urlquery.net - Free url scanner

Overview

URL	http://205.196.120.217/0zfftr6qa6ng/5nwz1uz1r4ddec4/PotPlayerPortable_1.5.34321_Beta_azo.exe
IP	205.196.120.217
ASN	AS46179 MediaFire, LLC
Location	United States
Report completed	2012-11-11 05:04:12 CET
Status	Loading report..
urlQuery Alerts	No alerts detected

Settings

UserAgent	Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader	8.0
Java	1.6.0_26

Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Source IP	Destination IP	Severity	Alert
2012-11-11 05:03:34	205.196.120.8	urlQuery Client	3	FILEMAGIC Macromedia Flash data (compressed),
2012-11-11 05:03:46	93.184.221.133	urlQuery Client	3	FILEMAGIC Macromedia Flash data (compressed),

Snort /w Sourcefire VRT

Timestamp	Source IP	Destination IP	Severity	Alert
2012-11-11 05:03:43	urlQuery Client	173.252.110.16	2	ssp_ssl: Invalid Client HELLO after Server HELLO Detected
2012-11-11 05:03:43	urlQuery Client	173.252.110.16	2	ssp_ssl: Invalid Client HELLO after Server HELLO Detected

Recent reports on same IP/ASN/Domain

Last 2 reports on IP: 205.196.120.217

Date	Alerts / IDS	URL	IP
2013-01-28 18:39:32	0 / 1	http://205.196.120.217/g06ab44vabfg/tazgbyomjzz/teknogods.rar	205.196.120.217
2012-10-30 04:27:25	0 / 2	http://205.196.120.217/ylj25f66tq5g/8qhand6y1qcyq62/smrecorder_installer.exe	205.196.120.217

Last 6 reports on ASN: AS46179 MediaFire, LLC

Date	Alerts / IDS	URL	IP
2012-10-16 23:55:20	0 / 2	http://205.196.122.221/2dy5udo8a3pg/dino0non9h0cioa/CWMInstaller.rar	205.196.122.221
2012-10-17 06:42:14	0 / 2	http://205.196.122.179/cop1l5a2yzpg/5wx68o6kurzsa8j/Setup.exe	205.196.122.179
2012-10-17 11:59:25	0 / 1	http://205.196.120.210/	205.196.120.210
2012-10-18 07:59:12	0 / 4	http://www.mediafire.com/?99vy0bn4oz3fvgy	205.196.120.8
2012-10-18 16:49:08	0 / 2	http://205.196.121.220/670k2d4m95gg/lafoxc34ymdpbtx/IObit_Security_360_Portable_1.61_azo.exe	205.196.121.220
2012-10-19 18:51:41	1 / 0	http://www.mediafire.com/download_repair.php?dkey=34zp6xufmez	205.196.120.6

JavaScript

Executed Scripts (65)

Executed Evals (0)

Executed Writes (48)

#1 JavaScript::Write (size: 9, repeated: 1)

 </EMBED>

#2 JavaScript::Write (size: 10, repeated: 1)

 </OBJECT>

#3 JavaScript::Write (size: 275, repeated: 1)

 <EMBED src="http://cdne.cpmstar.com/cached/creatives/203391/Kone-XTD_Banner_160x600_Clicktag.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d82398%26creativeid%3d203391%26url%3d" wmode=opaque menu=false quality=high

#4 JavaScript::Write (size: 346, repeated: 1)

 <PARAM NAME=movie VALUE="http://cdne.cpmstar.com/cached/creatives/203391/Kone-XTD_Banner_160x600_Clicktag.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d82398%26creativeid%3d203391%26url%3d"> <PARAM NAME=wmode VALUE=opaque> <PARAM NAME=menu VALUE=false> <PARAM NAME=quality VALUE=high>

#5 JavaScript::Write (size: 69, repeated: 1)

 ID=ad_banner_example WIDTH=160 HEIGHT=600 style="line-height: 1px;">

#6 JavaScript::Write (size: 133, repeated: 1)

 TYPE="application/x-shockwave-flash" PLUGINSPAGE="//www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash">

#7 JavaScript::Write (size: 91, repeated: 1)

 codebase="//download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=3,0,0,0"

#8 JavaScript::Write (size: 41, repeated: 1)

 swLiveConnect=FALSE WIDTH=160 HEIGHT=600

#9 JavaScript::Write (size: 245, repeated: 2)

<!-- BEGIN JS TAG - [Mediafire - Rubicon] - Default < - DO NOT MODIFY -->
<SCRIPT SRC="http://ads.cpxinteractive.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4" TYPE="text/javascript"></script>
<!-- END TAG -->

#10 JavaScript::Write (size: 244, repeated: 1)

<!-- BEGIN JS TAG - [Mediafire - Rubicon] - Default < - DO NOT MODIFY -->
<SCRIPT SRC="http://ads.cpxinteractive.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4" TYPE="text/javascript"></script>
<!-- END TAG -->

#11 JavaScript::Write (size: 9, repeated: 5)

</script>

#12 JavaScript::Write (size: 60, repeated: 1)

<OBJECT classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"

#13 JavaScript::Write (size: 2271, repeated: 1)

<OBJECT id="2445300377109693164" data="http://cdn.adnxs.com/p/41/ca/ad/dd/41caadddee91b91cdc80822411c9d405.swf" classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" WIDTH="728" HEIGHT="90" flashvars="clickTAG=http%3A%2F%2Fib.adnxs.com%2Fclick%3FAAAAAAAAAAAAAAAAAAAAAAAAAEAzM8M_AAAAAAAAAAAAAAAAAAAAAOyCwLq8c-8hoArzhH1cTlGXI59QAAAAAHZYCwAdAgAAHQIAAAIAAADRzCkAKkACAAAAAQBVU0QAVVNEANgCWgBNUQAA4E8AAgMCAQUAAIIAxhQWJQAAAAA.%2Fcnd%3D%2521UQVSMQjjth4Q0ZmnARiqgAkgBA..%2Freferrer%3Dhttp%253A%252F%252Fwww.mediafire.com%252F%253F5nwz1uz1r4ddec4%2Fclickenc%3Dhttp%253A%252F%252Fno.balagana.net%252Fpages%252Fno_NO%252Fplay%252F%253FAFID%253D220843%2526AFCID%253Dams1CKCVzKfYj5enURACGOyFgtbL99z3ISIPMTk1LjE1OS4xNDAuMjIyKAE."><PARAM NAME=movie VALUE="http://cdn.adnxs.com/p/41/ca/ad/dd/41caadddee91b91cdc80822411c9d405.swf"><PARAM NAME=loop VALUE=true><PARAM NAME=menu VALUE=false><PARAM NAME=quality VALUE=high><PARAM NAME=wmode VALUE="opaque"><PARAM NAME=bgcolor VALUE=#FFFFFF><PARAM NAME=allowscriptaccess VALUE=always><PARAM NAME=flashvars VALUE="clickTAG=http%3A%2F%2Fib.adnxs.com%2Fclick%3FAAAAAAAAAAAAAAAAAAAAAAAAAEAzM8M_AAAAAAAAAAAAAAAAAAAAAOyCwLq8c-8hoArzhH1cTlGXI59QAAAAAHZYCwAdAgAAHQIAAAIAAADRzCkAKkACAAAAAQBVU0QAVVNEANgCWgBNUQAA4E8AAgMCAQUAAIIAxhQWJQAAAAA.%2Fcnd%3D%2521UQVSMQjjth4Q0ZmnARiqgAkgBA..%2Freferrer%3Dhttp%253A%252F%252Fwww.mediafire.com%252F%253F5nwz1uz1r4ddec4%2Fclickenc%3Dhttp%253A%252F%252Fno.balagana.net%252Fpages%252Fno_NO%252Fplay%252F%253FAFID%253D220843%2526AFCID%253Dams1CKCVzKfYj5enURACGOyFgtbL99z3ISIPMTk1LjE1OS4xNDAuMjIyKAE."><OBJECT TYPE="application/x-shockwave-flash" data="http://cdn.adnxs.com/p/41/ca/ad/dd/41caadddee91b91cdc80822411c9d405.swf?clickTAG=http%3A%2F%2Fib.adnxs.com%2Fclick%3FAAAAAAAAAAAAAAAAAAAAAAAAAEAzM8M_AAAAAAAAAAAAAAAAAAAAAOyCwLq8c-8hoArzhH1cTlGXI59QAAAAAHZYCwAdAgAAHQIAAAIAAADRzCkAKkACAAAAAQBVU0QAVVNEANgCWgBNUQAA4E8AAgMCAQUAAIIAxhQWJQAAAAA.%2Fcnd%3D%2521UQVSMQjjth4Q0ZmnARiqgAkgBA..%2Freferrer%3Dhttp%253A%252F%252Fwww.mediafire.com%252F%253F5nwz1uz1r4ddec4%2Fclickenc%3Dhttp%253A%252F%252Fno.balagana.net%252Fpages%252Fno_NO%252Fplay%252F%253FAFID%253D220843%2526AFCID%253Dams1CKCVzKfYj5enURACGOyFgtbL99z3ISIPMTk1LjE1OS4xNDAuMjIyKAE." width="728" height="90" wmode="opaque" allowscriptaccess="always"></OBJECT></OBJECT>

#14 JavaScript::Write (size: 274, repeated: 1)

<SCRIPT language="Javascript">
var cpmstar_rnd=Math.round(Math.random()*999999);
var cpmstar_pid=12887;
document.writeln("<SCR"+"IPT language='Javascript' src='http://server.cpmstar.com/view.aspx?poolid="+cpmstar_pid+"&script=1&rnd="+cpmstar_rnd+"'></SCR"+"IPT>");
</script>

#15 JavaScript::Write (size: 114, repeated: 1)

<SCRIPT language='Javascript' src='http://server.cpmstar.com/view.aspx?poolid=12887&script=1&rnd=389990'></SCRIPT>

#16 JavaScript::Write (size: 582, repeated: 1)

<a href="http://ib.adnxs.com/click?WcFvQ4zXnD9awW9DjNecPwAAAEAzM8M_WsFvQ4zXnD9ZwW9DjNecP2AzO8e7qh0boArzhH1cTlGXI59QAAAAAHZYCwAdAgAAHQIAAAIAAAAyVRQAKkACAAAAAQBVU0QAVVNEACwB-gBNUQAA8EcAAgQCAQUAAIIAzCG_HgAAAAA./cnd=%218QTZKgjwvQ8QsqpRGKqACSAE/referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGODm7Lm81-qOGyIPMTk1LjE1OS4xNDAuMjIyKAE." target="_blank"><img width="300" height="250" style="border-style: none" src="http://cdn.adnxs.com/p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png"/></a>

#17 JavaScript::Write (size: 582, repeated: 1)

<a href="http://ib.adnxs.com/click?y0dS0sPQmj_MR1LSw9CaPwAAAEAzM8M_zEdS0sPQmj_LR1LSw9CaPxkYyjFSlcBuoArzhH1cTlGXI59QAAAAAHZYCwAdAgAAHQIAAAIAAAAyVRQAKkACAAAAAQBVU0QAVVNEACwB-gBNUQAAxE0AAgQCAQUAAIIAFSQVIQAAAAA./cnd=%218QTZKgjwvQ8QsqpRGKqACSAE/referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGJmwqI6jqqXgbiIPMTk1LjE1OS4xNDAuMjIyKAE." target="_blank"><img width="300" height="250" style="border-style: none" src="http://cdn.adnxs.com/p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png"/></a>

#18 JavaScript::Write (size: 58, repeated: 1)

<div id="recaptcha_widget_div" style="display:none"></div>

#19 JavaScript::Write (size: 27, repeated: 1)

<div id="theToolTip"></div>

#20 JavaScript::Write (size: 198, repeated: 3)

<iframe src="http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1" width="1" height="1" frameborder="0" scrolling="No" marginheight="0" marginwidth="0" topmargin="0" leftmargin="0"></iframe>

#21 JavaScript::Write (size: 134, repeated: 1)

<iframe src='http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/?rt=iframe' width='1' height='1' frameborder='0'></iframe>

#22 JavaScript::Write (size: 52, repeated: 1)

<script language="JavaScript" type="text/javascript"

#23 JavaScript::Write (size: 53, repeated: 4)

<script language="JavaScript" type="text/javascript">

#24 JavaScript::Write (size: 131, repeated: 1)

<script type="text/javascript" SRC="http://tap.rubiconproject.com/partner/agent/rubicon/channels.js?cb=oz_onPixelsLoaded"></script>

#25 JavaScript::Write (size: 87, repeated: 3)

<script type="text/javascript" src="http://ads.rubiconproject.com/ad/3196.js"></script>

#26 JavaScript::Write (size: 235, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/27309-15.js?cb=0.6027779911008824&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4"></script>

#27 JavaScript::Write (size: 234, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-15.js?cb=0.9608126726378651&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4"></script>

#28 JavaScript::Write (size: 233, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-2.js?cb=0.6170138632509562&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4"></script>

#29 JavaScript::Write (size: 234, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-9.js?cb=0.06351136878119612&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4"></script>

#30 JavaScript::Write (size: 98, repeated: 1)

<script type="text/javascript" src="http://www.google.com/recaptcha/api/js/recaptcha.js"></script>

#31 JavaScript::Write (size: 1140, repeated: 1)

<script type="text/javascript">
//20121025
var cpmstarfa12_flashurl="http://cdne.cpmstar.com/cached/creatives/203391/Kone-XTD_Banner_160x600_Clicktag.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d82398%26creativeid%3d203391%26url%3d";
var cpmstarfa12_width=160, width=160;
var cpmstarfa12_height=600, height=600;
var cpmstarfa12_imageurl="http://cdne.cpmstar.com/cached/creatives/203391/Kone-XTD_Banner_Animiertes_Gif_160x600.gif";
var cpmstarfa12_videourl="";
if(cpmstarfa12_videourl!="")cpmstarfa12_flashurl+="&videourl="+encodeURI(cpmstarfa12_videourl);
var cpmstarfa12_flashvars="";
if(cpmstarfa12_flashvars!="")cpmstarfa12_flashurl+="&"+cpmstarfa12_flashvars;
var cpmstarfa12_simpleclickurl="http://server.cpmstar.com/click.aspx?poolid=12887&subpoolid=0&campaignid=82398&creativeid=203391&url=";
var cpmstarfa12_pixelUrl = "";
if (cpmstarfa12_pixelUrl!="")document.write('<IMG SRC="'+cpmstarfa12_pixelUrl+'" width="0" height="0" border="0" />\n');
</script>
<script type="text/javascript" src="http://cdne.cpmstar.com/cached/js/flashadv12.pack.js">
</script>

#32 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3176583" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#33 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3320011" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#34 JavaScript::Write (size: 903, repeated: 2)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3320015" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#35 JavaScript::Write (size: 498, repeated: 3)

<script> var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6035951", c3: "122134" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })(); </script> <noscript> <img src="http://b.scorecardresearch.com/p?c1=8&c2=&c3=&c4=&c5=&c6=&c15=&cv=2.0&cj=1" /> </noscript>

#36 JavaScript::Write (size: 104, repeated: 1)

<script>Recaptcha.widget = Recaptcha.$("recaptcha_widget_div"); Recaptcha.challenge_callback();</script>

#37 JavaScript::Write (size: 69, repeated: 1)

src="http://ads.rubiconproject.com/ad/3196.js?cb=0.8693750963499682">

#38 JavaScript::Write (size: 26, repeated: 3)

var rp_account   = "3196";

#39 JavaScript::Write (size: 24, repeated: 1)

var rp_account = "3196";

#40 JavaScript::Write (size: 24, repeated: 3)

var rp_adtype    = "js";

#41 JavaScript::Write (size: 21, repeated: 1)

var rp_adtype = "js";

#42 JavaScript::Write (size: 26, repeated: 3)

var rp_site      = "3346";

#43 JavaScript::Write (size: 21, repeated: 1)

var rp_site = "3346";

#44 JavaScript::Write (size: 81, repeated: 4)

var rp_smartfile = "http://www.mediafire.com/templates/ads/revv_smart_file.html";

#45 JavaScript::Write (size: 30, repeated: 1)

var rp_zonesize  = "27309-15";

#46 JavaScript::Write (size: 29, repeated: 1)

var rp_zonesize  = "9685-15";

#47 JavaScript::Write (size: 28, repeated: 1)

var rp_zonesize  = "9685-9";

#48 JavaScript::Write (size: 27, repeated: 1)

var rp_zonesize = "9685-2";

HTTP Transactions (128)

Request	Response
GET /css/mfv3_85677.php?ver=nonssl HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 37605 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 Host: cdn.mediafire.com GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 52116 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /?5nwz1uz1r4ddec4 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:31 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: 0 Set-Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; expires=Sun, 12-Oct-2014 04:03:31 GMT; path=/; domain=.mediafire.com; httponly Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 17020 Connection: close Server: MediaFire
GET /css?family=Open+Sans:800,400,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: text/css Expires: Sun, 11 Nov 2012 04:03:31 GMT Date: Sun, 11 Nov 2012 04:03:31 GMT Cache-Control: private, max-age=86400 Content-Encoding: gzip Content-Length: 318 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE
GET /blank.html HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Last-Modified: Tue, 18 Sep 2012 21:44:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 78 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /images/icons/ajax-loader-grey_round.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 1775 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 2315 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_allowemail.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 941 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /images/buttons/btn_twitter_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 1799 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /images/icons/dropdown-arrow-left-white.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 123 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /images/logos/logo_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 16 Jul 2012 19:28:31 GMT Accept-Ranges: bytes Content-Length: 3708 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /images/icons/icon-sprite-16-v3.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 02 Oct 2012 17:01:27 GMT Accept-Ranges: bytes Content-Length: 61715 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 Host: platform.twitter.com GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: public, max-age=1800 Last-Modified: Thu, 08 Nov 2012 09:18:41 GMT Etag: "567a94a4e136d5c4b7bfde258474cfa6" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 25717 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
GET /ga.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 14888 Content-Encoding: gzip Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT X-Content-Type-Options: nosniff, nosniff Date: Sat, 10 Nov 2012 20:33:28 GMT Expires: Sun, 11 Nov 2012 08:33:28 GMT Vary: Accept-Encoding Age: 27003 Cache-Control: max-age=43200, public Server: GFE/2.0
GET /ajax/libs/jquery/1.7.2/jquery.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Content-Encoding: gzip Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT Date: Fri, 09 Nov 2012 20:33:45 GMT Expires: Sat, 09 Nov 2013 20:33:45 GMT X-Content-Type-Options: nosniff Server: sffe Content-Length: 73891 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 113386
GET /images/icons/information_darkblue.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 722 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /images/backgrounds/download/rockmelt/rockmelt_dl_btn.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:44 GMT Accept-Ranges: bytes Content-Length: 7653 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /images/favicon/download.ico HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Date: Sun, 11 Nov 2012 04:03:32 GMT Last-Modified: Thu, 25 Oct 2012 21:59:32 GMT Accept-Ranges: bytes Content-Length: 1150 Connection: close Server: MediaFire
GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 Host: p.twitter.com GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: image/gif Etag: "377d257f2d2e294916143c069141c1c5:1328738114" Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT Accept-Ranges: bytes Content-Length: 43 Cache-Control: no-cache P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 Host: cdn.api.twitter.com GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Last-Modified: Sun, 11 Nov 2012 03:46:25 GMT Pragma: no-cache X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Status: 200 OK Content-Encoding: gzip Content-Length: 898 Server: tfe Vary: Accept-Encoding Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Expires: Sun, 11 Nov 2012 04:03:32 GMT Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /recaptcha/api/challenge?k=6LextQUAAAAAALlQv0DSHOYxqF3DftRZxA5yebEe HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Date: Sun, 11 Nov 2012 04:03:32 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 449 Server: GSE
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 Host: www.facebook.com GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 Content-Encoding: gzip X-FB-Debug: +VLhZiKGjolKhKaAzN5opaneszY8TERFaOF9cSDX5sI= Date: Sun, 11 Nov 2012 04:03:32 GMT Transfer-Encoding: chunked Connection: keep-alive
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=825370576&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=PotPlayerPortable_1.5.34321_Beta_azo.exe&utmhid=333298335&utmr=-&utmp=%2F%3F5nwz1uz1r4ddec4&utmac=UA-829541-1&utmcc=__utma%3D213136648.1346896719.1352606612.1352606612.1352606612.1%3B%2B__utmz%3D213136648.1352606612.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 Host: www.google-analytics.com GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=825370576&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=PotPlayerPortable_1.5.34321_Beta_azo.exe&utmhid=333298335&utmr=-&utmp=%2F%3F5nwz1uz1r4ddec4&utmac=UA-829541-1&utmcc=__utma%3D213136648.1346896719.1352606612.1352606612.1352606612.1%3B%2B__utmz%3D213136648.1352606612.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 09 Nov 2012 20:39:16 GMT Content-Length: 35 X-Content-Type-Options: nosniff Pragma: no-cache Expires: Wed, 19 Apr 2000 11:43:00 GMT Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Age: 113056 Server: GFE/2.0
GET /js/master_85677.js HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: text/javascript Last-Modified: Fri, 09 Nov 2012 23:25:30 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Server: MediaFire Content-Length: 143613 Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /js/encoder.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:03:32 GMT Last-Modified: Thu, 05 Jan 2012 22:41:54 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 04:03:32 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3695 Connection: close Server: MediaFire
GET /js/bust_out.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:03:32 GMT Last-Modified: Thu, 31 May 2012 19:49:34 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 04:03:32 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 57 Connection: close Server: MediaFire
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1 Host: static.ak.fbcdn.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 Origin: http://www.facebook.com	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 29 Oct 2012 23:55:41 GMT X-Content-Type-Options: nosniff Content-Encoding: gzip X-FB-Debug: mERPLeHfP4bFbWVj/NJRwm2C8x1Lf8geAnYAfFf24WM= Content-Length: 37945 Vary: Accept-Encoding Cache-Control: public, max-age=31140564 Expires: Wed, 06 Nov 2013 14:12:56 GMT Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 106 Content-Type: application/ocsp-request	HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 11 Nov 2012 04:03:32 GMT Server: Apache Content-Transfer-Encoding: Binary Cache-Control: max-age=12682, public, no-transform, must-revalidate Last-Modified: Sun, 11 Nov 2012 01:46:02 GMT Expires: Sun, 11 Nov 2012 07:46:02 GMT Etag: "8c6a4b9dee7b1bc21ddf455dd96406348b7e33d2" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" Content-Length: 1923 Connection: close
GET /images/ad-loader.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:09:03 GMT Accept-Ranges: bytes Content-Length: 1786 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /recaptcha/api/js/recaptcha.js HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: application/x-javascript Expires: Sun, 11 Nov 2012 04:03:32 GMT Date: Sun, 11 Nov 2012 04:03:32 GMT Last-Modified: Tue, 12 Jun 2012 14:07:31 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 17531 Server: GSE Cache-Control: public, max-age=0 Age: 0
GET /recaptcha/api/img/red/refresh.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:03:09 GMT Date: Sun, 11 Nov 2012 04:03:09 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 974 Server: GSE Age: 23 Cache-Control: public, max-age=3600
GET /images/backgrounds/footer/footer_texture.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 20:31:25 GMT Accept-Ranges: bytes Content-Length: 2649 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_gp.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 29 Aug 2012 21:02:04 GMT Accept-Ranges: bytes Content-Length: 312 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_blog.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 171 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateFB_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 255 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /templates/linkto/default-337x281-default.php?r=90322 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:32 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 786 Connection: close Server: MediaFire
GET /images/backgrounds/footer/icn_footer_tw.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 274 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_fb.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 514 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateTW_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 387 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /templates/linkto/default-337x281-default2.php?r=37241 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:32 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 787 Connection: close Server: MediaFire
GET /recaptcha/api/img/red/text.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:00:43 GMT Date: Sun, 11 Nov 2012 04:00:43 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 155 Server: GSE Age: 170 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/audio.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 04:57:47 GMT Date: Sun, 11 Nov 2012 03:57:47 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 914 Server: GSE Age: 346 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/help.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:03:33 GMT Date: Sun, 11 Nov 2012 04:03:33 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 367 Server: GSE Cache-Control: public, max-age=3600 Age: 0
GET /recaptcha/api/image?c=03AHJ_VuuRpW_AkkGIb4LeU789fTvZBQrry6Lg36r4mh8fjD4-OaVf1OAfGxuzIlLRHPcz7dlcuQyW5F8Bv5hmc1CDeFdzcKfcbPRdfAF7E90_Nc8pviuqoOV6fMUowSm5gJ6Twtz5zW6U_gzH9V3KidK-cgSr9OXRXHnrye6rKoYMyq4A4G0Qlg4 HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Sun, 11 Nov 2012 04:13:33 GMT Date: Sun, 11 Nov 2012 04:03:33 GMT Cache-Control: public, max-age=600 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 2987 Server: GSE
GET /templates/linkto/default-729x91-default.php?r=69143 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:33 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 666 Connection: close Server: MediaFire
GET /templates/linkto/default-161x601-default.php?r=43143 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:33 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 733 Connection: close Server: MediaFire
GET /en_US/all.js?_=1352606613123 HTTP/1.1 Host: connect.facebook.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Etag: "06c9a8ca347f3538149da85e21e875b7" Content-Encoding: gzip X-FB-Debug: X3Nrx0dvtwlQoRUMew0rjAlo3oM0EpdCpibAbThojIc= Content-Length: 58145 Cache-Control: public, max-age=767 Expires: Sun, 11 Nov 2012 04:16:20 GMT Date: Sun, 11 Nov 2012 04:03:33 GMT Connection: keep-alive Vary: Accept-Encoding
GET /recaptcha/api/img/red/sprite.png HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/png Expires: Sun, 11 Nov 2012 04:46:50 GMT Date: Sun, 11 Nov 2012 03:46:50 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 4679 Server: GSE Age: 1004 Cache-Control: public, max-age=3600
GET /ad/3196.js HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 04:03:34 GMT Date: Sun, 11 Nov 2012 04:03:34 GMT Connection: keep-alive
GET /ad/3196.js?cb=0.8693750963499682 HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 04:03:34 GMT Date: Sun, 11 Nov 2012 04:03:34 GMT Connection: keep-alive
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: QpUXNDPC4a/ZS9XMuzc2WDBWEZ8S2oHPsfImau8uouU= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31448017 Expires: Sun, 10 Nov 2013 03:37:11 GMT Date: Sun, 11 Nov 2012 04:03:34 GMT Connection: keep-alive
GET /helper_01.swf HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Date: Sun, 11 Nov 2012 04:03:34 GMT Last-Modified: Sat, 15 Oct 2011 19:43:58 GMT Accept-Ranges: bytes Content-Length: 1480 Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 04:03:34 GMT Connection: close Server: MediaFire
GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 Host: secure.gravatar.com GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx Date: Sun, 11 Nov 2012 04:03:34 GMT Content-Length: 906 Connection: keep-alive Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Access-Control-Allow-Origin: * Content-Disposition: inline; filename="00000000.png" X-Varnish: 2462294085 2461089695 Via: 1.1 varnish Expires: Sun, 11 Nov 2012 04:08:34 GMT Cache-Control: max-age=300
GET /a/3196/3346/9685-15.js?cb=0.9608126726378651&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-15.js?cb=0.9608126726378651&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:03:34 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db7f3509f2396c39f8cde6aa053^1^1352606614^3282013406; expires=Sat, 09-Feb-2013 04:03:34 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=100585; path=/; domain=.rubiconproject.com csi15=3204663.js^1^1352606614^1352606614; expires=Sun, 18-Nov-2012 04:03:34 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/9685-2.js?cb=0.6170138632509562&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-2.js?cb=0.6170138632509562&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:03:34 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db406509f2396c39f8cde1d1a00^1^1352606614^3282013406; expires=Sat, 09-Feb-2013 04:03:34 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk2=0; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=10; path=/; domain=.rubiconproject.com ses2=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=100585; path=/; domain=.rubiconproject.com csi2=3204661.js^1^1352606614^1352606614; expires=Sun, 18-Nov-2012 04:03:34 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Transfer-Encoding: chunked
GET /static/fonts/opensans/v6/k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM.woff HTTP/1.1 Host: themes.googleusercontent.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://fonts.googleapis.com/css?family=Open+Sans:800,400,700 Origin: http://www.mediafire.com	HTTP/1.1 200 OK Content-Type: font/woff Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT Date: Fri, 09 Nov 2012 20:33:30 GMT Expires: Sat, 09 Nov 2013 20:33:30 GMT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: sffe Content-Length: 22748 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 113404
GET /a/3196/3346/9685-9.js?cb=0.06351136878119612&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-9.js?cb=0.06351136878119612&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43143 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:03:34 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592dbbd8509f2396c39f8cde0c509b^1^1352606614^3282013406; expires=Sat, 09-Feb-2013 04:03:34 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk9=0; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=10; path=/; domain=.rubiconproject.com ses9=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=100585; path=/; domain=.rubiconproject.com csi9=3165520.js^1^1352606614^1352606614; expires=Sun, 18-Nov-2012 04:03:34 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/27309-15.js?cb=0.6027779911008824&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/27309-15.js?cb=0.6027779911008824&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=37241 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:03:34 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; expires=Sat, 09-Feb-2013 04:03:34 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=100585; path=/; domain=.rubiconproject.com csi15=3204663.js^1^1352606614^1352606614; expires=Sun, 18-Nov-2012 04:03:34 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: s-static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: JS4qOSg1Dl3AgVtg3MyBP4whcr8SZapA/Vud9cBlDwY= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31447989 Expires: Sun, 10 Nov 2013 03:36:43 GMT Date: Sun, 11 Nov 2012 04:03:34 GMT Connection: keep-alive
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 0
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 Host: fpdownload2.macromedia.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/xml Server: Apache Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT Etag: "87de33-256-4cd617ed12480" Accept-Ranges: bytes Content-Length: 598 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=37241	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 0
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 0
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:03:35 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 1350
GET /p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; sess=1; icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/png Server: Apache Etag: "05c7006db8c87009c7ef4cebeac987fa:1350137588" Last-Modified: Sat, 13 Oct 2012 14:13:08 GMT Accept-Ranges: bytes Content-Length: 5202 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive
GET /beacon.js HTTP/1.1 Host: b.scorecardresearch.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322	HTTP/1.1 200 OK Content-Type: application/x-javascript Vary: Accept-Encoding Content-Encoding: gzip Expires: Sun, 25 Nov 2012 04:03:35 GMT Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 1140 Connection: keep-alive Cache-Control: private, no-transform, max-age=1209600
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352606615229&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352606615229&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6035951&c3=122134&ns__t=1352606615229&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Set-Cookie: UID=4cc0eb4-195.159.219.9-1352606615; expires=Sat, 01-Nov-2014 04:03:35 GMT; path=/; domain=.scorecardresearch.com UIDR=1352606615; expires=Sat, 01-Nov-2014 04:03:35 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352606615230&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352606615230&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352606615230&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Set-Cookie: UID=4cc0eb6-195.159.219.9-1352606615; expires=Sat, 01-Nov-2014 04:03:35 GMT; path=/; domain=.scorecardresearch.com UIDR=1352606615; expires=Sat, 01-Nov-2014 04:03:35 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352606615229&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352606615229&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: UID=4cc0eb4-195.159.219.9-1352606615; UIDR=1352606615	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352606615230&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352606615230&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: UID=4cc0eb6-195.159.219.9-1352606615; UIDR=1352606615	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 Host: tap2-cdn.rubiconproject.com GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Last-Modified: Sat, 10 Nov 2012 20:11:13 GMT Content-Encoding: gzip Cache-Control: max-age=600 Expires: Sun, 11 Nov 2012 04:13:35 GMT Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 5080 Connection: keep-alive Vary: Accept-Encoding
GET /partner/scripts/rubicon/alice.js HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:56:23 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sun, 11 Nov 2012 05:03:35 GMT Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 5798 Connection: keep-alive Vary: Accept-Encoding
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:03:35 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 6619
GET /p/41/ca/ad/dd/41caadddee91b91cdc80822411c9d405.swf?clickTAG=http%3A%2F%2Fib.adnxs.com%2Fclick%3FAAAAAAAAAAAAAAAAAAAAAAAAAEAzM8M_AAAAAAAAAAAAAAAAAAAAAOyCwLq8c-8hoArzhH1cTlGXI59QAAAAAHZYCwAdAgAAHQIAAAIAAADRzCkAKkACAAAAAQBVU0QAVVNEANgCWgBNUQAA4E8AAgMCAQUAAIIAxhQWJQAAAAA.%2Fcnd%3D%2521UQVSMQjjth4Q0ZmnARiqgAkgBA..%2Freferrer%3Dhttp%253A%252F%252Fwww.mediafire.com%252F%253F5nwz1uz1r4ddec4%2Fclickenc%3Dhttp%253A%252F%252Fno.balagana.net%252Fpages%252Fno_NO%252Fplay%252F%253FAFID%253D220843%2526AFCID%253Dams1CKCVzKfYj5enURACGOyFgtbL99z3ISIPMTk1LjE1OS4xNDAuMjIyKAE. HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; sess=1; icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Server: Apache Etag: "41caadddee91b91cdc80822411c9d405:1343247130" Last-Modified: Wed, 25 Jul 2012 20:12:09 GMT Accept-Ranges: bytes Content-Length: 2634 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352606615303&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D69143&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352606615303&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D69143&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143 Cookie: UID=4cc0eb6-195.159.219.9-1352606615; UIDR=1352606615	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 04:03:34 GMT Connection: close Content-Length: 381
GET /load/?p=204&g=141&j=0 HTTP/1.1 Host: loadm.exelator.com GET /load/?p=204&g=141&j=0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: image/gif X-Powered-By: PHP/5.3.17 P3P: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA Set-Cookie: ud=eJxrWVyWWnRgUUnxaccr6ieeXv4wdXGop8stBgXLtLRkSwMjgzQzYxNTozSLxOREIyMTy0RjA%252FMU80Rj88VFKWmMAGOqF7s%253D; expires=Mon, 11-Mar-2013 04:03:35 GMT; path=/; domain=exelator.com Location: http://loadm.exelator.com/load/?p=204&g=141&j=0&xl8blockcheck=1 Content-Length: 0 Connection: close Date: Sun, 11 Nov 2012 04:03:35 GMT Server: HTTP server
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352606615324&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D69143&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352606615324&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D69143&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143 Cookie: UID=4cc0eb6-195.159.219.9-1352606615; UIDR=1352606615	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=37241 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:03:35 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 1350
GET /pxrucm HTTP/1.1 Host: a.triggit.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache P3P: CP="DEVo PSDo OUR BUS DSP ALL COR" X-From: uk-bidder-02 Set-Cookie: trgu=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; domain=.triggit.com; path=/; expires=Tue, 11-Nov-2014 00:00:00 GMT Location: http://pixel.rubiconproject.com/tap.php?v=4554&nid=1430&put=00d171c9-b6cb-4467-bc8b-1d8dc0590d97&expires=180 Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 11
GET /pull_sync?pid=rubicon HTTP/1.1 Host: www.wtp101.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=457c53d9-60c4-4bd0-b2ac-68956356e3a0; path=/; expires=Tue, 11-Nov-2014 04:03:35 GMT; domain=.wtp101.com P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: /pull_sync?ul_cb=1&pid=rubicon Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 26 Jul 1997 05:00:00 GMT Pragma: no-cache Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT
GET /images/pixel.gif HTTP/1.1 Host: spe.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Allow: GET Expires: Mon, 12 Nov 2012 19:09:54 GMT Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352606615405&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D37241&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352606615405&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D37241&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=37241 Cookie: UID=4cc0eb6-195.159.219.9-1352606615; UIDR=1352606615	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352606615413&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D37241&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352606615413&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D37241&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=37241 Cookie: UID=4cc0eb6-195.159.219.9-1352606615; UIDR=1352606615	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /tap.php?v=4554&nid=1430&put=00d171c9-b6cb-4467-bc8b-1d8dc0590d97&expires=180 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=4554&nid=1430&put=00d171c9-b6cb-4467-bc8b-1d8dc0590d97&expires=180 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.pixel.rubiconproject.com put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; expires=Fri, 10-May-2013 04:03:35 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9203 Connection: Keep-Alive
GET /pixel/p-e4m3Yko6bFYVc.gif?idmatch=0 HTTP/1.1 Host: pixel.quantserve.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Connection: close Set-Cookie: mc=509f2397-7d6e2-038f1-761e6; expires=Tue, 13-May-2014 04:03:35 GMT; path=/; domain=.quantserve.com P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Cache-Control: private, no-cache, no-store, proxy-revalidate Pragma: no-cache Expires: Fri, 04 Aug 1978 12:00:00 GMT Content-Length: 35 Date: Sun, 11 Nov 2012 04:03:35 GMT Server: QS
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; sess=1; icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:03:35 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 04:03:35 GMT
GET /adserver/cookiematch?pnid=3000007 HTTP/1.1 Host: rubicon-rtb.p.veruta.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache-Coyote/1.1 Content-Length: 43 Date: Sun, 11 Nov 2012 04:03:35 GMT
GET /rb_match HTTP/1.1 Host: um.simpli.fi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain Server: nginx Date: Sun, 11 Nov 2012 04:03:35 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: uid=8h789ZaF5bW9XeMmd7UFcQ%3D%3D; path=/; expires=Mon, 11 Nov 2013 04:03:35 GMT; domain=.simpli.fi Location: http://pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=F5FC1EF2B5E5859626E35DBD7105B577&expires=365 P3P: policyref="http://www.simplifi.com/w3c/Policies.xml", CP="ADMa DEVa PSAa PSDa OUR IND DSP NON COR"
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: close Content-Length: 381
GET /pull_sync?ul_cb=1&pid=rubicon HTTP/1.1 Host: www.wtp101.com GET /pull_sync?ul_cb=1&pid=rubicon HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: tuuid=457c53d9-60c4-4bd0-b2ac-68956356e3a0	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=457c53d9-60c4-4bd0-b2ac-68956356e3a0; path=/; expires=Tue, 11-Nov-2014 04:03:35 GMT; domain=.wtp101.com P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: http://pixel.rubiconproject.com/tap.php?v=5328&nid=2025&put=457c53d9-60c4-4bd0-b2ac-68956356e3a0&expires=730 Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 26 Jul 1997 05:00:00 GMT Pragma: no-cache Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT
GET /sync/img?mt_exid=9 HTTP/1.1 Host: sync.mathtag.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 0 Connection: keep-alive Server: mt2/2.6.2.2465 Sep 24 2012 22:21:34 zrh-pixel-x7 pid 0x1853 6227 Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: uuid=509f2397-a573-fb02-f06f-5364a7d2c2d5; domain=.mathtag.com; path=/; expires=Mon, 11-Nov-2013 04:03:35 GMT Location: http://sync.mathtag.com/sync/img?mt_exid=9&mm_bnc
GET /tap.php?v=6286&nid=2132&put=F5FC1EF2B5E5859626E35DBD7105B577&expires=365 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=6286&nid=2132&put=F5FC1EF2B5E5859626E35DBD7105B577&expires=365 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%266286%3D1; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%266286%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.pixel.rubiconproject.com put_2132=F5FC1EF2B5E5859626E35DBD7105B577; expires=Mon, 11-Nov-2013 04:03:35 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9202 Connection: Keep-Alive
GET /load/?p=204&g=141&j=0&xl8blockcheck=1 HTTP/1.1 Host: loadm.exelator.com GET /load/?p=204&g=141&j=0&xl8blockcheck=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: ud=eJxrWVyWWnRgUUnxaccr6ieeXv4wdXGop8stBgXLtLRkSwMjgzQzYxNTozSLxOREIyMTy0RjA%252FMU80Rj88VFKWmMAGOqF7s%253D	HTTP/1.1 302 Found Content-Type: image/gif X-Powered-By: PHP/5.3.17 P3P: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA Set-Cookie: inv=eJxrXFySlnaHQeLMmTO9zGfVOZYYGZoYgImz6twIDgOCeeYMAyMSlwGFBwBIiRgQ; expires=Mon, 11-Mar-2013 04:03:35 GMT; path=/; domain=exelator.com xud=eJyNzk1qg0AYBuAQeoKewF2346jRLKd1kgqJIzpSXMlEZ2ggyYBKki4LXfcMRQVJ2tJrFEp3XXVbeo9K9ABdvi%252FP9%252FNQbXl2Vhb5B%252Fq6eP%252F9sd16vypWj1Xo2N8DZSxEMgYQiJGmG1BYLGEQ6mOmATM1mWa%252BbuMpJvEVCV3qR6VLXrrCx1OHuKUKjz1waFSTfCUPXbbnaNBTjwQUzZ7euoR8jNp1Nh60MkQxjTzcXGZyl%252FPs%252BdRM0NyZRc1kmXEh982pI8HhZrlJW6WY%252FQUn8Nr%252FPbnjGeXJreJshMzWrFjKjRLc5QVf5woKekz86f%252Bxi%252BmwCtF1OzFKhblIWAq4rqmGJQxoAGaYI5Awi1sLtVoIcf85PK%252BhqoM%252FwtGB9A%253D%253D; expires=Mon, 11-Mar-2013 04:03:35 GMT; path=/; domain=exelator.com xudx=eJwBMADP%252F4OjdmVyAqJ0c8tB1CfI5eNETqNldniBzQhcgc5QnyOYmc0nCwHMzMyNAQABzQISAjtZFTg%253D; expires=Mon, 11-Mar-2013 04:03:35 GMT; path=/; domain=exelator.com udo=eJxrXVyWWsS0qKT4tOMV9RNPH7v4LU4tq5hzVp2b8SxHDMeZM2d62RgZGM8yCTEtqcgpyelbHOrpcotBwTItLdnSwMggzczYxNQozSIxOdHIyMQy0djAPMU80dh8bVm8u6t%252FvLN%252FqF9IUOQiP%252F81EIEgV3dPf79FhkaroAo8QyKX%252BBfn5K%252BE8F18HRmgSgP8g0McfRash%252FAcg1wdgca5uDIAVYY6xodEBrgudyrKLy9OLVoNFnFz9PX0iVzullmUmpZfsRws5h%252B8MjwzLwWoSsEcaoNncADQ%252FQH55alFIanJGQqeeWn5RbmJJZn5eQrBlcUlqbnFCo7BUMX%252BQe7EK%252FZzDWFaHOroAdRhlpJmnpScmGKQamJsaGqRZmpkapBoam5mkJxokWqRZLgkvygzHRgqACJAiZA%253D; expires=Mon, 11-Mar-2013 04:03:35 GMT; path=/; domain=exelator.com ud=eJxrWVyWWnRgUUnxaccr6ieePvYVWhzq6XKLQcEyLS3Z0sDIIM3M2MTUKM0iMTnRyMjEMtHYwDzFPNHYfEl%252BUWb6Ij9%252FAHr3GFk%253D; expires=Mon, 11-Mar-2013 04:03:35 GMT; path=/; domain=exelator.com Location: http://tap.rubiconproject.com/oz/feeds/exelate/tokens?afu=9ffc9020f63452f8aca2249a307d7a37 Content-Length: 0 Connection: close Date: Sun, 11 Nov 2012 04:03:35 GMT Server: HTTP server
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; sess=1; icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:03:35 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 04:03:35 GMT
GET /partner/agent/rubicon/channels.js?cb=oz_onPixelsLoaded HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:35 GMT Server: TRP Apache-Coyote/1.1 Cache-Control: no-store, no-cache, must-revalidate, private Content-Length: 535 Set-Cookie: SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=170 Connection: Keep-Alive
GET /di.php?v=2372\|0\|\|2373\|\|2374\|0\|\|&r=3761\|0,3169,3578,3577,2110,2195,2196,2197,2579,2198,4134,3734,2199,2364,2362,2363,2200,3810,2111,2494,2201,3513,2202,2496,2202,2496,2203,2204,2189,2112,2497,2205,2355,2495,5838,3811,3512,2109,3812,2239,2190,2206,2113,2206,2113,4552,2765,6184,2240,4105,4193,2372,2373,2374,2375, HTTP/1.1 Host: pixel.rubiconproject.com GET /di.php?v=2372\|0\|\|2373\|\|2374\|0\|\|&r=3761\|0,3169,3578,3577,2110,2195,2196,2197,2579,2198,4134,3734,2199,2364,2362,2363,2200,3810,2111,2494,2201,3513,2202,2496,2202,2496,2203,2204,2189,2112,2497,2205,2355,2495,5838,3811,3512,2109,3812,2239,2190,2206,2113,2206,2113,4552,2765,6184,2240,4105,4193,2372,2373,2374,2375, HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1%266286%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%266286%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%266286%3D1%262373%3D1; expires=Fri, 10-May-2013 04:03:35 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9506 Connection: Keep-Alive
GET /tap.php?v=5328&nid=2025&put=457c53d9-60c4-4bd0-b2ac-68956356e3a0&expires=730 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5328&nid=2025&put=457c53d9-60c4-4bd0-b2ac-68956356e3a0&expires=730 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%265328%3D1; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.pixel.rubiconproject.com put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; expires=Tue, 11-Nov-2014 04:03:35 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9972 Connection: Keep-Alive
GET /sync/img?mt_exid=9&mm_bnc HTTP/1.1 Host: sync.mathtag.com GET /sync/img?mt_exid=9&mm_bnc HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: uuid=509f2397-a573-fb02-f06f-5364a7d2c2d5	HTTP/1.1 302 Found Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 0 Connection: keep-alive Server: mt2/2.6.2.2465 Sep 24 2012 22:21:34 zrh-pixel-x7 pid 0x1845 6213 Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: mt_mop=9:1352606615; domain=.mathtag.com; path=/; expires=Tue, 11-Dec-2012 04:03:35 GMT Location: http://pixel.rubiconproject.com/tap.php?v=4222&nid=1512&put=509f2397-a573-fb02-f06f-5364a7d2c2d5
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=37241 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: close Content-Length: 381
GET /tap.php?v=4222&nid=1512&put=509f2397-a573-fb02-f06f-5364a7d2c2d5 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=4222&nid=1512&put=509f2397-a573-fb02-f06f-5364a7d2c2d5 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1%265328%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.pixel.rubiconproject.com put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9320 Connection: Keep-Alive
GET /m/rc HTTP/1.1 Host: rc.d.chango.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 35 Server: RTB Etag: "0f4e929dd5bb2564f7ab9c76338e04e292a42ace" Pragma: no-cache Cache-Control: no-cache, no-store, max-age=0, must-revalidate P3P: policyref="http://as.chango.com/static/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: _t=c3f84a9e-2bb4-11e2-8f36-00259034b9f4; Domain=chango.com; expires=Wed, 09 Nov 2022 04:03:35 GMT; Path=/ Connection: close
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; sess=1; icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:03:35 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 04:03:35 GMT
GET /dmm/rubicon/match HTTP/1.1 Host: rubicon-match.dotomi.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 204 No Content Content-Type: text/plain Date: Sun, 11 Nov 2012 04:03:35 GMT X-Name: dtiad01rtb02p.int Cache-Control: max-age=0, no-store Content-Length: 0 Connection: close
GET /px/rb.gif HTTP/1.1 Host: ad.yabuka.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 FOUND Content-Type: text/html; charset=utf-8 Server: nginx/1.1.19 Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 186 Connection: keep-alive Location: http://pixel.rubiconproject.com/tap.php?v=9047&nid=2147&put=QcH3P3LOxa Set-Cookie: client_id=QcH3P3LOxa; Path=/ tc="HUsyTuyJG2wg4vaJdytjr0EGS9M=?_expires=STEzNTMwMTcwMTUKLg==&client_id=UydRY0gzUDNMT3hhJwpwMQou"; Domain=.yabuka.com; expires=Thu, 15-Nov-2012 22:03:35 GMT; Path=/ Cache-Control: no-cache Pragma: no-cache
GET /oz/feeds/exelate/tokens?afu=9ffc9020f63452f8aca2249a307d7a37 HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1%266286%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577	HTTP/1.1 204 No Content Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:35 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 04:03:35 GMT; Path=/ au=H9DN20AK-3ZQD-10.74.91.2; Domain=.rubiconproject.com; Expires=Mon, 09-Nov-2020 04:03:35 GMT; Path=/ dq=1\|1\|0\|0; Expires=Mon, 11-Nov-2013 04:03:35 GMT; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Content-Length: 0 Keep-Alive: timeout=5, max=179 Connection: Keep-Alive
GET /c/cse?a=Q&B=17 HTTP/1.1 Host: connexity.net GET /c/cse?a=Q&B=17 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Connexity Transfer-Encoding: chunked Connection: keep-alive Date: Sun, 11 Nov 2012 04:03:35 GMT Cache-Control: no-store, max-age=-1, post-check=0, pre-check=0 Pragma: no-cache Expires: -1 P3P: policyref="/w3c/p3p.xml", CP="CAO PSA OUR CURa DEVa PSDo PSAo BUS COR UNI COM",an.pp="http://www.connexity.com/privacy",an.oo="http://www.connexity.com/privacy",an.bt="N" Set-Cookie: COu=e97b365699cb456b-064a29608101ab55-2175fb3dda4ea183; expires=Fri, 10-Nov-2017 04:03:35 GMT; domain=.connexity.net; path=/ Content-Transfer-Encoding: binary
GET /tap.php?v=9047&nid=2147&put=QcH3P3LOxa HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=9047&nid=2147&put=QcH3P3LOxa HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C%269047%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.pixel.rubiconproject.com put_2147=QcH3P3LOxa; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9938 Connection: Keep-Alive
GET /partner/scripts/rubicon/page_parser.js?d=www.mediafire.com HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5; cd=false; au=H9DN20AK-3ZQD-10.74.91.2; put_2147=QcH3P3LOxa	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:55:58 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sun, 11 Nov 2012 05:03:37 GMT Date: Sun, 11 Nov 2012 04:03:37 GMT Content-Length: 5705 Connection: keep-alive Vary: Accept-Encoding
GET /view.aspx?poolid=12887&script=1&rnd=389990 HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&script=1&rnd=389990 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43143	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: /view.aspx?poolid=12887&script=1&rnd=389990&test=1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: USER_ID=u%86%e9%a7%df%40%86%bbjx%dc_%bec%9d; domain=.server.cpmstar.com; expires=Thu, 11-Nov-2032 04:03:57 GMT; path=/ P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sun, 11 Nov 2012 04:03:57 GMT Content-Length: 185 Connection: Keep-alive Keep-Alive: timeout=15, max=100 Via: 1.1 ID-0001544140306215 uproxy-4
GET /cached/js/flashadv12.pack.js HTTP/1.1 Host: cdne.cpmstar.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43143	HTTP/1.1 200 OK Content-Type: application/x-javascript Accept-Ranges: bytes Cache-Control: max-age=259200 Date: Sun, 11 Nov 2012 04:03:40 GMT Etag: "59d8944723b3cd1:0" Last-Modified: Fri, 26 Oct 2012 02:40:36 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Server: ECAcc (arn/469E) Via: 1.1 ID-0001544140306215 uproxy-2 X-Cache: HIT Content-Length: 2991
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352606620294&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D43143&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352606620294&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D43143&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43143 Cookie: UID=4cc0eb6-195.159.219.9-1352606615; UIDR=1352606615	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:40 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /cached/creatives/203391/Kone-XTD_Banner_160x600_Clicktag.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d82398%26creativeid%3d203391%26url%3d HTTP/1.1 Host: cdne.cpmstar.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43143	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Accept-Ranges: bytes Cache-Control: public Content-Disposition: inline;filename=203391_Kone-XTD_Banner_160x600_Clicktag.swf Date: Sun, 11 Nov 2012 04:03:40 GMT Expires: Mon, 12 Nov 2012 04:03:41 GMT Last-Modified: Sat, 10 Nov 2012 06:55:45 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Server: ECAcc (arn/46BA) Via: 1.1 ID-0001544140306215 uproxy-3 X-AspNet-Version: 2.0.50727 X-Cache: HIT Content-Length: 77907
GET /sync?ssp=rubicon HTTP/1.1 Host: x.bidswitch.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=b71e0d68-e9ef-48f7-a740-1a343c38a931; path=/; expires=Tue, 11-Nov-2014 04:03:40 GMT P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: /sync?ul_cb=1&ssp=rubicon Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 26 Jul 1997 05:00:00 GMT Pragma: no-cache Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:40 GMT
GET /sync?ul_cb=1&ssp=rubicon HTTP/1.1 Host: x.bidswitch.net GET /sync?ul_cb=1&ssp=rubicon HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: tuuid=b71e0d68-e9ef-48f7-a740-1a343c38a931	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=b71e0d68-e9ef-48f7-a740-1a343c38a931; path=/; expires=Tue, 11-Nov-2014 04:03:40 GMT P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: //pixel.rubiconproject.com/tap.php?v=15796&nid=2760&put=b71e0d68-e9ef-48f7-a740-1a343c38a931&expires=30 Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 26 Jul 1997 05:00:00 GMT Pragma: no-cache Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:40 GMT
GET /tap.php?v=15796&nid=2760&put=b71e0d68-e9ef-48f7-a740-1a343c38a931&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=15796&nid=2760&put=b71e0d68-e9ef-48f7-a740-1a343c38a931&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C%269047%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5; cd=false; au=H9DN20AK-3ZQD-10.74.91.2; put_2147=QcH3P3LOxa	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:40 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1%2615796%3D1; expires=Tue, 11-Dec-2012 04:03:40 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C%269047%3D25076%2C0%2C1%2C%2C%2615796%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:40 GMT; path=/; domain=.pixel.rubiconproject.com put_2760=b71e0d68-e9ef-48f7-a740-1a343c38a931; expires=Tue, 11-Dec-2012 04:03:40 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9772 Connection: Keep-Alive
GET /dmp/pixelSync?network=Rubicon HTTP/1.1 Host: pixel.sitescout.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Server: Apache-Coyote/1.1 Date: Sun, 11 Nov 2012 04:03:40 GMT
GET /do-association?rbc&can=20 HTTP/1.1 Host: matcher-rbc.bidder7.mookie1.com GET /do-association?rbc&can=20 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:40 GMT Server: Apache/2.2.3 (Red Hat) Set-Cookie: id=4613164014101529687; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 04:03:40 GMT mdata=1\|4613164014101529687\|1352606620; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 04:03:40 GMT Location: /do-association-set?rbc&can=20 Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=712 Connection: Keep-Alive
GET /do-association-set?rbc&can=20 HTTP/1.1 Host: matcher-rbc.bidder7.mookie1.com GET /do-association-set?rbc&can=20 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4613164014101529687; mdata=1\|4613164014101529687\|1352606620	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:40 GMT Server: Apache/2.2.3 (Red Hat) Location: http://pixel.rubiconproject.com/tap.php?v=7259&nid=2211&put=4613164014101529687&expires=1 Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=972 Connection: Keep-Alive
GET /tap.php?v=7259&nid=2211&put=4613164014101529687&expires=1 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7259&nid=2211&put=4613164014101529687&expires=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1%2615796%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C%269047%3D25076%2C0%2C1%2C%2C%2615796%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5; cd=false; au=H9DN20AK-3ZQD-10.74.91.2; put_2147=QcH3P3LOxa; put_2760=b71e0d68-e9ef-48f7-a740-1a343c38a931	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:40 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1%2615796%3D1%267259%3D1; expires=Tue, 11-Dec-2012 04:03:40 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C%269047%3D25076%2C0%2C1%2C%2C%2615796%3D25076%2C0%2C1%2C%2C%267259%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:40 GMT; path=/; domain=.pixel.rubiconproject.com put_2211=4613164014101529687; expires=Mon, 12-Nov-2012 04:03:40 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9790 Connection: Keep-Alive
GET /oz/feeds/invite-media-rtb/tokens/?rt=iframe HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5; cd=false; au=H9DN20AK-3ZQD-10.74.91.2; dq=1\|1\|0\|0; put_2147=QcH3P3LOxa	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:41 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=adab133b127e5bd21818f53eeb0abcab44f0d57d&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 04:03:42 GMT; Path=/ dq=2\|2\|0\|0; Expires=Mon, 11-Nov-2013 04:03:42 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 04:03:42 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=200 Connection: Keep-Alive
GET /rubicon_sync?publisher_user_id=adab133b127e5bd21818f53eeb0abcab44f0d57d&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 Host: pixel.invitemedia.com GET /rubicon_sync?publisher_user_id=adab133b127e5bd21818f53eeb0abcab44f0d57d&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: text/html Date: Sun, 11 Nov 2012 04:03:42 GMT Set-Cookie: uid=7d3dd0e5-bae6-47be-bc83-a45ac116872d;Path=/;Domain=invitemedia.com;Expires=Mon, 11-Nov-2013 04:03:42 GMT impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC" Cache-Control: no-cache Content-Length: 221 Connection: close Server: Jetty(7.3.1.v20110307)
GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353038622&publisher_dsp_id=2101&external_user_id=7d3dd0e5-bae6-47be-bc83-a45ac116872d HTTP/1.1 Host: tap.rubiconproject.com GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353038622&publisher_dsp_id=2101&external_user_id=7d3dd0e5-bae6-47be-bc83-a45ac116872d HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=adab133b127e5bd21818f53eeb0abcab44f0d57d&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1%2615796%3D1%267259%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5; cd=false; au=H9DN20AK-3ZQD-10.74.91.2; dq=2\|2\|0\|0; put_2147=QcH3P3LOxa; put_2760=b71e0d68-e9ef-48f7-a740-1a343c38a931; put_2211=4613164014101529687; lm="11 Nov 2012 04:03:42 GMT"	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:42 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.rubiconproject.com/tap.php?v=5852&nid=2101&put=7d3dd0e5-bae6-47be-bc83-a45ac116872d Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 04:03:42 GMT; Path=/ dq=3\|3\|0\|0; Expires=Mon, 11-Nov-2013 04:03:42 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 04:03:42 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=194 Connection: Keep-Alive
GET /tap.php?v=5852&nid=2101&put=7d3dd0e5-bae6-47be-bc83-a45ac116872d HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5852&nid=2101&put=7d3dd0e5-bae6-47be-bc83-a45ac116872d HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=adab133b127e5bd21818f53eeb0abcab44f0d57d&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1%2615796%3D1%267259%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C%269047%3D25076%2C0%2C1%2C%2C%2615796%3D25076%2C0%2C1%2C%2C%267259%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5; cd=false; au=H9DN20AK-3ZQD-10.74.91.2; put_2147=QcH3P3LOxa; put_2760=b71e0d68-e9ef-48f7-a740-1a343c38a931; put_2211=4613164014101529687; lm="11 Nov 2012 04:03:42 GMT"	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:42 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1%2615796%3D1%267259%3D1%265852%3D1; expires=Tue, 11-Dec-2012 04:03:42 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C%269047%3D25076%2C0%2C1%2C%2C%2615796%3D25076%2C0%2C1%2C%2C%267259%3D25076%2C0%2C1%2C%2C%265852%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:42 GMT; path=/; domain=.pixel.rubiconproject.com put_2101=7d3dd0e5-bae6-47be-bc83-a45ac116872d; expires=Tue, 11-Dec-2012 04:03:42 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9427 Connection: Keep-Alive
POST / HTTP/1.1 Host: ocsp.verisign.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	HTTP/1.0 200 Ok Content-Type: application/ocsp-response Last-Modified: Fri, 09 Nov 2012 00:41:57 GMT Expires: Fri, 16 Nov 2012 00:41:57 GMT Content-Transfer-Encoding: binary Content-Length: 1814 Cache-Control: max-age=419895, public, no-transform, must-revalidate Date: Sun, 11 Nov 2012 04:03:42 GMT nncoection: close Connection: Keep-Alive
GET /dialog/oauth?client_id=124578887583575&response_type=token%2Csigned_request%2Ccode&display=none&domain=www.mediafire.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Df3a30ac650ea7e4%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff1474e4d1ce97ea%26domain%3Dwww.mediafire.com%26relation%3Dparent&sdk=joey HTTP/1.1 Host: www.facebook.com GET /dialog/oauth?client_id=124578887583575&response_type=token%2Csigned_request%2Ccode&display=none&domain=www.mediafire.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Df3a30ac650ea7e4%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff1474e4d1ce97ea%26domain%3Dwww.mediafire.com%26relation%3Dparent&sdk=joey HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Location: http://static.ak.facebook.com/connect/xd_arbiter.php?version=17#cb=f3a30ac650ea7e4&origin=http%3A%2F%2Fwww.mediafire.com%2Ff1474e4d1ce97ea&domain=www.mediafire.com&relation=parent&error=unknown_user Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-FB-Debug: 1l4ifKlY4B0ehgV6CIOqyGwXOqMHWnedxzSAqdI5zuo= Date: Sun, 11 Nov 2012 04:03:43 GMT Connection: keep-alive Content-Length: 0
GET /0zfftr6qa6ng/5nwz1uz1r4ddec4/PotPlayerPortable_1.5.34321_Beta_azo.exe HTTP/1.1 Host: 205.196.120.217 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 302 Found HTTP/1.1 302 Found Location: http://www.mediafire.com/?5nwz1uz1r4ddec4 Connection: Close
GET /view.aspx?poolid=12887&script=1&rnd=389990&test=1 HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&script=1&rnd=389990&test=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43143 Cookie: USER_ID=u%86%e9%a7%df%40%86%bbjx%dc_%bec%9d	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: n15=0,12887,82398,203391,1352606642,0; domain=.server.cpmstar.com; expires=Tue, 11-Dec-2012 04:04:02 GMT; path=/ sm=t=1352520302; domain=.server.cpmstar.com; expires=Mon, 12-Nov-2012 04:04:02 GMT; path=/ P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sun, 11 Nov 2012 04:04:01 GMT Connection: close Via: 1.1 ID-0001544140306215 uproxy-4

Request	Response
GET /css/mfv3_85677.php?ver=nonssl HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 37605 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 Host: cdn.mediafire.com GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 52116 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /?5nwz1uz1r4ddec4 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:31 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: 0 Set-Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; expires=Sun, 12-Oct-2014 04:03:31 GMT; path=/; domain=.mediafire.com; httponly Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 17020 Connection: close Server: MediaFire
GET /css?family=Open+Sans:800,400,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: text/css Expires: Sun, 11 Nov 2012 04:03:31 GMT Date: Sun, 11 Nov 2012 04:03:31 GMT Cache-Control: private, max-age=86400 Content-Encoding: gzip Content-Length: 318 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE
GET /blank.html HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Last-Modified: Tue, 18 Sep 2012 21:44:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 78 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /images/icons/ajax-loader-grey_round.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 1775 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 2315 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_allowemail.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 941 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /images/buttons/btn_twitter_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 1799 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /images/icons/dropdown-arrow-left-white.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 123 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /images/logos/logo_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 16 Jul 2012 19:28:31 GMT Accept-Ranges: bytes Content-Length: 3708 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /images/icons/icon-sprite-16-v3.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 02 Oct 2012 17:01:27 GMT Accept-Ranges: bytes Content-Length: 61715 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive
GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 Host: platform.twitter.com GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: public, max-age=1800 Last-Modified: Thu, 08 Nov 2012 09:18:41 GMT Etag: "567a94a4e136d5c4b7bfde258474cfa6" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 25717 Date: Sun, 11 Nov 2012 04:03:31 GMT Connection: keep-alive P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
GET /ga.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 14888 Content-Encoding: gzip Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT X-Content-Type-Options: nosniff, nosniff Date: Sat, 10 Nov 2012 20:33:28 GMT Expires: Sun, 11 Nov 2012 08:33:28 GMT Vary: Accept-Encoding Age: 27003 Cache-Control: max-age=43200, public Server: GFE/2.0
GET /ajax/libs/jquery/1.7.2/jquery.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Content-Encoding: gzip Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT Date: Fri, 09 Nov 2012 20:33:45 GMT Expires: Sat, 09 Nov 2013 20:33:45 GMT X-Content-Type-Options: nosniff Server: sffe Content-Length: 73891 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 113386
GET /images/icons/information_darkblue.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 722 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /images/backgrounds/download/rockmelt/rockmelt_dl_btn.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:44 GMT Accept-Ranges: bytes Content-Length: 7653 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /images/favicon/download.ico HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Date: Sun, 11 Nov 2012 04:03:32 GMT Last-Modified: Thu, 25 Oct 2012 21:59:32 GMT Accept-Ranges: bytes Content-Length: 1150 Connection: close Server: MediaFire
GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 Host: p.twitter.com GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: image/gif Etag: "377d257f2d2e294916143c069141c1c5:1328738114" Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT Accept-Ranges: bytes Content-Length: 43 Cache-Control: no-cache P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 Host: cdn.api.twitter.com GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Last-Modified: Sun, 11 Nov 2012 03:46:25 GMT Pragma: no-cache X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Status: 200 OK Content-Encoding: gzip Content-Length: 898 Server: tfe Vary: Accept-Encoding Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Expires: Sun, 11 Nov 2012 04:03:32 GMT Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /recaptcha/api/challenge?k=6LextQUAAAAAALlQv0DSHOYxqF3DftRZxA5yebEe HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Date: Sun, 11 Nov 2012 04:03:32 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 449 Server: GSE
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 Host: www.facebook.com GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 Content-Encoding: gzip X-FB-Debug: +VLhZiKGjolKhKaAzN5opaneszY8TERFaOF9cSDX5sI= Date: Sun, 11 Nov 2012 04:03:32 GMT Transfer-Encoding: chunked Connection: keep-alive
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=825370576&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=PotPlayerPortable_1.5.34321_Beta_azo.exe&utmhid=333298335&utmr=-&utmp=%2F%3F5nwz1uz1r4ddec4&utmac=UA-829541-1&utmcc=__utma%3D213136648.1346896719.1352606612.1352606612.1352606612.1%3B%2B__utmz%3D213136648.1352606612.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 Host: www.google-analytics.com GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=825370576&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=PotPlayerPortable_1.5.34321_Beta_azo.exe&utmhid=333298335&utmr=-&utmp=%2F%3F5nwz1uz1r4ddec4&utmac=UA-829541-1&utmcc=__utma%3D213136648.1346896719.1352606612.1352606612.1352606612.1%3B%2B__utmz%3D213136648.1352606612.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 09 Nov 2012 20:39:16 GMT Content-Length: 35 X-Content-Type-Options: nosniff Pragma: no-cache Expires: Wed, 19 Apr 2000 11:43:00 GMT Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Age: 113056 Server: GFE/2.0
GET /js/master_85677.js HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: text/javascript Last-Modified: Fri, 09 Nov 2012 23:25:30 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Server: MediaFire Content-Length: 143613 Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /js/encoder.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:03:32 GMT Last-Modified: Thu, 05 Jan 2012 22:41:54 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 04:03:32 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3695 Connection: close Server: MediaFire
GET /js/bust_out.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:03:32 GMT Last-Modified: Thu, 31 May 2012 19:49:34 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 04:03:32 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 57 Connection: close Server: MediaFire
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1 Host: static.ak.fbcdn.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 Origin: http://www.facebook.com	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 29 Oct 2012 23:55:41 GMT X-Content-Type-Options: nosniff Content-Encoding: gzip X-FB-Debug: mERPLeHfP4bFbWVj/NJRwm2C8x1Lf8geAnYAfFf24WM= Content-Length: 37945 Vary: Accept-Encoding Cache-Control: public, max-age=31140564 Expires: Wed, 06 Nov 2013 14:12:56 GMT Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 106 Content-Type: application/ocsp-request	HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 11 Nov 2012 04:03:32 GMT Server: Apache Content-Transfer-Encoding: Binary Cache-Control: max-age=12682, public, no-transform, must-revalidate Last-Modified: Sun, 11 Nov 2012 01:46:02 GMT Expires: Sun, 11 Nov 2012 07:46:02 GMT Etag: "8c6a4b9dee7b1bc21ddf455dd96406348b7e33d2" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" Content-Length: 1923 Connection: close
GET /images/ad-loader.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:09:03 GMT Accept-Ranges: bytes Content-Length: 1786 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /recaptcha/api/js/recaptcha.js HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: application/x-javascript Expires: Sun, 11 Nov 2012 04:03:32 GMT Date: Sun, 11 Nov 2012 04:03:32 GMT Last-Modified: Tue, 12 Jun 2012 14:07:31 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 17531 Server: GSE Cache-Control: public, max-age=0 Age: 0
GET /recaptcha/api/img/red/refresh.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:03:09 GMT Date: Sun, 11 Nov 2012 04:03:09 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 974 Server: GSE Age: 23 Cache-Control: public, max-age=3600
GET /images/backgrounds/footer/footer_texture.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 20:31:25 GMT Accept-Ranges: bytes Content-Length: 2649 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_gp.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 29 Aug 2012 21:02:04 GMT Accept-Ranges: bytes Content-Length: 312 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_blog.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 171 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateFB_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 255 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /templates/linkto/default-337x281-default.php?r=90322 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:32 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 786 Connection: close Server: MediaFire
GET /images/backgrounds/footer/icn_footer_tw.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 274 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_fb.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 514 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateTW_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 387 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:03:32 GMT Connection: keep-alive
GET /templates/linkto/default-337x281-default2.php?r=37241 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:32 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 787 Connection: close Server: MediaFire
GET /recaptcha/api/img/red/text.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:00:43 GMT Date: Sun, 11 Nov 2012 04:00:43 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 155 Server: GSE Age: 170 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/audio.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 04:57:47 GMT Date: Sun, 11 Nov 2012 03:57:47 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 914 Server: GSE Age: 346 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/help.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:03:33 GMT Date: Sun, 11 Nov 2012 04:03:33 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 367 Server: GSE Cache-Control: public, max-age=3600 Age: 0
GET /recaptcha/api/image?c=03AHJ_VuuRpW_AkkGIb4LeU789fTvZBQrry6Lg36r4mh8fjD4-OaVf1OAfGxuzIlLRHPcz7dlcuQyW5F8Bv5hmc1CDeFdzcKfcbPRdfAF7E90_Nc8pviuqoOV6fMUowSm5gJ6Twtz5zW6U_gzH9V3KidK-cgSr9OXRXHnrye6rKoYMyq4A4G0Qlg4 HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Sun, 11 Nov 2012 04:13:33 GMT Date: Sun, 11 Nov 2012 04:03:33 GMT Cache-Control: public, max-age=600 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 2987 Server: GSE
GET /templates/linkto/default-729x91-default.php?r=69143 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:33 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 666 Connection: close Server: MediaFire
GET /templates/linkto/default-161x601-default.php?r=43143 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:33 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 733 Connection: close Server: MediaFire
GET /en_US/all.js?_=1352606613123 HTTP/1.1 Host: connect.facebook.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Etag: "06c9a8ca347f3538149da85e21e875b7" Content-Encoding: gzip X-FB-Debug: X3Nrx0dvtwlQoRUMew0rjAlo3oM0EpdCpibAbThojIc= Content-Length: 58145 Cache-Control: public, max-age=767 Expires: Sun, 11 Nov 2012 04:16:20 GMT Date: Sun, 11 Nov 2012 04:03:33 GMT Connection: keep-alive Vary: Accept-Encoding
GET /recaptcha/api/img/red/sprite.png HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/png Expires: Sun, 11 Nov 2012 04:46:50 GMT Date: Sun, 11 Nov 2012 03:46:50 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 4679 Server: GSE Age: 1004 Cache-Control: public, max-age=3600
GET /ad/3196.js HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 04:03:34 GMT Date: Sun, 11 Nov 2012 04:03:34 GMT Connection: keep-alive
GET /ad/3196.js?cb=0.8693750963499682 HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 04:03:34 GMT Date: Sun, 11 Nov 2012 04:03:34 GMT Connection: keep-alive
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: QpUXNDPC4a/ZS9XMuzc2WDBWEZ8S2oHPsfImau8uouU= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31448017 Expires: Sun, 10 Nov 2013 03:37:11 GMT Date: Sun, 11 Nov 2012 04:03:34 GMT Connection: keep-alive
GET /helper_01.swf HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4 Cookie: ukey=bmxn7bx69m32mi10amrx26jc6ycjntqe; __utma=213136648.1346896719.1352606612.1352606612.1352606612.1; __utmb=213136648.1.10.1352606612; __utmc=213136648; __utmz=213136648.1352606612.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Date: Sun, 11 Nov 2012 04:03:34 GMT Last-Modified: Sat, 15 Oct 2011 19:43:58 GMT Accept-Ranges: bytes Content-Length: 1480 Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 04:03:34 GMT Connection: close Server: MediaFire
GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 Host: secure.gravatar.com GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx Date: Sun, 11 Nov 2012 04:03:34 GMT Content-Length: 906 Connection: keep-alive Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Access-Control-Allow-Origin: * Content-Disposition: inline; filename="00000000.png" X-Varnish: 2462294085 2461089695 Via: 1.1 varnish Expires: Sun, 11 Nov 2012 04:08:34 GMT Cache-Control: max-age=300
GET /a/3196/3346/9685-15.js?cb=0.9608126726378651&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-15.js?cb=0.9608126726378651&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:03:34 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db7f3509f2396c39f8cde6aa053^1^1352606614^3282013406; expires=Sat, 09-Feb-2013 04:03:34 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=100585; path=/; domain=.rubiconproject.com csi15=3204663.js^1^1352606614^1352606614; expires=Sun, 18-Nov-2012 04:03:34 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/9685-2.js?cb=0.6170138632509562&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-2.js?cb=0.6170138632509562&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:03:34 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db406509f2396c39f8cde1d1a00^1^1352606614^3282013406; expires=Sat, 09-Feb-2013 04:03:34 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk2=0; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=10; path=/; domain=.rubiconproject.com ses2=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=100585; path=/; domain=.rubiconproject.com csi2=3204661.js^1^1352606614^1352606614; expires=Sun, 18-Nov-2012 04:03:34 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Transfer-Encoding: chunked
GET /static/fonts/opensans/v6/k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM.woff HTTP/1.1 Host: themes.googleusercontent.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://fonts.googleapis.com/css?family=Open+Sans:800,400,700 Origin: http://www.mediafire.com	HTTP/1.1 200 OK Content-Type: font/woff Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT Date: Fri, 09 Nov 2012 20:33:30 GMT Expires: Sat, 09 Nov 2013 20:33:30 GMT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: sffe Content-Length: 22748 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 113404
GET /a/3196/3346/9685-9.js?cb=0.06351136878119612&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-9.js?cb=0.06351136878119612&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43143 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:03:34 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592dbbd8509f2396c39f8cde0c509b^1^1352606614^3282013406; expires=Sat, 09-Feb-2013 04:03:34 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk9=0; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=10; path=/; domain=.rubiconproject.com ses9=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=100585; path=/; domain=.rubiconproject.com csi9=3165520.js^1^1352606614^1352606614; expires=Sun, 18-Nov-2012 04:03:34 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/27309-15.js?cb=0.6027779911008824&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/27309-15.js?cb=0.6027779911008824&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=37241 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:03:34 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; expires=Sat, 09-Feb-2013 04:03:34 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 05:03:34 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=100585; path=/; domain=.rubiconproject.com csi15=3204663.js^1^1352606614^1352606614; expires=Sun, 18-Nov-2012 04:03:34 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: s-static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: JS4qOSg1Dl3AgVtg3MyBP4whcr8SZapA/Vud9cBlDwY= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31447989 Expires: Sun, 10 Nov 2013 03:36:43 GMT Date: Sun, 11 Nov 2012 04:03:34 GMT Connection: keep-alive
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 0
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 Host: fpdownload2.macromedia.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/xml Server: Apache Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT Etag: "87de33-256-4cd617ed12480" Accept-Ranges: bytes Content-Length: 598 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=37241	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 0
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 0
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:03:35 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 1350
GET /p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; sess=1; icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/png Server: Apache Etag: "05c7006db8c87009c7ef4cebeac987fa:1350137588" Last-Modified: Sat, 13 Oct 2012 14:13:08 GMT Accept-Ranges: bytes Content-Length: 5202 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive
GET /beacon.js HTTP/1.1 Host: b.scorecardresearch.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322	HTTP/1.1 200 OK Content-Type: application/x-javascript Vary: Accept-Encoding Content-Encoding: gzip Expires: Sun, 25 Nov 2012 04:03:35 GMT Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 1140 Connection: keep-alive Cache-Control: private, no-transform, max-age=1209600
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352606615229&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352606615229&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6035951&c3=122134&ns__t=1352606615229&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Set-Cookie: UID=4cc0eb4-195.159.219.9-1352606615; expires=Sat, 01-Nov-2014 04:03:35 GMT; path=/; domain=.scorecardresearch.com UIDR=1352606615; expires=Sat, 01-Nov-2014 04:03:35 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352606615230&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352606615230&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352606615230&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Set-Cookie: UID=4cc0eb6-195.159.219.9-1352606615; expires=Sat, 01-Nov-2014 04:03:35 GMT; path=/; domain=.scorecardresearch.com UIDR=1352606615; expires=Sat, 01-Nov-2014 04:03:35 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352606615229&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352606615229&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: UID=4cc0eb4-195.159.219.9-1352606615; UIDR=1352606615	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352606615230&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352606615230&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D90322&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: UID=4cc0eb6-195.159.219.9-1352606615; UIDR=1352606615	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 Host: tap2-cdn.rubiconproject.com GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Last-Modified: Sat, 10 Nov 2012 20:11:13 GMT Content-Encoding: gzip Cache-Control: max-age=600 Expires: Sun, 11 Nov 2012 04:13:35 GMT Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 5080 Connection: keep-alive Vary: Accept-Encoding
GET /partner/scripts/rubicon/alice.js HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:56:23 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sun, 11 Nov 2012 05:03:35 GMT Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 5798 Connection: keep-alive Vary: Accept-Encoding
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:03:35 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 6619
GET /p/41/ca/ad/dd/41caadddee91b91cdc80822411c9d405.swf?clickTAG=http%3A%2F%2Fib.adnxs.com%2Fclick%3FAAAAAAAAAAAAAAAAAAAAAAAAAEAzM8M_AAAAAAAAAAAAAAAAAAAAAOyCwLq8c-8hoArzhH1cTlGXI59QAAAAAHZYCwAdAgAAHQIAAAIAAADRzCkAKkACAAAAAQBVU0QAVVNEANgCWgBNUQAA4E8AAgMCAQUAAIIAxhQWJQAAAAA.%2Fcnd%3D%2521UQVSMQjjth4Q0ZmnARiqgAkgBA..%2Freferrer%3Dhttp%253A%252F%252Fwww.mediafire.com%252F%253F5nwz1uz1r4ddec4%2Fclickenc%3Dhttp%253A%252F%252Fno.balagana.net%252Fpages%252Fno_NO%252Fplay%252F%253FAFID%253D220843%2526AFCID%253Dams1CKCVzKfYj5enURACGOyFgtbL99z3ISIPMTk1LjE1OS4xNDAuMjIyKAE. HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; sess=1; icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Server: Apache Etag: "41caadddee91b91cdc80822411c9d405:1343247130" Last-Modified: Wed, 25 Jul 2012 20:12:09 GMT Accept-Ranges: bytes Content-Length: 2634 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352606615303&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D69143&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352606615303&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D69143&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143 Cookie: UID=4cc0eb6-195.159.219.9-1352606615; UIDR=1352606615	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 04:03:34 GMT Connection: close Content-Length: 381
GET /load/?p=204&g=141&j=0 HTTP/1.1 Host: loadm.exelator.com GET /load/?p=204&g=141&j=0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: image/gif X-Powered-By: PHP/5.3.17 P3P: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA Set-Cookie: ud=eJxrWVyWWnRgUUnxaccr6ieeXv4wdXGop8stBgXLtLRkSwMjgzQzYxNTozSLxOREIyMTy0RjA%252FMU80Rj88VFKWmMAGOqF7s%253D; expires=Mon, 11-Mar-2013 04:03:35 GMT; path=/; domain=exelator.com Location: http://loadm.exelator.com/load/?p=204&g=141&j=0&xl8blockcheck=1 Content-Length: 0 Connection: close Date: Sun, 11 Nov 2012 04:03:35 GMT Server: HTTP server
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352606615324&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D69143&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352606615324&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D69143&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143 Cookie: UID=4cc0eb6-195.159.219.9-1352606615; UIDR=1352606615	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=37241 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:03:35 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 1350
GET /pxrucm HTTP/1.1 Host: a.triggit.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache P3P: CP="DEVo PSDo OUR BUS DSP ALL COR" X-From: uk-bidder-02 Set-Cookie: trgu=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; domain=.triggit.com; path=/; expires=Tue, 11-Nov-2014 00:00:00 GMT Location: http://pixel.rubiconproject.com/tap.php?v=4554&nid=1430&put=00d171c9-b6cb-4467-bc8b-1d8dc0590d97&expires=180 Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 11
GET /pull_sync?pid=rubicon HTTP/1.1 Host: www.wtp101.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=457c53d9-60c4-4bd0-b2ac-68956356e3a0; path=/; expires=Tue, 11-Nov-2014 04:03:35 GMT; domain=.wtp101.com P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: /pull_sync?ul_cb=1&pid=rubicon Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 26 Jul 1997 05:00:00 GMT Pragma: no-cache Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT
GET /images/pixel.gif HTTP/1.1 Host: spe.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Allow: GET Expires: Mon, 12 Nov 2012 19:09:54 GMT Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352606615405&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D37241&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352606615405&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D37241&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=37241 Cookie: UID=4cc0eb6-195.159.219.9-1352606615; UIDR=1352606615	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352606615413&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D37241&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352606615413&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D37241&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=37241 Cookie: UID=4cc0eb6-195.159.219.9-1352606615; UIDR=1352606615	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /tap.php?v=4554&nid=1430&put=00d171c9-b6cb-4467-bc8b-1d8dc0590d97&expires=180 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=4554&nid=1430&put=00d171c9-b6cb-4467-bc8b-1d8dc0590d97&expires=180 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.pixel.rubiconproject.com put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; expires=Fri, 10-May-2013 04:03:35 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9203 Connection: Keep-Alive
GET /pixel/p-e4m3Yko6bFYVc.gif?idmatch=0 HTTP/1.1 Host: pixel.quantserve.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Connection: close Set-Cookie: mc=509f2397-7d6e2-038f1-761e6; expires=Tue, 13-May-2014 04:03:35 GMT; path=/; domain=.quantserve.com P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Cache-Control: private, no-cache, no-store, proxy-revalidate Pragma: no-cache Expires: Fri, 04 Aug 1978 12:00:00 GMT Content-Length: 35 Date: Sun, 11 Nov 2012 04:03:35 GMT Server: QS
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; sess=1; icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:03:35 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 04:03:35 GMT
GET /adserver/cookiematch?pnid=3000007 HTTP/1.1 Host: rubicon-rtb.p.veruta.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache-Coyote/1.1 Content-Length: 43 Date: Sun, 11 Nov 2012 04:03:35 GMT
GET /rb_match HTTP/1.1 Host: um.simpli.fi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain Server: nginx Date: Sun, 11 Nov 2012 04:03:35 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: uid=8h789ZaF5bW9XeMmd7UFcQ%3D%3D; path=/; expires=Mon, 11 Nov 2013 04:03:35 GMT; domain=.simpli.fi Location: http://pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=F5FC1EF2B5E5859626E35DBD7105B577&expires=365 P3P: policyref="http://www.simplifi.com/w3c/Policies.xml", CP="ADMa DEVa PSAa PSDa OUR IND DSP NON COR"
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=69143 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: close Content-Length: 381
GET /pull_sync?ul_cb=1&pid=rubicon HTTP/1.1 Host: www.wtp101.com GET /pull_sync?ul_cb=1&pid=rubicon HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: tuuid=457c53d9-60c4-4bd0-b2ac-68956356e3a0	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=457c53d9-60c4-4bd0-b2ac-68956356e3a0; path=/; expires=Tue, 11-Nov-2014 04:03:35 GMT; domain=.wtp101.com P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: http://pixel.rubiconproject.com/tap.php?v=5328&nid=2025&put=457c53d9-60c4-4bd0-b2ac-68956356e3a0&expires=730 Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 26 Jul 1997 05:00:00 GMT Pragma: no-cache Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:35 GMT
GET /sync/img?mt_exid=9 HTTP/1.1 Host: sync.mathtag.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 0 Connection: keep-alive Server: mt2/2.6.2.2465 Sep 24 2012 22:21:34 zrh-pixel-x7 pid 0x1853 6227 Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: uuid=509f2397-a573-fb02-f06f-5364a7d2c2d5; domain=.mathtag.com; path=/; expires=Mon, 11-Nov-2013 04:03:35 GMT Location: http://sync.mathtag.com/sync/img?mt_exid=9&mm_bnc
GET /tap.php?v=6286&nid=2132&put=F5FC1EF2B5E5859626E35DBD7105B577&expires=365 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=6286&nid=2132&put=F5FC1EF2B5E5859626E35DBD7105B577&expires=365 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%266286%3D1; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%266286%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.pixel.rubiconproject.com put_2132=F5FC1EF2B5E5859626E35DBD7105B577; expires=Mon, 11-Nov-2013 04:03:35 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9202 Connection: Keep-Alive
GET /load/?p=204&g=141&j=0&xl8blockcheck=1 HTTP/1.1 Host: loadm.exelator.com GET /load/?p=204&g=141&j=0&xl8blockcheck=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: ud=eJxrWVyWWnRgUUnxaccr6ieeXv4wdXGop8stBgXLtLRkSwMjgzQzYxNTozSLxOREIyMTy0RjA%252FMU80Rj88VFKWmMAGOqF7s%253D	HTTP/1.1 302 Found Content-Type: image/gif X-Powered-By: PHP/5.3.17 P3P: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA Set-Cookie: inv=eJxrXFySlnaHQeLMmTO9zGfVOZYYGZoYgImz6twIDgOCeeYMAyMSlwGFBwBIiRgQ; expires=Mon, 11-Mar-2013 04:03:35 GMT; path=/; domain=exelator.com xud=eJyNzk1qg0AYBuAQeoKewF2346jRLKd1kgqJIzpSXMlEZ2ggyYBKki4LXfcMRQVJ2tJrFEp3XXVbeo9K9ABdvi%252FP9%252FNQbXl2Vhb5B%252Fq6eP%252F9sd16vypWj1Xo2N8DZSxEMgYQiJGmG1BYLGEQ6mOmATM1mWa%252BbuMpJvEVCV3qR6VLXrrCx1OHuKUKjz1waFSTfCUPXbbnaNBTjwQUzZ7euoR8jNp1Nh60MkQxjTzcXGZyl%252FPs%252BdRM0NyZRc1kmXEh982pI8HhZrlJW6WY%252FQUn8Nr%252FPbnjGeXJreJshMzWrFjKjRLc5QVf5woKekz86f%252Bxi%252BmwCtF1OzFKhblIWAq4rqmGJQxoAGaYI5Awi1sLtVoIcf85PK%252BhqoM%252FwtGB9A%253D%253D; expires=Mon, 11-Mar-2013 04:03:35 GMT; path=/; domain=exelator.com xudx=eJwBMADP%252F4OjdmVyAqJ0c8tB1CfI5eNETqNldniBzQhcgc5QnyOYmc0nCwHMzMyNAQABzQISAjtZFTg%253D; expires=Mon, 11-Mar-2013 04:03:35 GMT; path=/; domain=exelator.com udo=eJxrXVyWWsS0qKT4tOMV9RNPH7v4LU4tq5hzVp2b8SxHDMeZM2d62RgZGM8yCTEtqcgpyelbHOrpcotBwTItLdnSwMggzczYxNQozSIxOdHIyMQy0djAPMU80dh8bVm8u6t%252FvLN%252FqF9IUOQiP%252F81EIEgV3dPf79FhkaroAo8QyKX%252BBfn5K%252BE8F18HRmgSgP8g0McfRash%252FAcg1wdgca5uDIAVYY6xodEBrgudyrKLy9OLVoNFnFz9PX0iVzullmUmpZfsRws5h%252B8MjwzLwWoSsEcaoNncADQ%252FQH55alFIanJGQqeeWn5RbmJJZn5eQrBlcUlqbnFCo7BUMX%252BQe7EK%252FZzDWFaHOroAdRhlpJmnpScmGKQamJsaGqRZmpkapBoam5mkJxokWqRZLgkvygzHRgqACJAiZA%253D; expires=Mon, 11-Mar-2013 04:03:35 GMT; path=/; domain=exelator.com ud=eJxrWVyWWnRgUUnxaccr6ieePvYVWhzq6XKLQcEyLS3Z0sDIIM3M2MTUKM0iMTnRyMjEMtHYwDzFPNHYfEl%252BUWb6Ij9%252FAHr3GFk%253D; expires=Mon, 11-Mar-2013 04:03:35 GMT; path=/; domain=exelator.com Location: http://tap.rubiconproject.com/oz/feeds/exelate/tokens?afu=9ffc9020f63452f8aca2249a307d7a37 Content-Length: 0 Connection: close Date: Sun, 11 Nov 2012 04:03:35 GMT Server: HTTP server
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; sess=1; icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:03:35 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 04:03:35 GMT
GET /partner/agent/rubicon/channels.js?cb=oz_onPixelsLoaded HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:35 GMT Server: TRP Apache-Coyote/1.1 Cache-Control: no-store, no-cache, must-revalidate, private Content-Length: 535 Set-Cookie: SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=170 Connection: Keep-Alive
GET /di.php?v=2372\|0\|\|2373\|\|2374\|0\|\|&r=3761\|0,3169,3578,3577,2110,2195,2196,2197,2579,2198,4134,3734,2199,2364,2362,2363,2200,3810,2111,2494,2201,3513,2202,2496,2202,2496,2203,2204,2189,2112,2497,2205,2355,2495,5838,3811,3512,2109,3812,2239,2190,2206,2113,2206,2113,4552,2765,6184,2240,4105,4193,2372,2373,2374,2375, HTTP/1.1 Host: pixel.rubiconproject.com GET /di.php?v=2372\|0\|\|2373\|\|2374\|0\|\|&r=3761\|0,3169,3578,3577,2110,2195,2196,2197,2579,2198,4134,3734,2199,2364,2362,2363,2200,3810,2111,2494,2201,3513,2202,2496,2202,2496,2203,2204,2189,2112,2497,2205,2355,2495,5838,3811,3512,2109,3812,2239,2190,2206,2113,2206,2113,4552,2765,6184,2240,4105,4193,2372,2373,2374,2375, HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1%266286%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%266286%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%266286%3D1%262373%3D1; expires=Fri, 10-May-2013 04:03:35 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9506 Connection: Keep-Alive
GET /tap.php?v=5328&nid=2025&put=457c53d9-60c4-4bd0-b2ac-68956356e3a0&expires=730 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5328&nid=2025&put=457c53d9-60c4-4bd0-b2ac-68956356e3a0&expires=730 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%265328%3D1; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.pixel.rubiconproject.com put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; expires=Tue, 11-Nov-2014 04:03:35 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9972 Connection: Keep-Alive
GET /sync/img?mt_exid=9&mm_bnc HTTP/1.1 Host: sync.mathtag.com GET /sync/img?mt_exid=9&mm_bnc HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: uuid=509f2397-a573-fb02-f06f-5364a7d2c2d5	HTTP/1.1 302 Found Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 0 Connection: keep-alive Server: mt2/2.6.2.2465 Sep 24 2012 22:21:34 zrh-pixel-x7 pid 0x1845 6213 Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: mt_mop=9:1352606615; domain=.mathtag.com; path=/; expires=Tue, 11-Dec-2012 04:03:35 GMT Location: http://pixel.rubiconproject.com/tap.php?v=4222&nid=1512&put=509f2397-a573-fb02-f06f-5364a7d2c2d5
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=37241 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 04:03:35 GMT Connection: close Content-Length: 381
GET /tap.php?v=4222&nid=1512&put=509f2397-a573-fb02-f06f-5364a7d2c2d5 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=4222&nid=1512&put=509f2397-a573-fb02-f06f-5364a7d2c2d5 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1%265328%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.pixel.rubiconproject.com put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9320 Connection: Keep-Alive
GET /m/rc HTTP/1.1 Host: rc.d.chango.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 35 Server: RTB Etag: "0f4e929dd5bb2564f7ab9c76338e04e292a42ace" Pragma: no-cache Cache-Control: no-cache, no-store, max-age=0, must-revalidate P3P: policyref="http://as.chango.com/static/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: _t=c3f84a9e-2bb4-11e2-8f36-00259034b9f4; Domain=chango.com; expires=Wed, 09 Nov 2022 04:03:35 GMT; Path=/ Connection: close
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; sess=1; icu=ChIIlroHEAoYASABKAEwl8f8hAUQl8f8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:03:35 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVhX8`<jkb10I3eRvA#FdgHS0R!o)0Vpi?5Tr>; path=/; expires=Sat, 09-Feb-2013 04:03:35 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 04:03:35 GMT
GET /dmm/rubicon/match HTTP/1.1 Host: rubicon-match.dotomi.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 204 No Content Content-Type: text/plain Date: Sun, 11 Nov 2012 04:03:35 GMT X-Name: dtiad01rtb02p.int Cache-Control: max-age=0, no-store Content-Length: 0 Connection: close
GET /px/rb.gif HTTP/1.1 Host: ad.yabuka.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 FOUND Content-Type: text/html; charset=utf-8 Server: nginx/1.1.19 Date: Sun, 11 Nov 2012 04:03:35 GMT Content-Length: 186 Connection: keep-alive Location: http://pixel.rubiconproject.com/tap.php?v=9047&nid=2147&put=QcH3P3LOxa Set-Cookie: client_id=QcH3P3LOxa; Path=/ tc="HUsyTuyJG2wg4vaJdytjr0EGS9M=?_expires=STEzNTMwMTcwMTUKLg==&client_id=UydRY0gzUDNMT3hhJwpwMQou"; Domain=.yabuka.com; expires=Thu, 15-Nov-2012 22:03:35 GMT; Path=/ Cache-Control: no-cache Pragma: no-cache
GET /oz/feeds/exelate/tokens?afu=9ffc9020f63452f8aca2249a307d7a37 HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1%266286%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577	HTTP/1.1 204 No Content Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:35 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 04:03:35 GMT; Path=/ au=H9DN20AK-3ZQD-10.74.91.2; Domain=.rubiconproject.com; Expires=Mon, 09-Nov-2020 04:03:35 GMT; Path=/ dq=1\|1\|0\|0; Expires=Mon, 11-Nov-2013 04:03:35 GMT; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Content-Length: 0 Keep-Alive: timeout=5, max=179 Connection: Keep-Alive
GET /c/cse?a=Q&B=17 HTTP/1.1 Host: connexity.net GET /c/cse?a=Q&B=17 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Connexity Transfer-Encoding: chunked Connection: keep-alive Date: Sun, 11 Nov 2012 04:03:35 GMT Cache-Control: no-store, max-age=-1, post-check=0, pre-check=0 Pragma: no-cache Expires: -1 P3P: policyref="/w3c/p3p.xml", CP="CAO PSA OUR CURa DEVa PSDo PSAo BUS COR UNI COM",an.pp="http://www.connexity.com/privacy",an.oo="http://www.connexity.com/privacy",an.bt="N" Set-Cookie: COu=e97b365699cb456b-064a29608101ab55-2175fb3dda4ea183; expires=Fri, 10-Nov-2017 04:03:35 GMT; domain=.connexity.net; path=/ Content-Transfer-Encoding: binary
GET /tap.php?v=9047&nid=2147&put=QcH3P3LOxa HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=9047&nid=2147&put=QcH3P3LOxa HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:35 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C%269047%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.pixel.rubiconproject.com put_2147=QcH3P3LOxa; expires=Tue, 11-Dec-2012 04:03:35 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9938 Connection: Keep-Alive
GET /partner/scripts/rubicon/page_parser.js?d=www.mediafire.com HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=90322 Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5; cd=false; au=H9DN20AK-3ZQD-10.74.91.2; put_2147=QcH3P3LOxa	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:55:58 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sun, 11 Nov 2012 05:03:37 GMT Date: Sun, 11 Nov 2012 04:03:37 GMT Content-Length: 5705 Connection: keep-alive Vary: Accept-Encoding
GET /view.aspx?poolid=12887&script=1&rnd=389990 HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&script=1&rnd=389990 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43143	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: /view.aspx?poolid=12887&script=1&rnd=389990&test=1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: USER_ID=u%86%e9%a7%df%40%86%bbjx%dc_%bec%9d; domain=.server.cpmstar.com; expires=Thu, 11-Nov-2032 04:03:57 GMT; path=/ P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sun, 11 Nov 2012 04:03:57 GMT Content-Length: 185 Connection: Keep-alive Keep-Alive: timeout=15, max=100 Via: 1.1 ID-0001544140306215 uproxy-4
GET /cached/js/flashadv12.pack.js HTTP/1.1 Host: cdne.cpmstar.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43143	HTTP/1.1 200 OK Content-Type: application/x-javascript Accept-Ranges: bytes Cache-Control: max-age=259200 Date: Sun, 11 Nov 2012 04:03:40 GMT Etag: "59d8944723b3cd1:0" Last-Modified: Fri, 26 Oct 2012 02:40:36 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Server: ECAcc (arn/469E) Via: 1.1 ID-0001544140306215 uproxy-2 X-Cache: HIT Content-Length: 2991
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352606620294&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D43143&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352606620294&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D43143&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F5nwz1uz1r4ddec4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43143 Cookie: UID=4cc0eb6-195.159.219.9-1352606615; UIDR=1352606615	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:40 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /cached/creatives/203391/Kone-XTD_Banner_160x600_Clicktag.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d82398%26creativeid%3d203391%26url%3d HTTP/1.1 Host: cdne.cpmstar.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43143	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Accept-Ranges: bytes Cache-Control: public Content-Disposition: inline;filename=203391_Kone-XTD_Banner_160x600_Clicktag.swf Date: Sun, 11 Nov 2012 04:03:40 GMT Expires: Mon, 12 Nov 2012 04:03:41 GMT Last-Modified: Sat, 10 Nov 2012 06:55:45 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Server: ECAcc (arn/46BA) Via: 1.1 ID-0001544140306215 uproxy-3 X-AspNet-Version: 2.0.50727 X-Cache: HIT Content-Length: 77907
GET /sync?ssp=rubicon HTTP/1.1 Host: x.bidswitch.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=b71e0d68-e9ef-48f7-a740-1a343c38a931; path=/; expires=Tue, 11-Nov-2014 04:03:40 GMT P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: /sync?ul_cb=1&ssp=rubicon Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 26 Jul 1997 05:00:00 GMT Pragma: no-cache Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:40 GMT
GET /sync?ul_cb=1&ssp=rubicon HTTP/1.1 Host: x.bidswitch.net GET /sync?ul_cb=1&ssp=rubicon HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: tuuid=b71e0d68-e9ef-48f7-a740-1a343c38a931	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=b71e0d68-e9ef-48f7-a740-1a343c38a931; path=/; expires=Tue, 11-Nov-2014 04:03:40 GMT P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: //pixel.rubiconproject.com/tap.php?v=15796&nid=2760&put=b71e0d68-e9ef-48f7-a740-1a343c38a931&expires=30 Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 26 Jul 1997 05:00:00 GMT Pragma: no-cache Content-Length: 0 Date: Sun, 11 Nov 2012 04:03:40 GMT
GET /tap.php?v=15796&nid=2760&put=b71e0d68-e9ef-48f7-a740-1a343c38a931&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=15796&nid=2760&put=b71e0d68-e9ef-48f7-a740-1a343c38a931&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C%269047%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5; cd=false; au=H9DN20AK-3ZQD-10.74.91.2; put_2147=QcH3P3LOxa	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:40 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1%2615796%3D1; expires=Tue, 11-Dec-2012 04:03:40 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C%269047%3D25076%2C0%2C1%2C%2C%2615796%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:40 GMT; path=/; domain=.pixel.rubiconproject.com put_2760=b71e0d68-e9ef-48f7-a740-1a343c38a931; expires=Tue, 11-Dec-2012 04:03:40 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9772 Connection: Keep-Alive
GET /dmp/pixelSync?network=Rubicon HTTP/1.1 Host: pixel.sitescout.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Server: Apache-Coyote/1.1 Date: Sun, 11 Nov 2012 04:03:40 GMT
GET /do-association?rbc&can=20 HTTP/1.1 Host: matcher-rbc.bidder7.mookie1.com GET /do-association?rbc&can=20 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:40 GMT Server: Apache/2.2.3 (Red Hat) Set-Cookie: id=4613164014101529687; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 04:03:40 GMT mdata=1\|4613164014101529687\|1352606620; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 04:03:40 GMT Location: /do-association-set?rbc&can=20 Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=712 Connection: Keep-Alive
GET /do-association-set?rbc&can=20 HTTP/1.1 Host: matcher-rbc.bidder7.mookie1.com GET /do-association-set?rbc&can=20 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4613164014101529687; mdata=1\|4613164014101529687\|1352606620	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:40 GMT Server: Apache/2.2.3 (Red Hat) Location: http://pixel.rubiconproject.com/tap.php?v=7259&nid=2211&put=4613164014101529687&expires=1 Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=972 Connection: Keep-Alive
GET /tap.php?v=7259&nid=2211&put=4613164014101529687&expires=1 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7259&nid=2211&put=4613164014101529687&expires=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1%2615796%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C%269047%3D25076%2C0%2C1%2C%2C%2615796%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5; cd=false; au=H9DN20AK-3ZQD-10.74.91.2; put_2147=QcH3P3LOxa; put_2760=b71e0d68-e9ef-48f7-a740-1a343c38a931	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:40 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1%2615796%3D1%267259%3D1; expires=Tue, 11-Dec-2012 04:03:40 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C%269047%3D25076%2C0%2C1%2C%2C%2615796%3D25076%2C0%2C1%2C%2C%267259%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:40 GMT; path=/; domain=.pixel.rubiconproject.com put_2211=4613164014101529687; expires=Mon, 12-Nov-2012 04:03:40 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9790 Connection: Keep-Alive
GET /oz/feeds/invite-media-rtb/tokens/?rt=iframe HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5; cd=false; au=H9DN20AK-3ZQD-10.74.91.2; dq=1\|1\|0\|0; put_2147=QcH3P3LOxa	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:41 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=adab133b127e5bd21818f53eeb0abcab44f0d57d&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 04:03:42 GMT; Path=/ dq=2\|2\|0\|0; Expires=Mon, 11-Nov-2013 04:03:42 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 04:03:42 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=200 Connection: Keep-Alive
GET /rubicon_sync?publisher_user_id=adab133b127e5bd21818f53eeb0abcab44f0d57d&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 Host: pixel.invitemedia.com GET /rubicon_sync?publisher_user_id=adab133b127e5bd21818f53eeb0abcab44f0d57d&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: text/html Date: Sun, 11 Nov 2012 04:03:42 GMT Set-Cookie: uid=7d3dd0e5-bae6-47be-bc83-a45ac116872d;Path=/;Domain=invitemedia.com;Expires=Mon, 11-Nov-2013 04:03:42 GMT impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC" Cache-Control: no-cache Content-Length: 221 Connection: close Server: Jetty(7.3.1.v20110307)
GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353038622&publisher_dsp_id=2101&external_user_id=7d3dd0e5-bae6-47be-bc83-a45ac116872d HTTP/1.1 Host: tap.rubiconproject.com GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353038622&publisher_dsp_id=2101&external_user_id=7d3dd0e5-bae6-47be-bc83-a45ac116872d HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=adab133b127e5bd21818f53eeb0abcab44f0d57d&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1%2615796%3D1%267259%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5; cd=false; au=H9DN20AK-3ZQD-10.74.91.2; dq=2\|2\|0\|0; put_2147=QcH3P3LOxa; put_2760=b71e0d68-e9ef-48f7-a740-1a343c38a931; put_2211=4613164014101529687; lm="11 Nov 2012 04:03:42 GMT"	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 04:03:42 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.rubiconproject.com/tap.php?v=5852&nid=2101&put=7d3dd0e5-bae6-47be-bc83-a45ac116872d Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 04:03:42 GMT; Path=/ dq=3\|3\|0\|0; Expires=Mon, 11-Nov-2013 04:03:42 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 04:03:42 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=194 Connection: Keep-Alive
GET /tap.php?v=5852&nid=2101&put=7d3dd0e5-bae6-47be-bc83-a45ac116872d HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5852&nid=2101&put=7d3dd0e5-bae6-47be-bc83-a45ac116872d HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=adab133b127e5bd21818f53eeb0abcab44f0d57d&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1%2615796%3D1%267259%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C%269047%3D25076%2C0%2C1%2C%2C%2615796%3D25076%2C0%2C1%2C%2C%267259%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f2509f2396c39f8cde3789c4^1^1352606614^3282013406; rsid=FsGVVT7or4ROW+ngdEkfzaBxZaiThR5ysPrTF1nz/jF4XeyaeR+kEfIOcY4imqkw3bZHonF7znOnaY0sdoI1UZAbqq46KBSde8i1/YqyHdw=; rdk=3196/3346; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352606614^1352606614; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352606614^1352606614; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352606614^1352606614; put_1430=00d171c9-b6cb-4467-bc8b-1d8dc0590d97; put_2132=F5FC1EF2B5E5859626E35DBD7105B577; put_2025=457c53d9-60c4-4bd0-b2ac-68956356e3a0; put_1512=509f2397-a573-fb02-f06f-5364a7d2c2d5; cd=false; au=H9DN20AK-3ZQD-10.74.91.2; put_2147=QcH3P3LOxa; put_2760=b71e0d68-e9ef-48f7-a740-1a343c38a931; put_2211=4613164014101529687; lm="11 Nov 2012 04:03:42 GMT"	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:03:42 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264554%3D1%265328%3D1%264222%3D1%269047%3D1%2615796%3D1%267259%3D1%265852%3D1; expires=Tue, 11-Dec-2012 04:03:42 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264554%3D25076%2C0%2C1%2C%2C%265328%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C%269047%3D25076%2C0%2C1%2C%2C%2615796%3D25076%2C0%2C1%2C%2C%267259%3D25076%2C0%2C1%2C%2C%265852%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:03:42 GMT; path=/; domain=.pixel.rubiconproject.com put_2101=7d3dd0e5-bae6-47be-bc83-a45ac116872d; expires=Tue, 11-Dec-2012 04:03:42 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9427 Connection: Keep-Alive
POST / HTTP/1.1 Host: ocsp.verisign.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	HTTP/1.0 200 Ok Content-Type: application/ocsp-response Last-Modified: Fri, 09 Nov 2012 00:41:57 GMT Expires: Fri, 16 Nov 2012 00:41:57 GMT Content-Transfer-Encoding: binary Content-Length: 1814 Cache-Control: max-age=419895, public, no-transform, must-revalidate Date: Sun, 11 Nov 2012 04:03:42 GMT nncoection: close Connection: Keep-Alive
GET /dialog/oauth?client_id=124578887583575&response_type=token%2Csigned_request%2Ccode&display=none&domain=www.mediafire.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Df3a30ac650ea7e4%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff1474e4d1ce97ea%26domain%3Dwww.mediafire.com%26relation%3Dparent&sdk=joey HTTP/1.1 Host: www.facebook.com GET /dialog/oauth?client_id=124578887583575&response_type=token%2Csigned_request%2Ccode&display=none&domain=www.mediafire.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Df3a30ac650ea7e4%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff1474e4d1ce97ea%26domain%3Dwww.mediafire.com%26relation%3Dparent&sdk=joey HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?5nwz1uz1r4ddec4	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Location: http://static.ak.facebook.com/connect/xd_arbiter.php?version=17#cb=f3a30ac650ea7e4&origin=http%3A%2F%2Fwww.mediafire.com%2Ff1474e4d1ce97ea&domain=www.mediafire.com&relation=parent&error=unknown_user Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-FB-Debug: 1l4ifKlY4B0ehgV6CIOqyGwXOqMHWnedxzSAqdI5zuo= Date: Sun, 11 Nov 2012 04:03:43 GMT Connection: keep-alive Content-Length: 0
GET /0zfftr6qa6ng/5nwz1uz1r4ddec4/PotPlayerPortable_1.5.34321_Beta_azo.exe HTTP/1.1 Host: 205.196.120.217 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 302 Found HTTP/1.1 302 Found Location: http://www.mediafire.com/?5nwz1uz1r4ddec4 Connection: Close
GET /view.aspx?poolid=12887&script=1&rnd=389990&test=1 HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&script=1&rnd=389990&test=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=43143 Cookie: USER_ID=u%86%e9%a7%df%40%86%bbjx%dc_%bec%9d	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: n15=0,12887,82398,203391,1352606642,0; domain=.server.cpmstar.com; expires=Tue, 11-Dec-2012 04:04:02 GMT; path=/ sm=t=1352520302; domain=.server.cpmstar.com; expires=Mon, 12-Nov-2012 04:04:02 GMT; path=/ P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sun, 11 Nov 2012 04:04:01 GMT Connection: close Via: 1.1 ID-0001544140306215 uproxy-4