urlquery.net - Free url scanner

Overview

URL	http://199.91.153.27/ex4maeatm3jg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe
IP	199.91.153.27
ASN	AS46179 MediaFire, LLC
Location	United States
Report completed	2012-11-11 05:44:31 CET
Status	Loading report..
urlQuery Alerts	No alerts detected

Settings

UserAgent	Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader	8.0
Java	1.6.0_26

Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Source IP	Destination IP	Severity	Alert
2012-11-11 05:43:51	205.196.120.6	urlQuery Client	3	FILEMAGIC Macromedia Flash data (compressed),
2012-11-11 05:43:53	87.248.207.253	urlQuery Client	3	FILEMAGIC Macromedia Flash data (compressed),

Snort /w Sourcefire VRT

Timestamp	Source IP	Destination IP	Severity	Alert
2012-11-11 05:44:10	urlQuery Client	173.194.69.132	2	ssp_ssl: Invalid Client HELLO after Server HELLO Detected
2012-11-11 05:44:10	urlQuery Client	173.194.69.132	2	ssp_ssl: Invalid Client HELLO after Server HELLO Detected

Recent reports on same IP/ASN/Domain

Last 2 reports on IP: 199.91.153.27

Date	Alerts / IDS	URL	IP
2012-11-11 07:16:46	0 / 2	http://199.91.153.27/c3229m30cfag/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	199.91.153.27
2012-11-10 21:36:40	0 / 2	http://199.91.153.27/fhyiiv7209sg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	199.91.153.27

Last 6 reports on ASN: AS46179 MediaFire, LLC

Date	Alerts / IDS	URL	IP
2013-03-20 09:07:12	0 / 2	http://199.91.154.128/2fb19bza42cg/1tfzxkpxrbr3bpe/popitvsetuptr.exe	199.91.154.128
2013-03-20 07:24:08	0 / 3	http://www.mediafire.com/download_repair.php?dkey=3jbmxseasam	205.196.120.8
2013-03-19 23:43:29	0 / 3	http://205.196.123.122/is5pzh2s3cgg/1tfzxkpxrbr3bpe/popitvsetuptr.exe	205.196.123.122
2013-03-19 21:41:47	0 / 1	http://205.196.122.2/4crbdy0elmmg/ox9699g479blej9/popitvsetupws.exe	205.196.122.2
2013-03-19 01:27:40	0 / 4	http://199.91.153.121/sa7kskud9rog/82zh6aerl7dg5yl/lzc-pangya-28-3-2555+www.prodekbk.com.exe	199.91.153.121
2013-03-18 19:48:01	0 / 4	http://mediafire.com/?b5z89s44apxxfxj	205.196.120.12

Last 2 reports on domain: 199.91.153.27

Date	Alerts / IDS	URL	IP
2012-11-11 07:16:46	0 / 2	http://199.91.153.27/c3229m30cfag/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	199.91.153.27
2012-11-10 21:36:40	0 / 2	http://199.91.153.27/fhyiiv7209sg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	199.91.153.27

JavaScript

Executed Scripts (64)

Executed Evals (0)

Executed Writes (47)

#1 JavaScript::Write (size: 9, repeated: 1)

 </EMBED>

#2 JavaScript::Write (size: 10, repeated: 1)

 </OBJECT>

#3 JavaScript::Write (size: 276, repeated: 1)

 <EMBED src="http://cdn3.cpmstar.com/cached/creatives/203392/Kone-Pure_Banner_160x600_clicktag.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d82398%26creativeid%3d203392%26url%3d" wmode=opaque menu=false quality=high

#4 JavaScript::Write (size: 347, repeated: 1)

 <PARAM NAME=movie VALUE="http://cdn3.cpmstar.com/cached/creatives/203392/Kone-Pure_Banner_160x600_clicktag.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d82398%26creativeid%3d203392%26url%3d"> <PARAM NAME=wmode VALUE=opaque> <PARAM NAME=menu VALUE=false> <PARAM NAME=quality VALUE=high>

#5 JavaScript::Write (size: 69, repeated: 1)

 ID=ad_banner_example WIDTH=160 HEIGHT=600 style="line-height: 1px;">

#6 JavaScript::Write (size: 133, repeated: 1)

 TYPE="application/x-shockwave-flash" PLUGINSPAGE="//www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash">

#7 JavaScript::Write (size: 91, repeated: 1)

 codebase="//download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=3,0,0,0"

#8 JavaScript::Write (size: 41, repeated: 1)

 swLiveConnect=FALSE WIDTH=160 HEIGHT=600

#9 JavaScript::Write (size: 245, repeated: 2)

<!-- BEGIN JS TAG - [Mediafire - Rubicon] - Default < - DO NOT MODIFY -->
<SCRIPT SRC="http://ads.cpxinteractive.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44" TYPE="text/javascript"></script>
<!-- END TAG -->

#10 JavaScript::Write (size: 244, repeated: 1)

<!-- BEGIN JS TAG - [Mediafire - Rubicon] - Default < - DO NOT MODIFY -->
<SCRIPT SRC="http://ads.cpxinteractive.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44" TYPE="text/javascript"></script>
<!-- END TAG -->

#11 JavaScript::Write (size: 9, repeated: 5)

</script>

#12 JavaScript::Write (size: 60, repeated: 1)

<OBJECT classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"

#13 JavaScript::Write (size: 2285, repeated: 1)

<OBJECT id="2553828578777687053" data="http://cdn.adnxs.com/p/f7/e2/9a/75/f7e29a750a6e90386fb44988cda11ee3.swf" classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" WIDTH="300" HEIGHT="250" flashvars="clickTAG=http%3A%2F%2Fib.adnxs.com%2Fclick%3FAAAAAAAAAAAAAAAAAAAAAAAAAEAzM8M_AAAAAAAAAAAAAAAAAAAAAA3kSMePBXEjoArzhH1cTlELLZ9QAAAAAHZYCwAdAgAAHQIAAAIAAAC1zCkAKkACAAAAAQBVU0QAVVNEACwB-gBNUQAAP1AAAgMCAQUAAIIAfBGAQgAAAAA.%2Fcnd%3D%2521MgUQMAjgth4QtZmnARiqgAkgBA..%2Freferrer%3Dhttp%253A%252F%252Fwww.mediafire.com%252F%253F4p5wab4oqodaj44%2Fclickenc%3Dhttp%253A%252F%252Fno.balagana.net%252Fpages%252Fno_NO%252Flovetest%252F%253FAFID%253D220843%2526AFCID%253Dams1CKCVzKfYj5enURACGI3Io7r8scG4IyIOODAuMjAzLjE2OC4yNTQoAQ.."><PARAM NAME=movie VALUE="http://cdn.adnxs.com/p/f7/e2/9a/75/f7e29a750a6e90386fb44988cda11ee3.swf"><PARAM NAME=loop VALUE=true><PARAM NAME=menu VALUE=false><PARAM NAME=quality VALUE=high><PARAM NAME=wmode VALUE="opaque"><PARAM NAME=bgcolor VALUE=#FFFFFF><PARAM NAME=allowscriptaccess VALUE=always><PARAM NAME=flashvars VALUE="clickTAG=http%3A%2F%2Fib.adnxs.com%2Fclick%3FAAAAAAAAAAAAAAAAAAAAAAAAAEAzM8M_AAAAAAAAAAAAAAAAAAAAAA3kSMePBXEjoArzhH1cTlELLZ9QAAAAAHZYCwAdAgAAHQIAAAIAAAC1zCkAKkACAAAAAQBVU0QAVVNEACwB-gBNUQAAP1AAAgMCAQUAAIIAfBGAQgAAAAA.%2Fcnd%3D%2521MgUQMAjgth4QtZmnARiqgAkgBA..%2Freferrer%3Dhttp%253A%252F%252Fwww.mediafire.com%252F%253F4p5wab4oqodaj44%2Fclickenc%3Dhttp%253A%252F%252Fno.balagana.net%252Fpages%252Fno_NO%252Flovetest%252F%253FAFID%253D220843%2526AFCID%253Dams1CKCVzKfYj5enURACGI3Io7r8scG4IyIOODAuMjAzLjE2OC4yNTQoAQ.."><OBJECT TYPE="application/x-shockwave-flash" data="http://cdn.adnxs.com/p/f7/e2/9a/75/f7e29a750a6e90386fb44988cda11ee3.swf?clickTAG=http%3A%2F%2Fib.adnxs.com%2Fclick%3FAAAAAAAAAAAAAAAAAAAAAAAAAEAzM8M_AAAAAAAAAAAAAAAAAAAAAA3kSMePBXEjoArzhH1cTlELLZ9QAAAAAHZYCwAdAgAAHQIAAAIAAAC1zCkAKkACAAAAAQBVU0QAVVNEACwB-gBNUQAAP1AAAgMCAQUAAIIAfBGAQgAAAAA.%2Fcnd%3D%2521MgUQMAjgth4QtZmnARiqgAkgBA..%2Freferrer%3Dhttp%253A%252F%252Fwww.mediafire.com%252F%253F4p5wab4oqodaj44%2Fclickenc%3Dhttp%253A%252F%252Fno.balagana.net%252Fpages%252Fno_NO%252Flovetest%252F%253FAFID%253D220843%2526AFCID%253Dams1CKCVzKfYj5enURACGI3Io7r8scG4IyIOODAuMjAzLjE2OC4yNTQoAQ.." width="300" height="250" wmode="opaque" allowscriptaccess="always"></OBJECT></OBJECT>

#14 JavaScript::Write (size: 274, repeated: 1)

<SCRIPT language="Javascript">
var cpmstar_rnd=Math.round(Math.random()*999999);
var cpmstar_pid=12887;
document.writeln("<SCR"+"IPT language='Javascript' src='http://server.cpmstar.com/view.aspx?poolid="+cpmstar_pid+"&script=1&rnd="+cpmstar_rnd+"'></SCR"+"IPT>");
</script>

#15 JavaScript::Write (size: 114, repeated: 1)

<SCRIPT language='Javascript' src='http://server.cpmstar.com/view.aspx?poolid=12887&script=1&rnd=259753'></SCRIPT>

#16 JavaScript::Write (size: 582, repeated: 1)

<a href="http://ib.adnxs.com/click?0XR2MjhKnj_RdHYyOEqePwAAAEAzM8M_0XR2MjhKnj_RdHYyOEqePxjUw2bAHDU7oArzhH1cTlEILZ9QAAAAAHZYCwAdAgAAHQIAAAIAAAAyVRQAKkACAAAAAQBVU0QAVVNEACwB-gBNUQAAEE4AAgQCAQUAAIIAox2MvQAAAAA./cnd=%218QTZKgjwvQ8QsqpRGKqACSAE/referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGJioj7aGmMeaOyIOODAuMjAzLjE2OC4yNTQoAQ.." target="_blank"><img width="300" height="250" style="border-style: none" src="http://cdn.adnxs.com/p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png"/></a>

#17 JavaScript::Write (size: 581, repeated: 1)

<a href="http://ib.adnxs.com/click?hUGZRpOLkT-FQZlGk4uRPwAAAEAzM8M_hUGZRpOLkT-FQZlGk4uRP4ZTo-brv4RdoArzhH1cTlEILZ9QAAAAAHZYCwAdAgAAHQIAAAIAAAA2VRQAKkACAAAAAQBVU0QAVVNEANgCWgBNUQAAqFAAAgQCAQUAAIIA9iBCvwAAAAA./cnd=%219QT9KgjwvQ8QtqpRGKqACSAE/referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44/clickenc=http%3A%2F%2Flp.ilivid.com%2F%3Fappid%3D287%26subid%3Dams1CKCVzKfYj5enURACGIanjbW-_a_CXSIOODAuMjAzLjE2OC4yNTQoAQ.." target="_blank"><img width="728" height="90" style="border-style: none" src="http://cdn.adnxs.com/p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png"/></a>

#18 JavaScript::Write (size: 58, repeated: 1)

<div id="recaptcha_widget_div" style="display:none"></div>

#19 JavaScript::Write (size: 27, repeated: 1)

<div id="theToolTip"></div>

#20 JavaScript::Write (size: 198, repeated: 3)

<iframe src="http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1" width="1" height="1" frameborder="0" scrolling="No" marginheight="0" marginwidth="0" topmargin="0" leftmargin="0"></iframe>

#21 JavaScript::Write (size: 134, repeated: 1)

<iframe src='http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/?rt=iframe' width='1' height='1' frameborder='0'></iframe>

#22 JavaScript::Write (size: 52, repeated: 1)

<script language="JavaScript" type="text/javascript"

#23 JavaScript::Write (size: 53, repeated: 4)

<script language="JavaScript" type="text/javascript">

#24 JavaScript::Write (size: 87, repeated: 3)

<script type="text/javascript" src="http://ads.rubiconproject.com/ad/3196.js"></script>

#25 JavaScript::Write (size: 235, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/27309-15.js?cb=0.7623321629743535&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#26 JavaScript::Write (size: 234, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-15.js?cb=0.6324754103845819&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#27 JavaScript::Write (size: 234, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-2.js?cb=0.12954192331223657&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#28 JavaScript::Write (size: 233, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-9.js?cb=0.7466397518734763&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#29 JavaScript::Write (size: 98, repeated: 1)

<script type="text/javascript" src="http://www.google.com/recaptcha/api/js/recaptcha.js"></script>

#30 JavaScript::Write (size: 1142, repeated: 1)

<script type="text/javascript">
//20121025
var cpmstarfa12_flashurl="http://cdn3.cpmstar.com/cached/creatives/203392/Kone-Pure_Banner_160x600_clicktag.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d82398%26creativeid%3d203392%26url%3d";
var cpmstarfa12_width=160, width=160;
var cpmstarfa12_height=600, height=600;
var cpmstarfa12_imageurl="http://cdn3.cpmstar.com/cached/creatives/203392/Kone-Pure_Banner_Animiertes_Gif_160x600.gif";
var cpmstarfa12_videourl="";
if(cpmstarfa12_videourl!="")cpmstarfa12_flashurl+="&videourl="+encodeURI(cpmstarfa12_videourl);
var cpmstarfa12_flashvars="";
if(cpmstarfa12_flashvars!="")cpmstarfa12_flashurl+="&"+cpmstarfa12_flashvars;
var cpmstarfa12_simpleclickurl="http://server.cpmstar.com/click.aspx?poolid=12887&subpoolid=0&campaignid=82398&creativeid=203392&url=";
var cpmstarfa12_pixelUrl = "";
if (cpmstarfa12_pixelUrl!="")document.write('<IMG SRC="'+cpmstarfa12_pixelUrl+'" width="0" height="0" border="0" />\n');
</script>
<script type="text/javascript" src="http://cdn3.cpmstar.com/cached/js/flashadv12.pack.js">
</script>

#31 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3176583" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#32 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3320011" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#33 JavaScript::Write (size: 903, repeated: 2)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3320015" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#34 JavaScript::Write (size: 498, repeated: 3)

<script> var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6035951", c3: "122134" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })(); </script> <noscript> <img src="http://b.scorecardresearch.com/p?c1=8&c2=&c3=&c4=&c5=&c6=&c15=&cv=2.0&cj=1" /> </noscript>

#35 JavaScript::Write (size: 104, repeated: 1)

<script>Recaptcha.widget = Recaptcha.$("recaptcha_widget_div"); Recaptcha.challenge_callback();</script>

#36 JavaScript::Write (size: 69, repeated: 1)

src="http://ads.rubiconproject.com/ad/3196.js?cb=0.7302018990555244">

#37 JavaScript::Write (size: 26, repeated: 3)

var rp_account   = "3196";

#38 JavaScript::Write (size: 24, repeated: 1)

var rp_account = "3196";

#39 JavaScript::Write (size: 24, repeated: 3)

var rp_adtype    = "js";

#40 JavaScript::Write (size: 21, repeated: 1)

var rp_adtype = "js";

#41 JavaScript::Write (size: 26, repeated: 3)

var rp_site      = "3346";

#42 JavaScript::Write (size: 21, repeated: 1)

var rp_site = "3346";

#43 JavaScript::Write (size: 81, repeated: 4)

var rp_smartfile = "http://www.mediafire.com/templates/ads/revv_smart_file.html";

#44 JavaScript::Write (size: 30, repeated: 1)

var rp_zonesize  = "27309-15";

#45 JavaScript::Write (size: 29, repeated: 1)

var rp_zonesize  = "9685-15";

#46 JavaScript::Write (size: 28, repeated: 1)

var rp_zonesize  = "9685-9";

#47 JavaScript::Write (size: 27, repeated: 1)

var rp_zonesize = "9685-2";

HTTP Transactions (128)

Request	Response
GET /css/mfv3_85677.php?ver=nonssl HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 37605 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:44 GMT Connection: keep-alive
GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 Host: cdn.mediafire.com GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 52116 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:44 GMT Connection: keep-alive
GET /?4p5wab4oqodaj44 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:43:44 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: 0 Set-Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; expires=Sun, 12-Oct-2014 04:43:44 GMT; path=/; domain=.mediafire.com; httponly Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 17013 Connection: close Server: MediaFire
GET /images/favicon/download.ico HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Date: Sun, 11 Nov 2012 04:43:45 GMT Last-Modified: Thu, 25 Oct 2012 21:59:32 GMT Accept-Ranges: bytes Content-Length: 1150 Connection: close Server: MediaFire
POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 106 Content-Type: application/ocsp-request	HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 11 Nov 2012 04:43:46 GMT Server: Apache Content-Transfer-Encoding: Binary Cache-Control: max-age=18197, public, no-transform, must-revalidate Last-Modified: Sun, 11 Nov 2012 04:03:01 GMT Expires: Sun, 11 Nov 2012 10:03:01 GMT Etag: "fcadc9fc23bc1c68280a39b450b6929371c8cac7" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" Content-Length: 1923 Connection: close
GET /css?family=Open+Sans:800,400,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/css Expires: Sun, 11 Nov 2012 04:43:48 GMT Date: Sun, 11 Nov 2012 04:43:48 GMT Cache-Control: private, max-age=86400 Content-Encoding: gzip Content-Length: 318 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE
GET /blank.html HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Last-Modified: Tue, 18 Sep 2012 21:44:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 78 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /images/icons/ajax-loader-grey_round.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 1775 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /images/logos/logo_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 16 Jul 2012 19:28:31 GMT Accept-Ranges: bytes Content-Length: 3708 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 2315 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_allowemail.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 941 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /images/buttons/btn_twitter_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 1799 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /images/icons/dropdown-arrow-left-white.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 123 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /ga.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 14888 Content-Encoding: gzip Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT X-Content-Type-Options: nosniff, nosniff Date: Sat, 10 Nov 2012 20:33:27 GMT Expires: Sun, 11 Nov 2012 08:33:27 GMT Vary: Accept-Encoding Age: 29421 Cache-Control: max-age=43200, public Server: GFE/2.0
GET /images/icons/information_darkblue.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 722 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /images/icons/icon-sprite-16-v3.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 02 Oct 2012 17:01:27 GMT Accept-Ranges: bytes Content-Length: 61715 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 Host: www.facebook.com GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 Content-Encoding: gzip X-FB-Debug: iMSGRha8EQThVpM2kxfMGQyftAQQHnpc7Dt1JVcMfFU= Date: Sun, 11 Nov 2012 04:43:48 GMT Transfer-Encoding: chunked Connection: keep-alive
GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 Host: platform.twitter.com GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: public, max-age=1800 Last-Modified: Thu, 08 Nov 2012 09:18:41 GMT Etag: "567a94a4e136d5c4b7bfde258474cfa6" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 25717 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
GET /recaptcha/api/challenge?k=6LextQUAAAAAALlQv0DSHOYxqF3DftRZxA5yebEe HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Date: Sun, 11 Nov 2012 04:43:48 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 464 Server: GSE
GET /images/backgrounds/download/rockmelt/rockmelt_dl_btn.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:44 GMT Accept-Ranges: bytes Content-Length: 7653 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /ajax/libs/jquery/1.7.2/jquery.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Content-Encoding: gzip Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT Date: Fri, 09 Nov 2012 20:33:45 GMT Expires: Sat, 09 Nov 2013 20:33:45 GMT X-Content-Type-Options: nosniff Server: sffe Content-Length: 73891 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 115803
GET /js/bust_out.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:43:48 GMT Last-Modified: Thu, 31 May 2012 19:49:34 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 04:43:48 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 57 Connection: close Server: MediaFire
GET /js/master_85677.js HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: text/javascript Last-Modified: Fri, 09 Nov 2012 23:25:30 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Server: MediaFire Content-Length: 143613 Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=337443849&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=1486896716&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.717482286.1352609028.1352609028.1352609028.1%3B%2B__utmz%3D213136648.1352609028.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 Host: www.google-analytics.com GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=337443849&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=1486896716&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.717482286.1352609028.1352609028.1352609028.1%3B%2B__utmz%3D213136648.1352609028.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 09 Nov 2012 21:05:24 GMT Content-Length: 35 X-Content-Type-Options: nosniff Pragma: no-cache Expires: Wed, 19 Apr 2000 11:43:00 GMT Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Age: 113905 Server: GFE/2.0
GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 Host: p.twitter.com GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: image/gif Etag: "377d257f2d2e294916143c069141c1c5:1328738114" Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT Accept-Ranges: bytes Content-Length: 43 Cache-Control: no-cache P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Date: Sun, 11 Nov 2012 04:43:49 GMT Connection: keep-alive
GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 Host: cdn.api.twitter.com GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Last-Modified: Sun, 11 Nov 2012 04:40:09 GMT Pragma: no-cache X-Frame-Options: SAMEORIGIN Status: 200 OK Content-Encoding: gzip Content-Length: 897 Server: tfe Vary: Accept-Encoding Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Expires: Sun, 11 Nov 2012 04:43:49 GMT Date: Sun, 11 Nov 2012 04:43:49 GMT Connection: keep-alive
GET /images/ad-loader.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:09:03 GMT Accept-Ranges: bytes Content-Length: 1786 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:49 GMT Connection: keep-alive
GET /recaptcha/api/js/recaptcha.js HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: application/x-javascript Expires: Sun, 11 Nov 2012 04:43:49 GMT Date: Sun, 11 Nov 2012 04:43:49 GMT Last-Modified: Tue, 12 Jun 2012 14:07:31 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 17531 Server: GSE Cache-Control: public, max-age=0 Age: 0
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1 Host: static.ak.fbcdn.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 Origin: http://www.facebook.com	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 29 Oct 2012 23:55:41 GMT X-Content-Type-Options: nosniff Content-Encoding: gzip X-FB-Debug: mERPLeHfP4bFbWVj/NJRwm2C8x1Lf8geAnYAfFf24WM= Content-Length: 37945 Vary: Accept-Encoding Cache-Control: public, max-age=31138154 Expires: Wed, 06 Nov 2013 14:13:03 GMT Date: Sun, 11 Nov 2012 04:43:49 GMT Connection: keep-alive
GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 Host: secure.gravatar.com GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx Date: Sun, 11 Nov 2012 04:43:49 GMT Content-Length: 906 Connection: keep-alive Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Access-Control-Allow-Origin: * Content-Disposition: inline; filename="00000000.png" X-Varnish: 2463689900 2461089695 Via: 1.1 varnish Expires: Sun, 11 Nov 2012 04:48:49 GMT Cache-Control: max-age=300
GET /templates/linkto/default-729x91-default.php?r=58189 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:43:49 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 666 Connection: close Server: MediaFire
GET /templates/linkto/default-337x281-default.php?r=57365 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:43:49 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 786 Connection: close Server: MediaFire
GET /templates/linkto/default-337x281-default2.php?r=68290 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:43:49 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 787 Connection: close Server: MediaFire
GET /recaptcha/api/img/red/text.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:08:44 GMT Date: Sun, 11 Nov 2012 04:08:44 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 155 Server: GSE Age: 2105 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/help.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:02:34 GMT Date: Sun, 11 Nov 2012 04:02:34 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 367 Server: GSE Age: 2475 Cache-Control: public, max-age=3600
GET /recaptcha/api/image?c=03AHJ_VusfoBMnkKk0ZLGy25A1rSZTnnY7f08oUr2a7AhoOu2tTjrMCRQJQ7pATDvSVtkBI0uU6Q_mfCkR_RdOacWrmeInlQtQgDDoCwcfJsBGdzNBxMTdbt2hjbWvQf1B-qpKJ6rEa4CjelWgOVLPsnmVLCJDsKYH7mfXmHiS49J7O0_oMBvXDaluDlwcjYWUbLE9KPKfszcP HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Sun, 11 Nov 2012 04:53:49 GMT Date: Sun, 11 Nov 2012 04:43:49 GMT Cache-Control: public, max-age=600 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 2973 Server: GSE
GET /templates/linkto/default-161x601-default.php?r=28074 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:43:50 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 733 Connection: close Server: MediaFire
GET /ad/3196.js?cb=0.7302018990555244 HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 04:43:51 GMT Date: Sun, 11 Nov 2012 04:43:51 GMT Connection: keep-alive
GET /recaptcha/api/img/red/refresh.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:10:57 GMT Date: Sun, 11 Nov 2012 04:10:57 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 974 Server: GSE Age: 1974 Cache-Control: public, max-age=3600
GET /ad/3196.js HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 04:43:51 GMT Date: Sun, 11 Nov 2012 04:43:51 GMT Connection: keep-alive
GET /helper_01.swf HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Date: Sun, 11 Nov 2012 04:43:51 GMT Last-Modified: Sat, 15 Oct 2011 19:43:58 GMT Accept-Ranges: bytes Content-Length: 1480 Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 04:43:51 GMT Connection: close Server: MediaFire
GET /a/3196/3346/9685-2.js?cb=0.12954192331223657&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-2.js?cb=0.12954192331223657&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:43:52 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592dbbdb509f2d0850cba8fe4efaa1^1^1352609032^1355524350; expires=Sat, 09-Feb-2013 04:43:52 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk2=0; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=10; path=/; domain=.rubiconproject.com ses2=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=98167; path=/; domain=.rubiconproject.com csi2=3204661.js^1^1352609032^1352609032; expires=Sun, 18-Nov-2012 04:43:52 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=82 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/9685-15.js?cb=0.6324754103845819&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-15.js?cb=0.6324754103845819&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:43:52 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db7f3509f2d0850cba8fe158456^1^1352609032^1355524350; expires=Sat, 09-Feb-2013 04:43:52 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=98167; path=/; domain=.rubiconproject.com csi15=3204663.js^1^1352609032^1352609032; expires=Sun, 18-Nov-2012 04:43:52 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=19 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/27309-15.js?cb=0.7623321629743535&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/27309-15.js?cb=0.7623321629743535&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:43:52 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592dc3b1509f2d0850cba8fe650aa2^1^1352609032^1355524350; expires=Sat, 09-Feb-2013 04:43:52 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=98167; path=/; domain=.rubiconproject.com csi15=3204663.js^1^1352609032^1352609032; expires=Sun, 18-Nov-2012 04:43:52 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=70 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/9685-9.js?cb=0.7466397518734763&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-9.js?cb=0.7466397518734763&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:43:52 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; expires=Sat, 09-Feb-2013 04:43:52 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk9=0; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=10; path=/; domain=.rubiconproject.com ses9=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=98167; path=/; domain=.rubiconproject.com csi9=3165520.js^1^1352609032^1352609032; expires=Sun, 18-Nov-2012 04:43:52 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=79 Connection: Keep-Alive Transfer-Encoding: chunked
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 Host: fpdownload2.macromedia.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/xml Server: Apache Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT Etag: "87de33-256-4cd617ed12480" Accept-Ranges: bytes Content-Length: 598 Date: Sun, 11 Nov 2012 04:43:52 GMT Connection: keep-alive
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:52 GMT Content-Length: 0
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:52 GMT Content-Length: 0
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:52 GMT Content-Length: 0
GET /view.aspx?poolid=12887&script=1&rnd=259753 HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&script=1&rnd=259753 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: /view.aspx?poolid=12887&script=1&rnd=259753&test=1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: USER_ID=%60%d6%05c%2b%1erF%83%5c%fc%dc%1f%b2%0d; domain=.server.cpmstar.com; expires=Thu, 11-Nov-2032 04:43:53 GMT; path=/ P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sun, 11 Nov 2012 04:43:52 GMT Content-Length: 185 Connection: Keep-alive Keep-Alive: timeout=15, max=100 Via: 1.1 ID-0001544140306215 uproxy-5
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:43:52 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:43:52 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwiNr8hAUQiNr8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 04:43:52 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; path=/; expires=Sat, 09-Feb-2013 04:43:52 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 04:43:52 GMT Content-Length: 1350
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:43:52 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:43:52 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwiNr8hAUQiNr8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 04:43:52 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; path=/; expires=Sat, 09-Feb-2013 04:43:52 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 04:43:52 GMT Content-Length: 1349
GET /recaptcha/api/img/red/audio.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:04:30 GMT Date: Sun, 11 Nov 2012 04:04:30 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 914 Server: GSE Age: 2362 Cache-Control: public, max-age=3600
GET /p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; sess=1; icu=ChIIlroHEAoYASABKAEwiNr8hAUQiNr8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/png Server: Apache Etag: "05c7006db8c87009c7ef4cebeac987fa:1350137588" Last-Modified: Sat, 13 Oct 2012 14:13:08 GMT Accept-Ranges: bytes Content-Length: 5202 Date: Sun, 11 Nov 2012 04:43:53 GMT Connection: keep-alive
GET /p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; sess=1; icu=ChIIlroHEAoYASABKAEwiNr8hAUQiNr8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/png Server: Apache Etag: "a9daeac0f83c5ce58b932bd0f829631f:1351039989" Last-Modified: Wed, 24 Oct 2012 00:53:09 GMT Accept-Ranges: bytes Content-Length: 5051 Date: Sun, 11 Nov 2012 04:43:53 GMT Connection: keep-alive
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 Host: tap2-cdn.rubiconproject.com GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Last-Modified: Sun, 11 Nov 2012 00:16:00 GMT Content-Encoding: gzip Cache-Control: max-age=600 Expires: Sun, 11 Nov 2012 04:53:53 GMT Date: Sun, 11 Nov 2012 04:43:53 GMT Content-Length: 5080 Connection: keep-alive Vary: Accept-Encoding
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 04:43:52 GMT Connection: close Content-Length: 381
GET /partner/scripts/rubicon/alice.js HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:56:23 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sun, 11 Nov 2012 05:43:53 GMT Date: Sun, 11 Nov 2012 04:43:53 GMT Content-Length: 5798 Connection: keep-alive Vary: Accept-Encoding
GET /cached/js/flashadv12.pack.js HTTP/1.1 Host: cdn3.cpmstar.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074	HTTP/1.1 200 OK Content-Type: application/x-javascript Cache-Control: max-age=259200 Accept-Ranges: bytes Server: Microsoft-IIS/7.5 P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Via: 1.1 ID-0001544140306215 uproxy-3 Content-Encoding: gzip Vary: Accept-Encoding Age: 92792 Date: Sun, 11 Nov 2012 04:43:53 GMT Last-Modified: Fri, 26 Oct 2012 02:43:57 GMT Expires: Tue, 13 Nov 2012 02:57:21 GMT Content-Length: 876 Connection: close
GET /erb HTTP/1.1 Host: px.owneriq.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/html Server: Apache/2.2.3 (CentOS) Content-Length: 153 Location: http://px.owneriq.net/fr/epx.gif X-Powered-By: PHP/5.2.17 P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Vary: Accept-Encoding Cache-Control: max-age=77320 Date: Sun, 11 Nov 2012 04:43:53 GMT Connection: keep-alive
GET /images/pixel.gif HTTP/1.1 Host: spe.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Allow: GET Expires: Mon, 12 Nov 2012 19:08:30 GMT Date: Sun, 11 Nov 2012 04:43:53 GMT Connection: keep-alive
GET /pixel/p-e4m3Yko6bFYVc.gif?idmatch=0 HTTP/1.1 Host: pixel.quantserve.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Connection: close Set-Cookie: mc=509f2d09-5dec3-64a56-c2200; expires=Tue, 13-May-2014 04:43:53 GMT; path=/; domain=.quantserve.com P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Cache-Control: private, no-cache, no-store, proxy-revalidate Pragma: no-cache Expires: Fri, 04 Aug 1978 12:00:00 GMT Content-Length: 35 Date: Sun, 11 Nov 2012 04:43:53 GMT Server: QS
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; sess=1; icu=ChIIlroHEAoYASABKAEwiNr8hAUQiNr8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:43:53 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:43:53 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; path=/; expires=Sat, 09-Feb-2013 04:43:53 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 04:43:53 GMT
GET /pixel?google_nid=rubicon&google_cm&google_sc HTTP/1.1 Host: cm.g.doubleclick.net GET /pixel?google_nid=rubicon&google_cm&google_sc HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: http://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&put=CAESEOQbgGCszNKKg2Z3HuFXD_0&google_cver=1 Date: Sun, 11 Nov 2012 04:43:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Server: Cookie Matcher Content-Length: 325 X-XSS-Protection: 1; mode=block
GET /int/integration?pixel=303852&nid=302660 HTTP/1.1 Host: i.ctnsnet.com GET /int/integration?pixel=303852&nid=302660 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_fe6580bb02f9467a9f153f120471f448=1; path=/; domain=.ctnsnet.com; expires=Mon, 11-Nov-2013 04:43:53 GMT; px=AAAEouxQxroJ; path=/; domain=.ctnsnet.com; expires=Mon, 11-Mar-2013 04:43:53 GMT; pb=AAAEowJQxroJ; path=/; domain=.ctnsnet.com; expires=Thu, 10-Jan-2013 04:43:53 GMT; opt=0; path=/; domain=.ctnsnet.com; expires=Mon, 11-Nov-2013 04:43:53 GMT; Pragma: no-cache Cache-Control: private, no-cache, no-store, max-age=0 Location: http://pixel.rubiconproject.com/tap.php?v=14965&nid=2731&put=fe6580bb02f9467a9f153f120471f448&expires=30 Content-Length: 0 Date: Sun, 11 Nov 2012 04:43:53 GMT Connection: close
GET /sync/img?mt_exid=9 HTTP/1.1 Host: sync.mathtag.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:53 GMT Content-Length: 0 Connection: keep-alive Server: mt2/2.6.2.2465 Sep 24 2012 22:21:34 zrh-pixel-x4 pid 0x1e8d 7821 Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: uuid=509f2d09-6d02-ce8a-5877-ce029cab6127; domain=.mathtag.com; path=/; expires=Mon, 11-Nov-2013 04:43:53 GMT Location: http://sync.mathtag.com/sync/img?mt_exid=9&mm_bnc
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 04:43:52 GMT Connection: close Content-Length: 381
GET /match?p=2 HTTP/1.1 Host: match.rtbidder.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain Server: rtbidder Date: Sun, 11 Nov 2012 04:43:53 GMT Content-Length: 277 P3P: policyref="http://match.rtbidder.net/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIo PSAo PSDo IVAo IVDo CONo HISa TELo OUR STP" Pragma: no-cache Set-Cookie: bsuid=%3EsO%40K%2FN9B9rVyLY; path=/; domain=.rtbidder.net; expires=Sat, 09-Feb-2013 04:43:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-store, no-cache Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: http://pixel.rubiconproject.com/tap.php?v=5157&nid=2021&put=509f2d0923bc41f3ee4bc38b
GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 Host: m.xp1.ru4.com GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Sun-Java-System-Web-Server/7.0 Date: Sun, 11 Nov 2012 04:43:53 GMT P3P: policyref="/w3c/p3p.xml", CP="NON DSP COR PSAa OUR STP UNI" Pragma: no-cache Set-Cookie: X1ID=NC-00000002692159499; domain=.ru4.com; path=/; expires=Sat, 10-May-2014 23:43:53 GMT Location: http://pixel.rubiconproject.com/tap.php?v=5671&nid=2081&put=NC-00000002692159499&expires=30 Content-Length: 0
GET /ping_match.gif?ei=RUBICON&rurl=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4210%26nid%3D1523%26put%3D_wfivefivec_%26expires%3D10 HTTP/1.1 Host: i.w55c.net GET /ping_match.gif?ei=RUBICON&rurl=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4210%26nid%3D1523%26put%3D_wfivefivec_%26expires%3D10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found HTTP/1.1 302 Found Date: Sun, 11 Nov 2012 04:43:53 GMT Server: Jetty(6.1.22) Set-Cookie: wfivefivec=b3fbe3a5-bacf-4578-9d3f-2322f0580a04;Path=/;Domain=.w55c.net;Expires=Tue, 11-Nov-14 04:43:53 GMT X-Version: DataXu Pixel Tracker v3.3 20120918 Cache-Control: private P3P: policyref="https://cts.w55c.net/ct/p3p_policy_ref.xml", CP="UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI" Content-Length: 0 Location: http://pixel.rubiconproject.com/tap.php?v=4210&nid=1523&put=b3fbe3a5-bacf-4578-9d3f-2322f0580a04&expires=10 Via: 1.1 lhr061010 (MII-APC/2.2) Keep-Alive: timeout=2 Connection: Keep-Alive
GET /tap.php?v=7751&nid=2249&expires=30&put=CAESEOQbgGCszNKKg2Z3HuFXD_0&google_cver=1 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7751&nid=2249&expires=30&put=CAESEOQbgGCszNKKg2Z3HuFXD_0&google_cver=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:53 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267751%3D1; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267751%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.pixel.rubiconproject.com put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9890 Connection: Keep-Alive
GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 Host: user.lucidmedia.com GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Apache-Coyote/1.1 Cache-Control: no-cache, no-store Pragma: no-cache Date: Sun, 11 Nov 2012 04:43:53 GMT Expires: Sun, 11 Nov 2012 04:43:53 GMT P3P: CP="NOI ADM DEV CUR" X-Handled-By: awswrh08/127.0.0.1 Set-Cookie: lm_userid=3fhlytIEhYI; Domain=.lucidmedia.com; Expires=Mon, 11-Nov-2013 04:43:53 GMT; Path=/ Location: http://pixel.rubiconproject.com/tap.php?v=7206&nid=1197&put=4246269850110056724&expires=30 Content-Length: 0 Connection: close
GET /tap.php?v=14965&nid=2731&put=fe6580bb02f9467a9f153f120471f448&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=14965&nid=2731&put=fe6580bb02f9467a9f153f120471f448&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:53 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%2614965%3D1; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2614965%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.pixel.rubiconproject.com put_2731=fe6580bb02f9467a9f153f120471f448; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9721 Connection: Keep-Alive
GET /cached/creatives/203392/Kone-Pure_Banner_160x600_clicktag.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d82398%26creativeid%3d203392%26url%3d HTTP/1.1 Host: cdn3.cpmstar.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Cache-Control: public Server: Microsoft-IIS/7.5 Content-Disposition: inline;filename=203392_Kone-Pure_Banner_160x600_clicktag.swf X-AspNet-Version: 2.0.50727 P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Via: 1.1 ID-0001544140306215 uproxy-5 Age: 26039 Date: Sun, 11 Nov 2012 04:43:53 GMT Expires: Sun, 11 Nov 2012 21:29:55 GMT Content-Length: 66961 Connection: close
GET /tap.php?v=5671&nid=2081&put=NC-00000002692159499&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5671&nid=2081&put=NC-00000002692159499&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:53 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%265671%3D1; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.pixel.rubiconproject.com put_2081=NC-00000002692159499; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9591 Connection: Keep-Alive
GET /beacon.js HTTP/1.1 Host: b.scorecardresearch.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365	HTTP/1.1 200 OK Content-Type: application/x-javascript Vary: Accept-Encoding Content-Encoding: gzip Expires: Sun, 25 Nov 2012 04:43:56 GMT Date: Sun, 11 Nov 2012 04:43:56 GMT Content-Length: 1140 Connection: keep-alive Cache-Control: private, no-transform, max-age=1209600
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:43:55 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:43:55 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwi9r8hAUQi9r8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 04:43:55 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; path=/; expires=Sat, 09-Feb-2013 04:43:55 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 04:43:55 GMT Content-Length: 6638
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; sess=1; icu=ChIIlroHEAoYASABKAEwiNr8hAUQiNr8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:43:56 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:43:56 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; path=/; expires=Sat, 09-Feb-2013 04:43:56 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 04:43:56 GMT
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352609036028&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352609036028&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036028&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Set-Cookie: UID=4cc827f-195.159.219.8-1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com UIDR=1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /sync/img?mt_exid=9&mm_bnc HTTP/1.1 Host: sync.mathtag.com GET /sync/img?mt_exid=9&mm_bnc HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: uuid=509f2d09-6d02-ce8a-5877-ce029cab6127	HTTP/1.1 302 Found Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:56 GMT Content-Length: 0 Connection: keep-alive Server: mt2/2.6.2.2465 Sep 24 2012 22:21:34 zrh-pixel-x4 pid 0x1e8d 7821 Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: mt_mop=9:1352609036; domain=.mathtag.com; path=/; expires=Tue, 11-Dec-2012 04:43:56 GMT Location: http://pixel.rubiconproject.com/tap.php?v=4222&nid=1512&put=509f2d09-6d02-ce8a-5877-ce029cab6127
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036060&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036060&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036060&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Set-Cookie: UID=4cc8284-195.159.219.8-1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com UIDR=1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036029&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036029&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036029&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Set-Cookie: UID=4cc828b-195.159.219.8-1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com UIDR=1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352609036033&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352609036033&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036033&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Set-Cookie: UID=4cc8288-195.159.219.8-1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com UIDR=1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352609036039&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D28074&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352609036039&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D28074&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352609036039&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D28074&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Set-Cookie: UID=4cc8289-195.159.219.8-1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com UIDR=1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /tap.php?v=7206&nid=1197&put=4246269850110056724&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7206&nid=1197&put=4246269850110056724&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%267751%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%267751%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:56 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267751%3D1%267206%3D1; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267751%3D25076%2C0%2C1%2C%2C%267206%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.pixel.rubiconproject.com put_1197=4246269850110056724; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8871 Connection: Keep-Alive
GET /p/f7/e2/9a/75/f7e29a750a6e90386fb44988cda11ee3.swf?clickTAG=http%3A%2F%2Fib.adnxs.com%2Fclick%3FAAAAAAAAAAAAAAAAAAAAAAAAAEAzM8M_AAAAAAAAAAAAAAAAAAAAAA3kSMePBXEjoArzhH1cTlELLZ9QAAAAAHZYCwAdAgAAHQIAAAIAAAC1zCkAKkACAAAAAQBVU0QAVVNEACwB-gBNUQAAP1AAAgMCAQUAAIIAfBGAQgAAAAA.%2Fcnd%3D%2521MgUQMAjgth4QtZmnARiqgAkgBA..%2Freferrer%3Dhttp%253A%252F%252Fwww.mediafire.com%252F%253F4p5wab4oqodaj44%2Fclickenc%3Dhttp%253A%252F%252Fno.balagana.net%252Fpages%252Fno_NO%252Flovetest%252F%253FAFID%253D220843%2526AFCID%253Dams1CKCVzKfYj5enURACGI3Io7r8scG4IyIOODAuMjAzLjE2OC4yNTQoAQ.. HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; sess=1; icu=ChIIlroHEAoYASABKAEwi9r8hAUQi9r8hAUYAA..	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Server: Apache Etag: "f7e29a750a6e90386fb44988cda11ee3:1344892808" Last-Modified: Mon, 13 Aug 2012 21:20:08 GMT Accept-Ranges: bytes Content-Length: 20114 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036060&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036060&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290 Cookie: UID=4cc8284-195.159.219.8-1352609036; UIDR=1352609036	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036029&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036029&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: UID=4cc828b-195.159.219.8-1352609036; UIDR=1352609036	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 04:43:55 GMT Connection: close Content-Length: 381
GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036033&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036033&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189 Cookie: UID=4cc8288-195.159.219.8-1352609036; UIDR=1352609036	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /match?mrbyus=true&excid=17 HTTP/1.1 Host: rubicon.admailtiser.com GET /match?mrbyus=true&excid=17 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: nginx/1.1.1 Date: Sun, 11 Nov 2012 04:43:56 GMT Content-Length: 0 Connection: keep-alive P3P: policyref="http://admailtiser.com/w3c/p3p.xml", CP="NOI IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA NOR UNI" Set-Cookie: cicouid=7e56eb2d-70a5-4d17-8f23-7d8f5f9a202fN6hromoNVAvjkhl9Atu2bw; Domain=.admailtiser.com; Expires=Mon, 11-Nov-2013 04:43:56 GMT; Path=/ Location: http://pixel.rubiconproject.com/tap.php?v=12224&nid=2530&put=-5807033824700871516&expires=365
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352609036039&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D28074&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352609036039&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D28074&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074 Cookie: UID=4cc8289-195.159.219.8-1352609036; UIDR=1352609036	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /tap.php?v=4222&nid=1512&put=509f2d09-6d02-ce8a-5877-ce029cab6127 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=4222&nid=1512&put=509f2d09-6d02-ce8a-5877-ce029cab6127 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%265671%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; put_2731=fe6580bb02f9467a9f153f120471f448; put_2081=NC-00000002692159499	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:56 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%265671%3D1%264222%3D1; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.pixel.rubiconproject.com put_1512=509f2d09-6d02-ce8a-5877-ce029cab6127; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9327 Connection: Keep-Alive
GET /fr/epx.gif HTTP/1.1 Host: px.owneriq.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache/2.2.3 (CentOS) Content-Length: 43 X-Powered-By: PHP/5.2.17 P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Cache-Control: max-age=84479 Expires: Mon, 12 Nov 2012 04:11:55 GMT Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive
GET /orbserv/hbpix?pixId=4857 HTTP/1.1 Host: map.media6degrees.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:56 GMT Server: Apache/2.2.3 (CentOS) Last-Modified: Tue, 16 Dec 2008 21:07:52 GMT Etag: "d015d-2b-45e305a397a00" Accept-Ranges: bytes Content-Length: 43 Connection: close
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; sess=1; icu=ChIIlroHEAoYASABKAEwi9r8hAUQi9r8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:43:56 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:43:56 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; path=/; expires=Sat, 09-Feb-2013 04:43:56 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 04:43:56 GMT
GET /tap.php?v=12224&nid=2530&put=-5807033824700871516&expires=365 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=12224&nid=2530&put=-5807033824700871516&expires=365 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%267751%3D1%267206%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%267751%3D25076%2C0%2C1%2C%2C%267206%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; put_2731=fe6580bb02f9467a9f153f120471f448; put_2081=NC-00000002692159499; put_1197=4246269850110056724	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:56 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267751%3D1%267206%3D1%2612224%3D1; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267751%3D25076%2C0%2C1%2C%2C%267206%3D25076%2C0%2C1%2C%2C%2612224%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.pixel.rubiconproject.com put_2530=-5807033824700871516; expires=Mon, 11-Nov-2013 04:43:56 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9385 Connection: Keep-Alive
GET /c/cse?a=Q&B=17 HTTP/1.1 Host: connexity.net GET /c/cse?a=Q&B=17 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Connexity Transfer-Encoding: chunked Connection: keep-alive Date: Sun, 11 Nov 2012 04:43:56 GMT Cache-Control: no-store, max-age=-1, post-check=0, pre-check=0 Pragma: no-cache Expires: -1 P3P: policyref="/w3c/p3p.xml", CP="CAO PSA OUR CURa DEVa PSDo PSAo BUS COR UNI COM",an.pp="http://www.connexity.com/privacy",an.oo="http://www.connexity.com/privacy",an.bt="N" Set-Cookie: COu=e97b36569937c179-064a296081fd2f47-2175fb3ddab22591; expires=Fri, 10-Nov-2017 04:43:56 GMT; domain=.connexity.net; path=/ Content-Transfer-Encoding: binary
GET /tap.php?v=4210&nid=1523&put=b3fbe3a5-bacf-4578-9d3f-2322f0580a04&expires=10 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=4210&nid=1523&put=b3fbe3a5-bacf-4578-9d3f-2322f0580a04&expires=10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:56 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264210%3D1; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264210%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.pixel.rubiconproject.com put_1523=b3fbe3a5-bacf-4578-9d3f-2322f0580a04; expires=Wed, 21-Nov-2012 04:43:56 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8779 Connection: Keep-Alive
GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036028&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036028&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: UID=4cc827f-195.159.219.8-1352609036; UIDR=1352609036	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:43:58 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /partner/scripts/rubicon/page_parser.js?d=www.mediafire.com HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074 Cookie: rpb=14240%3D1%264210%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; put_2731=fe6580bb02f9467a9f153f120471f448; put_2081=NC-00000002692159499; put_1197=4246269850110056724; put_1512=509f2d09-6d02-ce8a-5877-ce029cab6127; put_2530=-5807033824700871516; put_1523=b3fbe3a5-bacf-4578-9d3f-2322f0580a04	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:56:39 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sun, 11 Nov 2012 05:43:59 GMT Date: Sun, 11 Nov 2012 04:43:59 GMT Content-Length: 5705 Connection: keep-alive Vary: Accept-Encoding
GET /m/rc HTTP/1.1 Host: rc.d.chango.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 35 Server: RTB Etag: "0f4e929dd5bb2564f7ab9c76338e04e292a42ace" Pragma: no-cache Cache-Control: no-cache, no-store, max-age=0, must-revalidate P3P: policyref="http://as.chango.com/static/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: _t=68b6e5fe-2bba-11e2-b34c-0025900cda70; Domain=chango.com; expires=Wed, 09 Nov 2022 04:43:59 GMT; Path=/ Connection: close
GET /tap.php?v=5157&nid=2021&put=509f2d0923bc41f3ee4bc38b HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5157&nid=2021&put=509f2d0923bc41f3ee4bc38b HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:44:02 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%265157%3D1; expires=Tue, 11-Dec-2012 04:44:02 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265157%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:44:02 GMT; path=/; domain=.pixel.rubiconproject.com put_2021=509f2d0923bc41f3ee4bc38b; expires=Tue, 11-Dec-2012 04:44:02 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9832 Connection: Keep-Alive
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352609036036&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352609036036&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352609036036&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:44:05 GMT Connection: keep-alive Set-Cookie: UID=4cc8349-195.159.219.8-1352609045; expires=Sat, 01-Nov-2014 04:44:05 GMT; path=/; domain=.scorecardresearch.com UIDR=1352609045; expires=Sat, 01-Nov-2014 04:44:05 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352609036049&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352609036049&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036049&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:44:05 GMT Connection: keep-alive Set-Cookie: UID=4cc832c-195.159.219.8-1352609045; expires=Sat, 01-Nov-2014 04:44:05 GMT; path=/; domain=.scorecardresearch.com UIDR=1352609045; expires=Sat, 01-Nov-2014 04:44:05 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352609036036&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352609036036&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189 Cookie: UID=4cc8349-195.159.219.8-1352609045; UIDR=1352609045	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:44:05 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036049&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036049&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290 Cookie: UID=4cc832c-195.159.219.8-1352609045; UIDR=1352609045	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:44:05 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /oz/feeds/invite-media-rtb/tokens/?rt=iframe HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%265671%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; put_2731=fe6580bb02f9467a9f153f120471f448; put_2081=NC-00000002692159499	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 04:44:05 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=090b229d420dc7aa6d143bfd12791158cb008570&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 04:44:05 GMT; Path=/ au=H9DOI32X-9Z5E-10.74.91.2; Domain=.rubiconproject.com; Expires=Mon, 09-Nov-2020 04:44:05 GMT; Path=/ dq=1\|1\|0\|0; Expires=Mon, 11-Nov-2013 04:44:05 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 04:44:05 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=127 Connection: Keep-Alive
GET /rubicon_sync?publisher_user_id=090b229d420dc7aa6d143bfd12791158cb008570&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 Host: pixel.invitemedia.com GET /rubicon_sync?publisher_user_id=090b229d420dc7aa6d143bfd12791158cb008570&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: text/html Date: Sun, 11 Nov 2012 04:44:05 GMT Set-Cookie: uid=b8c28885-61ff-4617-85ae-b6a413df9fe6;Path=/;Domain=invitemedia.com;Expires=Mon, 11-Nov-2013 04:44:05 GMT impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC" Cache-Control: no-cache Content-Length: 221 Connection: close Server: Jetty(7.3.1.v20110307)
GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353041045&publisher_dsp_id=2101&external_user_id=b8c28885-61ff-4617-85ae-b6a413df9fe6 HTTP/1.1 Host: tap.rubiconproject.com GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353041045&publisher_dsp_id=2101&external_user_id=b8c28885-61ff-4617-85ae-b6a413df9fe6 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=090b229d420dc7aa6d143bfd12791158cb008570&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%265157%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; put_2731=fe6580bb02f9467a9f153f120471f448; put_2081=NC-00000002692159499; put_1197=4246269850110056724; put_1512=509f2d09-6d02-ce8a-5877-ce029cab6127; put_2530=-5807033824700871516; put_1523=b3fbe3a5-bacf-4578-9d3f-2322f0580a04; put_2021=509f2d0923bc41f3ee4bc38b; cd=false; au=H9DOI32X-9Z5E-10.74.91.2; dq=1\|1\|0\|0; lm="11 Nov 2012 04:44:05 GMT"	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 04:44:08 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.rubiconproject.com/tap.php?v=5852&nid=2101&put=b8c28885-61ff-4617-85ae-b6a413df9fe6 Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 04:44:08 GMT; Path=/ dq=2\|2\|0\|0; Expires=Mon, 11-Nov-2013 04:44:08 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 04:44:08 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=119 Connection: Keep-Alive
GET /js/encoder.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:44:09 GMT Last-Modified: Thu, 05 Jan 2012 22:41:54 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 04:44:09 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3695 Connection: close Server: MediaFire
GET /images/backgrounds/footer/footer_texture.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 20:31:25 GMT Accept-Ranges: bytes Content-Length: 2649 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:44:09 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_blog.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 171 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:44:09 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_gp.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 29 Aug 2012 21:02:04 GMT Accept-Ranges: bytes Content-Length: 312 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:44:09 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_tw.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 274 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:44:09 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_fb.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 514 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:44:09 GMT Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateFB_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 255 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:44:09 GMT Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateTW_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 387 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:44:09 GMT Connection: keep-alive
GET /recaptcha/api/img/red/sprite.png HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/png Expires: Sun, 11 Nov 2012 05:18:14 GMT Date: Sun, 11 Nov 2012 04:18:14 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 4679 Server: GSE Age: 1556 Cache-Control: public, max-age=3600
GET /static/fonts/opensans/v6/k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM.woff HTTP/1.1 Host: themes.googleusercontent.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://fonts.googleapis.com/css?family=Open+Sans:800,400,700 Origin: http://www.mediafire.com	HTTP/1.1 200 OK Content-Type: font/woff Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT Date: Fri, 09 Nov 2012 20:33:30 GMT Expires: Sat, 09 Nov 2013 20:33:30 GMT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: sffe Content-Length: 22748 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 115840
GET /en_US/all.js?_=1352609049823 HTTP/1.1 Host: connect.facebook.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Etag: "06c9a8ca347f3538149da85e21e875b7" Content-Encoding: gzip X-FB-Debug: bOhidNEX691D1KXgZ3OPQbrJCdhO/rblt9a7wt/8LvA= Content-Length: 58142 Cache-Control: public, max-age=804 Expires: Sun, 11 Nov 2012 04:57:34 GMT Date: Sun, 11 Nov 2012 04:44:10 GMT Connection: keep-alive Vary: Accept-Encoding
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: QpUXNDPC4a/ZS9XMuzc2WDBWEZ8S2oHPsfImau8uouU= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31445581 Expires: Sun, 10 Nov 2013 03:37:11 GMT Date: Sun, 11 Nov 2012 04:44:10 GMT Connection: keep-alive
GET /tap.php?v=5852&nid=2101&put=b8c28885-61ff-4617-85ae-b6a413df9fe6 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5852&nid=2101&put=b8c28885-61ff-4617-85ae-b6a413df9fe6 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=090b229d420dc7aa6d143bfd12791158cb008570&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%265157%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%265157%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; put_2731=fe6580bb02f9467a9f153f120471f448; put_2081=NC-00000002692159499; put_1197=4246269850110056724; put_1512=509f2d09-6d02-ce8a-5877-ce029cab6127; put_2530=-5807033824700871516; put_1523=b3fbe3a5-bacf-4578-9d3f-2322f0580a04; put_2021=509f2d0923bc41f3ee4bc38b; cd=false; au=H9DOI32X-9Z5E-10.74.91.2; lm="11 Nov 2012 04:44:08 GMT"	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:44:11 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%265157%3D1%265852%3D1; expires=Tue, 11-Dec-2012 04:44:11 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265157%3D25076%2C0%2C1%2C%2C%265852%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:44:11 GMT; path=/; domain=.pixel.rubiconproject.com put_2101=b8c28885-61ff-4617-85ae-b6a413df9fe6; expires=Tue, 11-Dec-2012 04:44:11 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8123 Connection: Keep-Alive
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: s-static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: JS4qOSg1Dl3AgVtg3MyBP4whcr8SZapA/Vud9cBlDwY= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31445490 Expires: Sun, 10 Nov 2013 03:35:41 GMT Date: Sun, 11 Nov 2012 04:44:11 GMT Connection: keep-alive
GET /ex4maeatm3jg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe HTTP/1.1 Host: 199.91.153.27 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 302 Found HTTP/1.1 302 Found Location: http://www.mediafire.com/?4p5wab4oqodaj44 Connection: Close
GET /view.aspx?poolid=12887&script=1&rnd=259753&test=1 HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&script=1&rnd=259753&test=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074 Cookie: USER_ID=%60%d6%05c%2b%1erF%83%5c%fc%dc%1f%b2%0d	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: n15=0,12887,82398,203392,1352609031,0; domain=.server.cpmstar.com; expires=Tue, 11-Dec-2012 04:43:51 GMT; path=/ sm=t=1352522691; domain=.server.cpmstar.com; expires=Mon, 12-Nov-2012 04:43:51 GMT; path=/ P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sun, 11 Nov 2012 04:43:51 GMT Connection: close Via: 1.1 ID-0001544140306215 uproxy-5
GET /cfcm.ashx?providerId=1007&extMatch=1 HTTP/1.1 Host: extmap.rub.ace.advertising.com GET /cfcm.ashx?providerId=1007&extMatch=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
GET /cm?in=1&pub=64 HTTP/1.1 Host: p.rfihub.com GET /cm?in=1&pub=64 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no

Request	Response
GET /css/mfv3_85677.php?ver=nonssl HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 37605 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:44 GMT Connection: keep-alive
GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 Host: cdn.mediafire.com GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 52116 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:44 GMT Connection: keep-alive
GET /?4p5wab4oqodaj44 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:43:44 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: 0 Set-Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; expires=Sun, 12-Oct-2014 04:43:44 GMT; path=/; domain=.mediafire.com; httponly Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 17013 Connection: close Server: MediaFire
GET /images/favicon/download.ico HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Date: Sun, 11 Nov 2012 04:43:45 GMT Last-Modified: Thu, 25 Oct 2012 21:59:32 GMT Accept-Ranges: bytes Content-Length: 1150 Connection: close Server: MediaFire
POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 106 Content-Type: application/ocsp-request	HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 11 Nov 2012 04:43:46 GMT Server: Apache Content-Transfer-Encoding: Binary Cache-Control: max-age=18197, public, no-transform, must-revalidate Last-Modified: Sun, 11 Nov 2012 04:03:01 GMT Expires: Sun, 11 Nov 2012 10:03:01 GMT Etag: "fcadc9fc23bc1c68280a39b450b6929371c8cac7" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" Content-Length: 1923 Connection: close
GET /css?family=Open+Sans:800,400,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/css Expires: Sun, 11 Nov 2012 04:43:48 GMT Date: Sun, 11 Nov 2012 04:43:48 GMT Cache-Control: private, max-age=86400 Content-Encoding: gzip Content-Length: 318 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE
GET /blank.html HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Last-Modified: Tue, 18 Sep 2012 21:44:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 78 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /images/icons/ajax-loader-grey_round.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 1775 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /images/logos/logo_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 16 Jul 2012 19:28:31 GMT Accept-Ranges: bytes Content-Length: 3708 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 2315 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_allowemail.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 941 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /images/buttons/btn_twitter_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 1799 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /images/icons/dropdown-arrow-left-white.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 123 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /ga.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 14888 Content-Encoding: gzip Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT X-Content-Type-Options: nosniff, nosniff Date: Sat, 10 Nov 2012 20:33:27 GMT Expires: Sun, 11 Nov 2012 08:33:27 GMT Vary: Accept-Encoding Age: 29421 Cache-Control: max-age=43200, public Server: GFE/2.0
GET /images/icons/information_darkblue.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 722 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /images/icons/icon-sprite-16-v3.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 02 Oct 2012 17:01:27 GMT Accept-Ranges: bytes Content-Length: 61715 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 Host: www.facebook.com GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 Content-Encoding: gzip X-FB-Debug: iMSGRha8EQThVpM2kxfMGQyftAQQHnpc7Dt1JVcMfFU= Date: Sun, 11 Nov 2012 04:43:48 GMT Transfer-Encoding: chunked Connection: keep-alive
GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 Host: platform.twitter.com GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: public, max-age=1800 Last-Modified: Thu, 08 Nov 2012 09:18:41 GMT Etag: "567a94a4e136d5c4b7bfde258474cfa6" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 25717 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
GET /recaptcha/api/challenge?k=6LextQUAAAAAALlQv0DSHOYxqF3DftRZxA5yebEe HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Date: Sun, 11 Nov 2012 04:43:48 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 464 Server: GSE
GET /images/backgrounds/download/rockmelt/rockmelt_dl_btn.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:44 GMT Accept-Ranges: bytes Content-Length: 7653 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /ajax/libs/jquery/1.7.2/jquery.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Content-Encoding: gzip Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT Date: Fri, 09 Nov 2012 20:33:45 GMT Expires: Sat, 09 Nov 2013 20:33:45 GMT X-Content-Type-Options: nosniff Server: sffe Content-Length: 73891 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 115803
GET /js/bust_out.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:43:48 GMT Last-Modified: Thu, 31 May 2012 19:49:34 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 04:43:48 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 57 Connection: close Server: MediaFire
GET /js/master_85677.js HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: text/javascript Last-Modified: Fri, 09 Nov 2012 23:25:30 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Server: MediaFire Content-Length: 143613 Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:48 GMT Connection: keep-alive
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=337443849&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=1486896716&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.717482286.1352609028.1352609028.1352609028.1%3B%2B__utmz%3D213136648.1352609028.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 Host: www.google-analytics.com GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=337443849&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=1486896716&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.717482286.1352609028.1352609028.1352609028.1%3B%2B__utmz%3D213136648.1352609028.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 09 Nov 2012 21:05:24 GMT Content-Length: 35 X-Content-Type-Options: nosniff Pragma: no-cache Expires: Wed, 19 Apr 2000 11:43:00 GMT Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Age: 113905 Server: GFE/2.0
GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 Host: p.twitter.com GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: image/gif Etag: "377d257f2d2e294916143c069141c1c5:1328738114" Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT Accept-Ranges: bytes Content-Length: 43 Cache-Control: no-cache P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Date: Sun, 11 Nov 2012 04:43:49 GMT Connection: keep-alive
GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 Host: cdn.api.twitter.com GET /1/users/show.json?screen_name=MediaFire&callback=twttr.setFollowersCount HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Last-Modified: Sun, 11 Nov 2012 04:40:09 GMT Pragma: no-cache X-Frame-Options: SAMEORIGIN Status: 200 OK Content-Encoding: gzip Content-Length: 897 Server: tfe Vary: Accept-Encoding Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Expires: Sun, 11 Nov 2012 04:43:49 GMT Date: Sun, 11 Nov 2012 04:43:49 GMT Connection: keep-alive
GET /images/ad-loader.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:09:03 GMT Accept-Ranges: bytes Content-Length: 1786 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:43:49 GMT Connection: keep-alive
GET /recaptcha/api/js/recaptcha.js HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: application/x-javascript Expires: Sun, 11 Nov 2012 04:43:49 GMT Date: Sun, 11 Nov 2012 04:43:49 GMT Last-Modified: Tue, 12 Jun 2012 14:07:31 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 17531 Server: GSE Cache-Control: public, max-age=0 Age: 0
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1 Host: static.ak.fbcdn.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 Origin: http://www.facebook.com	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 29 Oct 2012 23:55:41 GMT X-Content-Type-Options: nosniff Content-Encoding: gzip X-FB-Debug: mERPLeHfP4bFbWVj/NJRwm2C8x1Lf8geAnYAfFf24WM= Content-Length: 37945 Vary: Accept-Encoding Cache-Control: public, max-age=31138154 Expires: Wed, 06 Nov 2013 14:13:03 GMT Date: Sun, 11 Nov 2012 04:43:49 GMT Connection: keep-alive
GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 Host: secure.gravatar.com GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx Date: Sun, 11 Nov 2012 04:43:49 GMT Content-Length: 906 Connection: keep-alive Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Access-Control-Allow-Origin: * Content-Disposition: inline; filename="00000000.png" X-Varnish: 2463689900 2461089695 Via: 1.1 varnish Expires: Sun, 11 Nov 2012 04:48:49 GMT Cache-Control: max-age=300
GET /templates/linkto/default-729x91-default.php?r=58189 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:43:49 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 666 Connection: close Server: MediaFire
GET /templates/linkto/default-337x281-default.php?r=57365 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:43:49 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 786 Connection: close Server: MediaFire
GET /templates/linkto/default-337x281-default2.php?r=68290 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:43:49 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 787 Connection: close Server: MediaFire
GET /recaptcha/api/img/red/text.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:08:44 GMT Date: Sun, 11 Nov 2012 04:08:44 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 155 Server: GSE Age: 2105 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/help.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:02:34 GMT Date: Sun, 11 Nov 2012 04:02:34 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 367 Server: GSE Age: 2475 Cache-Control: public, max-age=3600
GET /recaptcha/api/image?c=03AHJ_VusfoBMnkKk0ZLGy25A1rSZTnnY7f08oUr2a7AhoOu2tTjrMCRQJQ7pATDvSVtkBI0uU6Q_mfCkR_RdOacWrmeInlQtQgDDoCwcfJsBGdzNBxMTdbt2hjbWvQf1B-qpKJ6rEa4CjelWgOVLPsnmVLCJDsKYH7mfXmHiS49J7O0_oMBvXDaluDlwcjYWUbLE9KPKfszcP HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Sun, 11 Nov 2012 04:53:49 GMT Date: Sun, 11 Nov 2012 04:43:49 GMT Cache-Control: public, max-age=600 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 2973 Server: GSE
GET /templates/linkto/default-161x601-default.php?r=28074 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 04:43:50 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 733 Connection: close Server: MediaFire
GET /ad/3196.js?cb=0.7302018990555244 HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 04:43:51 GMT Date: Sun, 11 Nov 2012 04:43:51 GMT Connection: keep-alive
GET /recaptcha/api/img/red/refresh.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:10:57 GMT Date: Sun, 11 Nov 2012 04:10:57 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 974 Server: GSE Age: 1974 Cache-Control: public, max-age=3600
GET /ad/3196.js HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 04:43:51 GMT Date: Sun, 11 Nov 2012 04:43:51 GMT Connection: keep-alive
GET /helper_01.swf HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Date: Sun, 11 Nov 2012 04:43:51 GMT Last-Modified: Sat, 15 Oct 2011 19:43:58 GMT Accept-Ranges: bytes Content-Length: 1480 Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 04:43:51 GMT Connection: close Server: MediaFire
GET /a/3196/3346/9685-2.js?cb=0.12954192331223657&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-2.js?cb=0.12954192331223657&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:43:52 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592dbbdb509f2d0850cba8fe4efaa1^1^1352609032^1355524350; expires=Sat, 09-Feb-2013 04:43:52 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk2=0; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=10; path=/; domain=.rubiconproject.com ses2=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=98167; path=/; domain=.rubiconproject.com csi2=3204661.js^1^1352609032^1352609032; expires=Sun, 18-Nov-2012 04:43:52 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=82 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/9685-15.js?cb=0.6324754103845819&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-15.js?cb=0.6324754103845819&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:43:52 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db7f3509f2d0850cba8fe158456^1^1352609032^1355524350; expires=Sat, 09-Feb-2013 04:43:52 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=98167; path=/; domain=.rubiconproject.com csi15=3204663.js^1^1352609032^1352609032; expires=Sun, 18-Nov-2012 04:43:52 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=19 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/27309-15.js?cb=0.7623321629743535&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/27309-15.js?cb=0.7623321629743535&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:43:52 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592dc3b1509f2d0850cba8fe650aa2^1^1352609032^1355524350; expires=Sat, 09-Feb-2013 04:43:52 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=98167; path=/; domain=.rubiconproject.com csi15=3204663.js^1^1352609032^1352609032; expires=Sun, 18-Nov-2012 04:43:52 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=70 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/9685-9.js?cb=0.7466397518734763&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-9.js?cb=0.7466397518734763&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:43:52 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; expires=Sat, 09-Feb-2013 04:43:52 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk9=0; expires=Sun, 11-Nov-2012 05:43:52 GMT; max-age=10; path=/; domain=.rubiconproject.com ses9=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=98167; path=/; domain=.rubiconproject.com csi9=3165520.js^1^1352609032^1352609032; expires=Sun, 18-Nov-2012 04:43:52 GMT; max-age=604800; path=/; domain=.rubiconproject.com; Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=79 Connection: Keep-Alive Transfer-Encoding: chunked
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 Host: fpdownload2.macromedia.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/xml Server: Apache Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT Etag: "87de33-256-4cd617ed12480" Accept-Ranges: bytes Content-Length: 598 Date: Sun, 11 Nov 2012 04:43:52 GMT Connection: keep-alive
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:52 GMT Content-Length: 0
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:52 GMT Content-Length: 0
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ads.cpxinteractive.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290	HTTP/1.1 302 Found Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Location: http://ib.adnxs.com/ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:52 GMT Content-Length: 0
GET /view.aspx?poolid=12887&script=1&rnd=259753 HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&script=1&rnd=259753 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: /view.aspx?poolid=12887&script=1&rnd=259753&test=1 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: USER_ID=%60%d6%05c%2b%1erF%83%5c%fc%dc%1f%b2%0d; domain=.server.cpmstar.com; expires=Thu, 11-Nov-2032 04:43:53 GMT; path=/ P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sun, 11 Nov 2012 04:43:52 GMT Content-Length: 185 Connection: Keep-alive Keep-Alive: timeout=15, max=100 Via: 1.1 ID-0001544140306215 uproxy-5
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:43:52 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:43:52 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwiNr8hAUQiNr8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 04:43:52 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; path=/; expires=Sat, 09-Feb-2013 04:43:52 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 04:43:52 GMT Content-Length: 1350
GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:43:52 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:43:52 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwiNr8hAUQiNr8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 04:43:52 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; path=/; expires=Sat, 09-Feb-2013 04:43:52 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 04:43:52 GMT Content-Length: 1349
GET /recaptcha/api/img/red/audio.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:04:30 GMT Date: Sun, 11 Nov 2012 04:04:30 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 914 Server: GSE Age: 2362 Cache-Control: public, max-age=3600
GET /p/05/c7/00/6d/05c7006db8c87009c7ef4cebeac987fa.png HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; sess=1; icu=ChIIlroHEAoYASABKAEwiNr8hAUQiNr8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/png Server: Apache Etag: "05c7006db8c87009c7ef4cebeac987fa:1350137588" Last-Modified: Sat, 13 Oct 2012 14:13:08 GMT Accept-Ranges: bytes Content-Length: 5202 Date: Sun, 11 Nov 2012 04:43:53 GMT Connection: keep-alive
GET /p/a9/da/ea/c0/a9daeac0f83c5ce58b932bd0f829631f.png HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; sess=1; icu=ChIIlroHEAoYASABKAEwiNr8hAUQiNr8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/png Server: Apache Etag: "a9daeac0f83c5ce58b932bd0f829631f:1351039989" Last-Modified: Wed, 24 Oct 2012 00:53:09 GMT Accept-Ranges: bytes Content-Length: 5051 Date: Sun, 11 Nov 2012 04:43:53 GMT Connection: keep-alive
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 Host: tap2-cdn.rubiconproject.com GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Last-Modified: Sun, 11 Nov 2012 00:16:00 GMT Content-Encoding: gzip Cache-Control: max-age=600 Expires: Sun, 11 Nov 2012 04:53:53 GMT Date: Sun, 11 Nov 2012 04:43:53 GMT Content-Length: 5080 Connection: keep-alive Vary: Accept-Encoding
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 04:43:52 GMT Connection: close Content-Length: 381
GET /partner/scripts/rubicon/alice.js HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:56:23 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sun, 11 Nov 2012 05:43:53 GMT Date: Sun, 11 Nov 2012 04:43:53 GMT Content-Length: 5798 Connection: keep-alive Vary: Accept-Encoding
GET /cached/js/flashadv12.pack.js HTTP/1.1 Host: cdn3.cpmstar.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074	HTTP/1.1 200 OK Content-Type: application/x-javascript Cache-Control: max-age=259200 Accept-Ranges: bytes Server: Microsoft-IIS/7.5 P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Via: 1.1 ID-0001544140306215 uproxy-3 Content-Encoding: gzip Vary: Accept-Encoding Age: 92792 Date: Sun, 11 Nov 2012 04:43:53 GMT Last-Modified: Fri, 26 Oct 2012 02:43:57 GMT Expires: Tue, 13 Nov 2012 02:57:21 GMT Content-Length: 876 Connection: close
GET /erb HTTP/1.1 Host: px.owneriq.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/html Server: Apache/2.2.3 (CentOS) Content-Length: 153 Location: http://px.owneriq.net/fr/epx.gif X-Powered-By: PHP/5.2.17 P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Vary: Accept-Encoding Cache-Control: max-age=77320 Date: Sun, 11 Nov 2012 04:43:53 GMT Connection: keep-alive
GET /images/pixel.gif HTTP/1.1 Host: spe.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Allow: GET Expires: Mon, 12 Nov 2012 19:08:30 GMT Date: Sun, 11 Nov 2012 04:43:53 GMT Connection: keep-alive
GET /pixel/p-e4m3Yko6bFYVc.gif?idmatch=0 HTTP/1.1 Host: pixel.quantserve.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Connection: close Set-Cookie: mc=509f2d09-5dec3-64a56-c2200; expires=Tue, 13-May-2014 04:43:53 GMT; path=/; domain=.quantserve.com P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Cache-Control: private, no-cache, no-store, proxy-revalidate Pragma: no-cache Expires: Fri, 04 Aug 1978 12:00:00 GMT Content-Length: 35 Date: Sun, 11 Nov 2012 04:43:53 GMT Server: QS
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; sess=1; icu=ChIIlroHEAoYASABKAEwiNr8hAUQiNr8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:43:53 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:43:53 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; path=/; expires=Sat, 09-Feb-2013 04:43:53 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 04:43:53 GMT
GET /pixel?google_nid=rubicon&google_cm&google_sc HTTP/1.1 Host: cm.g.doubleclick.net GET /pixel?google_nid=rubicon&google_cm&google_sc HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: http://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&put=CAESEOQbgGCszNKKg2Z3HuFXD_0&google_cver=1 Date: Sun, 11 Nov 2012 04:43:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Server: Cookie Matcher Content-Length: 325 X-XSS-Protection: 1; mode=block
GET /int/integration?pixel=303852&nid=302660 HTTP/1.1 Host: i.ctnsnet.com GET /int/integration?pixel=303852&nid=302660 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_fe6580bb02f9467a9f153f120471f448=1; path=/; domain=.ctnsnet.com; expires=Mon, 11-Nov-2013 04:43:53 GMT; px=AAAEouxQxroJ; path=/; domain=.ctnsnet.com; expires=Mon, 11-Mar-2013 04:43:53 GMT; pb=AAAEowJQxroJ; path=/; domain=.ctnsnet.com; expires=Thu, 10-Jan-2013 04:43:53 GMT; opt=0; path=/; domain=.ctnsnet.com; expires=Mon, 11-Nov-2013 04:43:53 GMT; Pragma: no-cache Cache-Control: private, no-cache, no-store, max-age=0 Location: http://pixel.rubiconproject.com/tap.php?v=14965&nid=2731&put=fe6580bb02f9467a9f153f120471f448&expires=30 Content-Length: 0 Date: Sun, 11 Nov 2012 04:43:53 GMT Connection: close
GET /sync/img?mt_exid=9 HTTP/1.1 Host: sync.mathtag.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:53 GMT Content-Length: 0 Connection: keep-alive Server: mt2/2.6.2.2465 Sep 24 2012 22:21:34 zrh-pixel-x4 pid 0x1e8d 7821 Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: uuid=509f2d09-6d02-ce8a-5877-ce029cab6127; domain=.mathtag.com; path=/; expires=Mon, 11-Nov-2013 04:43:53 GMT Location: http://sync.mathtag.com/sync/img?mt_exid=9&mm_bnc
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 04:43:52 GMT Connection: close Content-Length: 381
GET /match?p=2 HTTP/1.1 Host: match.rtbidder.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain Server: rtbidder Date: Sun, 11 Nov 2012 04:43:53 GMT Content-Length: 277 P3P: policyref="http://match.rtbidder.net/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIo PSAo PSDo IVAo IVDo CONo HISa TELo OUR STP" Pragma: no-cache Set-Cookie: bsuid=%3EsO%40K%2FN9B9rVyLY; path=/; domain=.rtbidder.net; expires=Sat, 09-Feb-2013 04:43:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-store, no-cache Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: http://pixel.rubiconproject.com/tap.php?v=5157&nid=2021&put=509f2d0923bc41f3ee4bc38b
GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 Host: m.xp1.ru4.com GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Sun-Java-System-Web-Server/7.0 Date: Sun, 11 Nov 2012 04:43:53 GMT P3P: policyref="/w3c/p3p.xml", CP="NON DSP COR PSAa OUR STP UNI" Pragma: no-cache Set-Cookie: X1ID=NC-00000002692159499; domain=.ru4.com; path=/; expires=Sat, 10-May-2014 23:43:53 GMT Location: http://pixel.rubiconproject.com/tap.php?v=5671&nid=2081&put=NC-00000002692159499&expires=30 Content-Length: 0
GET /ping_match.gif?ei=RUBICON&rurl=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4210%26nid%3D1523%26put%3D_wfivefivec_%26expires%3D10 HTTP/1.1 Host: i.w55c.net GET /ping_match.gif?ei=RUBICON&rurl=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4210%26nid%3D1523%26put%3D_wfivefivec_%26expires%3D10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found HTTP/1.1 302 Found Date: Sun, 11 Nov 2012 04:43:53 GMT Server: Jetty(6.1.22) Set-Cookie: wfivefivec=b3fbe3a5-bacf-4578-9d3f-2322f0580a04;Path=/;Domain=.w55c.net;Expires=Tue, 11-Nov-14 04:43:53 GMT X-Version: DataXu Pixel Tracker v3.3 20120918 Cache-Control: private P3P: policyref="https://cts.w55c.net/ct/p3p_policy_ref.xml", CP="UNI PUR COM INT STA OTC STP OUR CUR TAIo COR DSP NOI" Content-Length: 0 Location: http://pixel.rubiconproject.com/tap.php?v=4210&nid=1523&put=b3fbe3a5-bacf-4578-9d3f-2322f0580a04&expires=10 Via: 1.1 lhr061010 (MII-APC/2.2) Keep-Alive: timeout=2 Connection: Keep-Alive
GET /tap.php?v=7751&nid=2249&expires=30&put=CAESEOQbgGCszNKKg2Z3HuFXD_0&google_cver=1 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7751&nid=2249&expires=30&put=CAESEOQbgGCszNKKg2Z3HuFXD_0&google_cver=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:53 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267751%3D1; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267751%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.pixel.rubiconproject.com put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9890 Connection: Keep-Alive
GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 Host: user.lucidmedia.com GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Apache-Coyote/1.1 Cache-Control: no-cache, no-store Pragma: no-cache Date: Sun, 11 Nov 2012 04:43:53 GMT Expires: Sun, 11 Nov 2012 04:43:53 GMT P3P: CP="NOI ADM DEV CUR" X-Handled-By: awswrh08/127.0.0.1 Set-Cookie: lm_userid=3fhlytIEhYI; Domain=.lucidmedia.com; Expires=Mon, 11-Nov-2013 04:43:53 GMT; Path=/ Location: http://pixel.rubiconproject.com/tap.php?v=7206&nid=1197&put=4246269850110056724&expires=30 Content-Length: 0 Connection: close
GET /tap.php?v=14965&nid=2731&put=fe6580bb02f9467a9f153f120471f448&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=14965&nid=2731&put=fe6580bb02f9467a9f153f120471f448&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:53 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%2614965%3D1; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%2614965%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.pixel.rubiconproject.com put_2731=fe6580bb02f9467a9f153f120471f448; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9721 Connection: Keep-Alive
GET /cached/creatives/203392/Kone-Pure_Banner_160x600_clicktag.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d82398%26creativeid%3d203392%26url%3d HTTP/1.1 Host: cdn3.cpmstar.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Cache-Control: public Server: Microsoft-IIS/7.5 Content-Disposition: inline;filename=203392_Kone-Pure_Banner_160x600_clicktag.swf X-AspNet-Version: 2.0.50727 P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Via: 1.1 ID-0001544140306215 uproxy-5 Age: 26039 Date: Sun, 11 Nov 2012 04:43:53 GMT Expires: Sun, 11 Nov 2012 21:29:55 GMT Content-Length: 66961 Connection: close
GET /tap.php?v=5671&nid=2081&put=NC-00000002692159499&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5671&nid=2081&put=NC-00000002692159499&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:53 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%265671%3D1; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.pixel.rubiconproject.com put_2081=NC-00000002692159499; expires=Tue, 11-Dec-2012 04:43:53 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9591 Connection: Keep-Alive
GET /beacon.js HTTP/1.1 Host: b.scorecardresearch.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365	HTTP/1.1 200 OK Content-Type: application/x-javascript Vary: Accept-Encoding Content-Encoding: gzip Expires: Sun, 25 Nov 2012 04:43:56 GMT Date: Sun, 11 Nov 2012 04:43:56 GMT Content-Length: 1140 Connection: keep-alive Cache-Control: private, no-transform, max-age=1209600
GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 Host: ib.adnxs.com GET /ttj?id=743542&size=300x250&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:43:55 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:43:55 GMT; domain=.adnxs.com; HttpOnly icu=ChIIlroHEAoYASABKAEwi9r8hAUQi9r8hAUYAA..; path=/; expires=Sat, 09-Feb-2013 04:43:55 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; path=/; expires=Sat, 09-Feb-2013 04:43:55 GMT; domain=.adnxs.com; HttpOnly Date: Sun, 11 Nov 2012 04:43:55 GMT Content-Length: 6638
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; sess=1; icu=ChIIlroHEAoYASABKAEwiNr8hAUQiNr8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:43:56 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:43:56 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; path=/; expires=Sat, 09-Feb-2013 04:43:56 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 04:43:56 GMT
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352609036028&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352609036028&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036028&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Set-Cookie: UID=4cc827f-195.159.219.8-1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com UIDR=1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /sync/img?mt_exid=9&mm_bnc HTTP/1.1 Host: sync.mathtag.com GET /sync/img?mt_exid=9&mm_bnc HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: uuid=509f2d09-6d02-ce8a-5877-ce029cab6127	HTTP/1.1 302 Found Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:56 GMT Content-Length: 0 Connection: keep-alive Server: mt2/2.6.2.2465 Sep 24 2012 22:21:34 zrh-pixel-x4 pid 0x1e8d 7821 Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: mt_mop=9:1352609036; domain=.mathtag.com; path=/; expires=Tue, 11-Dec-2012 04:43:56 GMT Location: http://pixel.rubiconproject.com/tap.php?v=4222&nid=1512&put=509f2d09-6d02-ce8a-5877-ce029cab6127
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036060&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036060&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036060&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Set-Cookie: UID=4cc8284-195.159.219.8-1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com UIDR=1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036029&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036029&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036029&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Set-Cookie: UID=4cc828b-195.159.219.8-1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com UIDR=1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352609036033&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352609036033&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036033&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Set-Cookie: UID=4cc8288-195.159.219.8-1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com UIDR=1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352609036039&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D28074&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352609036039&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D28074&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352609036039&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D28074&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Set-Cookie: UID=4cc8289-195.159.219.8-1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com UIDR=1352609036; expires=Sat, 01-Nov-2014 04:43:56 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /tap.php?v=7206&nid=1197&put=4246269850110056724&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7206&nid=1197&put=4246269850110056724&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%267751%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%267751%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:56 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267751%3D1%267206%3D1; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267751%3D25076%2C0%2C1%2C%2C%267206%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.pixel.rubiconproject.com put_1197=4246269850110056724; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8871 Connection: Keep-Alive
GET /p/f7/e2/9a/75/f7e29a750a6e90386fb44988cda11ee3.swf?clickTAG=http%3A%2F%2Fib.adnxs.com%2Fclick%3FAAAAAAAAAAAAAAAAAAAAAAAAAEAzM8M_AAAAAAAAAAAAAAAAAAAAAA3kSMePBXEjoArzhH1cTlELLZ9QAAAAAHZYCwAdAgAAHQIAAAIAAAC1zCkAKkACAAAAAQBVU0QAVVNEACwB-gBNUQAAP1AAAgMCAQUAAIIAfBGAQgAAAAA.%2Fcnd%3D%2521MgUQMAjgth4QtZmnARiqgAkgBA..%2Freferrer%3Dhttp%253A%252F%252Fwww.mediafire.com%252F%253F4p5wab4oqodaj44%2Fclickenc%3Dhttp%253A%252F%252Fno.balagana.net%252Fpages%252Fno_NO%252Flovetest%252F%253FAFID%253D220843%2526AFCID%253Dams1CKCVzKfYj5enURACGI3Io7r8scG4IyIOODAuMjAzLjE2OC4yNTQoAQ.. HTTP/1.1 Host: cdn.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; sess=1; icu=ChIIlroHEAoYASABKAEwi9r8hAUQi9r8hAUYAA..	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Server: Apache Etag: "f7e29a750a6e90386fb44988cda11ee3:1344892808" Last-Modified: Mon, 13 Aug 2012 21:20:08 GMT Accept-Ranges: bytes Content-Length: 20114 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036060&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036060&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290 Cookie: UID=4cc8284-195.159.219.8-1352609036; UIDR=1352609036	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036029&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320015&ns__t=1352609036029&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: UID=4cc828b-195.159.219.8-1352609036; UIDR=1352609036	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1 Host: view.atdmt.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290 Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA	HTTP/1.1 200 OK Content-Type: text/html Cache-Control: no-store Content-Encoding: gzip Expires: 0 Vary: Accept-Encoding Date: Sun, 11 Nov 2012 04:43:55 GMT Connection: close Content-Length: 381
GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036033&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036033&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189 Cookie: UID=4cc8288-195.159.219.8-1352609036; UIDR=1352609036	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /match?mrbyus=true&excid=17 HTTP/1.1 Host: rubicon.admailtiser.com GET /match?mrbyus=true&excid=17 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: nginx/1.1.1 Date: Sun, 11 Nov 2012 04:43:56 GMT Content-Length: 0 Connection: keep-alive P3P: policyref="http://admailtiser.com/w3c/p3p.xml", CP="NOI IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA NOR UNI" Set-Cookie: cicouid=7e56eb2d-70a5-4d17-8f23-7d8f5f9a202fN6hromoNVAvjkhl9Atu2bw; Domain=.admailtiser.com; Expires=Mon, 11-Nov-2013 04:43:56 GMT; Path=/ Location: http://pixel.rubiconproject.com/tap.php?v=12224&nid=2530&put=-5807033824700871516&expires=365
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352609036039&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D28074&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352609036039&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D28074&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074 Cookie: UID=4cc8289-195.159.219.8-1352609036; UIDR=1352609036	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /tap.php?v=4222&nid=1512&put=509f2d09-6d02-ce8a-5877-ce029cab6127 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=4222&nid=1512&put=509f2d09-6d02-ce8a-5877-ce029cab6127 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%265671%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; put_2731=fe6580bb02f9467a9f153f120471f448; put_2081=NC-00000002692159499	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:56 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%265671%3D1%264222%3D1; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265671%3D25076%2C0%2C1%2C%2C%264222%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.pixel.rubiconproject.com put_1512=509f2d09-6d02-ce8a-5877-ce029cab6127; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9327 Connection: Keep-Alive
GET /fr/epx.gif HTTP/1.1 Host: px.owneriq.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache/2.2.3 (CentOS) Content-Length: 43 X-Powered-By: PHP/5.2.17 P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Cache-Control: max-age=84479 Expires: Mon, 12 Nov 2012 04:11:55 GMT Date: Sun, 11 Nov 2012 04:43:56 GMT Connection: keep-alive
GET /orbserv/hbpix?pixId=4857 HTTP/1.1 Host: map.media6degrees.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:56 GMT Server: Apache/2.2.3 (CentOS) Last-Modified: Tue, 16 Dec 2008 21:07:52 GMT Etag: "d015d-2b-45e305a397a00" Accept-Ranges: bytes Content-Length: 43 Connection: close
GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 Host: ib.adnxs.com GET /pxj?bidder=55&action=SetAdMarketCookies(%22AA002%3d1350344862-22301988%7cMUID%3d28a467a70f8d6b9c1f16645d0c8d6bfa%7cTOptOut%3d0%7cEANON%3dA%253d0%2526E%253dFFF%2526W%253d1%22); HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; sess=1; icu=ChIIlroHEAoYASABKAEwi9r8hAUQi9r8hAUYAA..	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 04:43:56 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 04:43:56 GMT; domain=.adnxs.com; HttpOnly anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FQVmX8`<jkb10I3SP:y!aDG6f6$RuQ6'wF<B0Sp; path=/; expires=Sat, 09-Feb-2013 04:43:56 GMT; domain=.adnxs.com; HttpOnly Content-Length: 43 Date: Sun, 11 Nov 2012 04:43:56 GMT
GET /tap.php?v=12224&nid=2530&put=-5807033824700871516&expires=365 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=12224&nid=2530&put=-5807033824700871516&expires=365 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%267751%3D1%267206%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%267751%3D25076%2C0%2C1%2C%2C%267206%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; put_2731=fe6580bb02f9467a9f153f120471f448; put_2081=NC-00000002692159499; put_1197=4246269850110056724	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:56 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267751%3D1%267206%3D1%2612224%3D1; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267751%3D25076%2C0%2C1%2C%2C%267206%3D25076%2C0%2C1%2C%2C%2612224%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.pixel.rubiconproject.com put_2530=-5807033824700871516; expires=Mon, 11-Nov-2013 04:43:56 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9385 Connection: Keep-Alive
GET /c/cse?a=Q&B=17 HTTP/1.1 Host: connexity.net GET /c/cse?a=Q&B=17 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Connexity Transfer-Encoding: chunked Connection: keep-alive Date: Sun, 11 Nov 2012 04:43:56 GMT Cache-Control: no-store, max-age=-1, post-check=0, pre-check=0 Pragma: no-cache Expires: -1 P3P: policyref="/w3c/p3p.xml", CP="CAO PSA OUR CURa DEVa PSDo PSAo BUS COR UNI COM",an.pp="http://www.connexity.com/privacy",an.oo="http://www.connexity.com/privacy",an.bt="N" Set-Cookie: COu=e97b36569937c179-064a296081fd2f47-2175fb3ddab22591; expires=Fri, 10-Nov-2017 04:43:56 GMT; domain=.connexity.net; path=/ Content-Transfer-Encoding: binary
GET /tap.php?v=4210&nid=1523&put=b3fbe3a5-bacf-4578-9d3f-2322f0580a04&expires=10 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=4210&nid=1523&put=b3fbe3a5-bacf-4578-9d3f-2322f0580a04&expires=10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:43:56 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%264210%3D1; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%264210%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:43:56 GMT; path=/; domain=.pixel.rubiconproject.com put_1523=b3fbe3a5-bacf-4578-9d3f-2322f0580a04; expires=Wed, 21-Nov-2012 04:43:56 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8779 Connection: Keep-Alive
GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036028&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036028&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D57365&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=57365 Cookie: UID=4cc827f-195.159.219.8-1352609036; UIDR=1352609036	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:43:58 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /partner/scripts/rubicon/page_parser.js?d=www.mediafire.com HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074 Cookie: rpb=14240%3D1%264210%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; put_2731=fe6580bb02f9467a9f153f120471f448; put_2081=NC-00000002692159499; put_1197=4246269850110056724; put_1512=509f2d09-6d02-ce8a-5877-ce029cab6127; put_2530=-5807033824700871516; put_1523=b3fbe3a5-bacf-4578-9d3f-2322f0580a04	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:56:39 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sun, 11 Nov 2012 05:43:59 GMT Date: Sun, 11 Nov 2012 04:43:59 GMT Content-Length: 5705 Connection: keep-alive Vary: Accept-Encoding
GET /m/rc HTTP/1.1 Host: rc.d.chango.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 35 Server: RTB Etag: "0f4e929dd5bb2564f7ab9c76338e04e292a42ace" Pragma: no-cache Cache-Control: no-cache, no-store, max-age=0, must-revalidate P3P: policyref="http://as.chango.com/static/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: _t=68b6e5fe-2bba-11e2-b34c-0025900cda70; Domain=chango.com; expires=Wed, 09 Nov 2022 04:43:59 GMT; Path=/ Connection: close
GET /tap.php?v=5157&nid=2021&put=509f2d0923bc41f3ee4bc38b HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5157&nid=2021&put=509f2d0923bc41f3ee4bc38b HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:44:02 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%265157%3D1; expires=Tue, 11-Dec-2012 04:44:02 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265157%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:44:02 GMT; path=/; domain=.pixel.rubiconproject.com put_2021=509f2d0923bc41f3ee4bc38b; expires=Tue, 11-Dec-2012 04:44:02 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9832 Connection: Keep-Alive
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352609036036&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352609036036&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352609036036&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:44:05 GMT Connection: keep-alive Set-Cookie: UID=4cc8349-195.159.219.8-1352609045; expires=Sat, 01-Nov-2014 04:44:05 GMT; path=/; domain=.scorecardresearch.com UIDR=1352609045; expires=Sat, 01-Nov-2014 04:44:05 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352609036049&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352609036049&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036049&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 04:44:05 GMT Connection: keep-alive Set-Cookie: UID=4cc832c-195.159.219.8-1352609045; expires=Sat, 01-Nov-2014 04:44:05 GMT; path=/; domain=.scorecardresearch.com UIDR=1352609045; expires=Sat, 01-Nov-2014 04:44:05 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352609036036&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3320011&ns__t=1352609036036&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D58189&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=58189 Cookie: UID=4cc8349-195.159.219.8-1352609045; UIDR=1352609045	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:44:05 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036049&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6035951&c3=122134&ns__t=1352609036049&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D68290&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=68290 Cookie: UID=4cc832c-195.159.219.8-1352609045; UIDR=1352609045	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 04:44:05 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /oz/feeds/invite-media-rtb/tokens/?rt=iframe HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%265671%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; rdk15=0; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; put_2731=fe6580bb02f9467a9f153f120471f448; put_2081=NC-00000002692159499	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 04:44:05 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=090b229d420dc7aa6d143bfd12791158cb008570&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 04:44:05 GMT; Path=/ au=H9DOI32X-9Z5E-10.74.91.2; Domain=.rubiconproject.com; Expires=Mon, 09-Nov-2020 04:44:05 GMT; Path=/ dq=1\|1\|0\|0; Expires=Mon, 11-Nov-2013 04:44:05 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 04:44:05 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=127 Connection: Keep-Alive
GET /rubicon_sync?publisher_user_id=090b229d420dc7aa6d143bfd12791158cb008570&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 Host: pixel.invitemedia.com GET /rubicon_sync?publisher_user_id=090b229d420dc7aa6d143bfd12791158cb008570&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: text/html Date: Sun, 11 Nov 2012 04:44:05 GMT Set-Cookie: uid=b8c28885-61ff-4617-85ae-b6a413df9fe6;Path=/;Domain=invitemedia.com;Expires=Mon, 11-Nov-2013 04:44:05 GMT impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC" Cache-Control: no-cache Content-Length: 221 Connection: close Server: Jetty(7.3.1.v20110307)
GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353041045&publisher_dsp_id=2101&external_user_id=b8c28885-61ff-4617-85ae-b6a413df9fe6 HTTP/1.1 Host: tap.rubiconproject.com GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353041045&publisher_dsp_id=2101&external_user_id=b8c28885-61ff-4617-85ae-b6a413df9fe6 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=090b229d420dc7aa6d143bfd12791158cb008570&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%265157%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; put_2731=fe6580bb02f9467a9f153f120471f448; put_2081=NC-00000002692159499; put_1197=4246269850110056724; put_1512=509f2d09-6d02-ce8a-5877-ce029cab6127; put_2530=-5807033824700871516; put_1523=b3fbe3a5-bacf-4578-9d3f-2322f0580a04; put_2021=509f2d0923bc41f3ee4bc38b; cd=false; au=H9DOI32X-9Z5E-10.74.91.2; dq=1\|1\|0\|0; lm="11 Nov 2012 04:44:05 GMT"	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 04:44:08 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.rubiconproject.com/tap.php?v=5852&nid=2101&put=b8c28885-61ff-4617-85ae-b6a413df9fe6 Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 04:44:08 GMT; Path=/ dq=2\|2\|0\|0; Expires=Mon, 11-Nov-2013 04:44:08 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 04:44:08 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=119 Connection: Keep-Alive
GET /js/encoder.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 04:44:09 GMT Last-Modified: Thu, 05 Jan 2012 22:41:54 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 04:44:09 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3695 Connection: close Server: MediaFire
GET /images/backgrounds/footer/footer_texture.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 20:31:25 GMT Accept-Ranges: bytes Content-Length: 2649 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:44:09 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_blog.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 171 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:44:09 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_gp.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 29 Aug 2012 21:02:04 GMT Accept-Ranges: bytes Content-Length: 312 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:44:09 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_tw.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 274 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:44:09 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_fb.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 514 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:44:09 GMT Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateFB_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 255 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:44:09 GMT Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateTW_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=18yj8za85arzkcj8fc68x94xhiz3g1aj; __utma=213136648.717482286.1352609028.1352609028.1352609028.1; __utmb=213136648.1.10.1352609028; __utmc=213136648; __utmz=213136648.1352609028.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 387 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 04:44:09 GMT Connection: keep-alive
GET /recaptcha/api/img/red/sprite.png HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/png Expires: Sun, 11 Nov 2012 05:18:14 GMT Date: Sun, 11 Nov 2012 04:18:14 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 4679 Server: GSE Age: 1556 Cache-Control: public, max-age=3600
GET /static/fonts/opensans/v6/k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM.woff HTTP/1.1 Host: themes.googleusercontent.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://fonts.googleapis.com/css?family=Open+Sans:800,400,700 Origin: http://www.mediafire.com	HTTP/1.1 200 OK Content-Type: font/woff Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT Date: Fri, 09 Nov 2012 20:33:30 GMT Expires: Sat, 09 Nov 2013 20:33:30 GMT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: sffe Content-Length: 22748 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 115840
GET /en_US/all.js?_=1352609049823 HTTP/1.1 Host: connect.facebook.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Etag: "06c9a8ca347f3538149da85e21e875b7" Content-Encoding: gzip X-FB-Debug: bOhidNEX691D1KXgZ3OPQbrJCdhO/rblt9a7wt/8LvA= Content-Length: 58142 Cache-Control: public, max-age=804 Expires: Sun, 11 Nov 2012 04:57:34 GMT Date: Sun, 11 Nov 2012 04:44:10 GMT Connection: keep-alive Vary: Accept-Encoding
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: QpUXNDPC4a/ZS9XMuzc2WDBWEZ8S2oHPsfImau8uouU= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31445581 Expires: Sun, 10 Nov 2013 03:37:11 GMT Date: Sun, 11 Nov 2012 04:44:10 GMT Connection: keep-alive
GET /tap.php?v=5852&nid=2101&put=b8c28885-61ff-4617-85ae-b6a413df9fe6 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5852&nid=2101&put=b8c28885-61ff-4617-85ae-b6a413df9fe6 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=090b229d420dc7aa6d143bfd12791158cb008570&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%265157%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%265157%3D25076%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db409509f2d0850cba8fe75edd9^1^1352609032^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; ses2=3346^1; csi2=3204661.js^1^1352609032^1352609032; ses15=3346^1; csi15=3204663.js^1^1352609032^1352609032; ses9=3346^1; csi9=3165520.js^1^1352609032^1352609032; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; put_2731=fe6580bb02f9467a9f153f120471f448; put_2081=NC-00000002692159499; put_1197=4246269850110056724; put_1512=509f2d09-6d02-ce8a-5877-ce029cab6127; put_2530=-5807033824700871516; put_1523=b3fbe3a5-bacf-4578-9d3f-2322f0580a04; put_2021=509f2d0923bc41f3ee4bc38b; cd=false; au=H9DOI32X-9Z5E-10.74.91.2; lm="11 Nov 2012 04:44:08 GMT"	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 04:44:11 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%265157%3D1%265852%3D1; expires=Tue, 11-Dec-2012 04:44:11 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%265157%3D25076%2C0%2C1%2C%2C%265852%3D25076%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 04:44:11 GMT; path=/; domain=.pixel.rubiconproject.com put_2101=b8c28885-61ff-4617-85ae-b6a413df9fe6; expires=Tue, 11-Dec-2012 04:44:11 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=8123 Connection: Keep-Alive
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: s-static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: JS4qOSg1Dl3AgVtg3MyBP4whcr8SZapA/Vud9cBlDwY= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31445490 Expires: Sun, 10 Nov 2013 03:35:41 GMT Date: Sun, 11 Nov 2012 04:44:11 GMT Connection: keep-alive
GET /ex4maeatm3jg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe HTTP/1.1 Host: 199.91.153.27 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 302 Found HTTP/1.1 302 Found Location: http://www.mediafire.com/?4p5wab4oqodaj44 Connection: Close
GET /view.aspx?poolid=12887&script=1&rnd=259753&test=1 HTTP/1.1 Host: server.cpmstar.com GET /view.aspx?poolid=12887&script=1&rnd=259753&test=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=28074 Cookie: USER_ID=%60%d6%05c%2b%1erF%83%5c%fc%dc%1f%b2%0d	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Set-Cookie: n15=0,12887,82398,203392,1352609031,0; domain=.server.cpmstar.com; expires=Tue, 11-Dec-2012 04:43:51 GMT; path=/ sm=t=1352522691; domain=.server.cpmstar.com; expires=Mon, 12-Nov-2012 04:43:51 GMT; path=/ P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Sun, 11 Nov 2012 04:43:51 GMT Connection: close Via: 1.1 ID-0001544140306215 uproxy-5
GET /cfcm.ashx?providerId=1007&extMatch=1 HTTP/1.1 Host: extmap.rub.ace.advertising.com GET /cfcm.ashx?providerId=1007&extMatch=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
GET /cm?in=1&pub=64 HTTP/1.1 Host: p.rfihub.com GET /cm?in=1&pub=64 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no