 106808
GET /a/3196/3346/9685-9.js?cb=0.30820219968579354&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

Host: optimized-by.rubiconproject.com
GET /a/3196/3346/9685-9.js?cb=0.30820219968579354&amp;tk_st=1&amp;tk_sf=1&amp;p_screen_res=1176x885&amp;p_pos=atf&amp;rp_s=c&amp;rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=82032
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352600017^1352600017; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352600017^1352600017
HTTP/1.1 200 OK

Content-Type: text/javascript
Date: Sun, 11 Nov 2012 02:13:38 GMT
Server: RAS/1.3 (Unix)
Set-Cookie: rdk=3196/3346; expires=Sun, 11-Nov-2012 03:13:38 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk9=0; expires=Sun, 11-Nov-2012 03:13:38 GMT; max-age=10; path=/; domain=.rubiconproject.com ses9=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=107181; path=/; domain=.rubiconproject.com csi9=3348063.js^1^1352600018^1352600018; expires=Sun, 18-Nov-2012 02:13:38 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive
Transfer-Encoding: chunked
GET /adframe.php?pid=11&ord=0.773610935288184&rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/9685-15.3338758.3406494?url= HTTP/1.1

Host: mymedia.adspirit.de
GET /adframe.php?pid=11&amp;ord=0.773610935288184&amp;rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/9685-15.3338758.3406494?url= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=45973
HTTP/1.1 200 OK

Content-Type: text/html; charset=iso-8859-1
Date: Sun, 11 Nov 2012 02:13:38 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.2.6
Cache-Control: no-store
Pragma: no-cache
P3P: CP=&quot;STP CUR OUR&quot;
x-own: 46.163.123.40
x-rqc: 11
Set-Cookie: mymedia_ex=; expires=Mon, 11-Nov-2013 03:13:38 GMT; domain=.adspirit.de; path=/
Content-Length: 3681
Connection: close
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1

Host: ib.adnxs.com
GET /ttj?id=743542&amp;size=300x250&amp;referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=46472
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(G*axlrk5.$WN_]Dl5M7G(nDS'6pnU
HTTP/1.1 200 OK

Content-Type: text/javascript
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:13:38 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:13:38 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEw0pP8hAUQ0pP8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 02:13:38 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-vmw3QN_/h9oD#)Z=#FdgHS0R!o)0VpiI!0d5; path=/; expires=Sat, 09-Feb-2013 02:13:38 GMT; domain=.adnxs.com; HttpOnly
Date: Sun, 11 Nov 2012 02:13:38 GMT
Content-Length: 1350
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1

Host: ib.adnxs.com
GET /ttj?id=743542&amp;size=728x90&amp;referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=90794
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(G*axlrk5.$WN_]Dl5M7G(nDS'6pnU
HTTP/1.1 200 OK

Content-Type: text/javascript
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:13:38 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:13:38 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEw0pP8hAUQ0pP8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 02:13:38 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-vmw3QN_/h9oD#)Z=#FdgHS0R!o)0VpiI!0d5; path=/; expires=Sat, 09-Feb-2013 02:13:38 GMT; domain=.adnxs.com; HttpOnly
Date: Sun, 11 Nov 2012 02:13:38 GMT
Content-Length: 1349
GET /beacon.js HTTP/1.1

Host: b.scorecardresearch.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=46472
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Sun, 25 Nov 2012 02:13:38 GMT
Date: Sun, 11 Nov 2012 02:13:38 GMT
Content-Length: 1140
Connection: keep-alive
Cache-Control: private, no-transform, max-age=1209600
GET /p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png HTTP/1.1

Host: cdn.adnxs.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=46472
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-vmw3QN_/h9oD#)Z=#FdgHS0R!o)0VpiI!0d5; sess=1; icu=ChIIlroHEAoYASABKAEw0pP8hAUQ0pP8hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/png
Server: Apache
Etag: &quot;05c7006db8c87009c7ef4cebeac987fa:1350137588&quot;
Last-Modified: Sat, 13 Oct 2012 14:13:08 GMT
Accept-Ranges: bytes
Content-Length: 5202
Date: Sun, 11 Nov 2012 02:13:38 GMT
Connection: keep-alive
GET /p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png HTTP/1.1

Host: cdn.adnxs.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=90794
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-vmw3QN_/h9oD#)Z=#FdgHS0R!o)0VpiI!0d5; sess=1; icu=ChIIlroHEAoYASABKAEw0pP8hAUQ0pP8hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/png
Server: Apache
Etag: &quot;a9daeac0f83c5ce58b932bd0f829631f:1351039989&quot;
Last-Modified: Wed, 24 Oct 2012 00:53:09 GMT
Accept-Ranges: bytes
Content-Length: 5051
Date: Sun, 11 Nov 2012 02:13:38 GMT
Connection: keep-alive
GET /adview.php?tz=1352600018&pid=11&kid=6&wmid=32&nvc=1&target=- HTTP/1.1

Host: mymedia.adspirit.de
GET /adview.php?tz=1352600018&amp;pid=11&amp;kid=6&amp;wmid=32&amp;nvc=1&amp;target=- HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mymedia.adspirit.de/adframe.php?pid=11&amp;ord=0.773610935288184&amp;rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/9685-15.3338758.3406494?url=
Cookie: mymedia_ex=
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:38 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.2.6
P3P: CP=&quot;STP CUR OUR&quot;
Cache-Control: no-cache
x-own: 46.163.123.44
x-1: 0.0250339508057
x-2: 0.00810623168945
x-3: 0.0150203704834
x-4: 0.00786781311035
x-5: 0.0259876251221
x-6b: 0.00596046447754
x-6c: 0.0319480895996
x-7: 1.15990638733
x-8: 0.0848770141602
x-9: 0.00905990600586
x-10: 0.075101852417
x-total: 1.55305862427
Content-Length: 43
Connection: close
Pragma: no-cache
GET /banner/flashme.js HTTP/1.1

Host: img17.adspirit.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mymedia.adspirit.de/adframe.php?pid=11&amp;ord=0.773610935288184&amp;rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/9685-15.3338758.3406494?url=
Cookie: mymedia_ex=
HTTP/1.1 200 OK

Content-Type: application/javascript
Accept-Ranges: bytes
Etag: &quot;3087126734&quot;
Last-Modified: Wed, 19 Sep 2012 17:06:49 GMT
Content-Length: 4318
Connection: close
Date: Sun, 11 Nov 2012 04:27:49 GMT
Server: lighttpd/1.4.28
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1

Host: view.atdmt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=46472
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA
HTTP/1.1 200 OK

Content-Type: text/html
Cache-Control: no-store
Content-Encoding: gzip
Expires: 0
Vary: Accept-Encoding
Date: Sun, 11 Nov 2012 02:13:38 GMT
Connection: close
Content-Length: 381
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: text/xml
Server: Apache
Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT
Etag: &quot;87de33-256-4cd617ed12480&quot;
Accept-Ranges: bytes
Content-Length: 598
Date: Sun, 11 Nov 2012 02:13:38 GMT
Connection: keep-alive
GET /connect/xd_arbiter.php?version=17 HTTP/1.1

Host: s-static.ak.facebook.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
X-FB-Debug: JS4qOSg1Dl3AgVtg3MyBP4whcr8SZapA/Vud9cBlDwY=
Content-Length: 9847
Vary: Accept-Encoding
Cache-Control: public, max-age=31454585
Expires: Sun, 10 Nov 2013 03:36:43 GMT
Date: Sun, 11 Nov 2012 02:13:38 GMT
Connection: keep-alive
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352600018737&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D46472&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6035951&amp;c3=122134&amp;ns__t=1352600018737&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D46472&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=46472
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: http://b.scorecardresearch.com/b2?c1=8&amp;c2=6035951&amp;c3=122134&amp;ns__t=1352600018737&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D46472&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44
Date: Sun, 11 Nov 2012 02:13:38 GMT
Connection: keep-alive
Set-Cookie: UID=4c707e8-195.159.219.9-1352600018; expires=Sat, 01-Nov-2014 02:13:38 GMT; path=/; domain=.scorecardresearch.com UIDR=1352600018; expires=Sat, 01-Nov-2014 02:13:38 GMT; path=/; domain=.scorecardresearch.com
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352600018738&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D46472&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3320015&amp;ns__t=1352600018738&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D46472&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=46472
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: http://b.scorecardresearch.com/b2?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3320015&amp;ns__t=1352600018738&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D46472&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44
Date: Sun, 11 Nov 2012 02:13:38 GMT
Connection: keep-alive
Set-Cookie: UID=4c707f3-195.159.219.9-1352600018; expires=Sat, 01-Nov-2014 02:13:38 GMT; path=/; domain=.scorecardresearch.com UIDR=1352600018; expires=Sat, 01-Nov-2014 02:13:38 GMT; path=/; domain=.scorecardresearch.com
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /images/pixel.gif HTTP/1.1

Host: spe.atdmt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA
HTTP/1.1 200 OK

Content-Type: image/gif
Content-Length: 42
Allow: GET
Expires: Mon, 12 Nov 2012 19:08:30 GMT
Date: Sun, 11 Nov 2012 02:13:38 GMT
Connection: keep-alive
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1

Host: tap2-cdn.rubiconproject.com
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=46472
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352600017^1352600017; rdk15=0; ses15=3346^2; csi15=3338758.js^1^1352600018^1352600018&amp;3204663.js^1^1352600017^1352600017; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352600018^1352600018
HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8
Server: TRP Apache-Coyote/1.1
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Last-Modified: Sat, 10 Nov 2012 19:40:01 GMT
Content-Encoding: gzip
Content-Length: 5080
Cache-Control: max-age=600
Expires: Sun, 11 Nov 2012 02:23:38 GMT
Date: Sun, 11 Nov 2012 02:13:38 GMT
Connection: keep-alive
Vary: Accept-Encoding
GET /partner/scripts/rubicon/alice.js HTTP/1.1

Host: tap-cdn.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=46472
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352600017^1352600017; rdk15=0; ses15=3346^2; csi15=3338758.js^1^1352600018^1352600018&amp;3204663.js^1^1352600017^1352600017; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352600018^1352600018
HTTP/1.1 200 OK

Content-Type: text/javascript;charset=UTF-8
Server: TRP Apache-Coyote/1.1
Last-Modified: Sat, 10 Nov 2012 13:56:23 GMT
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Content-Encoding: gzip
Cache-Control: max-age=3600
Expires: Sun, 11 Nov 2012 03:13:38 GMT
Date: Sun, 11 Nov 2012 02:13:38 GMT
Content-Length: 5798
Connection: keep-alive
Vary: Accept-Encoding
GET /st?ad_type=ad&ad_size=160x600&section=3434596&pub_url=${PUB_URL} HTTP/1.1

Host: ad.yieldmanager.com
GET /st?ad_type=ad&amp;ad_size=160x600&amp;section=3434596&amp;pub_url=${PUB_URL} HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=82032
HTTP/1.1 200 OK

HTTP/1.1 200 OK
Date: Sun, 11 Nov 2012 02:13:38 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor0896.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Sun, 11 Nov 2012 02:13:38 GMT
Expires: Sun, 11 Nov 2012 02:13:38 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

Host: ib.adnxs.com
GET /pxj?bidder=55&amp;action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-vmw3QN_/h9oD#)Z=#FdgHS0R!o)0VpiI!0d5; sess=1; icu=ChIIlroHEAoYASABKAEw0pP8hAUQ0pP8hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:13:38 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:13:38 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-vmw3QN_/h9oD#)Z=#FdgHS0R!o)0VpiI!0d5; path=/; expires=Sat, 09-Feb-2013 02:13:38 GMT; domain=.adnxs.com; HttpOnly
Content-Length: 43
Date: Sun, 11 Nov 2012 02:13:38 GMT
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352600018862&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D90794&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6035951&amp;c3=122134&amp;ns__t=1352600018862&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D90794&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=90794
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: http://b.scorecardresearch.com/b2?c1=8&amp;c2=6035951&amp;c3=122134&amp;ns__t=1352600018862&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D90794&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44
Date: Sun, 11 Nov 2012 02:13:38 GMT
Connection: keep-alive
Set-Cookie: UID=4c707f4-195.159.219.9-1352600018; expires=Sat, 01-Nov-2014 02:13:38 GMT; path=/; domain=.scorecardresearch.com UIDR=1352600018; expires=Sat, 01-Nov-2014 02:13:38 GMT; path=/; domain=.scorecardresearch.com
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352600018933&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D90794&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3320011&amp;ns__t=1352600018933&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D90794&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=90794
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Location: http://b.scorecardresearch.com/b2?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3320011&amp;ns__t=1352600018933&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D90794&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44
Date: Sun, 11 Nov 2012 02:13:38 GMT
Connection: keep-alive
Set-Cookie: UID=4c707fa-195.159.219.9-1352600018; expires=Sat, 01-Nov-2014 02:13:38 GMT; path=/; domain=.scorecardresearch.com UIDR=1352600018; expires=Sat, 01-Nov-2014 02:13:38 GMT; path=/; domain=.scorecardresearch.com
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1

Host: view.atdmt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=90794
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA
HTTP/1.1 200 OK

Content-Type: text/html
Cache-Control: no-store
Content-Encoding: gzip
Expires: 0
Vary: Accept-Encoding
Date: Sun, 11 Nov 2012 02:13:38 GMT
Connection: close
Content-Length: 381
GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352600018737&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D46472&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b2?c1=8&amp;c2=6035951&amp;c3=122134&amp;ns__t=1352600018737&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D46472&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=46472
Cookie: UID=4c707e8-195.159.219.9-1352600018; UIDR=1352600018
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 02:13:38 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352600018738&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D46472&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b2?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3320015&amp;ns__t=1352600018738&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D46472&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=46472
Cookie: UID=4c707f3-195.159.219.9-1352600018; UIDR=1352600018
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 02:13:39 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /ping_match.gif?ei=RUBICON&rurl=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4210%26nid%3D1523%26put%3D_wfivefivec_%26expires%3D10 HTTP/1.1

Host: i.w55c.net
GET /ping_match.gif?ei=RUBICON&amp;rurl=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4210%26nid%3D1523%26put%3D_wfivefivec_%26expires%3D10 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Sun, 11 Nov 2012 02:13:39 GMT
Server: Jetty(6.1.22)
Set-Cookie: wfivefivec=722c639a-eb9c-4420-8e2c-df5b07e58ed0;Path=/;Domain=.w55c.net;Expires=Tue, 11-Nov-14 02:13:39 GMT
X-Version: DataXu Pixel Tracker v3.3 20120918
Cache-Control: private
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Content-Length: 0
Location: http://pixel.rubiconproject.com/tap.php?v=4210&amp;nid=1523&amp;put=722c639a-eb9c-4420-8e2c-df5b07e58ed0&amp;expires=10
Via: 1.1 cdg061008 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /partner/agent/rubicon/channels.js?cb=oz_onPixelsLoaded HTTP/1.1

Host: tap.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352600017^1352600017; rdk15=0; ses15=3346^2; csi15=3338758.js^1^1352600018^1352600018&amp;3204663.js^1^1352600017^1352600017; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352600018^1352600018
HTTP/1.1 200 OK

Content-Type: text/javascript;charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:39 GMT
Server: TRP Apache-Coyote/1.1
Cache-Control: no-store, no-cache, must-revalidate, private
Content-Length: 535
Set-Cookie: SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Keep-Alive: timeout=5, max=198
Connection: Keep-Alive
GET /dmm/rubicon/match HTTP/1.1

Host: rubicon-match.dotomi.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 204 No Content

Content-Type: text/plain
Date: Sun, 11 Nov 2012 02:13:39 GMT
X-Name: dtiad01rtb17p.int
Cache-Control: max-age=0, no-store
Content-Length: 0
Connection: close
GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352600018862&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D90794&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b2?c1=8&amp;c2=6035951&amp;c3=122134&amp;ns__t=1352600018862&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D90794&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=90794
Cookie: UID=4c707f4-195.159.219.9-1352600018; UIDR=1352600018
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 02:13:39 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352600018933&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D90794&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b2?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3320011&amp;ns__t=1352600018933&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D90794&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=90794
Cookie: UID=4c707fa-195.159.219.9-1352600018; UIDR=1352600018
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 02:13:39 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /ct/rubicon-cms2.html HTTP/1.1

Host: cti.w55c.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: wfivefivec=722c639a-eb9c-4420-8e2c-df5b07e58ed0
HTTP/1.1 200 OK

Content-Type: text/html
Accept-Ranges: bytes
Cache-Control: no-cache, must-revalidate
Date: Sun, 11 Nov 2012 02:13:39 GMT
Etag: &quot;1430792016&quot;
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Last-Modified: Thu, 18 Oct 2012 15:06:26 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Pragma: no-cache
Server: ECS (arn/46F0)
X-Cache: HIT
Content-Length: 5086
GET /imp?Z=160x600&s=3434596&_salt=1669402311&B=10&r=0 HTTP/1.1

Host: ad.yieldmanager.com
GET /imp?Z=160x600&amp;s=3434596&amp;_salt=1669402311&amp;B=10&amp;r=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=82032
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Date: Sun, 11 Nov 2012 02:13:39 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor0468.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Location: http://cookex.amp.yahoo.com/v2/cexposer/SIG=12gu455fp/*http%3A//ad.yieldmanager.com/imp?Z=160x600&amp;s=3434596&amp;_salt=1669402311&amp;B=10&amp;r=0
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Sun, 11 Nov 2012 02:13:39 GMT
Expires: Sun, 11 Nov 2012 02:13:39 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

Host: ib.adnxs.com
GET /pxj?bidder=55&amp;action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-vmw3QN_/h9oD#)Z=#FdgHS0R!o)0VpiI!0d5; sess=1; icu=ChIIlroHEAoYASABKAEw0pP8hAUQ0pP8hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:13:39 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:13:39 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-vmw3QN_/h9oD#)Z=#FdgHS0R!o)0VpiI!0d5; path=/; expires=Sat, 09-Feb-2013 02:13:39 GMT; domain=.adnxs.com; HttpOnly
Content-Length: 43
Date: Sun, 11 Nov 2012 02:13:39 GMT
GET /tap.php?v=4210&nid=1523&put=722c639a-eb9c-4420-8e2c-df5b07e58ed0&expires=10 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=4210&amp;nid=1523&amp;put=722c639a-eb9c-4420-8e2c-df5b07e58ed0&amp;expires=10 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352600017^1352600017; rdk15=0; ses15=3346^2; csi15=3338758.js^1^1352600018^1352600018&amp;3204663.js^1^1352600017^1352600017; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352600018^1352600018
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:39 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%264210%3D1; expires=Tue, 11-Dec-2012 02:13:39 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264210%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:13:39 GMT; path=/; domain=.pixel.rubiconproject.com put_1523=722c639a-eb9c-4420-8e2c-df5b07e58ed0; expires=Wed, 21-Nov-2012 02:13:39 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9707
Connection: Keep-Alive
GET /match?mrbyus=true&excid=17 HTTP/1.1

Host: rubicon.admailtiser.com
GET /match?mrbyus=true&amp;excid=17 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.1.1
Date: Sun, 11 Nov 2012 02:13:39 GMT
Content-Length: 0
Connection: keep-alive
P3P: policyref=&quot;http://admailtiser.com/w3c/p3p.xml&quot;, CP=&quot;NOI IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA NOR UNI&quot;
Set-Cookie: cicouid=031bd161-67d0-4d60-a1e8-b823aa47de33xYX6A72m1MgEBG7-OwNgqw; Domain=.admailtiser.com; Expires=Mon, 11-Nov-2013 02:13:39 GMT; Path=/
Location: http://pixel.rubiconproject.com/tap.php?v=12224&amp;nid=2530&amp;put=-1574011060046241353&amp;expires=365
GET /di.php?v=2372|0||2373||2374|0||&r=3761|0,3169,3578,3577,2110,2195,2196,2197,2579,2198,4134,3734,2199,2364,2362,2363,2200,3810,2111,2494,2201,3513,2202,2496,2202,2496,2203,2204,2189,2112,2497,2205,2355,2495,5838,3811,3512,2109,3812,2239,2190,2206,2113,2206,2113,4552,2765,6184,2240,4105,4193,2372,2373,2374,2375, HTTP/1.1

Host: pixel.rubiconproject.com
GET /di.php?v=2372|0||2373||2374|0||&amp;r=3761|0,3169,3578,3577,2110,2195,2196,2197,2579,2198,4134,3734,2199,2364,2362,2363,2200,3810,2111,2494,2201,3513,2202,2496,2202,2496,2203,2204,2189,2112,2497,2205,2355,2495,5838,3811,3512,2109,3812,2239,2190,2206,2113,2206,2113,4552,2765,6184,2240,4105,4193,2372,2373,2374,2375, HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352600017^1352600017; rdk15=0; ses15=3346^2; csi15=3338758.js^1^1352600018^1352600018&amp;3204663.js^1^1352600017^1352600017; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352600018^1352600018
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:39 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%262373%3D1; expires=Fri, 10-May-2013 02:13:39 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=8638
Connection: Keep-Alive
GET /banner/mymedia/6/2012-07-20/0_NO_forgeofempire_eng_300x250.swf HTTP/1.1

Host: img17.adspirit.de

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://mymedia.adspirit.de/adframe.php?pid=11&amp;ord=0.773610935288184&amp;rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/9685-15.3338758.3406494?url=
Cookie: mymedia_ex=
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Accept-Ranges: bytes
Etag: &quot;457454980&quot;
Last-Modified: Fri, 20 Jul 2012 12:51:21 GMT
Content-Length: 34883
Connection: close
Date: Sun, 11 Nov 2012 04:27:50 GMT
Server: lighttpd/1.4.28
GET /px/rb.gif HTTP/1.1

Host: ad.yabuka.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 FOUND

Content-Type: text/html; charset=utf-8
Server: nginx/1.1.19
Date: Sun, 11 Nov 2012 02:13:39 GMT
Content-Length: 186
Connection: keep-alive
Location: http://pixel.rubiconproject.com/tap.php?v=9047&amp;nid=2147&amp;put=gdaF1FA8f3
Set-Cookie: client_id=gdaF1FA8f3; Path=/ tc=&quot;iSszOpuh6dxwa2ZZgWaC8+rqOeU=?_expires=STEzNTMwMTA0MTkKLg==&amp;client_id=UydnZGFGMUZBOGYzJwpwMQou&quot;; Domain=.yabuka.com; expires=Thu, 15-Nov-2012 20:13:39 GMT; Path=/
Cache-Control: no-cache
Pragma: no-cache
GET /do-association?rbc HTTP/1.1

Host: matcher-rbc.bidder7.mookie1.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:39 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: id=4611686278388783669; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 02:13:39 GMT mdata=1|4611686278388783669|1352600019; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 02:13:39 GMT
Location: /do-association-set?rbc
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=851
Connection: Keep-Alive
GET /redirect?ex=11 HTTP/1.1

Host: cm.netseer.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Moved Temporarily

Content-Type: text/plain; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:39 GMT
Location: http://cm.netseer.com/redirect?ex=11&amp;cookie=2
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Server: Apache-Coyote/1.1
Set-Cookie: netseer_v3_vi=H4sIAAAAAAAAADOyKi0uMk5LNDZNNktNNksxNrVINrAyNDY1MjMwMDC0NDUzAAA8ZbkTIwAAAA; Domain=.netseer.com; Expires=Tue, 11-Nov-2014 02:13:39 GMT; Path=/
Content-Length: 0
Connection: keep-alive
GET /tap.php?v=4210&nid=1523&expires=10&put=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=4210&amp;nid=1523&amp;expires=10&amp;put=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352600017^1352600017; rdk15=0; ses15=3346^2; csi15=3338758.js^1^1352600018^1352600018&amp;3204663.js^1^1352600017^1352600017; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352600018^1352600018
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:39 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%264210%3D1; expires=Tue, 11-Dec-2012 02:13:39 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264210%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:13:39 GMT; path=/; domain=.pixel.rubiconproject.com put_1523=722c639a-eb9c-4420-8e2c-df5b07e58ed0; expires=Wed, 21-Nov-2012 02:13:39 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9863
Connection: Keep-Alive
GET /ct/crwdctrl.html?722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

Host: cti.w55c.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: wfivefivec=722c639a-eb9c-4420-8e2c-df5b07e58ed0
HTTP/1.1 200 OK

Content-Type: text/html
Accept-Ranges: bytes
Cache-Control: no-cache, must-revalidate
Date: Sun, 11 Nov 2012 02:13:39 GMT
Etag: &quot;3436325814&quot;
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Last-Modified: Mon, 05 Nov 2012 15:45:31 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Pragma: no-cache
Server: ECS (arn/46E3)
X-Cache: HIT
Content-Length: 1937
GET /setuid?entity=17&code=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

Host: ib.adnxs.com
GET /setuid?entity=17&amp;code=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-vmw3QN_/h9oD#)Z=#FdgHS0R!o)0VpiI!0d5; sess=1; icu=ChIIlroHEAoYASABKAEw0pP8hAUQ0pP8hAUYAA..
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:13:39 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:13:39 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG68%Cxrx)0s]#%2L_'x%SEV/hnJPh4FV-vmw3QN_/h9oD#)Z=#Fdh+7@te5Q)#:$I%l2M!91(8hR!vJ; path=/; expires=Sat, 09-Feb-2013 02:13:39 GMT; domain=.adnxs.com; HttpOnly
Content-Length: 43
Date: Sun, 11 Nov 2012 02:13:39 GMT
GET /tap.php?v=12224&nid=2530&put=-1574011060046241353&expires=365 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=12224&amp;nid=2530&amp;put=-1574011060046241353&amp;expires=365 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%264210%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264210%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352600017^1352600017; rdk15=0; ses15=3346^2; csi15=3338758.js^1^1352600018^1352600018&amp;3204663.js^1^1352600017^1352600017; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352600018^1352600018; put_1523=722c639a-eb9c-4420-8e2c-df5b07e58ed0
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:39 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%264210%3D1%2612224%3D1; expires=Tue, 11-Dec-2012 02:13:39 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264210%3D25074%2C0%2C1%2C%2C%2612224%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:13:39 GMT; path=/; domain=.pixel.rubiconproject.com put_2530=-1574011060046241353; expires=Mon, 11-Nov-2013 02:13:39 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9882
Connection: Keep-Alive
GET /tap.php?v=9047&nid=2147&put=gdaF1FA8f3 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=9047&amp;nid=2147&amp;put=gdaF1FA8f3 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%262373%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264210%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352600017^1352600017; rdk15=0; ses15=3346^2; csi15=3338758.js^1^1352600018^1352600018&amp;3204663.js^1^1352600017^1352600017; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352600018^1352600018; put_1523=722c639a-eb9c-4420-8e2c-df5b07e58ed0
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:39 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%262373%3D1%269047%3D1; expires=Tue, 11-Dec-2012 02:13:39 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%269047%3D25074%2C0%2C1%2C%2C%262373%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:13:39 GMT; path=/; domain=.pixel.rubiconproject.com put_2147=gdaF1FA8f3; expires=Tue, 11-Dec-2012 02:13:39 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9710
Connection: Keep-Alive
GET /r/du/id/L21rdC80L21waWQvMzU5ODk3MA/mpuid/722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

Host: d.p-td.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache-Coyote/1.1
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV&quot;
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Set-Cookie: uid=2387717061245230950; Domain=.p-td.com; Expires=Fri, 10-May-2013 02:13:39 GMT; Path=/
Content-Length: 43
Date: Sun, 11 Nov 2012 02:13:39 GMT
GET /fr/u.php?p=441981302501808&m=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

Host: www.facebook.com
GET /fr/u.php?p=441981302501808&amp;m=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Cache-Control: public, max-age=0
Date: Sat, 10 Nov 2012 18:13:39 PST
Expires: Sat, 10 Nov 2012 18:13:39 PST
Location: http://i.w55c.net/rs?id=d777fecd6cb849b4bab0bfe71d57747a&amp;t=product&amp;name=FBX_NotMatched
Pragma: public
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-FB-Debug: J/911UofkUUhrt9q5OCaqX6P4LEKbXZWbvRVU4R+Kng=
Connection: keep-alive
Content-Length: 0
GET /site/2964?id=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

Host: tags.bluekai.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:39 GMT
Server: Apache/2.2.3 (CentOS)
P3P: CP=&quot;NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV&quot;, policyref=&quot;http://tags.bluekai.com/w3c/p3p.xml&quot;
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Set-Cookie: bkc=KJpM8sJQtes5QKW08dy9OieQOwJnobn0W2eTM9y/dCHrOGqayDyG4eRmHCuIgis3ICQVOOX9rFQVBx==; expires=Fri, 10-May-2013 02:13:39 GMT; path=/; domain=.bluekai.com bklc=0; expires=Fri, 10-May-2013 02:13:39 GMT; path=/; domain=.bluekai.com bko=; expires=Fri, 10-May-2013 02:13:39 GMT; path=/; domain=.bluekai.com bkp1=; expires=Fri, 10-May-2013 02:13:39 GMT; path=/; domain=.bluekai.com bkst=KJhMRjMYpzYQyZOrjJHLjZ0j3JrSjJZLStJijvOgAV3DgJrujooARJ83SosSR7YjzlT99wFTeeG=; expires=Fri, 10-May-2013 02:13:39 GMT; path=/; domain=.bluekai.com bku=k9L99B1J7NYBvjza; expires=Fri, 10-May-2013 02:13:39 GMT; path=/; domain=.bluekai.com bkw5=; expires=Fri, 10-May-2013 02:13:39 GMT; path=/; domain=.bluekai.com bkdc=wdc; expires=Tue, 11-Dec-2012 02:13:39 GMT; path=/; domain=.bluekai.com
BK-Server: 8275
Content-Length: 62
GET /do-association-set?rbc HTTP/1.1

Host: matcher-rbc.bidder7.mookie1.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4611686278388783669; mdata=1|4611686278388783669|1352600019
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:39 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://cm.g.doubleclick.net/pixel?google_nid=themig&amp;google_cm&amp;google_sc&amp;can=ffffffffffffffff&amp;v2
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=963
Connection: Keep-Alive
GET /redirect?ex=11&cookie=2 HTTP/1.1

Host: cm.netseer.com
GET /redirect?ex=11&amp;cookie=2 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: netseer_v3_vi=H4sIAAAAAAAAADOyKi0uMk5LNDZNNktNNksxNrVINrAyNDY1MjMwMDC0NDUzAAA8ZbkTIwAAAA
HTTP/1.1 302 Moved Temporarily

Content-Type: text/plain; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:39 GMT
Location: http://pixel.rubiconproject.com/tap.php?v=6073&amp;nid=2100&amp;expires=30&amp;put=usr3fa35c6ec6d358c0
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Server: Apache-Coyote/1.1
Set-Cookie: netseer_v3_vi=H4sIAAAAAAAAADOyKi0uMk5LNDZNNktNNksxNrVINrAyNDY1MjMwMDC0NDUz0DE0tHKNCHEN8nP0QZKxNDIEAN4MSG09AAAA; Domain=.netseer.com; Expires=Tue, 11-Nov-2014 02:13:39 GMT; Path=/
Content-Length: 0
Connection: keep-alive
GET /adserver/vdi/830697?r=http%3A%2F%2Fi.w55c.net%2Fm.gif%3Fid%3D8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33%26ei%3DADBRITE%26cver%3D1%26euid%3D&d=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

Host: ads.adbrite.com
GET /adserver/vdi/830697?r=http%3A%2F%2Fi.w55c.net%2Fm.gif%3Fid%3D8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33%26ei%3DADBRITE%26cver%3D1%26euid%3D&amp;d=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Accept-Ranges: none
Cache-Control: no-cache, no-store, must-revalidate
Date: Sun, 11 Nov 2012 02:13:39 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Location: http://i.w55c.net/m.gif?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&amp;ei=ADBRITE&amp;cver=1&amp;euid=MTY4MzYyMDYzeDAuOTQgMTM1MjYwMDAxOXg5MDc2NTM1MTY
P3P: policyref=&quot;http://files.adbrite.com/w3c/p3p.xml&quot;,CP=&quot;NOI PSA PSD OUR IND UNI NAV DEM STA OTC&quot;
Server: XPEHb/1.2
Set-Cookie: Apache=&quot;168362063x0.94+1352600019x907653516&quot;; path=/; domain=.adbrite.com; expires=Sat, 06-Nov-2032 02:13:39 GMT rb2=CjUKBjgzMDY5Nxjk6_6wwgEiJDcyMmM2MzlhLWViOWMtNDQyMC04ZTJjLWRmNWIwN2U1OGVkMBAB; path=/; domain=.adbrite.com; expires=Sat, 09-Feb-2013 02:13:39 GMT
Content-Length: 0
GET /360787.gif?partner_uid=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

Host: idsync.rlcdn.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, no-cache, no-store
Date: Sun, 11 Nov 2012 02:13:39 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://idsync.rlcdn.com/360787.gif?redirect=1&amp;rl=72b6c94279fc98639162d3f721a96c8e9ee5c3900c30ee790e17deb0e6b559c27b8f8e1f1ca06861dc0e8c0b323626c0815e976a1799d4dd
P3P: CP: &quot;NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE&quot;, CP: &quot;NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE&quot;
Set-Cookie: ck1=ck1;Domain=.rlcdn.com;Expires=Fri, 10-May-2013 02:13:39 GMT
Content-Length: 0
Connection: keep-alive
GET /cms/v1?esig=1~d1b7a0970db7c0b314d942e728461f2b03f1f713&nwid=10000343293&sigv=1 HTTP/1.1

Host: ad.yieldmanager.com
GET /cms/v1?esig=1~d1b7a0970db7c0b314d942e728461f2b03f1f713&amp;nwid=10000343293&amp;sigv=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Found

Content-Type: text/plain; charset=utf-8
Date: Sun, 11 Nov 2012 02:13:39 GMT
P3P: policyref=&quot;http://p3p.yahoo.com/w3c/p3p.xml&quot;, CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV&quot;
Location: http://i.w55c.net/m_yahoo.gif?xid=E0
Cache-Control: private
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
Server: YTS/1.20.13
GET /tap.php?v=6073&nid=2100&expires=30&put=usr3fa35c6ec6d358c0 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=6073&amp;nid=2100&amp;expires=30&amp;put=usr3fa35c6ec6d358c0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%262373%3D1%269047%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%269047%3D25074%2C0%2C1%2C%2C%262373%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352600017^1352600017; rdk15=0; ses15=3346^2; csi15=3338758.js^1^1352600018^1352600018&amp;3204663.js^1^1352600017^1352600017; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352600018^1352600018; put_1523=722c639a-eb9c-4420-8e2c-df5b07e58ed0; put_2530=-1574011060046241353; put_2147=gdaF1FA8f3
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%262373%3D1%269047%3D1%266073%3D1; expires=Tue, 11-Dec-2012 02:13:40 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%269047%3D25074%2C0%2C1%2C%2C%262373%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:13:40 GMT; path=/; domain=.pixel.rubiconproject.com put_2100=usr3fa35c6ec6d358c0; expires=Tue, 11-Dec-2012 02:13:40 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9706
Connection: Keep-Alive
GET /apiplayer HTTP/1.1

Host: www.youtube.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: VISITOR_INFO1_LIVE=TIoxcizkAQ0; hideBrowserUpgradeBox=True; PREF=fv=10.0.45&amp;f4=4000
HTTP/1.1 303 See Other

Content-Type: text/html; charset=utf-8
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: gwiseguy/2.0
Content-Length: 0
X-Content-Type-Options: nosniff
Expires: Tue, 27 Apr 1971 19:44:06 EST
Cache-Control: no-cache
Location: http://youtube.googleapis.com/apiplayer
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /rum?cm_dsp_id=47&expiration=30&external_user_id=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

Host: r.casalemedia.com
GET /rum?cm_dsp_id=47&amp;expiration=30&amp;external_user_id=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/gif
Server: Apache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR DEVa TAIa OUR BUS UNI&quot;
Expires: Sun, 11 Nov 2012 02:13:40 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 11 Nov 2012 02:13:40 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: CMID=u7fNyEPS1I0AAHGbAVcAAAAN;domain=casalemedia.com;path=/;expires=Mon, 11 Nov 2013 02:13:40 GMT CMPS=134;domain=casalemedia.com;path=/;expires=Sat, 09 Feb 2013 02:13:40 GMT CMPP=008;domain=casalemedia.com;path=/;expires=Sat, 09 Feb 2013 02:13:40 GMT CMRUM2=2f0000001e722c639a-eb9c-4420-8e2c-df5b07e58ed0;domain=casalemedia.com;path=/;expires=Mon, 11 Nov 2013 02:13:40 GMT CMST=UJ8J1FCfCdQA;domain=casalemedia.com;path=/;expires=Mon, 12 Nov 2012 02:13:40 GMT CMSC=UJ8J1A**;domain=casalemedia.com;path=/; CMDD=;domain=casalemedia.com;path=/;expires=Mon, 12 Nov 2012 02:13:40 GMT
GET /pixel?google_nid=themig&google_cm&google_sc&can=ffffffffffffffff&v2 HTTP/1.1

Host: cm.g.doubleclick.net
GET /pixel?google_nid=themig&amp;google_cm&amp;google_sc&amp;can=ffffffffffffffff&amp;v2 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Location: http://matcher.bidder7.mookie1.com/google?id=&amp;can=ffffffffffffffff&amp;v2=&amp;google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&amp;google_cver=1
Date: Sun, 11 Nov 2012 02:13:40 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: Cookie Matcher
Content-Length: 336
X-XSS-Protection: 1; mode=block
GET /r/p/1056?uid=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

Host: pix.bit.ly

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:40 GMT
Location: http://pix.bit.ly/s/1x1.gif?id=dvJtc8ZZmhG5qgpSdodoJmrlLr4%3D
Server: nginx
Set-Cookie: _1056=1; Path=/
Content-Length: 0
Connection: keep-alive
GET /rs?id=d777fecd6cb849b4bab0bfe71d57747a&t=product&name=FBX_NotMatched HTTP/1.1

Host: i.w55c.net
GET /rs?id=d777fecd6cb849b4bab0bfe71d57747a&amp;t=product&amp;name=FBX_NotMatched HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: wfivefivec=722c639a-eb9c-4420-8e2c-df5b07e58ed0; matchrubicon=1; matchappnexus=1; matchaccuen=1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: Jetty(6.1.22)
Set-Cookie: wfivefivec=722c639a-eb9c-4420-8e2c-df5b07e58ed0;Path=/;Domain=.w55c.net;Expires=Tue, 11-Nov-14 02:13:40 GMT
Cache-Control: no-store
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Content-Length: 42
X-Powered-By: Mirror Image Internet
Via: 1.1 cdg061004 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /m.gif?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&ei=ADBRITE&cver=1&euid=MTY4MzYyMDYzeDAuOTQgMTM1MjYwMDAxOXg5MDc2NTM1MTY HTTP/1.1

Host: i.w55c.net
GET /m.gif?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&amp;ei=ADBRITE&amp;cver=1&amp;euid=MTY4MzYyMDYzeDAuOTQgMTM1MjYwMDAxOXg5MDc2NTM1MTY HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: wfivefivec=722c639a-eb9c-4420-8e2c-df5b07e58ed0; matchrubicon=1; matchappnexus=1; matchaccuen=1; matchbluekai=1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: Jetty(6.1.22)
Set-Cookie: wfivefivec=722c639a-eb9c-4420-8e2c-df5b07e58ed0;Path=/;Domain=.w55c.net;Expires=Tue, 11-Nov-14 02:13:40 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Cache-Control: no-store
X-Powered-By: Mirror Image Internet
Content-Length: 42
Via: 1.1 cdg034166010000 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /m_yahoo.gif?xid=E0 HTTP/1.1

Host: i.w55c.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: wfivefivec=722c639a-eb9c-4420-8e2c-df5b07e58ed0; matchrubicon=1; matchappnexus=1; matchaccuen=1; matchbluekai=1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: Jetty(6.1.22)
Set-Cookie: wfivefivec=722c639a-eb9c-4420-8e2c-df5b07e58ed0;Path=/;Domain=.w55c.net;Expires=Tue, 11-Nov-14 02:13:40 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Cache-Control: no-store
X-Powered-By: Mirror Image Internet
Content-Length: 42
Via: 1.1 cdg034173010000 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /v2/cexposer/SIG=12gu455fp/*http%3A//ad.yieldmanager.com/imp?Z=160x600&s=3434596&_salt=1669402311&B=10&r=0 HTTP/1.1

Host: cookex.amp.yahoo.com
GET /v2/cexposer/SIG=12gu455fp/*http%3A//ad.yieldmanager.com/imp?Z=160x600&amp;s=3434596&amp;_salt=1669402311&amp;B=10&amp;r=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=82032
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Date: Sun, 11 Nov 2012 02:13:40 GMT
Set-Cookie: B=48k5nit89u2ek&amp;b=3&amp;s=d6; expires=Tue, 12-Nov-2014 20:00:00 GMT; path=/; domain=.yahoo.com
P3P: policyref=&quot;http://info.yahoo.com/w3c/p3p.xml&quot;, CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV&quot;
Location: http://ad.yieldmanager.com/imp?Z=160x600&amp;s=3434596&amp;_salt=1669402311&amp;B=10&amp;r=0&amp;SIG=10vfsfm0p;x-cookie=48x5avg89h2rx&amp;o=3&amp;f=q6
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Cache-Control: private
GET /5/c=1818/pe=y/var=ccauds HTTP/1.1

Host: ad.crwdcntrl.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/crwdctrl.html?722c639a-eb9c-4420-8e2c-df5b07e58ed0
HTTP/1.1 200 OK

Content-Type: application/javascript
Date: Sun, 11 Nov 2012 02:13:40 GMT
Cache-Control: no-cache
Expires: 0
Pragma: no-cache
P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
X-Server: 172.25.10.84
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 71
GET /360787.gif?redirect=1&rl=72b6c94279fc98639162d3f721a96c8e9ee5c3900c30ee790e17deb0e6b559c27b8f8e1f1ca06861dc0e8c0b323626c0815e976a1799d4dd HTTP/1.1

Host: idsync.rlcdn.com
GET /360787.gif?redirect=1&amp;rl=72b6c94279fc98639162d3f721a96c8e9ee5c3900c30ee790e17deb0e6b559c27b8f8e1f1ca06861dc0e8c0b323626c0815e976a1799d4dd HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: ck1=ck1
HTTP/1.1 200 OK

Content-Type: image/gif; charset=ISO-8859-1
Cache-Control: no-cache, no-store
Date: Sun, 11 Nov 2012 02:13:40 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP: &quot;NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE&quot;
Set-Cookie: rlas3=&quot;VX+fYXlLP+4+nBOM8IjCWaln7TT+qhYiChpfvQkmpCs=&quot;;Version=1;Domain=.rlcdn.com;Expires=Fri, 10-May-2013 02:13:37 GMT;Max-Age=15551997 rtn1=a0f4d9677eb6b375a82b3317c7815564;Domain=.rlcdn.com;Expires=Fri, 10-May-2013 02:13:38 GMT
Content-Length: 43
Connection: keep-alive
GET /pixel.gif/722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

Host: dx3723.tinyurl.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/gif
Accept-Ranges: bytes
Etag: &quot;851117096&quot;
Last-Modified: Tue, 12 Jul 2011 17:09:05 GMT
Content-Length: 43
Connection: close
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: TinyURL/1.6
GET /sync?type=TYPE&key=dataxu&uid=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

Host: sync.adap.tv
GET /sync?type=TYPE&amp;key=dataxu&amp;uid=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: text/plain
Server: adaptv/1.0
Connection: Keep-Alive
Set-Cookie: rtbData0=&quot;key=dataxu:value=722c639a-eb9c-4420-8e2c-df5b07e58ed0:expiresAt=Wed+Jan+09+18%3A13%3A40+PST+2013:32-Compatible=true&quot;;Path=/;Domain=.adap.tv;Expires=Tue, 11-Nov-2014 02:13:40 GMT
Content-Length: 0
GET /apiplayer HTTP/1.1

Host: youtube.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: gwiseguy/2.0
X-Content-Type-Options: nosniff
Expires: Tue, 27 Apr 1971 19:44:06 EST
Cache-Control: no-cache
Content-Length: 1003
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /adscores/g.pixel?sid=9232829800 HTTP/1.1

Host: adadvisor.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily
Date: Sun,  11 Nov 2012 02:13:40 GMT
Connection: close
Server: AAWebServer
P3P: policyref=&quot;http://www.adadvisor.net/w3c/p3p.xml&quot;,CP=&quot;NOI NID&quot;
Content-Length: 0
Location: http://i.w55c.net/d.gif?t=4&amp;ei=targus&amp;id=7c5d7c864bda4aeaafe2ae21fc29867b&amp;t.score=000&amp;t.zip=&amp;t.in1.age=&amp;t.in1.gender=&amp;t.in1.timestamp=&amp;t.in2.age=&amp;t.in2.gender=&amp;t.in2.timestamp=
GET /red/usync?pid=5&puid=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

Host: su.addthis.com
GET /red/usync?pid=5&amp;puid=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 200 OK

Content-Type: image/png
Server: Apache-Coyote/1.1
Set-Cookie: di=%7B%225%22%3A%22722c639a-eb9c-4420-8e2c-df5b07e58ed0%22%7D..; Domain=.addthis.com; Expires=Tue, 11-Nov-2014 02:13:40 GMT; Path=/ uid=509f09d457d24f0e; Domain=.addthis.com; Expires=Tue, 11-Nov-2014 02:13:40 GMT; Path=/
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NON ADM OUR DEV IND COM STA&quot;
Content-Length: 67
Date: Sun, 11 Nov 2012 02:13:39 GMT
Connection: close
GET /d.gif?t=4&ei=targus&id=7c5d7c864bda4aeaafe2ae21fc29867b&t.score=000&t.zip=&t.in1.age=&t.in1.gender=&t.in1.timestamp=&t.in2.age=&t.in2.gender=&t.in2.timestamp= HTTP/1.1

Host: i.w55c.net
GET /d.gif?t=4&amp;ei=targus&amp;id=7c5d7c864bda4aeaafe2ae21fc29867b&amp;t.score=000&amp;t.zip=&amp;t.in1.age=&amp;t.in1.gender=&amp;t.in1.timestamp=&amp;t.in2.age=&amp;t.in2.gender=&amp;t.in2.timestamp= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: wfivefivec=722c639a-eb9c-4420-8e2c-df5b07e58ed0; matchrubicon=1; matchappnexus=1; matchaccuen=1; matchbluekai=1; matchcasale=1; matchfbx=1; matchadbrite=1; matchyahoo=1; matchliveramp=1; matchcrwdctrl=1; matchturl=1
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: Jetty(6.1.22)
Set-Cookie: wfivefivec=722c639a-eb9c-4420-8e2c-df5b07e58ed0;Path=/;Domain=.w55c.net;Expires=Tue, 11-Nov-14 02:13:40 GMT
P3P: policyref=&quot;https://cts.w55c.net/ct/p3p_policy_ref.xml&quot;, CP=&quot;UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI&quot;
Cache-Control: no-store
X-Powered-By: Mirror Image Internet
Content-Length: 42
Via: 1.1 cdg061008 (MII-APC/2.2)
Keep-Alive: timeout=2
Connection: Keep-Alive
GET /s/1x1.gif?id=dvJtc8ZZmhG5qgpSdodoJmrlLr4%3D HTTP/1.1

Host: pix.bit.ly

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: _1056=1
HTTP/1.1 200 OK

Content-Type: image/gif
Cache-Control: public
Date: Sun, 11 Nov 2012 02:13:40 GMT
Etag: &quot;69a45cc1c6776232fc42b5f36986a69da596d501&quot;
Last-Modified: Sat, 28 Jul 2012 03:10:45 GMT
Server: nginx
Content-Length: 52
Connection: keep-alive
GET /e/dataxu_sync.xgi?na_exid=722c639a-eb9c-4420-8e2c-df5b07e58ed0 HTTP/1.1

Host: e.nexac.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
HTTP/1.1 302 Found

Content-Type: text/html
Expires: Wed Sep 15 09:14:42 MDT 2010
Pragma: no-cache
P3P: policyref=&quot;http://www.nextaction.net/P3P/PolicyReferences.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa TAIo PSAo PSDo HISa OUR DELa SAMo UNRo OTRo BUS UNI PUR COM NAV INT DEM STA PRE&quot;
Set-Cookie: na_tc=Y; expires=Sat, 30-Nov-2013 22:00:00 GMT; domain=.nexac.com; path=/
Location: http://e.nexac.com/e/xrefid.xgi?na_exid=722c639a-eb9c-4420-8e2c-df5b07e58ed0&amp;na_pid=2460
Content-Length: 0
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: lighttpd/1.4.31
GET /google?id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 HTTP/1.1

Host: matcher.bidder7.mookie1.com
GET /google?id=&amp;can=ffffffffffffffff&amp;v2=&amp;google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&amp;google_cver=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4611686278388783669; mdata=1|4611686278388783669|1352600019
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://matcher.bidder8.mookie1.com/google?zap-redir&amp;id=&amp;can=ffffffffffffffff&amp;v2=&amp;google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&amp;google_cver=1
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=961
Connection: Keep-Alive
GET /yts/swfbin/apiplayer-vfli2BatV.swf HTTP/1.1

Host: s.ytimg.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Last-Modified: Tue, 06 Nov 2012 20:02:01 GMT
Date: Fri, 09 Nov 2012 20:33:35 GMT
Expires: Sat, 09 Nov 2013 20:33:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 119865
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 106805
GET /imp?Z=160x600&s=3434596&_salt=1669402311&B=10&r=0&SIG=10vfsfm0p;x-cookie=48x5avg89h2rx&o=3&f=q6 HTTP/1.1

Host: ad.yieldmanager.com
GET /imp?Z=160x600&amp;s=3434596&amp;_salt=1669402311&amp;B=10&amp;r=0&amp;SIG=10vfsfm0p;x-cookie=48x5avg89h2rx&amp;o=3&amp;f=q6 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=82032
HTTP/1.1 200 OK

Content-Type: application/x-javascript
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: YTS/1.20.13
X-RightMedia-Hostname: raptor0442.rm.bf1.yahoo.com
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Set-Cookie: BX=48k5nit89u2ek&amp;b=3&amp;s=d6&amp;t=315; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT uid=uid=68c6736c-2ba5-11e2-9f94-73d310f2fab0&amp;_hmacv=1&amp;_salt=3260777327&amp;_keyid=k1&amp;_hmac=90e68986be48403cff41f6e92524e7a1a296ef7b; path=/; expires=Tue, 11-Dec-2012 02:13:40 GMT RMBX=48k5nit89u2ek&amp;b=3&amp;s=d6&amp;t=315; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Vary: *
Last-Modified: Sun, 11 Nov 2012 02:13:40 GMT
Expires: Sun, 11 Nov 2012 02:13:40 GMT
Pragma: no-cache
Content-Encoding: gzip
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive
GET /e/xrefid.xgi?na_exid=722c639a-eb9c-4420-8e2c-df5b07e58ed0&na_pid=2460 HTTP/1.1

Host: e.nexac.com
GET /e/xrefid.xgi?na_exid=722c639a-eb9c-4420-8e2c-df5b07e58ed0&amp;na_pid=2460 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: na_tc=Y
HTTP/1.1 200 OK

Content-Type: image/gif
Expires: Wed Sep 15 09:14:42 MDT 2010
Pragma: no-cache
P3P: policyref=&quot;http://www.nextaction.net/P3P/PolicyReferences.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa TAIo PSAo PSDo HISa OUR DELa SAMo UNRo OTRo BUS UNI PUR COM NAV INT DEM STA PRE&quot;
Set-Cookie: na_tc=Y; expires=Sat, 30-Nov-2013 22:00:00 GMT; domain=.nexac.com; path=/
X-Powered-By: Jigawatts
Content-Length: 43
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: lighttpd/1.4.31
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3421021&ns__t=1352600020474&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D82032&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com
GET /b?c1=8&amp;c2=6135404&amp;c3=26&amp;c4=3346&amp;c10=3421021&amp;ns__t=1352600020474&amp;ns_c=UTF-8&amp;c8=&amp;c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D82032&amp;c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=82032
Cookie: UID=4c707fa-195.159.219.9-1352600018; UIDR=1352600018
HTTP/1.1 204 No Content

HTTP/1.1 204 No Content
Content-Length: 0
Date: Sun, 11 Nov 2012 02:13:40 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /atoms/2e/f5/2c/0b/2ef52c0b0f67f2d61fbde96e1dfd95cd.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJytjdlugzAQRb8mb4C8sQn1wYTSkgTaUEeRH63YCU4hoNSVq3x9KUHtD%2ERqNDozdxaIE%2DKDWMhYSoFC4YMwgVgoiVXgR6EDkiQJQRAQDKLYQed9u0R1X1GaeS8RnVRclpW9Iz39pP7Or5Ofpk%2D1fJt9tq7X9F%2DUPZN6N3Mx%2ET1lEQ3Q1g1Zn%2E6NccJvB8zRI9mwleZsZ0qWt6WGuuq2drOvdMlWTXXmiN8KUtrfzQfHaYwZFpguUD6GtdbrlNTiqK%2EKO%2ETd2DOqG1ph1MfIrb68m34EqY7iszUuDOBXAKA7197QjMfy6wJnEQIYfQNKLWxT%2C HTTP/1.1

Host: content.yieldmanager.edgesuite.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=82032
HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash
Server: Apache
Etag: &quot;2ef52c0b0f67f2d61fbde96e1dfd95cd:1322579894&quot;
Last-Modified: Tue, 29 Nov 2011 15:18:14 GMT
Accept-Ranges: bytes
Content-Length: 21959
Cache-Control: max-age=31536000
Date: Sun, 11 Nov 2012 02:13:40 GMT
Connection: keep-alive
GET /do-association?rbc&can=20 HTTP/1.1

Host: matcher-rbc.bidder7.mookie1.com
GET /do-association?rbc&amp;can=20 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4611686278388783669; mdata=1|4611686278388783669|1352600019
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://pixel.rubiconproject.com/tap.php?v=7259&amp;nid=2211&amp;put=4611686278388783669&amp;expires=1
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=986
Connection: Keep-Alive
GET /pixel/p-e4m3Yko6bFYVc.gif?idmatch=0 HTTP/1.1

Host: pixel.quantserve.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: image/gif
Connection: close
Set-Cookie: mc=509f09d4-9be7b-0d21e-ccd1e; expires=Tue, 13-May-2014 02:13:40 GMT; path=/; domain=.quantserve.com
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV&quot;
Cache-Control: private, no-cache, no-store, proxy-revalidate
Pragma: no-cache
Expires: Fri, 04 Aug 1978 12:00:00 GMT
Content-Length: 35
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: QS
GET /1/gr?url=http%3a//pixel.rubiconproject.com/tap.php%3fv%3d11782%7c1%7c14%26nid%3d2181%26put%3d__EFGCK__%26expires%3d14 HTTP/1.1

Host: pixel.everesttech.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: Apache
Set-Cookie: everest_session_v2=UJ8J1AAAXp926YFA; path=/; domain=.everesttech.net everest_g_v2=g_surferid~UJ8J1AAAXp926YFA; path=/; domain=.everesttech.net; expires=Mon, 06-Oct-2014 12:53:40 GMT
P3P: CP=&quot;NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM&quot;
Cache-Control: no-cache
Location: http://cm.g.doubleclick.net/pixel?google_nid=everest&amp;google_cm&amp;google_sc&amp;ev_rs=1&amp;url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14
Content-Length: 427
Keep-Alive: timeout=15, max=978334
Connection: Keep-Alive
GET /crossdomain.xml HTTP/1.1

Host: www.youtube.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: VISITOR_INFO1_LIVE=TIoxcizkAQ0; hideBrowserUpgradeBox=True; PREF=fv=10.0.45&amp;f4=4000
If-Modified-Since: Mon, 02 Apr 2012 00:13:23 GMT
HTTP/1.1 304 Not Modified

HTTP/1.1 304 Not Modified
Date: Sat, 10 Nov 2012 20:33:34 GMT
Expires: Sun, 11 Nov 2012 20:33:34 GMT
Age: 20406
Server: GFE/2.0
GET /tap.php?v=7259&nid=2211&put=4611686278388783669&expires=1 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=7259&amp;nid=2211&amp;put=4611686278388783669&amp;expires=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%262373%3D1%269047%3D1%266073%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%269047%3D25074%2C0%2C1%2C%2C%262373%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352600017^1352600017; rdk15=0; ses15=3346^2; csi15=3338758.js^1^1352600018^1352600018&amp;3204663.js^1^1352600017^1352600017; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352600018^1352600018; put_1523=722c639a-eb9c-4420-8e2c-df5b07e58ed0; put_2530=-1574011060046241353; put_2147=gdaF1FA8f3; put_2100=usr3fa35c6ec6d358c0
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%262373%3D1%269047%3D1%266073%3D1%267259%3D1; expires=Tue, 11-Dec-2012 02:13:40 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%269047%3D25074%2C0%2C1%2C%2C%262373%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C%267259%3D25074%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 02:13:40 GMT; path=/; domain=.pixel.rubiconproject.com put_2211=4611686278388783669; expires=Mon, 12-Nov-2012 02:13:40 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9791
Connection: Keep-Alive
GET /pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14 HTTP/1.1

Host: cm.g.doubleclick.net
GET /pixel?google_nid=everest&amp;google_cm&amp;google_sc&amp;ev_rs=1&amp;url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Location: http://pixel2368.everesttech.net/2368/m?cookieid=&amp;ev_rs=1&amp;url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&amp;google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&amp;google_cver=1
Date: Sun, 11 Nov 2012 02:13:40 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: Cookie Matcher
Content-Length: 470
X-XSS-Protection: 1; mode=block
GET /google?zap-redir&id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 HTTP/1.1

Host: matcher.bidder8.mookie1.com
GET /google?zap-redir&amp;id=&amp;can=ffffffffffffffff&amp;v2=&amp;google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&amp;google_cver=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4611686278388783669; mdata=1|4611686278388783669|1352600019
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://ib.adnxs.com/getuid?http://matcher-apx.bidder7.mookie1.com/appnexus?can=fffffffffffffffe%26adnxs_uid=$UID
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=381
Connection: Keep-Alive
GET /orbserv/hbpix?pixId=4857 HTTP/1.1

Host: map.media6degrees.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Tue, 16 Dec 2008 21:07:52 GMT
Etag: &quot;f010b-2b-45e305a397a00&quot;
Accept-Ranges: bytes
Content-Length: 43
Connection: close
GET /empty.gif?p=rubicon&frames=nested&pc=3196/3346&ptc=27309-15 HTTP/1.1

Host: tap.rubiconproject.com
GET /empty.gif?p=rubicon&amp;frames=nested&amp;pc=3196/3346&amp;ptc=27309-15 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=46472
Cookie: rpb=14240%3D1%262373%3D1%269047%3D1%266073%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352600017^1352600017; rdk15=0; ses15=3346^2; csi15=3338758.js^1^1352600018^1352600018&amp;3204663.js^1^1352600017^1352600017; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352600018^1352600018; put_1523=722c639a-eb9c-4420-8e2c-df5b07e58ed0; put_2530=-1574011060046241353; put_2147=gdaF1FA8f3; put_2100=usr3fa35c6ec6d358c0
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Mon, 01 Aug 2011 23:36:46 GMT
Etag: &quot;84ee-0-4a97a1ab4bf80&quot;
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=170
Connection: Keep-Alive
GET /getuid?http://matcher-apx.bidder7.mookie1.com/appnexus?can=fffffffffffffffe%26adnxs_uid=$UID HTTP/1.1

Host: ib.adnxs.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG68%Cxrx)0s]#%2L_'x%SEV/hnJPh4FV-vmw3QN_/h9oD#)Z=#Fdh+7@te5Q)#:$I%l2M!91(8hR!vJ; sess=1; icu=ChIIlroHEAoYASABKAEw0pP8hAUQ0pP8hAUYAA..
HTTP/1.1 302 Moved

Content-Type: text/html; charset=ISO-8859-1
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 02:13:40 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 02:13:40 GMT; domain=.adnxs.com; HttpOnly
Location: http://matcher-apx.bidder7.mookie1.com/appnexus?can=fffffffffffffffe&amp;adnxs_uid=5858721859426781856
Date: Sun, 11 Nov 2012 02:13:40 GMT
Content-Length: 0
GET /2368/m?cookieid=&ev_rs=1&url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&google_cver=1 HTTP/1.1

Host: pixel2368.everesttech.net
GET /2368/m?cookieid=&amp;ev_rs=1&amp;url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&amp;google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&amp;google_cver=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: everest_session_v2=UJ8J1AAAXp926YFA; everest_g_v2=g_surferid~UJ8J1AAAXp926YFA
HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: Apache
Set-Cookie: gglck=CAESEHb10AvLIOUdvYC_4Xf0C8w; path=/; domain=.everesttech.net; expires=Tue, 11-Dec-2012 02:13:40 GMT everest_session_v2=UJ8J1AAAXp926YFA; path=/; domain=.everesttech.net everest_g_v2=g_surferid~UJ8J1AAAXp926YFA; path=/; domain=.everesttech.net; expires=Mon, 06-Oct-2014 12:53:40 GMT
P3P: CP=&quot;NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM&quot;
Cache-Control: no-cache
Location: http://pixel.rubiconproject.com/tap.php?v=11782|1|14&amp;nid=2181&amp;put=CAESEHb10AvLIOUdvYC_4Xf0C8w&amp;expires=14
Content-Length: 300
Keep-Alive: timeout=15, max=996999
Connection: Keep-Alive
GET /tap.php?v=11782|1|14&nid=2181&put=CAESEHb10AvLIOUdvYC_4Xf0C8w&expires=14 HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=11782|1|14&amp;nid=2181&amp;put=CAESEHb10AvLIOUdvYC_4Xf0C8w&amp;expires=14 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: rpb=14240%3D1%262373%3D1%269047%3D1%266073%3D1%267259%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%269047%3D25074%2C0%2C1%2C%2C%262373%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C%267259%3D25074%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352600017^1352600017; rdk15=0; ses15=3346^2; csi15=3338758.js^1^1352600018^1352600018&amp;3204663.js^1^1352600017^1352600017; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352600018^1352600018; put_1523=722c639a-eb9c-4420-8e2c-df5b07e58ed0; put_2530=-1574011060046241353; put_2147=gdaF1FA8f3; put_2100=usr3fa35c6ec6d358c0; put_2211=4611686278388783669
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Set-Cookie: rpb=14240%3D1%262373%3D1%269047%3D1%266073%3D1%267259%3D1%2611782%3D1; expires=Tue, 11-Dec-2012 02:13:40 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%269047%3D25074%2C0%2C1%2C%2C%262373%3D25074%2C0%2C1%2C%2C%266073%3D25074%2C0%2C1%2C%2C%267259%3D25074%2C0%2C1%2C%2C%2611782%3D25074%2C0%2C1%2C14%2C; expires=Tue, 11-Dec-2012 02:13:40 GMT; path=/; domain=.pixel.rubiconproject.com put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; expires=Sun, 25-Nov-2012 02:13:40 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9252
Connection: Keep-Alive
GET /get_video_info?video_id=ElXRdI_GJMU&el=embedded&ps=chromeless&splay=1&eurl=http%3A%2F%2Fimg17%2Eadspirit%2Ede%2Fbanner%2Fmymedia%2F6%2F2012%2D07%2D20%2F0%5FNO%5Fforgeofempire%5Feng%5F300x250%2Eswf&hl=en_US HTTP/1.1

Host: www.youtube.com
GET /get_video_info?video_id=ElXRdI_GJMU&amp;el=embedded&amp;ps=chromeless&amp;splay=1&amp;eurl=http%3A%2F%2Fimg17%2Eadspirit%2Ede%2Fbanner%2Fmymedia%2F6%2F2012%2D07%2D20%2F0%5FNO%5Fforgeofempire%5Feng%5F300x250%2Eswf&amp;hl=en_US HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: VISITOR_INFO1_LIVE=TIoxcizkAQ0; hideBrowserUpgradeBox=True; PREF=fv=10.0.45&amp;f4=4000
HTTP/1.1 200 OK

Content-Type: application/x-www-form-urlencoded
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: gwiseguy/2.0
X-Content-Type-Options: nosniff
Access-Control-Allow-Origin: *
Set-Cookie: use_hitbox=d5c5516c3379125f43aa0d495d100d6ddAEAAAAw; path=/; domain=.youtube.com
Expires: Tue, 27 Apr 1971 19:44:06 EST
Cache-Control: no-cache
P3P: CP=&quot;This is not a P3P policy! See //support.google.com/accounts/bin/answer.py?answer=151657&amp;hl=en-US for more info.&quot;
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Transfer-Encoding: chunked
GET /get_video_info?video_id=ElXRdI_GJMU&el=embedded&ps=chromeless&eurl=http%3A%2F%2Fimg17%2Eadspirit%2Ede%2Fbanner%2Fmymedia%2F6%2F2012%2D07%2D20%2F0%5FNO%5Fforgeofempire%5Feng%5F300x250%2Eswf&hl=en_US HTTP/1.1

Host: www.youtube.com
GET /get_video_info?video_id=ElXRdI_GJMU&amp;el=embedded&amp;ps=chromeless&amp;eurl=http%3A%2F%2Fimg17%2Eadspirit%2Ede%2Fbanner%2Fmymedia%2F6%2F2012%2D07%2D20%2F0%5FNO%5Fforgeofempire%5Feng%5F300x250%2Eswf&amp;hl=en_US HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: VISITOR_INFO1_LIVE=TIoxcizkAQ0; hideBrowserUpgradeBox=True; PREF=fv=10.0.45&amp;f4=4000
HTTP/1.1 200 OK

Content-Type: application/x-www-form-urlencoded
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: gwiseguy/2.0
X-Content-Type-Options: nosniff
Access-Control-Allow-Origin: *
Set-Cookie: use_hitbox=d5c5516c3379125f43aa0d495d100d6ddAEAAAAw; path=/; domain=.youtube.com
Expires: Tue, 27 Apr 1971 19:44:06 EST
Cache-Control: no-cache
P3P: CP=&quot;This is not a P3P policy! See //support.google.com/accounts/bin/answer.py?answer=151657&amp;hl=en-US for more info.&quot;
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Transfer-Encoding: chunked
GET /ptracking?pltype=contentugc&ptchn=undefined&oid=undefined&plid=AATOLrvEBOWtK7hg&ptk=youtube_none&video_id=ElXRdI_GJMU HTTP/1.1

Host: www.youtube.com
GET /ptracking?pltype=contentugc&amp;ptchn=undefined&amp;oid=undefined&amp;plid=AATOLrvEBOWtK7hg&amp;ptk=youtube_none&amp;video_id=ElXRdI_GJMU HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: VISITOR_INFO1_LIVE=TIoxcizkAQ0; hideBrowserUpgradeBox=True; PREF=fv=10.0.45&amp;f4=4000; use_hitbox=d5c5516c3379125f43aa0d495d100d6ddAEAAAAw
HTTP/1.1 204 No Content

Content-Type: video/x-flv
Date: Sun, 11 Nov 2012 02:13:41 GMT
Server: gwiseguy/2.0
X-Content-Type-Options: nosniff
Expires: Tue, 27 Apr 1971 19:44:06 EST
Cache-Control: no-cache
Content-Length: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /appnexus?can=fffffffffffffffe&adnxs_uid=5858721859426781856 HTTP/1.1

Host: matcher-apx.bidder7.mookie1.com
GET /appnexus?can=fffffffffffffffe&amp;adnxs_uid=5858721859426781856 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4611686278388783669; mdata=1|4611686278388783669|1352600019
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:40 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://matcher.bidder8.mookie1.com/appnexus?zap-redir&amp;can=fffffffffffffffe&amp;adnxs_uid=5858721859426781856
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=722
Connection: Keep-Alive
GET /s?ns=yt&docid=ElXRdI_GJMU&el=embedded&ps=chromeless&vid=hub9aG-pL0ZOr7uVxynToEHA3TbzPR6bC&fexp=901451,920201,916805,913556,913546,925003,922403,927201,912806,920704,922401&eurl=http%3A%2F%2Fimg17%2Eadspirit%2Ede%2Fbanner%2Fmymedia%2F6%2F2012%2D07%2D20%2F0%5FNO%5Fforgeofempire%5Feng%5F300x250%2Eswf&hl=en_US&hbd=1540136&hbt=1.665&rt=0.138&splay=1&hosted=1&plid=AATOLrvEBOWtK7hg&fmt=34&vq=auto&volume=100&mos=1&w=384&h=240&len=31&st=9.961&et=9.961&playback=1&fv=WIN%2010%2C0%2C45%2C2 HTTP/1.1

Host: s.youtube.com
GET /s?ns=yt&amp;docid=ElXRdI_GJMU&amp;el=embedded&amp;ps=chromeless&amp;vid=hub9aG-pL0ZOr7uVxynToEHA3TbzPR6bC&amp;fexp=901451,920201,916805,913556,913546,925003,922403,927201,912806,920704,922401&amp;eurl=http%3A%2F%2Fimg17%2Eadspirit%2Ede%2Fbanner%2Fmymedia%2F6%2F2012%2D07%2D20%2F0%5FNO%5Fforgeofempire%5Feng%5F300x250%2Eswf&amp;hl=en_US&amp;hbd=1540136&amp;hbt=1.665&amp;rt=0.138&amp;splay=1&amp;hosted=1&amp;plid=AATOLrvEBOWtK7hg&amp;fmt=34&amp;vq=auto&amp;volume=100&amp;mos=1&amp;w=384&amp;h=240&amp;len=31&amp;st=9.961&amp;et=9.961&amp;playback=1&amp;fv=WIN%2010%2C0%2C45%2C2 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: VISITOR_INFO1_LIVE=TIoxcizkAQ0; hideBrowserUpgradeBox=True; PREF=fv=10.0.45&amp;f4=4000; use_hitbox=d5c5516c3379125f43aa0d495d100d6ddAEAAAAw
HTTP/1.1 204 No Content

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:41 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Set-Cookie: PREF=; expires=Thu, 01-Jan-1970 00:00:00 GMT; path=/
X-Content-Type-Options: nosniff
Server: Video Stats Server
Content-Length: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /get_video?video_id=ElXRdI_GJMU&t=vjVQa1PpcFN4xTNdoY8Pmmj_kdF6YC_rdcQBNgOH9aw=&eurl=http%3A%2F%2Fimg17%2Eadspirit%2Ede%2Fbanner%2Fmymedia%2F6%2F2012%2D07%2D20%2F0%5FNO%5Fforgeofempire%5Feng%5F300x250%2Eswf&el=embedded&ps=chromeless&splay=1&ptk=youtube_none&fmt=34&asv=2&noflv=1 HTTP/1.1

Host: www.youtube.com
GET /get_video?video_id=ElXRdI_GJMU&amp;t=vjVQa1PpcFN4xTNdoY8Pmmj_kdF6YC_rdcQBNgOH9aw=&amp;eurl=http%3A%2F%2Fimg17%2Eadspirit%2Ede%2Fbanner%2Fmymedia%2F6%2F2012%2D07%2D20%2F0%5FNO%5Fforgeofempire%5Feng%5F300x250%2Eswf&amp;el=embedded&amp;ps=chromeless&amp;splay=1&amp;ptk=youtube_none&amp;fmt=34&amp;asv=2&amp;noflv=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: VISITOR_INFO1_LIVE=TIoxcizkAQ0; hideBrowserUpgradeBox=True; PREF=fv=10.0.45&amp;f4=4000; use_hitbox=d5c5516c3379125f43aa0d495d100d6ddAEAAAAw
HTTP/1.1 204 No Content

Content-Type: video/x-flv
Date: Sun, 11 Nov 2012 02:13:41 GMT
Server: Apache
X-Content-Type-Options: nosniff
Expires: Tue, 27 Apr 1971 19:44:06 EST
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
Content-Length: 0
GET /appnexus?zap-redir&can=fffffffffffffffe&adnxs_uid=5858721859426781856 HTTP/1.1

Host: matcher.bidder8.mookie1.com
GET /appnexus?zap-redir&amp;can=fffffffffffffffe&amp;adnxs_uid=5858721859426781856 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4611686278388783669; mdata=1|4611686278388783669|1352600019
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:41 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://bh.contextweb.com/bh/rtset?do=add&amp;pid=536088&amp;ev=4611686278388783669&amp;rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=fffffffffffffff6
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=714
Connection: Keep-Alive
GET /videoplayback?upn=xINGN2KQrxM&sparams=algorithm%2Cburst%2Ccp%2Cfactor%2Cid%2Cip%2Cipbits%2Citag%2Csource%2Cupn%2Cexpire&fexp=917000%2C916411%2C923109%2C922401%2C920704%2C912806%2C927201%2C922403%2C925003%2C913546%2C913556%2C916805%2C920201%2C901451&expire=1352624720&algorithm=throttle-factor&burst=40&ip=195.159.140.222&itag=34&sver=3&key=yt1&mt=1352599985&mv=m&source=youtube&ms=nxu&ipbits=8&factor=1.25&cp=U0hUR1ZNUl9HSkNONF9OR1ZIOlBGbnlha3hrRE84&id=1255d1748fc624c5&signature=5CDC999B6027A713F22F37F1557EA00DDCD9B9FA.776405892337E7DF3C72DB3529217E6308973A00&begin=10000&ptk=youtube_none&cm2=1 HTTP/1.1

Host: r3---sn-5go7ln7s.c.youtube.com
GET /videoplayback?upn=xINGN2KQrxM&amp;sparams=algorithm%2Cburst%2Ccp%2Cfactor%2Cid%2Cip%2Cipbits%2Citag%2Csource%2Cupn%2Cexpire&amp;fexp=917000%2C916411%2C923109%2C922401%2C920704%2C912806%2C927201%2C922403%2C925003%2C913546%2C913556%2C916805%2C920201%2C901451&amp;expire=1352624720&amp;algorithm=throttle-factor&amp;burst=40&amp;ip=195.159.140.222&amp;itag=34&amp;sver=3&amp;key=yt1&amp;mt=1352599985&amp;mv=m&amp;source=youtube&amp;ms=nxu&amp;ipbits=8&amp;factor=1.25&amp;cp=U0hUR1ZNUl9HSkNONF9OR1ZIOlBGbnlha3hrRE84&amp;id=1255d1748fc624c5&amp;signature=5CDC999B6027A713F22F37F1557EA00DDCD9B9FA.776405892337E7DF3C72DB3529217E6308973A00&amp;begin=10000&amp;ptk=youtube_none&amp;cm2=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: VISITOR_INFO1_LIVE=TIoxcizkAQ0; hideBrowserUpgradeBox=True; PREF=fv=10.0.45&amp;f4=4000; use_hitbox=d5c5516c3379125f43aa0d495d100d6ddAEAAAAw
HTTP/1.1 200 OK

Content-Type: video/x-flv
Last-Modified: Wed, 13 Jun 2012 10:49:53 GMT
Date: Sun, 11 Nov 2012 02:13:41 GMT
Expires: Sun, 11 Nov 2012 02:13:41 GMT
Cache-Control: private, max-age=24399
Accept-Ranges: bytes
Content-Length: 2114362
Connection: close
X-Content-Type-Options: nosniff
Server: gvs 1.0
GET /bh/rtset?do=add&pid=536088&ev=4611686278388783669&rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=fffffffffffffff6 HTTP/1.1

Host: bh.contextweb.com
GET /bh/rtset?do=add&amp;pid=536088&amp;ev=4611686278388783669&amp;rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=fffffffffffffff6 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Moved Temporarily

Content-Type: text/html;charset=ISO-8859-1
Cache-Control: private, max-age=0, no-cache, no-store
Content-Language: en-US
CW-Server: ip-10-119-17-88
Date: Sun, 11 Nov 2012 02:13:41 GMT
Expires: -1
Location: http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb&amp;can=fffffffffffffff6
P3P: policyref=&quot;/bh/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT&quot;
Server: GlassFish v3
Set-Cookie: V=2nNrJn4Zup6V; Domain=.contextweb.com; Expires=Wed, 06-Nov-2013 02:13:41 GMT; Path=/ pb_rtb_ev=2-536088.4611686278388783669.0.0.1352600021966; Domain=.contextweb.com; Expires=Mon, 11-Nov-2013 02:13:41 GMT; Path=/
Content-Length: 242
Connection: keep-alive
GET /do-association?return=ctxweb&can=fffffffffffffff6 HTTP/1.1

Host: matcher-cwb.bidder7.mookie1.com
GET /do-association?return=ctxweb&amp;can=fffffffffffffff6 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4611686278388783669; mdata=1|4611686278388783669|1352600019
HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Nov 2012 02:13:42 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI0NzgmdGw9MTI5NjAw&amp;piggybackCookie=uid:4611686278388783669&amp;r=http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 0
Keep-Alive: timeout=1, max=640
Connection: Keep-Alive
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI0NzgmdGw9MTI5NjAw&piggybackCookie=uid:4611686278388783669&r=http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6 HTTP/1.1

Host: image2.pubmatic.com
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI0NzgmdGw9MTI5NjAw&amp;piggybackCookie=uid:4611686278388783669&amp;r=http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1
Date: Sun, 11 Nov 2012 02:12:57 GMT
Server: Apache/2.2.4 (Unix) DAV/2 mod_ssl/2.2.4 OpenSSL/0.9.7a mod_fastcgi/2.4.2
Set-Cookie: KRTBCOOKIE_262=4781-uid:4611686278388783669; domain=pubmatic.com; expires=Tue, 11-Nov-2014 02:12:57 GMT; path=/ PUBRETARGET=2478_1360375977; domain=pubmatic.com; expires=Sat, 09-Feb-2013 02:12:57 GMT; path=/
Location: http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic&amp;can=ffffffffffffffe6
Content-Length: 413
Connection: close
GET /do-association?return=pubmatic&can=ffffffffffffffe6 HTTP/1.1

Host: matcher-pbm.bidder7.mookie1.com
GET /do-association?return=pubmatic&amp;can=ffffffffffffffe6 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&amp;pc=3196/3346&amp;geo=eu&amp;co=no
Cookie: id=4611686278388783669; mdata=1|4611686278388783669|1352600019
HTTP/1.1 200 OK

Content-Type: image/gif
Date: Sun, 11 Nov 2012 02:13:42 GMT
Server: Apache/2.2.3 (Red Hat)
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP=&quot;NON NID PSAa PSDa OUR IND UNI COM NAV STA&quot;,policyref=&quot;/w3c/p3p.xml&quot;
Content-Length: 43
Keep-Alive: timeout=1, max=646
Connection: Keep-Alive
GET /partner/scripts/rubicon/page_parser.js?d=www.mediafire.com HTTP/1.1

Host: tap-cdn.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=46472
Cookie: rpb=14240%3D1%262373%3D1%269047%3D1%266073%3D1%267259%3D1%2611782%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd4509f09d1c39f8cde07cca2^1^1352600017^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352600017^1352600017; rdk15=0; ses15=3346^2; csi15=3338758.js^1^1352600018^1352600018&amp;3204663.js^1^1352600017^1352600017; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352600018^1352600018; put_1523=722c639a-eb9c-4420-8e2c-df5b07e58ed0; put_2530=-1574011060046241353; put_2147=gdaF1FA8f3; put_2100=usr3fa35c6ec6d358c0; put_2211=4611686278388783669; put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w
HTTP/1.1 200 OK

Content-Type: text/javascript;charset=UTF-8
Server: TRP Apache-Coyote/1.1
Last-Modified: Sat, 10 Nov 2012 13:56:04 GMT
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Content-Encoding: gzip
Cache-Control: max-age=3600
Expires: Sun, 11 Nov 2012 03:13:42 GMT
Date: Sun, 11 Nov 2012 02:13:42 GMT
Content-Length: 5705
Connection: keep-alive
Vary: Accept-Encoding
POST / HTTP/1.1

Host: ocsp.verisign.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
HTTP/1.0 200 Ok

Content-Type: application/ocsp-response
Last-Modified: Fri, 09 Nov 2012 00:41:57 GMT
Expires: Fri, 16 Nov 2012 00:41:57 GMT
Content-Transfer-Encoding: binary
Content-Length: 1814
Cache-Control: max-age=426494, public, no-transform, must-revalidate
Date: Sun, 11 Nov 2012 02:13:43 GMT
nncoection: close
Connection: Keep-Alive
GET /dialog/oauth?client_id=124578887583575&response_type=token%2Csigned_request%2Ccode&display=none&domain=www.mediafire.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Df1cd0dffae4932e%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff3ad9f4fb39890a%26domain%3Dwww.mediafire.com%26relation%3Dparent&sdk=joey HTTP/1.1

Host: www.facebook.com
GET /dialog/oauth?client_id=124578887583575&amp;response_type=token%2Csigned_request%2Ccode&amp;display=none&amp;domain=www.mediafire.com&amp;origin=1&amp;redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Df1cd0dffae4932e%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff3ad9f4fb39890a%26domain%3Dwww.mediafire.com%26relation%3Dparent&amp;sdk=joey HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8
Cache-Control: private, no-cache, no-store, must-revalidate
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: http://static.ak.facebook.com/connect/xd_arbiter.php?version=17#cb=f1cd0dffae4932e&amp;origin=http%3A%2F%2Fwww.mediafire.com%2Ff3ad9f4fb39890a&amp;domain=www.mediafire.com&amp;relation=parent&amp;error=unknown_user
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-FB-Debug: tZ/xqIXwIonAbSFv1nnbPGvfZ5tGa0xK3AIeAHClluE=
Date: Sun, 11 Nov 2012 02:13:43 GMT
Connection: keep-alive
Content-Length: 0
GET /b4v0hf1h02cg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe HTTP/1.1

Host: 199.91.153.36

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
HTTP/1.1 302 Found

HTTP/1.1 302 Found
Location: http://www.mediafire.com/?4p5wab4oqodaj44
Connection: Close