urlquery.net - Free url scanner

Overview

URL	http://205.196.120.227/civscz3kzdpg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe
IP	205.196.120.227
ASN	AS46179 MediaFire, LLC
Location	United States
Report completed	2012-11-11 06:16:39 CET
Status	Loading report..
urlQuery Alerts	No alerts detected

Settings

UserAgent	Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader	8.0
Java	1.6.0_26

Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Source IP	Destination IP	Severity	Alert
2012-11-11 06:15:52	108.161.187.32	urlQuery Client	3	FILEMAGIC Macromedia Flash data (compressed),
2012-11-11 06:15:53	205.196.120.8	urlQuery Client	3	FILEMAGIC Macromedia Flash data (compressed),
2012-11-11 06:16:03	195.159.219.8	urlQuery Client	3	FILEMAGIC Macromedia Flash data (compressed),

Snort /w Sourcefire VRT

Timestamp	Source IP	Destination IP	Severity	Alert
2012-11-11 06:16:03	urlQuery Client	205.196.120.8	2	http_inspect: NON-RFC DEFINED CHAR

Recent reports on same IP/ASN/Domain

Last 3 reports on IP: 205.196.120.227

Date	Alerts / IDS	URL	IP
2012-11-11 14:46:31	0 / 3	http://205.196.120.227/okvh548l2tlg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.120.227
2012-11-11 07:37:53	0 / 5	http://205.196.120.227/pw9u16cc4osg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.120.227
2012-11-11 06:17:14	0 / 4	http://205.196.120.227/8p9ibm78k6ag/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.120.227

Last 6 reports on ASN: AS46179 MediaFire, LLC

Date	Alerts / IDS	URL	IP
2013-04-04 08:50:25	0 / 3	http://205.196.123.35/phio8eavtbgg/ibl54epdqwjj05w/Shredder_classic_3_keygen.exe	205.196.123.35
2013-04-04 08:07:42	0 / 3	http://199.91.154.92/u2i4r3je94sg/ud2i12hq7drp16y/play4free+funds+generator.exe	199.91.154.92
2013-04-04 07:59:40	0 / 4	http://205.196.121.191/oy5olcmmd7yg/6bcff1wgbs34c46/SessionStealer.exe	205.196.121.191
2013-04-04 07:58:55	0 / 3	http://199.91.154.103/lezetl7sqwug/ckbhi4uvekvxbbk/ETS2keygen.exe	199.91.154.103
2013-04-04 07:58:55	0 / 4	http://205.196.121.10/6f2c14bvc3rg/eya666buwhach5m/PerX.exe	205.196.121.10
2013-04-04 07:57:32	0 / 2	http://205.196.120.190/5v6cw48xmoug/3frj7apbf1j8acb/setup.exe	205.196.120.190

Last 3 reports on domain: 205.196.120.227

Date	Alerts / IDS	URL	IP
2012-11-11 14:46:31	0 / 3	http://205.196.120.227/okvh548l2tlg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.120.227
2012-11-11 07:37:53	0 / 5	http://205.196.120.227/pw9u16cc4osg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.120.227
2012-11-11 06:17:14	0 / 4	http://205.196.120.227/8p9ibm78k6ag/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe	205.196.120.227

JavaScript

Executed Scripts (64)

Executed Evals (1)

#1 JavaScript::Eval (size: 15, repeated: 1)

var DARLA = {};

Executed Writes (39)

#1 JavaScript::Write (size: 221, repeated: 1)

<!-- BEGIN STANDARD TAG - 160 x 600 - ROS: NO - DO NOT MODIFY -->
<SCRIPT TYPE="text/javascript" SRC="http://ad.yieldmanager.com/st?ad_type=ad&ad_size=160x600&section=3434596&pub_url=${PUB_URL}"></script>
<!-- END TAG -->

#2 JavaScript::Write (size: 237, repeated: 1)

<!-- BEGIN STANDARD TAG - 728 x 90 - http://www.mediafire.com : Section 4 - DO NOT MODIFY -->
<SCRIPT TYPE="text/javascript" SRC="http://yieldmanager.adbooth.net/st?ad_type=safee&ad_size=728x90&section=3389608"></script>
<!-- END TAG -->

#3 JavaScript::Write (size: 9, repeated: 5)

</script>

#4 JavaScript::Write (size: 123, repeated: 1)

<SCRIPT TYPE="text/javascript" SRC="http://ad.yieldmanager.com/imp?Z=160x600&s=3434596&_salt=2414905192&B=10&r=0"></SCRIPT>

#5 JavaScript::Write (size: 131, repeated: 1)

<SCRIPT TYPE="text/javascript" SRC="http://yieldmanager.adbooth.net/imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0"></SCRIPT>

#6 JavaScript::Write (size: 875, repeated: 1)

<a target="_blank" href="http://yieldmanager.adbooth.net/clk?3,eJydjV9vgjAUxT8Nb0gobS0N2UMZwbCA06TE1LcOqqLtJNql-O2Hg2zvO7k5-d0.uQfAREqKVYMkJLQJMY0TAKVqFUatgn6YJAmKwJJCHBLiR-edfl12qHKsuMch-1HxURZuQnZ8mph4Ez89TcON4.OaZet8grSgD8T-rywHQz1zwdiYf8xitrpATfg1.T1b1e6d14.1WaCSv3XC1Lbiua66EO-zLSh5a8RODIIzKMwW7P8CXnz.ZG3vQeZF-VjOucCotpOH7qaC5mrGmVWm19Kq-8i6-7zY6witOsgvbRckogMFi7kN-tP4K795MCMII.gNJI1tVQ==,"><img border="0" alt="" height="90" width="728" src="http://content.yieldmanager.edgesuite.net/atoms/f8/f6/97/1e/f8f6971e293b55e55e2f1b52e47de0a.gif"></img></a><img src="http://router.tlvmedia.com/Logger/impressionLogger.php?vURLID=195376602&advertiserID=441093&advertiserLIID=3077960&sectionID=3389608&publisherID=739730&creativeID=13480712&URL=http%3A%2F%2Fwww%2Emediafire%2Ecom%2Ftemplates%2Flinkto%2Fdefault%2D729x91%2Ddefault%2Ephp%3Fr%3D74543" height="1" width="1" alt="">

#7 JavaScript::Write (size: 58, repeated: 1)

<div id="recaptcha_widget_div" style="display:none"></div>

#8 JavaScript::Write (size: 27, repeated: 1)

<div id="theToolTip"></div>

#9 JavaScript::Write (size: 1718, repeated: 1)

<html><head>            <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
            <meta http-equiv="Expires" content="Tue, 01 Jan 2000 12:12:12 GMT">
            <meta http-equiv="Pragma" content="no-cache">
    </head>
<body> <img src="http://92.61.254.232/rubicon/px/aid:7d50878da868c52e99c75cfec3e00f6dbfe8d866;c:7A04E12E6E4E1123;s:6bdb00c88686993b;cid:33664;ts:1352610950520" width="1" height="1" style="position: absolute; left: -150px;" />
<object classid='clsid:D27CDB6E-AE6D-11cf-96B8-444553540000' width='300' height='250' id='player1' name='player1'>
   <param name='movie' value='http://dspads.sitescout.netdna-cdn.com/3900/3859/300x250.-ACA343C.swf?clickTag=http%3A%2F%2Fclickserv.sitescout.com%2Fclk%2F04713701195c110a%2F9878732a8e2f50e0%2F1-3346%2F2%2Fwww.mediafire.com%252F%2F%2FcidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw' />
   <param name='allowfullscreen' value='false' />
   <param name='allowscriptaccess' value='sameDomain' />
   <param name="swfversion" value="6.0.65.0" />
   <param name='WMODE' value='opaque' />
   <embed id='player1'
          swfversion='6.0.65.0'
          name='player1'
          src='http://dspads.sitescout.netdna-cdn.com/3900/3859/300x250.-ACA343C.swf?clickTag=http%3A%2F%2Fclickserv.sitescout.com%2Fclk%2F04713701195c110a%2F9878732a8e2f50e0%2F1-3346%2F2%2Fwww.mediafire.com%252F%2F%2FcidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw'
          width='300'
          height='250'
          allowscriptaccess='sameDomain'
          allowfullscreen='false'
          WMODE='opaque' 
   />
</object> <img src="http://pixel.quantserve.com/pixel/p-01nD5uD1pGDW2.gif" border="0" height="1" width="1" style="display:none;" /></body></html>

#10 JavaScript::Write (size: 134, repeated: 1)

<iframe src='http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/?rt=iframe' width='1' height='1' frameborder='0'></iframe>

#11 JavaScript::Write (size: 773, repeated: 1)

<iframe width="300" height="250" noresize="noresize" scrolling="no"
        frameborder="0" marginheight="0" marginwidth="0"
        src="http://mymedia.adspirit.de/adframe.php?pid=11&ord=0.5469222253640208&rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/27309-15.3338758.3406494?url="
        ALLOWTRANSPARENCY="true">
 <a href="http://mymedia.adspirit.de/adnoclick.php?pid=11&ord=0.5469222253640208&rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/27309-15.3338758.3406494?url=" target="_top">
  <img src="http://mymedia.adspirit.de/adnoframe.php?pid=11&ord=0.5469222253640208&rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/27309-15.3338758.3406494?url="
       alt="Hier klicken!" border="0" width="300" height="250" />
 </a>
</noscript>

#12 JavaScript::Write (size: 1211, repeated: 1)

<object type="application/x-shockwave-flash" data="http://content.yieldmanager.edgesuite.net/atoms/5e/a5/ce/f7/5ea5cef78dd675750052da7c2b65a6d1.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJytjd1ugjAYhq%2DGMySUrqWE7KCkgUkscQxM9AxprZ1lENcF59UPlXgFe%2EPlzfP9AxgLJEK8hwBhEPohwjGAjRQSIbGPXD%2DO4wDBiOCQEOTmv7WiWdkXlLacbhN6V83XdJa6Wf%2EgNbl5kgSl%2DBjntore6b%2DIvb2U9czL%2D1%2EFCM020IRVnzzHsvrK2cYUXf65qnK97WrLq9RwDTRnwqyq9rpjpwtnyi%2DyZbBTz81X1z1aOziQOkE6xTiOXieFbg76LL2276aald1gGiu%2EJzb662T7CYQ8ND%2EGLgAGF%2DyDxZx7w3E6lp4dyBBBPvwDRIBtiA%3D%3D%2C" height="600" width="160" loop="false" wmode="opaque"><param name="wmode" value="opaque"><param name="movie" value="http://content.yieldmanager.edgesuite.net/atoms/5e/a5/ce/f7/5ea5cef78dd675750052da7c2b65a6d1.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJytjd1ugjAYhq%2DGMySUrqWE7KCkgUkscQxM9AxprZ1lENcF59UPlXgFe%2EPlzfP9AxgLJEK8hwBhEPohwjGAjRQSIbGPXD%2DO4wDBiOCQEOTmv7WiWdkXlLacbhN6V83XdJa6Wf%2EgNbl5kgSl%2DBjntore6b%2DIvb2U9czL%2D1%2EFCM020IRVnzzHsvrK2cYUXf65qnK97WrLq9RwDTRnwqyq9rpjpwtnyi%2DyZbBTz81X1z1aOziQOkE6xTiOXieFbg76LL2276aald1gGiu%2EJzb662T7CYQ8ND%2EGLgAGF%2DyDxZx7w3E6lp4dyBBBPvwDRIBtiA%3D%3D%2C" /></object><img src="

#13 JavaScript::Write (size: 52, repeated: 1)

<script language="JavaScript" type="text/javascript"

#14 JavaScript::Write (size: 53, repeated: 4)

<script language="JavaScript" type="text/javascript">

#15 JavaScript::Write (size: 87, repeated: 3)

<script type="text/javascript" src="http://ads.rubiconproject.com/ad/3196.js"></script>

#16 JavaScript::Write (size: 236, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/27309-15.js?cb=0.11460369269349036&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#17 JavaScript::Write (size: 235, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-15.js?cb=0.08206005144560591&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#18 JavaScript::Write (size: 234, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-2.js?cb=0.47918882178077704&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#19 JavaScript::Write (size: 233, repeated: 1)

<script type="text/javascript" src="http://optimized-by.rubiconproject.com/a/3196/3346/9685-9.js?cb=0.2919427692622074&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44"></script>

#20 JavaScript::Write (size: 98, repeated: 1)

<script type="text/javascript" src="http://www.google.com/recaptcha/api/js/recaptcha.js"></script>

#21 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3228674" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#22 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3406494" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#23 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3420885" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#24 JavaScript::Write (size: 903, repeated: 1)

<script type="text/javascript">oz_sensor_filter="domain";</script><script type="text/javascript" defer="defer" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js"></script><script>var _comscore = _comscore || []; _comscore.push({ c1: "8", c2: "6135404", c3: "26", c4: "3346", c10: "3421021" }); (function() { var s = document.createElement("script"), el = document.getElementsByTagName("script")[0]; s.async = true; s.src = (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js"; el.parentNode.insertBefore(s, el); })();</script><DIV STYLE="height:0px; width:0px; overflow:hidden"><IFRAME SRC="http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no" FRAMEBORDER="0" MARGINWIDTH="0" MARGINHEIGHT="0" SCROLLING="NO" WIDTH="0" HEIGHT="0" style="height:0px; width:0px"></IFRAME></DIV>

#25 JavaScript::Write (size: 1104, repeated: 1)

<script> document.write('<a target=\"_blank\" href=\"http://yieldmanager.adbooth.net/clk?3,eJydjV9vgjAUxT8Nb0gobS0N2UMZwbCA06TE1LcOqqLtJNql-O2Hg2zvO7k5-d0.uQfAREqKVYMkJLQJMY0TAKVqFUatgn6YJAmKwJJCHBLiR-edfl12qHKsuMch-1HxURZuQnZ8mph4Ez89TcON4.OaZet8grSgD8T-rywHQz1zwdiYf8xitrpATfg1.T1b1e6d14.1WaCSv3XC1Lbiua66EO-zLSh5a8RODIIzKMwW7P8CXnz.ZG3vQeZF-VjOucCotpOH7qaC5mrGmVWm19Kq-8i6-7zY6witOsgvbRckogMFi7kN-tP4K795MCMII.gNJI1tVQ==,\"><img border=\"0\" alt=\"\" height=\"90\" width=\"728\" src=\"http://content.yieldmanager.edgesuite.net/atoms/f8/f6/97/1e/f8f6971e293b55e55e2f1b52e47de0a.gif\"></img></a><img src=\"http://router.tlvmedia.com/Logger/impressionLogger.php?vURLID=195376602&advertiserID=441093&advertiserLIID=3077960&sectionID=3389608&publisherID=739730&creativeID=13480712&URL=http%3A%2F%2Fwww%2Emediafire%2Ecom%2Ftemplates%2Flinkto%2Fdefault%2D729x91%2Ddefault%2Ephp%3Fr%3D74543\" height=\"1\" width=\"1\" alt=\"\">');
var rm_data = new Object();
rm_data.creative_id = 13480712;
rm_data.offer_type = 28;
rm_data.entity_id = 441093;

if (window.rm_crex_data) {rm_crex_data.push(13480712);}</script>

#26 JavaScript::Write (size: 104, repeated: 1)

<script>Recaptcha.widget = Recaptcha.$("recaptcha_widget_div"); Recaptcha.challenge_callback();</script>

#27 JavaScript::Write (size: 1903, repeated: 1)

<span id="asmspan_3294324" class="asm_flash" style="font-size:1px;"><object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"  codebase="https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=9,0,0,0" id="adspiritflash3294324" width="300" height="250"> <param name="movie" value="http://img12.adspirit.de/banner/mymedia/6/2012-07-20/0_NO_forgeofempire_eng_300x250.swf"> <param name="flashvars" value="&clickTAG=http%3A%2F%2Foptimized-by.rubiconproject.com%2Ft%2F3196%2F3346%2F27309-15.3338758.3406494%3Furl%3Dhttp%253A%252F%252Fmymedia.adspirit.de%252Fadclick.php%253Ftz%253D1352610953%253Bpid%253D11%253Bkid%253D6%253Bwmid%253D32%253Bwsid%253D4%253Buid%253D1%253Bord%253D1352610953%253Bct%253D0%253Btarget%253D&&id=adspiritflash3294324">  <param name="quality" value="autohigh">  <param name="transparency" value="yes">  <param name="allowFullScreen" value="true">  <param name="allowScriptAccess" value="always">  <param name="allowNetworking" value="all">  <param name="wmode" value="transparent">  <param name="swLiveConnect" value="true">  <embed src="http://img12.adspirit.de/banner/mymedia/6/2012-07-20/0_NO_forgeofempire_eng_300x250.swf" flashvars="&clickTAG=http%3A%2F%2Foptimized-by.rubiconproject.com%2Ft%2F3196%2F3346%2F27309-15.3338758.3406494%3Furl%3Dhttp%253A%252F%252Fmymedia.adspirit.de%252Fadclick.php%253Ftz%253D1352610953%253Bpid%253D11%253Bkid%253D6%253Bwmid%253D32%253Bwsid%253D4%253Buid%253D1%253Bord%253D1352610953%253Bct%253D0%253Btarget%253D&&id=adspiritflash3294324" allowNetworking="all" allowFullScreen="true" allowScriptAccess="always" name="adspiritflash3294324"  transperency="yes" swLiveConnect="true" width="300" height="250" quality="autohigh" type="application/x-shockwave-flash"  pluginspage="https://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash"  wmode="transparent"  menu="false"> </embed></object></span>

#28 JavaScript::Write (size: 69, repeated: 1)

src="http://ads.rubiconproject.com/ad/3196.js?cb=0.8505172688825478">

#29 JavaScript::Write (size: 26, repeated: 3)

var rp_account   = "3196";

#30 JavaScript::Write (size: 24, repeated: 1)

var rp_account = "3196";

#31 JavaScript::Write (size: 24, repeated: 3)

var rp_adtype    = "js";

#32 JavaScript::Write (size: 21, repeated: 1)

var rp_adtype = "js";

#33 JavaScript::Write (size: 26, repeated: 3)

var rp_site      = "3346";

#34 JavaScript::Write (size: 21, repeated: 1)

var rp_site = "3346";

#35 JavaScript::Write (size: 81, repeated: 4)

var rp_smartfile = "http://www.mediafire.com/templates/ads/revv_smart_file.html";

#36 JavaScript::Write (size: 30, repeated: 1)

var rp_zonesize  = "27309-15";

#37 JavaScript::Write (size: 29, repeated: 1)

var rp_zonesize  = "9685-15";

#38 JavaScript::Write (size: 28, repeated: 1)

var rp_zonesize  = "9685-9";

#39 JavaScript::Write (size: 27, repeated: 1)

var rp_zonesize = "9685-2";

HTTP Transactions (121)

Request	Response
GET /css/mfv3_85677.php?ver=nonssl HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 37605 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:47 GMT Connection: keep-alive
GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 Host: cdn.mediafire.com GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 52116 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:47 GMT Connection: keep-alive
GET /?4p5wab4oqodaj44 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:15:47 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: 0 Set-Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; expires=Sun, 12-Oct-2014 05:15:47 GMT; path=/; domain=.mediafire.com; httponly Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 17020 Connection: close Server: MediaFire
GET /css?family=Open+Sans:800,400,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/css Expires: Sun, 11 Nov 2012 05:15:48 GMT Date: Sun, 11 Nov 2012 05:15:48 GMT Cache-Control: private, max-age=86400 Content-Encoding: gzip Content-Length: 318 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE
GET /images/favicon/download.ico HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Date: Sun, 11 Nov 2012 05:15:48 GMT Last-Modified: Thu, 25 Oct 2012 21:59:32 GMT Accept-Ranges: bytes Content-Length: 1150 Connection: close Server: MediaFire
GET /blank.html HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Last-Modified: Tue, 18 Sep 2012 21:44:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 78 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:48 GMT Connection: keep-alive
GET /images/icons/ajax-loader-grey_round.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 1775 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:48 GMT Connection: keep-alive
GET /images/buttons/btn_twitter_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 1799 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:48 GMT Connection: keep-alive
GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 Host: platform.twitter.com GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: public, max-age=1800 Last-Modified: Thu, 08 Nov 2012 09:18:41 GMT Etag: "567a94a4e136d5c4b7bfde258474cfa6" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 25717 Date: Sun, 11 Nov 2012 05:15:48 GMT Connection: keep-alive P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
GET /images/icons/icon-sprite-16-v3.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 02 Oct 2012 17:01:27 GMT Accept-Ranges: bytes Content-Length: 61715 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:48 GMT Connection: keep-alive
GET /js/bust_out.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 05:15:48 GMT Last-Modified: Thu, 31 May 2012 19:49:34 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 05:15:48 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 57 Connection: close Server: MediaFire
GET /images/icons/information_darkblue.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 722 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:49 GMT Connection: keep-alive
GET /js/encoder.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 05:15:48 GMT Last-Modified: Thu, 05 Jan 2012 22:41:54 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 05:15:48 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3695 Connection: close Server: MediaFire
GET /ajax/libs/jquery/1.7.2/jquery.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Content-Encoding: gzip Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT Date: Fri, 09 Nov 2012 20:33:45 GMT Expires: Sat, 09 Nov 2013 20:33:45 GMT X-Content-Type-Options: nosniff Server: sffe Content-Length: 73891 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 117723
GET /images/backgrounds/download/rockmelt/rockmelt_dl_btn.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:44 GMT Accept-Ranges: bytes Content-Length: 7653 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:49 GMT Connection: keep-alive
GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 Host: p.twitter.com GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: image/gif Etag: "377d257f2d2e294916143c069141c1c5:1328738114" Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT Accept-Ranges: bytes Content-Length: 43 Cache-Control: no-cache P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Date: Sun, 11 Nov 2012 05:15:49 GMT Connection: keep-alive
GET /js/master_85677.js HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/javascript Last-Modified: Fri, 09 Nov 2012 23:25:30 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Server: MediaFire Content-Length: 143613 Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:48 GMT Connection: keep-alive
GET /templates/linkto/default-729x91-default.php?r=74543 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:15:49 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 666 Connection: close Server: MediaFire
GET /templates/linkto/default-337x281-default.php?r=78628 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:15:49 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 786 Connection: close Server: MediaFire
GET /ad/3196.js HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 05:15:50 GMT Date: Sun, 11 Nov 2012 05:15:50 GMT Connection: keep-alive
GET /images/logos/logo_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 16 Jul 2012 19:28:31 GMT Accept-Ranges: bytes Content-Length: 3708 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:50 GMT Connection: keep-alive
GET /a/3196/3346/9685-15.js?cb=0.08206005144560591&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-15.js?cb=0.08206005144560591&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 05:15:50 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; expires=Sat, 09-Feb-2013 05:15:50 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 06:15:50 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 06:15:50 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=96249; path=/; domain=.rubiconproject.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Transfer-Encoding: chunked
GET /images/ad-loader.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:09:03 GMT Accept-Ranges: bytes Content-Length: 1786 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:50 GMT Connection: keep-alive
GET /rubicon/px/aid:7d50878da868c52e99c75cfec3e00f6dbfe8d866;c:7A04E12E6E4E1123;s:6bdb00c88686993b;cid:33664;ts:1352610950520 HTTP/1.1 Host: 92.61.254.232 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache-Coyote/1.1 Cache-Control: max-age=0,no-cache,no-store Pragma: no-cache Expires: Tue, 11 Oct 1977 12:34:56 GMT Connection: close Content-Length: 807 Date: Sun, 11 Nov 2012 05:15:50 GMT
GET /beacon.js HTTP/1.1 Host: b.scorecardresearch.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628	HTTP/1.1 200 OK Content-Type: application/x-javascript Vary: Accept-Encoding Content-Encoding: gzip Expires: Sun, 25 Nov 2012 05:15:50 GMT Date: Sun, 11 Nov 2012 05:15:50 GMT Content-Length: 1140 Connection: keep-alive Cache-Control: private, no-transform, max-age=1209600
GET /pixel/p-01nD5uD1pGDW2.gif HTTP/1.1 Host: pixel.quantserve.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628	HTTP/1.1 200 OK Content-Type: image/gif Connection: close Set-Cookie: mc=509f3486-f15a4-3b10e-0ddbb; expires=Tue, 13-May-2014 05:15:50 GMT; path=/; domain=.quantserve.com P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Cache-Control: private, no-cache, no-store, proxy-revalidate Pragma: no-cache Expires: Fri, 04 Aug 1978 12:00:00 GMT Content-Length: 35 Date: Sun, 11 Nov 2012 05:15:50 GMT Server: QS
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 Host: tap2-cdn.rubiconproject.com GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Last-Modified: Sat, 10 Nov 2012 20:12:21 GMT Content-Encoding: gzip Cache-Control: max-age=600 Expires: Sun, 11 Nov 2012 05:25:51 GMT Date: Sun, 11 Nov 2012 05:15:51 GMT Content-Length: 5080 Connection: keep-alive Vary: Accept-Encoding
GET /partner/scripts/rubicon/alice.js HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:56:23 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sun, 11 Nov 2012 06:15:51 GMT Date: Sun, 11 Nov 2012 05:15:51 GMT Content-Length: 5798 Connection: keep-alive Vary: Accept-Encoding
GET /ga.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 14888 Content-Encoding: gzip Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT X-Content-Type-Options: nosniff, nosniff Date: Sat, 10 Nov 2012 20:33:28 GMT Expires: Sun, 11 Nov 2012 08:33:28 GMT Vary: Accept-Encoding Age: 31343 Cache-Control: max-age=43200, public Server: GFE/2.0
GET /recaptcha/api/challenge?k=6LextQUAAAAAALlQv0DSHOYxqF3DftRZxA5yebEe HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Date: Sun, 11 Nov 2012 05:15:51 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 449 Server: GSE
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 Host: www.facebook.com GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 Content-Encoding: gzip X-FB-Debug: zQYF/3O3aA8nrr/9B2EUvUysbSyNDrJZEWUnYbR/8MA= Date: Sun, 11 Nov 2012 05:15:51 GMT Transfer-Encoding: chunked Connection: keep-alive
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352610951874&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D78628&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352610951874&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D78628&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352610951874&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D78628&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 05:15:51 GMT Connection: keep-alive Set-Cookie: UID=4cdbf1e-195.159.219.8-1352610951; expires=Sat, 01-Nov-2014 05:15:51 GMT; path=/; domain=.scorecardresearch.com UIDR=1352610951; expires=Sat, 01-Nov-2014 05:15:51 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=707269398&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=1478611401&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.1391577247.1352610952.1352610952.1352610952.1%3B%2B__utmz%3D213136648.1352610952.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 Host: www.google-analytics.com GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=707269398&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=1478611401&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.1391577247.1352610952.1352610952.1352610952.1%3B%2B__utmz%3D213136648.1352610952.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 09 Nov 2012 20:33:28 GMT Content-Length: 35 X-Content-Type-Options: nosniff Pragma: no-cache Expires: Wed, 19 Apr 2000 11:43:00 GMT Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Age: 117744 Server: GFE/2.0
POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 106 Content-Type: application/ocsp-request	HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 11 Nov 2012 05:15:52 GMT Server: Apache Content-Transfer-Encoding: Binary Cache-Control: max-age=18934, public, no-transform, must-revalidate Last-Modified: Sun, 11 Nov 2012 04:48:03 GMT Expires: Sun, 11 Nov 2012 10:48:03 GMT Etag: "bb5b989a88c5fa9b2f1a6ff76cf76088e831fb64" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" Content-Length: 1923 Connection: close
GET /r1/ruum HTTP/1.1 Host: rp.gwallet.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: application/octet-stream Content-Length: 0 Server: radiumone/1.2 Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Expires: Tue, 29 Oct 2002 19:50:44 GMT Location: http://pixel.rubiconproject.com/tap.php?v=7935&nid=2271&expires=30&put=0VJ-ocLMubr9mqiWb7HvmO3ukp4 Pragma: no-cache P3P: CP="RadiumOne does not have a P3P policy. For information on our privacy policy please visit http://radiumone.com/about/privacy.html" Set-Cookie: ra1_uid=5571988876087819584; Expires=Mon, 11-Nov-2013 05:15:52 GMT; Path=/; Domain=gwallet.com; Version=1
GET /3900/3859/300x250.-ACA343C.swf?clickTag=http%3A%2F%2Fclickserv.sitescout.com%2Fclk%2F04713701195c110a%2F9878732a8e2f50e0%2F1-3346%2F2%2Fwww.mediafire.com%252F%2F%2FcidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw HTTP/1.1 Host: dspads.sitescout.netdna-cdn.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Date: Sun, 11 Nov 2012 05:15:52 GMT Content-Length: 54403 Connection: keep-alive Etag: W/"54403-1342719889000" Last-Modified: Thu, 19 Jul 2012 17:44:49 GMT Server: NetDNA-cache/2.2 X-Cache: HIT Accept-Ranges: bytes
GET /rb_match HTTP/1.1 Host: um.simpli.fi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain Server: nginx Date: Sun, 11 Nov 2012 05:15:52 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: uid=UQhw3b8G3uNcgXa970Y7r5%3D%3D; path=/; expires=Mon, 11 Nov 2013 05:15:52 GMT; domain=.simpli.fi Location: http://pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=DD700851E3DE06BFBD76815CAF3B46EF&expires=365 P3P: policyref="http://www.simplifi.com/w3c/Policies.xml", CP="ADMa DEVa PSAa PSDa OUR IND DSP NON COR"
GET /adserver/cookiematch?pnid=3000007 HTTP/1.1 Host: rubicon-rtb.p.veruta.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache-Coyote/1.1 Content-Length: 43 Date: Sun, 11 Nov 2012 05:15:51 GMT
GET /recaptcha/api/js/recaptcha.js HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: application/x-javascript Expires: Sun, 11 Nov 2012 05:15:52 GMT Date: Sun, 11 Nov 2012 05:15:52 GMT Last-Modified: Tue, 12 Jun 2012 14:07:31 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 17531 Server: GSE Cache-Control: public, max-age=0 Age: 0
GET /m/rc HTTP/1.1 Host: rc.d.chango.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 35 Server: RTB Etag: "0f4e929dd5bb2564f7ab9c76338e04e292a42ace" Pragma: no-cache Cache-Control: no-cache, no-store, max-age=0, must-revalidate P3P: policyref="http://as.chango.com/static/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: _t=dcd4ee46-2bbe-11e2-8714-00259035d55a; Domain=chango.com; expires=Wed, 09 Nov 2022 05:15:52 GMT; Path=/ Connection: close
GET /recaptcha/api/img/red/refresh.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 06:03:32 GMT Date: Sun, 11 Nov 2012 05:03:32 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 974 Server: GSE Age: 740 Cache-Control: public, max-age=3600
GET /tap.php?v=7935&nid=2271&expires=30&put=0VJ-ocLMubr9mqiWb7HvmO3ukp4 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7935&nid=2271&expires=30&put=0VJ-ocLMubr9mqiWb7HvmO3ukp4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:15:52 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267935%3D1; expires=Tue, 11-Dec-2012 05:15:52 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:15:52 GMT; path=/; domain=.pixel.rubiconproject.com put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; expires=Tue, 11-Dec-2012 05:15:52 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9854 Connection: Keep-Alive
GET /tap.php?v=6286&nid=2132&put=DD700851E3DE06BFBD76815CAF3B46EF&expires=365 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=6286&nid=2132&put=DD700851E3DE06BFBD76815CAF3B46EF&expires=365 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:15:52 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%266286%3D1; expires=Tue, 11-Dec-2012 05:15:52 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:15:52 GMT; path=/; domain=.pixel.rubiconproject.com put_2132=DD700851E3DE06BFBD76815CAF3B46EF; expires=Mon, 11-Nov-2013 05:15:52 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9851 Connection: Keep-Alive
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1 Host: static.ak.fbcdn.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 Origin: http://www.facebook.com	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 29 Oct 2012 23:55:41 GMT X-Content-Type-Options: nosniff Content-Encoding: gzip X-FB-Debug: mERPLeHfP4bFbWVj/NJRwm2C8x1Lf8geAnYAfFf24WM= Content-Length: 37945 Vary: Accept-Encoding Cache-Control: public, max-age=31136231 Expires: Wed, 06 Nov 2013 14:13:03 GMT Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_blog.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 171 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_gp.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 29 Aug 2012 21:02:04 GMT Accept-Ranges: bytes Content-Length: 312 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /images/backgrounds/footer/footer_texture.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 20:31:25 GMT Accept-Ranges: bytes Content-Length: 2649 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 Host: fpdownload2.macromedia.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/xml Server: Apache Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT Etag: "87de33-256-4cd617ed12480" Accept-Ranges: bytes Content-Length: 598 Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_tw.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 274 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_fb.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 514 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateTW_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 387 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /templates/linkto/default-337x281-default2.php?r=91414 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:15:53 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 787 Connection: close Server: MediaFire
GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 Host: secure.gravatar.com GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx Date: Sun, 11 Nov 2012 05:15:53 GMT Content-Length: 906 Connection: keep-alive Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Access-Control-Allow-Origin: * Content-Disposition: inline; filename="00000000.png" X-Varnish: 2464724670 2461089695 Via: 1.1 varnish Expires: Sun, 11 Nov 2012 05:20:53 GMT Cache-Control: max-age=300
GET /ad/3196.js?cb=0.8505172688825478 HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 05:15:53 GMT Date: Sun, 11 Nov 2012 05:15:53 GMT Connection: keep-alive
GET /helper_01.swf HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Date: Sun, 11 Nov 2012 05:15:53 GMT Last-Modified: Sat, 15 Oct 2011 19:43:58 GMT Accept-Ranges: bytes Content-Length: 1480 Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 05:15:53 GMT Connection: close Server: MediaFire
GET /a/3196/3346/27309-15.js?cb=0.11460369269349036&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/27309-15.js?cb=0.11460369269349036&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=91414 Cookie: rpb=14240%3D1%266286%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 05:15:53 GMT Server: RAS/1.3 (Unix) Set-Cookie: rdk=3196/3346; expires=Sun, 11-Nov-2012 06:15:53 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 06:15:53 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^2; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=96246; path=/; domain=.rubiconproject.com csi15=3338758.js^1^1352610953^1352610953; expires=Sun, 18-Nov-2012 05:15:53 GMT; max-age=604800; path=/; domain=.rubiconproject.com; P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=64 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/9685-2.js?cb=0.47918882178077704&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-2.js?cb=0.47918882178077704&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543 Cookie: rpb=14240%3D1%266286%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 05:15:53 GMT Server: RAS/1.3 (Unix) Set-Cookie: rdk=3196/3346; expires=Sun, 11-Nov-2012 06:15:53 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk2=0; expires=Sun, 11-Nov-2012 06:15:53 GMT; max-age=10; path=/; domain=.rubiconproject.com ses2=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=96246; path=/; domain=.rubiconproject.com csi2=3347941.js^1^1352610953^1352610953; expires=Sun, 18-Nov-2012 05:15:53 GMT; max-age=604800; path=/; domain=.rubiconproject.com; P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Transfer-Encoding: chunked
GET /adframe.php?pid=11&ord=0.5469222253640208&rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/27309-15.3338758.3406494?url= HTTP/1.1 Host: mymedia.adspirit.de GET /adframe.php?pid=11&ord=0.5469222253640208&rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/27309-15.3338758.3406494?url= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=91414	HTTP/1.1 200 OK Content-Type: text/html; charset=iso-8859-1 Date: Sun, 11 Nov 2012 05:15:53 GMT Server: Apache/2.2.3 (Red Hat) X-Powered-By: PHP/5.2.6 Cache-Control: no-store Pragma: no-cache P3P: CP="STP CUR OUR" x-own: 46.163.123.34 x-rqc: 11 Set-Cookie: mymedia_ex=; expires=Mon, 11-Nov-2013 06:15:53 GMT; domain=.adspirit.de; path=/ Content-Length: 3686 Connection: close
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352610951874&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D78628&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352610951874&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D78628&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628 Cookie: UID=4cdbf1e-195.159.219.8-1352610951; UIDR=1352610951	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 05:15:54 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /images/backgrounds/newHome/loginActivateFB_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 255 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:54 GMT Connection: keep-alive
GET /adview.php?tz=1352610953&pid=11&kid=6&wmid=32&nvc=1&target=- HTTP/1.1 Host: mymedia.adspirit.de GET /adview.php?tz=1352610953&pid=11&kid=6&wmid=32&nvc=1&target=- HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://mymedia.adspirit.de/adframe.php?pid=11&ord=0.5469222253640208&rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/27309-15.3338758.3406494?url= Cookie: mymedia_ex=	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:15:54 GMT Server: Apache/2.2.3 (Red Hat) X-Powered-By: PHP/5.2.6 P3P: CP="STP CUR OUR" Cache-Control: no-cache x-own: 46.163.123.40 x-1: 0.0231266021729 x-2: 0.00715255737305 x-3: 0.0150203704834 x-4: 0.00810623168945 x-5: 0.0259876251221 x-6b: 0.00500679016113 x-6c: 0.0309944152832 x-7: 0.212907791138 x-8: 0.0860691070557 x-9: 0.00882148742676 x-10: 0.0808238983154 x-total: 0.608921051025 Content-Length: 43 Connection: close Pragma: no-cache
GET /banner/flashme.js HTTP/1.1 Host: img12.adspirit.de User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://mymedia.adspirit.de/adframe.php?pid=11&ord=0.5469222253640208&rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/27309-15.3338758.3406494?url= Cookie: mymedia_ex=	HTTP/1.1 200 OK Content-Type: application/javascript Accept-Ranges: bytes Etag: "750553654" Last-Modified: Wed, 19 Sep 2012 14:57:05 GMT Content-Length: 4318 Connection: close Date: Sun, 11 Nov 2012 05:15:49 GMT Server: lighttpd/1.4.28
GET /st?ad_type=safee&ad_size=728x90&section=3389608 HTTP/1.1 Host: yieldmanager.adbooth.net GET /st?ad_type=safee&ad_size=728x90&section=3389608 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543	HTTP/1.1 200 OK HTTP/1.1 200 OK Date: Sun, 11 Nov 2012 05:15:54 GMT Server: YTS/1.20.13 X-RightMedia-Hostname: raptor0508.rm.bf1.yahoo.com P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Vary: * Last-Modified: Sun, 11 Nov 2012 05:15:54 GMT Expires: Sun, 11 Nov 2012 05:15:54 GMT Pragma: no-cache Content-Encoding: gzip Age: 0 Transfer-Encoding: chunked Connection: keep-alive
GET /imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 HTTP/1.1 Host: yieldmanager.adbooth.net GET /imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543	HTTP/1.1 302 Found HTTP/1.1 302 Found Date: Sun, 11 Nov 2012 05:15:54 GMT Server: YTS/1.20.13 X-RightMedia-Hostname: raptor0295.rm.bf1.yahoo.com P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: http://ad.yieldmanager.com/imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Vary: * Last-Modified: Sun, 11 Nov 2012 05:15:54 GMT Expires: Sun, 11 Nov 2012 05:15:54 GMT Pragma: no-cache Content-Encoding: gzip Age: 0 Transfer-Encoding: chunked Connection: keep-alive
GET /partner/scripts/rubicon/page_parser.js?d=www.mediafire.com HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628 Cookie: rpb=14240%3D1%266286%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; rdk2=0; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:55:58 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sun, 11 Nov 2012 06:15:56 GMT Date: Sun, 11 Nov 2012 05:15:56 GMT Content-Length: 5705 Connection: keep-alive Vary: Accept-Encoding
GET /imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 HTTP/1.1 Host: ad.yieldmanager.com GET /imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543	HTTP/1.1 302 Found HTTP/1.1 302 Found Date: Sun, 11 Nov 2012 05:15:58 GMT Server: YTS/1.20.13 X-RightMedia-Hostname: raptor0796.rm.bf1.yahoo.com P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: http://cookex.amp.yahoo.com/v2/cexposer/SIG=12ju2sh1c/http%3A//ad.yieldmanager.com/imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Vary: Last-Modified: Sun, 11 Nov 2012 05:15:58 GMT Expires: Sun, 11 Nov 2012 05:15:58 GMT Pragma: no-cache Content-Encoding: gzip Age: 0 Transfer-Encoding: chunked Connection: keep-alive
GET /recaptcha/api/img/red/sprite.png HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/png Expires: Sun, 11 Nov 2012 05:33:33 GMT Date: Sun, 11 Nov 2012 04:33:33 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 4679 Server: GSE Age: 2545 Cache-Control: public, max-age=3600
GET /v2/cexposer/SIG=12ju2sh1c/http%3A//ad.yieldmanager.com/imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 HTTP/1.1 Host: cookex.amp.yahoo.com GET /v2/cexposer/SIG=12ju2sh1c/http%3A//ad.yieldmanager.com/imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Sun, 11 Nov 2012 05:15:58 GMT Set-Cookie: B=dtui4p589ud4e&b=3&s=jb; expires=Tue, 12-Nov-2014 20:00:00 GMT; path=/; domain=.yahoo.com P3P: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" Location: http://ad.yieldmanager.com/imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0&SIG=10vga28gf;x-cookie=qghv4c589hq4r&o=3&f=wo Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Cache-Control: private
GET /imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0&SIG=10vga28gf;x-cookie=qghv4c589hq4r&o=3&f=wo HTTP/1.1 Host: ad.yieldmanager.com GET /imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0&SIG=10vga28gf;x-cookie=qghv4c589hq4r&o=3&f=wo HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543	HTTP/1.1 200 OK Content-Type: application/x-javascript Date: Sun, 11 Nov 2012 05:15:58 GMT Server: YTS/1.20.13 X-RightMedia-Hostname: raptor1127.rm.bf1.yahoo.com P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: BX=dtui4p589ud4e&b=3&s=jb&t=315; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT uid=uid=e094150c-2bbe-11e2-833d-0726a18f0f44&_hmacv=1&_salt=1776931958&_keyid=k1&_hmac=9914b5225b0faa3e8c732ab565a5ab63a5000ce8; path=/; expires=Tue, 11-Dec-2012 05:15:58 GMT RMBX=dtui4p589ud4e&b=3&s=jb&t=315; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Vary: * Last-Modified: Sun, 11 Nov 2012 05:15:58 GMT Expires: Sun, 11 Nov 2012 05:15:58 GMT Pragma: no-cache Content-Encoding: gzip Age: 0 Transfer-Encoding: chunked Connection: keep-alive
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3420885&ns__t=1352610958905&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D74543&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3420885&ns__t=1352610958905&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D74543&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543 Cookie: UID=4cdbf1e-195.159.219.8-1352610951; UIDR=1352610951	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 05:15:59 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /pixel?google_nid=rubicon&google_cm&google_sc HTTP/1.1 Host: cm.g.doubleclick.net GET /pixel?google_nid=rubicon&google_cm&google_sc HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: http://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&put=CAESEOQbgGCszNKKg2Z3HuFXD_0&google_cver=1 Date: Sun, 11 Nov 2012 05:15:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Server: Cookie Matcher Content-Length: 325 X-XSS-Protection: 1; mode=block
GET /atoms/f8/f6/97/1e/f8f6971e293b55e55e2f1b52e47de0a.gif HTTP/1.1 Host: content.yieldmanager.edgesuite.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache Etag: "f8f6971e293b55e55e2f1b52e47de0af:1330266514" Last-Modified: Sun, 26 Feb 2012 14:28:33 GMT Accept-Ranges: bytes Content-Length: 6173 Cache-Control: max-age=31536000 Date: Sun, 11 Nov 2012 05:15:59 GMT Connection: keep-alive
GET /do-association?rbc HTTP/1.1 Host: matcher-rbc.bidder7.mookie1.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:15:59 GMT Server: Apache/2.2.3 (Red Hat) Set-Cookie: id=4611686278532310230; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 05:15:59 GMT mdata=1\|4611686278532310230\|1352610959; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 05:15:59 GMT Location: /do-association-set?rbc Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=882 Connection: Keep-Alive
GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 Host: m.xp1.ru4.com GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Sun-Java-System-Web-Server/7.0 Date: Sun, 11 Nov 2012 05:15:59 GMT P3P: policyref="/w3c/p3p.xml", CP="NON DSP COR PSAa OUR STP UNI" Pragma: no-cache Set-Cookie: X1ID=NC-00000002692474940; domain=.ru4.com; path=/; expires=Sun, 11-May-2014 00:15:59 GMT Location: http://pixel.rubiconproject.com/tap.php?v=5671&nid=2081&put=NC-00000002692474940&expires=30 Content-Length: 0
GET /Logger/impressionLogger.php?vURLID=195376602&advertiserID=441093&advertiserLIID=3077960&sectionID=3389608&publisherID=739730&creativeID=13480712&URL=http%3A%2F%2Fwww%2Emediafire%2Ecom%2Ftemplates%2Flinkto%2Fdefault%2D729x91%2Ddefault%2Ephp%3Fr%3D74543 HTTP/1.1 Host: router.tlvmedia.com GET /Logger/impressionLogger.php?vURLID=195376602&advertiserID=441093&advertiserLIID=3077960&sectionID=3389608&publisherID=739730&creativeID=13480712&URL=http%3A%2F%2Fwww%2Emediafire%2Ecom%2Ftemplates%2Flinkto%2Fdefault%2D729x91%2Ddefault%2Ephp%3Fr%3D74543 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543	HTTP/1.1 302 Moved Temporarily Content-Type: text/html Server: nginx/1.0.14 Date: Sun, 11 Nov 2012 05:15:59 GMT Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/5.3.3 Location: http://ad.yieldmanager.com/pixel?id=534661&id=1618299&id=1584032&t=2
GET /tap.php?v=5671&nid=2081&put=NC-00000002692474940&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5671&nid=2081&put=NC-00000002692474940&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%266286%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; rdk2=0; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:15:59 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%266286%3D1%265671%3D1; expires=Tue, 11-Dec-2012 05:15:59 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%265671%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:15:59 GMT; path=/; domain=.pixel.rubiconproject.com put_2081=NC-00000002692474940; expires=Tue, 11-Dec-2012 05:15:59 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9825 Connection: Keep-Alive
GET /do-association-set?rbc HTTP/1.1 Host: matcher-rbc.bidder7.mookie1.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4611686278532310230; mdata=1\|4611686278532310230\|1352610959	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:15:59 GMT Server: Apache/2.2.3 (Red Hat) Location: http://cm.g.doubleclick.net/pixel?google_nid=themig&google_cm&google_sc&can=ffffffffffffffff&v2 Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=950 Connection: Keep-Alive
GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 Host: user.lucidmedia.com GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Apache-Coyote/1.1 Cache-Control: no-cache, no-store Pragma: no-cache Date: Sun, 11 Nov 2012 05:15:59 GMT Expires: Sun, 11 Nov 2012 05:15:59 GMT P3P: CP="NOI ADM DEV CUR" X-Handled-By: awswrh22/127.0.0.1 Set-Cookie: lm_userid=3fhtJ12Bske; Domain=.lucidmedia.com; Expires=Mon, 11-Nov-2013 05:15:59 GMT; Path=/ Location: http://pixel.rubiconproject.com/tap.php?v=7206&nid=1197&put=4246302156551326762&expires=30 Content-Length: 0 Connection: close
GET /pixel?google_nid=themig&google_cm&google_sc&can=ffffffffffffffff&v2 HTTP/1.1 Host: cm.g.doubleclick.net GET /pixel?google_nid=themig&google_cm&google_sc&can=ffffffffffffffff&v2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: http://matcher.bidder7.mookie1.com/google?id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 Date: Sun, 11 Nov 2012 05:15:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Server: Cookie Matcher Content-Length: 336 X-XSS-Protection: 1; mode=block
GET /tap.php?v=7206&nid=1197&put=4246302156551326762&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7206&nid=1197&put=4246302156551326762&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%266286%3D1%265671%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%265671%3D25077%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; rdk2=0; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953; put_2081=NC-00000002692474940	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:15:59 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%266286%3D1%265671%3D1%267206%3D1; expires=Tue, 11-Dec-2012 05:15:59 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%265671%3D25077%2C0%2C1%2C%2C%267206%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:15:59 GMT; path=/; domain=.pixel.rubiconproject.com put_1197=4246302156551326762; expires=Tue, 11-Dec-2012 05:15:59 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9258 Connection: Keep-Alive
GET /pixel?id=534661&id=1618299&id=1584032&t=2 HTTP/1.1 Host: ad.yieldmanager.com GET /pixel?id=534661&id=1618299&id=1584032&t=2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543 Cookie: BX=dtui4p589ud4e&b=3&s=jb&t=315; uid=uid=e094150c-2bbe-11e2-833d-0726a18f0f44&_hmacv=1&_salt=1776931958&_keyid=k1&_hmac=9914b5225b0faa3e8c732ab565a5ab63a5000ce8; RMBX=dtui4p589ud4e&b=3&s=jb&t=315	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:15:59 GMT Server: YTS/1.20.13 X-RightMedia-Hostname: raptor0257.rm.bf1.yahoo.com P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Vary: * Last-Modified: Sun, 11 Nov 2012 05:15:59 GMT Expires: Sun, 11 Nov 2012 05:15:59 GMT Pragma: no-cache Content-Encoding: gzip Age: 0 Transfer-Encoding: chunked Connection: keep-alive
GET /google?id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 HTTP/1.1 Host: matcher.bidder7.mookie1.com GET /google?id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4611686278532310230; mdata=1\|4611686278532310230\|1352610959	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:15:59 GMT Server: Apache/2.2.3 (Red Hat) Location: http://matcher.bidder8.mookie1.com/google?zap-redir&id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=937 Connection: Keep-Alive
GET /google?zap-redir&id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 HTTP/1.1 Host: matcher.bidder8.mookie1.com GET /google?zap-redir&id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4611686278532310230; mdata=1\|4611686278532310230\|1352610959	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:00 GMT Server: Apache/2.2.3 (Red Hat) Location: http://ib.adnxs.com/getuid?http://matcher-apx.bidder7.mookie1.com/appnexus?can=fffffffffffffffe%26adnxs_uid=$UID Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=923 Connection: Keep-Alive
GET /getuid?http://matcher-apx.bidder7.mookie1.com/appnexus?can=fffffffffffffffe%26adnxs_uid=$UID HTTP/1.1 Host: ib.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 302 Moved Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 05:16:00 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 05:16:00 GMT; domain=.adnxs.com; HttpOnly Location: http://matcher-apx.bidder7.mookie1.com/appnexus?can=fffffffffffffffe&adnxs_uid=5858721859426781856 Date: Sun, 11 Nov 2012 05:16:00 GMT Content-Length: 0
GET /appnexus?can=fffffffffffffffe&adnxs_uid=5858721859426781856 HTTP/1.1 Host: matcher-apx.bidder7.mookie1.com GET /appnexus?can=fffffffffffffffe&adnxs_uid=5858721859426781856 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4611686278532310230; mdata=1\|4611686278532310230\|1352610959	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:00 GMT Server: Apache/2.2.3 (Red Hat) Location: http://matcher.bidder8.mookie1.com/appnexus?zap-redir&can=fffffffffffffffe&adnxs_uid=5858721859426781856 Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=701 Connection: Keep-Alive
GET /appnexus?zap-redir&can=fffffffffffffffe&adnxs_uid=5858721859426781856 HTTP/1.1 Host: matcher.bidder8.mookie1.com GET /appnexus?zap-redir&can=fffffffffffffffe&adnxs_uid=5858721859426781856 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4611686278532310230; mdata=1\|4611686278532310230\|1352610959	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:01 GMT Server: Apache/2.2.3 (Red Hat) Location: http://bh.contextweb.com/bh/rtset?do=add&pid=536088&ev=4611686278532310230&rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=fffffffffffffff6 Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=943 Connection: Keep-Alive
GET /recaptcha/api/img/red/audio.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:59:41 GMT Date: Sun, 11 Nov 2012 04:59:41 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 914 Server: GSE Age: 980 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/help.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 06:06:34 GMT Date: Sun, 11 Nov 2012 05:06:34 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 367 Server: GSE Age: 567 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/text.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 06:16:01 GMT Date: Sun, 11 Nov 2012 05:16:01 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 155 Server: GSE Cache-Control: public, max-age=3600 Age: 0
GET /recaptcha/api/image?c=03AHJ_Vut1xIZErVKD2JLfkEoqA2IYdKgm4HOtMiGR09pUbHSV4o1xk1m3ETPrFCEr6syg4Z6vMN8sxR-Tl98bC2bgd9s7fnaFYd6vnQI3GRsDLMqTU3UlPOiXucNA6aYLyUZfz8DD4A8RE1ry-1wREgW7kZ5hn0Uo_zECqnI3GjXg5LgRiSLOROc HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Sun, 11 Nov 2012 05:26:01 GMT Date: Sun, 11 Nov 2012 05:16:01 GMT Cache-Control: public, max-age=600 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 2789 Server: GSE
GET /templates/linkto/default-161x601-default.php?r=58503 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:01 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 733 Connection: close Server: MediaFire
GET /bh/rtset?do=add&pid=536088&ev=4611686278532310230&rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=fffffffffffffff6 HTTP/1.1 Host: bh.contextweb.com GET /bh/rtset?do=add&pid=536088&ev=4611686278532310230&rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=fffffffffffffff6 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/html;charset=ISO-8859-1 Cache-Control: private, max-age=0, no-cache, no-store Content-Language: en-US CW-Server: ip-10-98-119-224 Date: Sun, 11 Nov 2012 05:16:01 GMT Expires: -1 Location: http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb&can=fffffffffffffff6 P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Server: GlassFish v3 Set-Cookie: V=xUr8zm6juVyd; Domain=.contextweb.com; Expires=Wed, 06-Nov-2013 05:16:02 GMT; Path=/ pb_rtb_ev=2-536088.4611686278532310230.0.0.1352610962251; Domain=.contextweb.com; Expires=Mon, 11-Nov-2013 05:16:02 GMT; Path=/ Content-Length: 242 Connection: keep-alive
GET /static/fonts/opensans/v6/k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM.woff HTTP/1.1 Host: themes.googleusercontent.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://fonts.googleapis.com/css?family=Open+Sans:800,400,700 Origin: http://www.mediafire.com	HTTP/1.1 200 OK Content-Type: font/woff Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT Date: Fri, 09 Nov 2012 20:33:30 GMT Expires: Sat, 09 Nov 2013 20:33:30 GMT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: sffe Content-Length: 22748 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 117752
GET /a/3196/3346/9685-9.js?cb=0.2919427692622074&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-9.js?cb=0.2919427692622074&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=58503 Cookie: rpb=14240%3D1%266286%3D1%265671%3D1%267206%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; rdk2=0; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953; put_2081=NC-00000002692474940; put_1197=4246302156551326762	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 05:16:02 GMT Server: RAS/1.3 (Unix) Set-Cookie: rdk=3196/3346; expires=Sun, 11-Nov-2012 06:16:02 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk9=0; expires=Sun, 11-Nov-2012 06:16:02 GMT; max-age=10; path=/; domain=.rubiconproject.com ses9=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=96237; path=/; domain=.rubiconproject.com csi9=3348063.js^1^1352610962^1352610962; expires=Sun, 18-Nov-2012 05:16:02 GMT; max-age=604800; path=/; domain=.rubiconproject.com; P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=69 Connection: Keep-Alive Transfer-Encoding: chunked
GET /en_US/all.js?_=1352610952799 HTTP/1.1 Host: connect.facebook.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Etag: "06c9a8ca347f3538149da85e21e875b7" Content-Encoding: gzip X-FB-Debug: I31pDw2dv61g5Wz+pAlT7JWdx73Tjg7ZafF9EgOFy2s= Content-Length: 58144 Cache-Control: public, max-age=1127 Expires: Sun, 11 Nov 2012 05:34:48 GMT Date: Sun, 11 Nov 2012 05:16:01 GMT Connection: keep-alive Vary: Accept-Encoding
GET /st?ad_type=ad&ad_size=160x600&section=3434596&pub_url=${PUB_URL} HTTP/1.1 Host: ad.yieldmanager.com GET /st?ad_type=ad&ad_size=160x600&section=3434596&pub_url=${PUB_URL} HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=58503 Cookie: BX=dtui4p589ud4e&b=3&s=jb&t=315; uid=uid=e094150c-2bbe-11e2-833d-0726a18f0f44&_hmacv=1&_salt=1776931958&_keyid=k1&_hmac=9914b5225b0faa3e8c732ab565a5ab63a5000ce8; RMBX=dtui4p589ud4e&b=3&s=jb&t=315	HTTP/1.1 200 OK HTTP/1.1 200 OK Date: Sun, 11 Nov 2012 05:16:02 GMT Server: YTS/1.20.13 X-RightMedia-Hostname: raptor0637.rm.bf1.yahoo.com P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Vary: * Last-Modified: Sun, 11 Nov 2012 05:16:02 GMT Expires: Sun, 11 Nov 2012 05:16:02 GMT Pragma: no-cache Content-Encoding: gzip Age: 0 Transfer-Encoding: chunked Connection: keep-alive
GET /imp?Z=160x600&s=3434596&_salt=2414905192&B=10&r=0 HTTP/1.1 Host: ad.yieldmanager.com GET /imp?Z=160x600&s=3434596&_salt=2414905192&B=10&r=0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=58503 Cookie: BX=dtui4p589ud4e&b=3&s=jb&t=315; uid=uid=e094150c-2bbe-11e2-833d-0726a18f0f44&_hmacv=1&_salt=1776931958&_keyid=k1&_hmac=9914b5225b0faa3e8c732ab565a5ab63a5000ce8; RMBX=dtui4p589ud4e&b=3&s=jb&t=315	HTTP/1.1 200 OK Content-Type: application/x-javascript Date: Sun, 11 Nov 2012 05:16:02 GMT Server: YTS/1.20.13 X-RightMedia-Hostname: raptor0259.rm.bf1.yahoo.com P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Vary: * Last-Modified: Sun, 11 Nov 2012 05:16:02 GMT Expires: Sun, 11 Nov 2012 05:16:02 GMT Pragma: no-cache Content-Encoding: gzip Age: 0 Transfer-Encoding: chunked Connection: keep-alive
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3421021&ns__t=1352610962942&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D58503&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3421021&ns__t=1352610962942&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D58503&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=58503 Cookie: UID=4cdbf1e-195.159.219.8-1352610951; UIDR=1352610951	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 05:16:03 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /pixel/p-e4m3Yko6bFYVc.gif?idmatch=0 HTTP/1.1 Host: pixel.quantserve.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: mc=509f3486-f15a4-3b10e-0ddbb	HTTP/1.1 200 OK Content-Type: image/gif Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Pragma: no-cache Expires: Fri, 04 Aug 1978 12:00:00 GMT Content-Length: 35 Date: Sun, 11 Nov 2012 05:16:03 GMT Server: QS
GET /atoms/5e/a5/ce/f7/5ea5cef78dd675750052da7c2b65a6d1.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJytjd1ugjAYhq%2DGMySUrqWE7KCkgUkscQxM9AxprZ1lENcF59UPlXgFe%2EPlzfP9AxgLJEK8hwBhEPohwjGAjRQSIbGPXD%2DO4wDBiOCQEOTmv7WiWdkXlLacbhN6V83XdJa6Wf%2EgNbl5kgSl%2DBjntore6b%2DIvb2U9czL%2D1%2EFCM020IRVnzzHsvrK2cYUXf65qnK97WrLq9RwDTRnwqyq9rpjpwtnyi%2DyZbBTz81X1z1aOziQOkE6xTiOXieFbg76LL2276aald1gGiu%2EJzb662T7CYQ8ND%2EGLgAGF%2DyDxZx7w3E6lp4dyBBBPvwDRIBtiA%3D%3D%2C HTTP/1.1 Host: content.yieldmanager.edgesuite.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=58503	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Server: Apache Etag: "5ea5cef78dd675750052da7c2b65a6d1:1344499587" Last-Modified: Thu, 09 Aug 2012 08:06:21 GMT Accept-Ranges: bytes Content-Length: 16134 Cache-Control: max-age=31536000 Date: Sun, 11 Nov 2012 05:16:03 GMT Connection: keep-alive
GET /redirect?ex=11 HTTP/1.1 Host: cm.netseer.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:03 GMT Location: http://cm.netseer.com/redirect?ex=11&cookie=2 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Server: Apache-Coyote/1.1 Set-Cookie: netseer_v3_vi=H4sIAAAAAAAAADOyKi0uMk5LSkpKS0wxNU4yNLGwNLAyNDY1MjM0sDQzNjY1AABEFUE-IwAAAA; Domain=.netseer.com; Expires=Tue, 11-Nov-2014 05:16:03 GMT; Path=/ Content-Length: 0 Connection: keep-alive
GET /oz/feeds/invite-media-rtb/tokens/?rt=iframe HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%266286%3D1%265671%3D1%267206%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; rdk2=0; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953; put_2081=NC-00000002692474940; put_1197=4246302156551326762; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352610962^1352610962	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:03 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=6075bc540ebff4bb2ee0d50809cda9fc3c2608b1&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 05:16:03 GMT; Path=/ au=H9DPN711-9SJT-10.250.151.242; Domain=.rubiconproject.com; Expires=Mon, 09-Nov-2020 05:16:03 GMT; Path=/ dq=1\|1\|0\|0; Expires=Mon, 11-Nov-2013 05:16:03 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 05:16:03 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=164 Connection: Keep-Alive
GET /dmp/pixelSync?network=Rubicon HTTP/1.1 Host: pixel.sitescout.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Server: Apache-Coyote/1.1 Date: Sun, 11 Nov 2012 05:16:02 GMT
GET /rubicon_sync?publisher_user_id=6075bc540ebff4bb2ee0d50809cda9fc3c2608b1&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 Host: pixel.invitemedia.com GET /rubicon_sync?publisher_user_id=6075bc540ebff4bb2ee0d50809cda9fc3c2608b1&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: text/html Date: Sun, 11 Nov 2012 05:16:03 GMT Set-Cookie: uid=354c7ce1-0d13-46d6-8291-ec987cb1ba8e;Path=/;Domain=invitemedia.com;Expires=Mon, 11-Nov-2013 05:16:03 GMT impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC" Cache-Control: no-cache Content-Length: 221 Connection: close Server: Jetty(7.3.1.v20110307)
GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353042963&publisher_dsp_id=2101&external_user_id=354c7ce1-0d13-46d6-8291-ec987cb1ba8e HTTP/1.1 Host: tap.rubiconproject.com GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353042963&publisher_dsp_id=2101&external_user_id=354c7ce1-0d13-46d6-8291-ec987cb1ba8e HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=6075bc540ebff4bb2ee0d50809cda9fc3c2608b1&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%266286%3D1%265671%3D1%267206%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953; put_2081=NC-00000002692474940; put_1197=4246302156551326762; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352610962^1352610962; cd=false; au=H9DPN711-9SJT-10.250.151.242; dq=1\|1\|0\|0; lm="11 Nov 2012 05:16:03 GMT"	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:03 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.rubiconproject.com/tap.php?v=5852&nid=2101&put=354c7ce1-0d13-46d6-8291-ec987cb1ba8e Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 05:16:03 GMT; Path=/ dq=2\|2\|0\|0; Expires=Mon, 11-Nov-2013 05:16:03 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 05:16:03 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=93 Connection: Keep-Alive
GET /tap.php?v=5852&nid=2101&put=354c7ce1-0d13-46d6-8291-ec987cb1ba8e HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5852&nid=2101&put=354c7ce1-0d13-46d6-8291-ec987cb1ba8e HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=6075bc540ebff4bb2ee0d50809cda9fc3c2608b1&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%266286%3D1%265671%3D1%267206%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%265671%3D25077%2C0%2C1%2C%2C%267206%3D25077%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953; put_2081=NC-00000002692474940; put_1197=4246302156551326762; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352610962^1352610962; cd=false; au=H9DPN711-9SJT-10.250.151.242; lm="11 Nov 2012 05:16:03 GMT"	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:16:04 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%266286%3D1%265671%3D1%267206%3D1%265852%3D1; expires=Tue, 11-Dec-2012 05:16:04 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%265671%3D25077%2C0%2C1%2C%2C%267206%3D25077%2C0%2C1%2C%2C%265852%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:16:04 GMT; path=/; domain=.pixel.rubiconproject.com put_2101=354c7ce1-0d13-46d6-8291-ec987cb1ba8e; expires=Tue, 11-Dec-2012 05:16:04 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9209 Connection: Keep-Alive
GET /do-association?return=ctxweb&can=fffffffffffffff6 HTTP/1.1 Host: matcher-cwb.bidder7.mookie1.com GET /do-association?return=ctxweb&can=fffffffffffffff6 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4611686278532310230; mdata=1\|4611686278532310230\|1352610959	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:05 GMT Server: Apache/2.2.3 (Red Hat) Location: http://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI0NzgmdGw9MTI5NjAw&piggybackCookie=uid:4611686278532310230&r=http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6 Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=997 Connection: Keep-Alive
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI0NzgmdGw9MTI5NjAw&piggybackCookie=uid:4611686278532310230&r=http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6 HTTP/1.1 Host: image2.pubmatic.com GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI0NzgmdGw9MTI5NjAw&piggybackCookie=uid:4611686278532310230&r=http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: text/html; charset=iso-8859-1 Date: Sun, 11 Nov 2012 05:16:05 GMT Server: Apache/2.2.4 (Unix) DAV/2 mod_ssl/2.2.4 OpenSSL/0.9.7a mod_fastcgi/2.4.2 Set-Cookie: KRTBCOOKIE_262=4781-uid:4611686278532310230; domain=pubmatic.com; expires=Tue, 11-Nov-2014 05:16:05 GMT; path=/ PUBRETARGET=2478_1360386965; domain=pubmatic.com; expires=Sat, 09-Feb-2013 05:16:05 GMT; path=/ Location: http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic&can=ffffffffffffffe6 Content-Length: 413 Connection: close
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: QpUXNDPC4a/ZS9XMuzc2WDBWEZ8S2oHPsfImau8uouU= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31443666 Expires: Sun, 10 Nov 2013 03:37:11 GMT Date: Sun, 11 Nov 2012 05:16:05 GMT Connection: keep-alive
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: s-static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: JS4qOSg1Dl3AgVtg3MyBP4whcr8SZapA/Vud9cBlDwY= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31443576 Expires: Sun, 10 Nov 2013 03:35:41 GMT Date: Sun, 11 Nov 2012 05:16:05 GMT Connection: keep-alive
GET /do-association?return=pubmatic&can=ffffffffffffffe6 HTTP/1.1 Host: matcher-pbm.bidder7.mookie1.com GET /do-association?return=pubmatic&can=ffffffffffffffe6 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4611686278532310230; mdata=1\|4611686278532310230\|1352610959	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:16:05 GMT Server: Apache/2.2.3 (Red Hat) Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 43 Keep-Alive: timeout=1, max=930 Connection: Keep-Alive
GET /tap.php?v=7751&nid=2249&expires=30&put=CAESEOQbgGCszNKKg2Z3HuFXD_0&google_cver=1 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7751&nid=2249&expires=30&put=CAESEOQbgGCszNKKg2Z3HuFXD_0&google_cver=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%266286%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; rdk2=0; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:16:08 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%266286%3D1%267751%3D1; expires=Tue, 11-Dec-2012 05:16:08 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%267751%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:16:08 GMT; path=/; domain=.pixel.rubiconproject.com put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; expires=Tue, 11-Dec-2012 05:16:08 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9976 Connection: Keep-Alive
GET /images/buttons/btn_facebook_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 2315 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:16:09 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_allowemail.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 941 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:16:09 GMT Connection: keep-alive
GET /images/icons/dropdown-arrow-left-white.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 123 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:16:09 GMT Connection: keep-alive
GET /redirect?ex=11&cookie=2 HTTP/1.1 Host: cm.netseer.com GET /redirect?ex=11&cookie=2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: netseer_v3_vi=H4sIAAAAAAAAADOyKi0uMk5LSkpKS0wxNU4yNLGwNLAyNDY1MjM0sDQzNjY1AABEFUE-IwAAAA	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:05 GMT Location: http://pixel.rubiconproject.com/tap.php?v=6073&nid=2100&expires=30&put=usr3fbbbfad53b14890 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Server: Apache-Coyote/1.1 Set-Cookie: netseer_v3_vi=H4sIAAAAAAAAADOyKi0uMk5LSkpKS0wxNU4yNLGwNLAyNDY1MjM0sDQzNjY10DE0tHKNCHEN8nP0QciYGRpaAADTzop2PQAAAA; Domain=.netseer.com; Expires=Tue, 11-Nov-2014 05:16:06 GMT; Path=/ Content-Length: 0 Connection: keep-alive
GET /tap.php?v=6073&nid=2100&expires=30&put=usr3fbbbfad53b14890 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=6073&nid=2100&expires=30&put=usr3fbbbfad53b14890 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%266286%3D1%267751%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%267751%3D25077%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953; put_2081=NC-00000002692474940; put_1197=4246302156551326762; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352610962^1352610962; cd=false; au=H9DPN711-9SJT-10.250.151.242; lm="11 Nov 2012 05:16:03 GMT"; put_2101=354c7ce1-0d13-46d6-8291-ec987cb1ba8e; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:16:09 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%266286%3D1%267751%3D1%266073%3D1; expires=Tue, 11-Dec-2012 05:16:09 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%267751%3D25077%2C0%2C1%2C%2C%266073%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:16:09 GMT; path=/; domain=.pixel.rubiconproject.com put_2100=usr3fbbbfad53b14890; expires=Tue, 11-Dec-2012 05:16:09 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9569 Connection: Keep-Alive
POST / HTTP/1.1 Host: ocsp.verisign.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	HTTP/1.0 200 Ok Content-Type: application/ocsp-response Last-Modified: Fri, 09 Nov 2012 00:41:57 GMT Expires: Fri, 16 Nov 2012 00:41:57 GMT Content-Transfer-Encoding: binary Content-Length: 1814 Cache-Control: max-age=415547, public, no-transform, must-revalidate Date: Sun, 11 Nov 2012 05:16:10 GMT nncoection: close Connection: Keep-Alive
GET /dialog/oauth?client_id=124578887583575&response_type=token%2Csigned_request%2Ccode&display=none&domain=www.mediafire.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Dfde484aa01812a%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff2f573ea4eb2392%26domain%3Dwww.mediafire.com%26relation%3Dparent&sdk=joey HTTP/1.1 Host: www.facebook.com GET /dialog/oauth?client_id=124578887583575&response_type=token%2Csigned_request%2Ccode&display=none&domain=www.mediafire.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Dfde484aa01812a%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff2f573ea4eb2392%26domain%3Dwww.mediafire.com%26relation%3Dparent&sdk=joey HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Location: http://static.ak.facebook.com/connect/xd_arbiter.php?version=17#cb=fde484aa01812a&origin=http%3A%2F%2Fwww.mediafire.com%2Ff2f573ea4eb2392&domain=www.mediafire.com&relation=parent&error=unknown_user Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-FB-Debug: flRasaKKgkTLHpI8F1y0h7o0roSEumu22uD2tu4Orv4= Date: Sun, 11 Nov 2012 05:16:10 GMT Connection: keep-alive Content-Length: 0
GET /civscz3kzdpg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe HTTP/1.1 Host: 205.196.120.227 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 302 Found HTTP/1.1 302 Found Location: http://www.mediafire.com/?4p5wab4oqodaj44 Connection: Close
GET /templates/linkto/%EF%BF%BD%07 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=58503 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:03 GMT Cache-Control: no-cache, must-revalidate Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 8028 Connection: close Server: MediaFire

Request	Response
GET /css/mfv3_85677.php?ver=nonssl HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 37605 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:47 GMT Connection: keep-alive
GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 Host: cdn.mediafire.com GET /css/mfv4_85677.php?ver=nonssl&date=2012-11-10 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/css Pragma: public Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 52116 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:47 GMT Connection: keep-alive
GET /?4p5wab4oqodaj44 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:15:47 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: 0 Set-Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; expires=Sun, 12-Oct-2014 05:15:47 GMT; path=/; domain=.mediafire.com; httponly Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 17020 Connection: close Server: MediaFire
GET /css?family=Open+Sans:800,400,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/css,/;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/css Expires: Sun, 11 Nov 2012 05:15:48 GMT Date: Sun, 11 Nov 2012 05:15:48 GMT Cache-Control: private, max-age=86400 Content-Encoding: gzip Content-Length: 318 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE
GET /images/favicon/download.ico HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Date: Sun, 11 Nov 2012 05:15:48 GMT Last-Modified: Thu, 25 Oct 2012 21:59:32 GMT Accept-Ranges: bytes Content-Length: 1150 Connection: close Server: MediaFire
GET /blank.html HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Last-Modified: Tue, 18 Sep 2012 21:44:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 78 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:48 GMT Connection: keep-alive
GET /images/icons/ajax-loader-grey_round.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 1775 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:48 GMT Connection: keep-alive
GET /images/buttons/btn_twitter_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 1799 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:48 GMT Connection: keep-alive
GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 Host: platform.twitter.com GET /widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: public, max-age=1800 Last-Modified: Thu, 08 Nov 2012 09:18:41 GMT Etag: "567a94a4e136d5c4b7bfde258474cfa6" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 25717 Date: Sun, 11 Nov 2012 05:15:48 GMT Connection: keep-alive P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
GET /images/icons/icon-sprite-16-v3.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 02 Oct 2012 17:01:27 GMT Accept-Ranges: bytes Content-Length: 61715 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:48 GMT Connection: keep-alive
GET /js/bust_out.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 05:15:48 GMT Last-Modified: Thu, 31 May 2012 19:49:34 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 05:15:48 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 57 Connection: close Server: MediaFire
GET /images/icons/information_darkblue.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 722 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:49 GMT Connection: keep-alive
GET /js/encoder.js HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 05:15:48 GMT Last-Modified: Thu, 05 Jan 2012 22:41:54 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 05:15:48 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3695 Connection: close Server: MediaFire
GET /ajax/libs/jquery/1.7.2/jquery.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Content-Encoding: gzip Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT Date: Fri, 09 Nov 2012 20:33:45 GMT Expires: Sat, 09 Nov 2013 20:33:45 GMT X-Content-Type-Options: nosniff Server: sffe Content-Length: 73891 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 117723
GET /images/backgrounds/download/rockmelt/rockmelt_dl_btn.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:44 GMT Accept-Ranges: bytes Content-Length: 7653 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:49 GMT Connection: keep-alive
GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 Host: p.twitter.com GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false	HTTP/1.1 200 OK Content-Type: image/gif Etag: "377d257f2d2e294916143c069141c1c5:1328738114" Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT Accept-Ranges: bytes Content-Length: 43 Cache-Control: no-cache P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Date: Sun, 11 Nov 2012 05:15:49 GMT Connection: keep-alive
GET /js/master_85677.js HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/javascript Last-Modified: Fri, 09 Nov 2012 23:25:30 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Server: MediaFire Content-Length: 143613 Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:48 GMT Connection: keep-alive
GET /templates/linkto/default-729x91-default.php?r=74543 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:15:49 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 666 Connection: close Server: MediaFire
GET /templates/linkto/default-337x281-default.php?r=78628 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:15:49 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 786 Connection: close Server: MediaFire
GET /ad/3196.js HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 05:15:50 GMT Date: Sun, 11 Nov 2012 05:15:50 GMT Connection: keep-alive
GET /images/logos/logo_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 16 Jul 2012 19:28:31 GMT Accept-Ranges: bytes Content-Length: 3708 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:50 GMT Connection: keep-alive
GET /a/3196/3346/9685-15.js?cb=0.08206005144560591&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-15.js?cb=0.08206005144560591&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 05:15:50 GMT Server: RAS/1.3 (Unix) P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; expires=Sat, 09-Feb-2013 05:15:50 GMT; max-age=7776000; path=/; domain=.rubiconproject.com; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com; rdk=3196/3346; expires=Sun, 11-Nov-2012 06:15:50 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 06:15:50 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=96249; path=/; domain=.rubiconproject.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Transfer-Encoding: chunked
GET /images/ad-loader.gif HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 05 Jun 2012 20:09:03 GMT Accept-Ranges: bytes Content-Length: 1786 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:50 GMT Connection: keep-alive
GET /rubicon/px/aid:7d50878da868c52e99c75cfec3e00f6dbfe8d866;c:7A04E12E6E4E1123;s:6bdb00c88686993b;cid:33664;ts:1352610950520 HTTP/1.1 Host: 92.61.254.232 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache-Coyote/1.1 Cache-Control: max-age=0,no-cache,no-store Pragma: no-cache Expires: Tue, 11 Oct 1977 12:34:56 GMT Connection: close Content-Length: 807 Date: Sun, 11 Nov 2012 05:15:50 GMT
GET /beacon.js HTTP/1.1 Host: b.scorecardresearch.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628	HTTP/1.1 200 OK Content-Type: application/x-javascript Vary: Accept-Encoding Content-Encoding: gzip Expires: Sun, 25 Nov 2012 05:15:50 GMT Date: Sun, 11 Nov 2012 05:15:50 GMT Content-Length: 1140 Connection: keep-alive Cache-Control: private, no-transform, max-age=1209600
GET /pixel/p-01nD5uD1pGDW2.gif HTTP/1.1 Host: pixel.quantserve.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628	HTTP/1.1 200 OK Content-Type: image/gif Connection: close Set-Cookie: mc=509f3486-f15a4-3b10e-0ddbb; expires=Tue, 13-May-2014 05:15:50 GMT; path=/; domain=.quantserve.com P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Cache-Control: private, no-cache, no-store, proxy-revalidate Pragma: no-cache Expires: Fri, 04 Aug 1978 12:00:00 GMT Content-Length: 35 Date: Sun, 11 Nov 2012 05:15:50 GMT Server: QS
GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 Host: tap2-cdn.rubiconproject.com GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Last-Modified: Sat, 10 Nov 2012 20:12:21 GMT Content-Encoding: gzip Cache-Control: max-age=600 Expires: Sun, 11 Nov 2012 05:25:51 GMT Date: Sun, 11 Nov 2012 05:15:51 GMT Content-Length: 5080 Connection: keep-alive Vary: Accept-Encoding
GET /partner/scripts/rubicon/alice.js HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:56:23 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sun, 11 Nov 2012 06:15:51 GMT Date: Sun, 11 Nov 2012 05:15:51 GMT Content-Length: 5798 Connection: keep-alive Vary: Accept-Encoding
GET /ga.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 14888 Content-Encoding: gzip Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT X-Content-Type-Options: nosniff, nosniff Date: Sat, 10 Nov 2012 20:33:28 GMT Expires: Sun, 11 Nov 2012 08:33:28 GMT Vary: Accept-Encoding Age: 31343 Cache-Control: max-age=43200, public Server: GFE/2.0
GET /recaptcha/api/challenge?k=6LextQUAAAAAALlQv0DSHOYxqF3DftRZxA5yebEe HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: text/javascript Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Date: Sun, 11 Nov 2012 05:15:51 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 449 Server: GSE
GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 Host: www.facebook.com GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 Content-Encoding: gzip X-FB-Debug: zQYF/3O3aA8nrr/9B2EUvUysbSyNDrJZEWUnYbR/8MA= Date: Sun, 11 Nov 2012 05:15:51 GMT Transfer-Encoding: chunked Connection: keep-alive
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352610951874&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D78628&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352610951874&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D78628&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352610951874&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D78628&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 Date: Sun, 11 Nov 2012 05:15:51 GMT Connection: keep-alive Set-Cookie: UID=4cdbf1e-195.159.219.8-1352610951; expires=Sat, 01-Nov-2014 05:15:51 GMT; path=/; domain=.scorecardresearch.com UIDR=1352610951; expires=Sat, 01-Nov-2014 05:15:51 GMT; path=/; domain=.scorecardresearch.com Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=707269398&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=1478611401&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.1391577247.1352610952.1352610952.1352610952.1%3B%2B__utmz%3D213136648.1352610952.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 Host: www.google-analytics.com GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=707269398&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=1478611401&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.1391577247.1352610952.1352610952.1352610952.1%3B%2B__utmz%3D213136648.1352610952.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 09 Nov 2012 20:33:28 GMT Content-Length: 35 X-Content-Type-Options: nosniff Pragma: no-cache Expires: Wed, 19 Apr 2000 11:43:00 GMT Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Age: 117744 Server: GFE/2.0
POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 106 Content-Type: application/ocsp-request	HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 11 Nov 2012 05:15:52 GMT Server: Apache Content-Transfer-Encoding: Binary Cache-Control: max-age=18934, public, no-transform, must-revalidate Last-Modified: Sun, 11 Nov 2012 04:48:03 GMT Expires: Sun, 11 Nov 2012 10:48:03 GMT Etag: "bb5b989a88c5fa9b2f1a6ff76cf76088e831fb64" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA" Content-Length: 1923 Connection: close
GET /r1/ruum HTTP/1.1 Host: rp.gwallet.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: application/octet-stream Content-Length: 0 Server: radiumone/1.2 Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Expires: Tue, 29 Oct 2002 19:50:44 GMT Location: http://pixel.rubiconproject.com/tap.php?v=7935&nid=2271&expires=30&put=0VJ-ocLMubr9mqiWb7HvmO3ukp4 Pragma: no-cache P3P: CP="RadiumOne does not have a P3P policy. For information on our privacy policy please visit http://radiumone.com/about/privacy.html" Set-Cookie: ra1_uid=5571988876087819584; Expires=Mon, 11-Nov-2013 05:15:52 GMT; Path=/; Domain=gwallet.com; Version=1
GET /3900/3859/300x250.-ACA343C.swf?clickTag=http%3A%2F%2Fclickserv.sitescout.com%2Fclk%2F04713701195c110a%2F9878732a8e2f50e0%2F1-3346%2F2%2Fwww.mediafire.com%252F%2F%2FcidentMTk4NEVGQjYxNkRCNzlGOUIzNjNBQzJGRTQ1QTFBQzEvLw HTTP/1.1 Host: dspads.sitescout.netdna-cdn.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Date: Sun, 11 Nov 2012 05:15:52 GMT Content-Length: 54403 Connection: keep-alive Etag: W/"54403-1342719889000" Last-Modified: Thu, 19 Jul 2012 17:44:49 GMT Server: NetDNA-cache/2.2 X-Cache: HIT Accept-Ranges: bytes
GET /rb_match HTTP/1.1 Host: um.simpli.fi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain Server: nginx Date: Sun, 11 Nov 2012 05:15:52 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: uid=UQhw3b8G3uNcgXa970Y7r5%3D%3D; path=/; expires=Mon, 11 Nov 2013 05:15:52 GMT; domain=.simpli.fi Location: http://pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=DD700851E3DE06BFBD76815CAF3B46EF&expires=365 P3P: policyref="http://www.simplifi.com/w3c/Policies.xml", CP="ADMa DEVa PSAa PSDa OUR IND DSP NON COR"
GET /adserver/cookiematch?pnid=3000007 HTTP/1.1 Host: rubicon-rtb.p.veruta.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache-Coyote/1.1 Content-Length: 43 Date: Sun, 11 Nov 2012 05:15:51 GMT
GET /recaptcha/api/js/recaptcha.js HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: application/x-javascript Expires: Sun, 11 Nov 2012 05:15:52 GMT Date: Sun, 11 Nov 2012 05:15:52 GMT Last-Modified: Tue, 12 Jun 2012 14:07:31 GMT Content-Encoding: gzip X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 17531 Server: GSE Cache-Control: public, max-age=0 Age: 0
GET /m/rc HTTP/1.1 Host: rc.d.chango.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 35 Server: RTB Etag: "0f4e929dd5bb2564f7ab9c76338e04e292a42ace" Pragma: no-cache Cache-Control: no-cache, no-store, max-age=0, must-revalidate P3P: policyref="http://as.chango.com/static/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: _t=dcd4ee46-2bbe-11e2-8714-00259035d55a; Domain=chango.com; expires=Wed, 09 Nov 2022 05:15:52 GMT; Path=/ Connection: close
GET /recaptcha/api/img/red/refresh.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 06:03:32 GMT Date: Sun, 11 Nov 2012 05:03:32 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 974 Server: GSE Age: 740 Cache-Control: public, max-age=3600
GET /tap.php?v=7935&nid=2271&expires=30&put=0VJ-ocLMubr9mqiWb7HvmO3ukp4 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7935&nid=2271&expires=30&put=0VJ-ocLMubr9mqiWb7HvmO3ukp4 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:15:52 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%267935%3D1; expires=Tue, 11-Dec-2012 05:15:52 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%267935%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:15:52 GMT; path=/; domain=.pixel.rubiconproject.com put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; expires=Tue, 11-Dec-2012 05:15:52 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9854 Connection: Keep-Alive
GET /tap.php?v=6286&nid=2132&put=DD700851E3DE06BFBD76815CAF3B46EF&expires=365 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=6286&nid=2132&put=DD700851E3DE06BFBD76815CAF3B46EF&expires=365 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:15:52 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%266286%3D1; expires=Tue, 11-Dec-2012 05:15:52 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:15:52 GMT; path=/; domain=.pixel.rubiconproject.com put_2132=DD700851E3DE06BFBD76815CAF3B46EF; expires=Mon, 11-Nov-2013 05:15:52 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9851 Connection: Keep-Alive
GET /rsrc.php/v2/yW/r/4SdXcaE0lBj.js HTTP/1.1 Host: static.ak.fbcdn.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80 Origin: http://www.facebook.com	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 29 Oct 2012 23:55:41 GMT X-Content-Type-Options: nosniff Content-Encoding: gzip X-FB-Debug: mERPLeHfP4bFbWVj/NJRwm2C8x1Lf8geAnYAfFf24WM= Content-Length: 37945 Vary: Accept-Encoding Cache-Control: public, max-age=31136231 Expires: Wed, 06 Nov 2013 14:13:03 GMT Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_blog.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 171 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_gp.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 29 Aug 2012 21:02:04 GMT Accept-Ranges: bytes Content-Length: 312 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /images/backgrounds/footer/footer_texture.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 20:31:25 GMT Accept-Ranges: bytes Content-Length: 2649 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 Host: fpdownload2.macromedia.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 200 OK Content-Type: text/xml Server: Apache Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT Etag: "87de33-256-4cd617ed12480" Accept-Ranges: bytes Content-Length: 598 Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_tw.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 274 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /images/backgrounds/footer/icn_footer_fb.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT Accept-Ranges: bytes Content-Length: 514 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /images/backgrounds/newHome/loginActivateTW_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 387 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:52 GMT Connection: keep-alive
GET /templates/linkto/default-337x281-default2.php?r=91414 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:15:53 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 787 Connection: close Server: MediaFire
GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 Host: secure.gravatar.com GET /avatar/00000000?s=27&d=mm&f=y HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx Date: Sun, 11 Nov 2012 05:15:53 GMT Content-Length: 906 Connection: keep-alive Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Access-Control-Allow-Origin: * Content-Disposition: inline; filename="00000000.png" X-Varnish: 2464724670 2461089695 Via: 1.1 varnish Expires: Sun, 11 Nov 2012 05:20:53 GMT Cache-Control: max-age=300
GET /ad/3196.js?cb=0.8505172688825478 HTTP/1.1 Host: ads.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543 Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0	HTTP/1.1 200 OK Content-Type: text/javascript Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.2.3 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3524 Cneonction: close Cache-Control: max-age=86400 Expires: Mon, 12 Nov 2012 05:15:53 GMT Date: Sun, 11 Nov 2012 05:15:53 GMT Connection: keep-alive
GET /helper_01.swf HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Date: Sun, 11 Nov 2012 05:15:53 GMT Last-Modified: Sat, 15 Oct 2011 19:43:58 GMT Accept-Ranges: bytes Content-Length: 1480 Cache-Control: max-age=2592000 Expires: Tue, 11 Dec 2012 05:15:53 GMT Connection: close Server: MediaFire
GET /a/3196/3346/27309-15.js?cb=0.11460369269349036&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/27309-15.js?cb=0.11460369269349036&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=91414 Cookie: rpb=14240%3D1%266286%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 05:15:53 GMT Server: RAS/1.3 (Unix) Set-Cookie: rdk=3196/3346; expires=Sun, 11-Nov-2012 06:15:53 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk15=0; expires=Sun, 11-Nov-2012 06:15:53 GMT; max-age=10; path=/; domain=.rubiconproject.com ses15=3346^2; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=96246; path=/; domain=.rubiconproject.com csi15=3338758.js^1^1352610953^1352610953; expires=Sun, 18-Nov-2012 05:15:53 GMT; max-age=604800; path=/; domain=.rubiconproject.com; P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=64 Connection: Keep-Alive Transfer-Encoding: chunked
GET /a/3196/3346/9685-2.js?cb=0.47918882178077704&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-2.js?cb=0.47918882178077704&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543 Cookie: rpb=14240%3D1%266286%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^1; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 05:15:53 GMT Server: RAS/1.3 (Unix) Set-Cookie: rdk=3196/3346; expires=Sun, 11-Nov-2012 06:15:53 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk2=0; expires=Sun, 11-Nov-2012 06:15:53 GMT; max-age=10; path=/; domain=.rubiconproject.com ses2=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=96246; path=/; domain=.rubiconproject.com csi2=3347941.js^1^1352610953^1352610953; expires=Sun, 18-Nov-2012 05:15:53 GMT; max-age=604800; path=/; domain=.rubiconproject.com; P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Transfer-Encoding: chunked
GET /adframe.php?pid=11&ord=0.5469222253640208&rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/27309-15.3338758.3406494?url= HTTP/1.1 Host: mymedia.adspirit.de GET /adframe.php?pid=11&ord=0.5469222253640208&rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/27309-15.3338758.3406494?url= HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=91414	HTTP/1.1 200 OK Content-Type: text/html; charset=iso-8859-1 Date: Sun, 11 Nov 2012 05:15:53 GMT Server: Apache/2.2.3 (Red Hat) X-Powered-By: PHP/5.2.6 Cache-Control: no-store Pragma: no-cache P3P: CP="STP CUR OUR" x-own: 46.163.123.34 x-rqc: 11 Set-Cookie: mymedia_ex=; expires=Mon, 11-Nov-2013 06:15:53 GMT; domain=.adspirit.de; path=/ Content-Length: 3686 Connection: close
GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352610951874&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D78628&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352610951874&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D78628&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628 Cookie: UID=4cdbf1e-195.159.219.8-1352610951; UIDR=1352610951	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 05:15:54 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /images/backgrounds/newHome/loginActivateFB_v2.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Sat, 14 Jul 2012 02:45:36 GMT Accept-Ranges: bytes Content-Length: 255 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:15:54 GMT Connection: keep-alive
GET /adview.php?tz=1352610953&pid=11&kid=6&wmid=32&nvc=1&target=- HTTP/1.1 Host: mymedia.adspirit.de GET /adview.php?tz=1352610953&pid=11&kid=6&wmid=32&nvc=1&target=- HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://mymedia.adspirit.de/adframe.php?pid=11&ord=0.5469222253640208&rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/27309-15.3338758.3406494?url= Cookie: mymedia_ex=	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:15:54 GMT Server: Apache/2.2.3 (Red Hat) X-Powered-By: PHP/5.2.6 P3P: CP="STP CUR OUR" Cache-Control: no-cache x-own: 46.163.123.40 x-1: 0.0231266021729 x-2: 0.00715255737305 x-3: 0.0150203704834 x-4: 0.00810623168945 x-5: 0.0259876251221 x-6b: 0.00500679016113 x-6c: 0.0309944152832 x-7: 0.212907791138 x-8: 0.0860691070557 x-9: 0.00882148742676 x-10: 0.0808238983154 x-total: 0.608921051025 Content-Length: 43 Connection: close Pragma: no-cache
GET /banner/flashme.js HTTP/1.1 Host: img12.adspirit.de User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://mymedia.adspirit.de/adframe.php?pid=11&ord=0.5469222253640208&rdclick=http://optimized-by.rubiconproject.com/t/3196/3346/27309-15.3338758.3406494?url= Cookie: mymedia_ex=	HTTP/1.1 200 OK Content-Type: application/javascript Accept-Ranges: bytes Etag: "750553654" Last-Modified: Wed, 19 Sep 2012 14:57:05 GMT Content-Length: 4318 Connection: close Date: Sun, 11 Nov 2012 05:15:49 GMT Server: lighttpd/1.4.28
GET /st?ad_type=safee&ad_size=728x90&section=3389608 HTTP/1.1 Host: yieldmanager.adbooth.net GET /st?ad_type=safee&ad_size=728x90&section=3389608 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543	HTTP/1.1 200 OK HTTP/1.1 200 OK Date: Sun, 11 Nov 2012 05:15:54 GMT Server: YTS/1.20.13 X-RightMedia-Hostname: raptor0508.rm.bf1.yahoo.com P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Vary: * Last-Modified: Sun, 11 Nov 2012 05:15:54 GMT Expires: Sun, 11 Nov 2012 05:15:54 GMT Pragma: no-cache Content-Encoding: gzip Age: 0 Transfer-Encoding: chunked Connection: keep-alive
GET /imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 HTTP/1.1 Host: yieldmanager.adbooth.net GET /imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543	HTTP/1.1 302 Found HTTP/1.1 302 Found Date: Sun, 11 Nov 2012 05:15:54 GMT Server: YTS/1.20.13 X-RightMedia-Hostname: raptor0295.rm.bf1.yahoo.com P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: http://ad.yieldmanager.com/imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Vary: * Last-Modified: Sun, 11 Nov 2012 05:15:54 GMT Expires: Sun, 11 Nov 2012 05:15:54 GMT Pragma: no-cache Content-Encoding: gzip Age: 0 Transfer-Encoding: chunked Connection: keep-alive
GET /partner/scripts/rubicon/page_parser.js?d=www.mediafire.com HTTP/1.1 Host: tap-cdn.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=78628 Cookie: rpb=14240%3D1%266286%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; rdk2=0; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Server: TRP Apache-Coyote/1.1 Last-Modified: Sat, 10 Nov 2012 13:55:58 GMT P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Content-Encoding: gzip Cache-Control: max-age=3600 Expires: Sun, 11 Nov 2012 06:15:56 GMT Date: Sun, 11 Nov 2012 05:15:56 GMT Content-Length: 5705 Connection: keep-alive Vary: Accept-Encoding
GET /imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 HTTP/1.1 Host: ad.yieldmanager.com GET /imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543	HTTP/1.1 302 Found HTTP/1.1 302 Found Date: Sun, 11 Nov 2012 05:15:58 GMT Server: YTS/1.20.13 X-RightMedia-Hostname: raptor0796.rm.bf1.yahoo.com P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Location: http://cookex.amp.yahoo.com/v2/cexposer/SIG=12ju2sh1c/http%3A//ad.yieldmanager.com/imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Vary: Last-Modified: Sun, 11 Nov 2012 05:15:58 GMT Expires: Sun, 11 Nov 2012 05:15:58 GMT Pragma: no-cache Content-Encoding: gzip Age: 0 Transfer-Encoding: chunked Connection: keep-alive
GET /recaptcha/api/img/red/sprite.png HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/png Expires: Sun, 11 Nov 2012 05:33:33 GMT Date: Sun, 11 Nov 2012 04:33:33 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 4679 Server: GSE Age: 2545 Cache-Control: public, max-age=3600
GET /v2/cexposer/SIG=12ju2sh1c/http%3A//ad.yieldmanager.com/imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 HTTP/1.1 Host: cookex.amp.yahoo.com GET /v2/cexposer/SIG=12ju2sh1c/http%3A//ad.yieldmanager.com/imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Sun, 11 Nov 2012 05:15:58 GMT Set-Cookie: B=dtui4p589ud4e&b=3&s=jb; expires=Tue, 12-Nov-2014 20:00:00 GMT; path=/; domain=.yahoo.com P3P: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" Location: http://ad.yieldmanager.com/imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0&SIG=10vga28gf;x-cookie=qghv4c589hq4r&o=3&f=wo Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Cache-Control: private
GET /imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0&SIG=10vga28gf;x-cookie=qghv4c589hq4r&o=3&f=wo HTTP/1.1 Host: ad.yieldmanager.com GET /imp?Z=728x90&s=3389608&t=4&_salt=2782677082&B=10&r=0&SIG=10vga28gf;x-cookie=qghv4c589hq4r&o=3&f=wo HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543	HTTP/1.1 200 OK Content-Type: application/x-javascript Date: Sun, 11 Nov 2012 05:15:58 GMT Server: YTS/1.20.13 X-RightMedia-Hostname: raptor1127.rm.bf1.yahoo.com P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: BX=dtui4p589ud4e&b=3&s=jb&t=315; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT uid=uid=e094150c-2bbe-11e2-833d-0726a18f0f44&_hmacv=1&_salt=1776931958&_keyid=k1&_hmac=9914b5225b0faa3e8c732ab565a5ab63a5000ce8; path=/; expires=Tue, 11-Dec-2012 05:15:58 GMT RMBX=dtui4p589ud4e&b=3&s=jb&t=315; path=/; expires=Tue, 19-Jan-2038 03:14:07 GMT Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Vary: * Last-Modified: Sun, 11 Nov 2012 05:15:58 GMT Expires: Sun, 11 Nov 2012 05:15:58 GMT Pragma: no-cache Content-Encoding: gzip Age: 0 Transfer-Encoding: chunked Connection: keep-alive
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3420885&ns__t=1352610958905&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D74543&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3420885&ns__t=1352610958905&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D74543&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543 Cookie: UID=4cdbf1e-195.159.219.8-1352610951; UIDR=1352610951	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 05:15:59 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /pixel?google_nid=rubicon&google_cm&google_sc HTTP/1.1 Host: cm.g.doubleclick.net GET /pixel?google_nid=rubicon&google_cm&google_sc HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: http://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&put=CAESEOQbgGCszNKKg2Z3HuFXD_0&google_cver=1 Date: Sun, 11 Nov 2012 05:15:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Server: Cookie Matcher Content-Length: 325 X-XSS-Protection: 1; mode=block
GET /atoms/f8/f6/97/1e/f8f6971e293b55e55e2f1b52e47de0a.gif HTTP/1.1 Host: content.yieldmanager.edgesuite.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543	HTTP/1.1 200 OK Content-Type: image/gif Server: Apache Etag: "f8f6971e293b55e55e2f1b52e47de0af:1330266514" Last-Modified: Sun, 26 Feb 2012 14:28:33 GMT Accept-Ranges: bytes Content-Length: 6173 Cache-Control: max-age=31536000 Date: Sun, 11 Nov 2012 05:15:59 GMT Connection: keep-alive
GET /do-association?rbc HTTP/1.1 Host: matcher-rbc.bidder7.mookie1.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:15:59 GMT Server: Apache/2.2.3 (Red Hat) Set-Cookie: id=4611686278532310230; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 05:15:59 GMT mdata=1\|4611686278532310230\|1352610959; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 05:15:59 GMT Location: /do-association-set?rbc Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=882 Connection: Keep-Alive
GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 Host: m.xp1.ru4.com GET /activity?_o=62795&_t=cm_rub_pre HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Sun-Java-System-Web-Server/7.0 Date: Sun, 11 Nov 2012 05:15:59 GMT P3P: policyref="/w3c/p3p.xml", CP="NON DSP COR PSAa OUR STP UNI" Pragma: no-cache Set-Cookie: X1ID=NC-00000002692474940; domain=.ru4.com; path=/; expires=Sun, 11-May-2014 00:15:59 GMT Location: http://pixel.rubiconproject.com/tap.php?v=5671&nid=2081&put=NC-00000002692474940&expires=30 Content-Length: 0
GET /Logger/impressionLogger.php?vURLID=195376602&advertiserID=441093&advertiserLIID=3077960&sectionID=3389608&publisherID=739730&creativeID=13480712&URL=http%3A%2F%2Fwww%2Emediafire%2Ecom%2Ftemplates%2Flinkto%2Fdefault%2D729x91%2Ddefault%2Ephp%3Fr%3D74543 HTTP/1.1 Host: router.tlvmedia.com GET /Logger/impressionLogger.php?vURLID=195376602&advertiserID=441093&advertiserLIID=3077960&sectionID=3389608&publisherID=739730&creativeID=13480712&URL=http%3A%2F%2Fwww%2Emediafire%2Ecom%2Ftemplates%2Flinkto%2Fdefault%2D729x91%2Ddefault%2Ephp%3Fr%3D74543 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543	HTTP/1.1 302 Moved Temporarily Content-Type: text/html Server: nginx/1.0.14 Date: Sun, 11 Nov 2012 05:15:59 GMT Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/5.3.3 Location: http://ad.yieldmanager.com/pixel?id=534661&id=1618299&id=1584032&t=2
GET /tap.php?v=5671&nid=2081&put=NC-00000002692474940&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5671&nid=2081&put=NC-00000002692474940&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%266286%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; rdk2=0; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:15:59 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%266286%3D1%265671%3D1; expires=Tue, 11-Dec-2012 05:15:59 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%265671%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:15:59 GMT; path=/; domain=.pixel.rubiconproject.com put_2081=NC-00000002692474940; expires=Tue, 11-Dec-2012 05:15:59 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9825 Connection: Keep-Alive
GET /do-association-set?rbc HTTP/1.1 Host: matcher-rbc.bidder7.mookie1.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4611686278532310230; mdata=1\|4611686278532310230\|1352610959	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:15:59 GMT Server: Apache/2.2.3 (Red Hat) Location: http://cm.g.doubleclick.net/pixel?google_nid=themig&google_cm&google_sc&can=ffffffffffffffff&v2 Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=950 Connection: Keep-Alive
GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 Host: user.lucidmedia.com GET /clicksense/user?p=9ce688505699aefa&r=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily HTTP/1.1 302 Moved Temporarily Server: Apache-Coyote/1.1 Cache-Control: no-cache, no-store Pragma: no-cache Date: Sun, 11 Nov 2012 05:15:59 GMT Expires: Sun, 11 Nov 2012 05:15:59 GMT P3P: CP="NOI ADM DEV CUR" X-Handled-By: awswrh22/127.0.0.1 Set-Cookie: lm_userid=3fhtJ12Bske; Domain=.lucidmedia.com; Expires=Mon, 11-Nov-2013 05:15:59 GMT; Path=/ Location: http://pixel.rubiconproject.com/tap.php?v=7206&nid=1197&put=4246302156551326762&expires=30 Content-Length: 0 Connection: close
GET /pixel?google_nid=themig&google_cm&google_sc&can=ffffffffffffffff&v2 HTTP/1.1 Host: cm.g.doubleclick.net GET /pixel?google_nid=themig&google_cm&google_sc&can=ffffffffffffffff&v2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=223ae1776901005b\|\|t=1350343758\|et=730\|cs=002213fd480aa30e9cef2f5d42	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: http://matcher.bidder7.mookie1.com/google?id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 Date: Sun, 11 Nov 2012 05:15:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Server: Cookie Matcher Content-Length: 336 X-XSS-Protection: 1; mode=block
GET /tap.php?v=7206&nid=1197&put=4246302156551326762&expires=30 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7206&nid=1197&put=4246302156551326762&expires=30 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%266286%3D1%265671%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%265671%3D25077%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; rdk2=0; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953; put_2081=NC-00000002692474940	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:15:59 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%266286%3D1%265671%3D1%267206%3D1; expires=Tue, 11-Dec-2012 05:15:59 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%265671%3D25077%2C0%2C1%2C%2C%267206%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:15:59 GMT; path=/; domain=.pixel.rubiconproject.com put_1197=4246302156551326762; expires=Tue, 11-Dec-2012 05:15:59 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9258 Connection: Keep-Alive
GET /pixel?id=534661&id=1618299&id=1584032&t=2 HTTP/1.1 Host: ad.yieldmanager.com GET /pixel?id=534661&id=1618299&id=1584032&t=2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=74543 Cookie: BX=dtui4p589ud4e&b=3&s=jb&t=315; uid=uid=e094150c-2bbe-11e2-833d-0726a18f0f44&_hmacv=1&_salt=1776931958&_keyid=k1&_hmac=9914b5225b0faa3e8c732ab565a5ab63a5000ce8; RMBX=dtui4p589ud4e&b=3&s=jb&t=315	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:15:59 GMT Server: YTS/1.20.13 X-RightMedia-Hostname: raptor0257.rm.bf1.yahoo.com P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Vary: * Last-Modified: Sun, 11 Nov 2012 05:15:59 GMT Expires: Sun, 11 Nov 2012 05:15:59 GMT Pragma: no-cache Content-Encoding: gzip Age: 0 Transfer-Encoding: chunked Connection: keep-alive
GET /google?id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 HTTP/1.1 Host: matcher.bidder7.mookie1.com GET /google?id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4611686278532310230; mdata=1\|4611686278532310230\|1352610959	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:15:59 GMT Server: Apache/2.2.3 (Red Hat) Location: http://matcher.bidder8.mookie1.com/google?zap-redir&id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=937 Connection: Keep-Alive
GET /google?zap-redir&id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 HTTP/1.1 Host: matcher.bidder8.mookie1.com GET /google?zap-redir&id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4611686278532310230; mdata=1\|4611686278532310230\|1352610959	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:00 GMT Server: Apache/2.2.3 (Red Hat) Location: http://ib.adnxs.com/getuid?http://matcher-apx.bidder7.mookie1.com/appnexus?can=fffffffffffffffe%26adnxs_uid=$UID Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=923 Connection: Keep-Alive
GET /getuid?http://matcher-apx.bidder7.mookie1.com/appnexus?can=fffffffffffffffe%26adnxs_uid=$UID HTTP/1.1 Host: ib.adnxs.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(Gaxlrk5.$WN_]Dl5M7G(nDS'6pnU	HTTP/1.1 302 Moved Content-Type: text/html; charset=ISO-8859-1 Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 05:16:00 GMT; domain=.adnxs.com; HttpOnly sess=1; path=/; expires=Mon, 12-Nov-2012 05:16:00 GMT; domain=.adnxs.com; HttpOnly Location: http://matcher-apx.bidder7.mookie1.com/appnexus?can=fffffffffffffffe&adnxs_uid=5858721859426781856 Date: Sun, 11 Nov 2012 05:16:00 GMT Content-Length: 0
GET /appnexus?can=fffffffffffffffe&adnxs_uid=5858721859426781856 HTTP/1.1 Host: matcher-apx.bidder7.mookie1.com GET /appnexus?can=fffffffffffffffe&adnxs_uid=5858721859426781856 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4611686278532310230; mdata=1\|4611686278532310230\|1352610959	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:00 GMT Server: Apache/2.2.3 (Red Hat) Location: http://matcher.bidder8.mookie1.com/appnexus?zap-redir&can=fffffffffffffffe&adnxs_uid=5858721859426781856 Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=701 Connection: Keep-Alive
GET /appnexus?zap-redir&can=fffffffffffffffe&adnxs_uid=5858721859426781856 HTTP/1.1 Host: matcher.bidder8.mookie1.com GET /appnexus?zap-redir&can=fffffffffffffffe&adnxs_uid=5858721859426781856 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4611686278532310230; mdata=1\|4611686278532310230\|1352610959	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:01 GMT Server: Apache/2.2.3 (Red Hat) Location: http://bh.contextweb.com/bh/rtset?do=add&pid=536088&ev=4611686278532310230&rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=fffffffffffffff6 Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=943 Connection: Keep-Alive
GET /recaptcha/api/img/red/audio.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 05:59:41 GMT Date: Sun, 11 Nov 2012 04:59:41 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 914 Server: GSE Age: 980 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/help.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 06:06:34 GMT Date: Sun, 11 Nov 2012 05:06:34 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 367 Server: GSE Age: 567 Cache-Control: public, max-age=3600
GET /recaptcha/api/img/red/text.gif HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/gif Expires: Sun, 11 Nov 2012 06:16:01 GMT Date: Sun, 11 Nov 2012 05:16:01 GMT Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 155 Server: GSE Cache-Control: public, max-age=3600 Age: 0
GET /recaptcha/api/image?c=03AHJ_Vut1xIZErVKD2JLfkEoqA2IYdKgm4HOtMiGR09pUbHSV4o1xk1m3ETPrFCEr6syg4Z6vMN8sxR-Tl98bC2bgd9s7fnaFYd6vnQI3GRsDLMqTU3UlPOiXucNA6aYLyUZfz8DD4A8RE1ry-1wREgW7kZ5hn0Uo_zECqnI3GjXg5LgRiSLOROc HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Sun, 11 Nov 2012 05:26:01 GMT Date: Sun, 11 Nov 2012 05:16:01 GMT Cache-Control: public, max-age=600 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 2789 Server: GSE
GET /templates/linkto/default-161x601-default.php?r=58503 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:01 GMT Cache-Control: no-cache Pragma: no-cache Expires: 0 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 733 Connection: close Server: MediaFire
GET /bh/rtset?do=add&pid=536088&ev=4611686278532310230&rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=fffffffffffffff6 HTTP/1.1 Host: bh.contextweb.com GET /bh/rtset?do=add&pid=536088&ev=4611686278532310230&rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=fffffffffffffff6 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/html;charset=ISO-8859-1 Cache-Control: private, max-age=0, no-cache, no-store Content-Language: en-US CW-Server: ip-10-98-119-224 Date: Sun, 11 Nov 2012 05:16:01 GMT Expires: -1 Location: http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb&can=fffffffffffffff6 P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Server: GlassFish v3 Set-Cookie: V=xUr8zm6juVyd; Domain=.contextweb.com; Expires=Wed, 06-Nov-2013 05:16:02 GMT; Path=/ pb_rtb_ev=2-536088.4611686278532310230.0.0.1352610962251; Domain=.contextweb.com; Expires=Mon, 11-Nov-2013 05:16:02 GMT; Path=/ Content-Length: 242 Connection: keep-alive
GET /static/fonts/opensans/v6/k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM.woff HTTP/1.1 Host: themes.googleusercontent.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: https://fonts.googleapis.com/css?family=Open+Sans:800,400,700 Origin: http://www.mediafire.com	HTTP/1.1 200 OK Content-Type: font/woff Last-Modified: Mon, 02 Apr 2012 00:13:23 GMT Date: Fri, 09 Nov 2012 20:33:30 GMT Expires: Sat, 09 Nov 2013 20:33:30 GMT Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: sffe Content-Length: 22748 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=31536000 Age: 117752
GET /a/3196/3346/9685-9.js?cb=0.2919427692622074&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 Host: optimized-by.rubiconproject.com GET /a/3196/3346/9685-9.js?cb=0.2919427692622074&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=58503 Cookie: rpb=14240%3D1%266286%3D1%265671%3D1%267206%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; rdk2=0; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953; put_2081=NC-00000002692474940; put_1197=4246302156551326762	HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 11 Nov 2012 05:16:02 GMT Server: RAS/1.3 (Unix) Set-Cookie: rdk=3196/3346; expires=Sun, 11-Nov-2012 06:16:02 GMT; max-age=60; path=/; domain=.rubiconproject.com rdk9=0; expires=Sun, 11-Nov-2012 06:16:02 GMT; max-age=10; path=/; domain=.rubiconproject.com ses9=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=96237; path=/; domain=.rubiconproject.com csi9=3348063.js^1^1352610962^1352610962; expires=Sun, 18-Nov-2012 05:16:02 GMT; max-age=604800; path=/; domain=.rubiconproject.com; P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 17 Sep 1975 21:32:10 GMT Keep-Alive: timeout=5, max=69 Connection: Keep-Alive Transfer-Encoding: chunked
GET /en_US/all.js?_=1352610952799 HTTP/1.1 Host: connect.facebook.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Etag: "06c9a8ca347f3538149da85e21e875b7" Content-Encoding: gzip X-FB-Debug: I31pDw2dv61g5Wz+pAlT7JWdx73Tjg7ZafF9EgOFy2s= Content-Length: 58144 Cache-Control: public, max-age=1127 Expires: Sun, 11 Nov 2012 05:34:48 GMT Date: Sun, 11 Nov 2012 05:16:01 GMT Connection: keep-alive Vary: Accept-Encoding
GET /st?ad_type=ad&ad_size=160x600&section=3434596&pub_url=${PUB_URL} HTTP/1.1 Host: ad.yieldmanager.com GET /st?ad_type=ad&ad_size=160x600&section=3434596&pub_url=${PUB_URL} HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=58503 Cookie: BX=dtui4p589ud4e&b=3&s=jb&t=315; uid=uid=e094150c-2bbe-11e2-833d-0726a18f0f44&_hmacv=1&_salt=1776931958&_keyid=k1&_hmac=9914b5225b0faa3e8c732ab565a5ab63a5000ce8; RMBX=dtui4p589ud4e&b=3&s=jb&t=315	HTTP/1.1 200 OK HTTP/1.1 200 OK Date: Sun, 11 Nov 2012 05:16:02 GMT Server: YTS/1.20.13 X-RightMedia-Hostname: raptor0637.rm.bf1.yahoo.com P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Vary: * Last-Modified: Sun, 11 Nov 2012 05:16:02 GMT Expires: Sun, 11 Nov 2012 05:16:02 GMT Pragma: no-cache Content-Encoding: gzip Age: 0 Transfer-Encoding: chunked Connection: keep-alive
GET /imp?Z=160x600&s=3434596&_salt=2414905192&B=10&r=0 HTTP/1.1 Host: ad.yieldmanager.com GET /imp?Z=160x600&s=3434596&_salt=2414905192&B=10&r=0 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: / Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=58503 Cookie: BX=dtui4p589ud4e&b=3&s=jb&t=315; uid=uid=e094150c-2bbe-11e2-833d-0726a18f0f44&_hmacv=1&_salt=1776931958&_keyid=k1&_hmac=9914b5225b0faa3e8c732ab565a5ab63a5000ce8; RMBX=dtui4p589ud4e&b=3&s=jb&t=315	HTTP/1.1 200 OK Content-Type: application/x-javascript Date: Sun, 11 Nov 2012 05:16:02 GMT Server: YTS/1.20.13 X-RightMedia-Hostname: raptor0259.rm.bf1.yahoo.com P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Vary: * Last-Modified: Sun, 11 Nov 2012 05:16:02 GMT Expires: Sun, 11 Nov 2012 05:16:02 GMT Pragma: no-cache Content-Encoding: gzip Age: 0 Transfer-Encoding: chunked Connection: keep-alive
GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3421021&ns__t=1352610962942&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D58503&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 Host: b.scorecardresearch.com GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3421021&ns__t=1352610962942&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D58503&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=58503 Cookie: UID=4cdbf1e-195.159.219.8-1352610951; UIDR=1352610951	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Content-Length: 0 Date: Sun, 11 Nov 2012 05:16:03 GMT Connection: keep-alive Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate
GET /pixel/p-e4m3Yko6bFYVc.gif?idmatch=0 HTTP/1.1 Host: pixel.quantserve.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: mc=509f3486-f15a4-3b10e-0ddbb	HTTP/1.1 200 OK Content-Type: image/gif Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Pragma: no-cache Expires: Fri, 04 Aug 1978 12:00:00 GMT Content-Length: 35 Date: Sun, 11 Nov 2012 05:16:03 GMT Server: QS
GET /atoms/5e/a5/ce/f7/5ea5cef78dd675750052da7c2b65a6d1.swf?clickTag=http%3A%2F%2Fad%2Eyieldmanager%2Ecom%2Fclk%3F3%2CeJytjd1ugjAYhq%2DGMySUrqWE7KCkgUkscQxM9AxprZ1lENcF59UPlXgFe%2EPlzfP9AxgLJEK8hwBhEPohwjGAjRQSIbGPXD%2DO4wDBiOCQEOTmv7WiWdkXlLacbhN6V83XdJa6Wf%2EgNbl5kgSl%2DBjntore6b%2DIvb2U9czL%2D1%2EFCM020IRVnzzHsvrK2cYUXf65qnK97WrLq9RwDTRnwqyq9rpjpwtnyi%2DyZbBTz81X1z1aOziQOkE6xTiOXieFbg76LL2276aald1gGiu%2EJzb662T7CYQ8ND%2EGLgAGF%2DyDxZx7w3E6lp4dyBBBPvwDRIBtiA%3D%3D%2C HTTP/1.1 Host: content.yieldmanager.edgesuite.net User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=58503	HTTP/1.1 200 OK Content-Type: application/x-shockwave-flash Server: Apache Etag: "5ea5cef78dd675750052da7c2b65a6d1:1344499587" Last-Modified: Thu, 09 Aug 2012 08:06:21 GMT Accept-Ranges: bytes Content-Length: 16134 Cache-Control: max-age=31536000 Date: Sun, 11 Nov 2012 05:16:03 GMT Connection: keep-alive
GET /redirect?ex=11 HTTP/1.1 Host: cm.netseer.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:03 GMT Location: http://cm.netseer.com/redirect?ex=11&cookie=2 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Server: Apache-Coyote/1.1 Set-Cookie: netseer_v3_vi=H4sIAAAAAAAAADOyKi0uMk5LSkpKS0wxNU4yNLGwNLAyNDY1MjM0sDQzNjY1AABEFUE-IwAAAA; Domain=.netseer.com; Expires=Tue, 11-Nov-2014 05:16:03 GMT; Path=/ Content-Length: 0 Connection: keep-alive
GET /oz/feeds/invite-media-rtb/tokens/?rt=iframe HTTP/1.1 Host: tap.rubiconproject.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%266286%3D1%265671%3D1%267206%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; rdk2=0; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953; put_2081=NC-00000002692474940; put_1197=4246302156551326762; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352610962^1352610962	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:03 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=6075bc540ebff4bb2ee0d50809cda9fc3c2608b1&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 05:16:03 GMT; Path=/ au=H9DPN711-9SJT-10.250.151.242; Domain=.rubiconproject.com; Expires=Mon, 09-Nov-2020 05:16:03 GMT; Path=/ dq=1\|1\|0\|0; Expires=Mon, 11-Nov-2013 05:16:03 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 05:16:03 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=164 Connection: Keep-Alive
GET /dmp/pixelSync?network=Rubicon HTTP/1.1 Host: pixel.sitescout.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 204 No Content HTTP/1.1 204 No Content Server: Apache-Coyote/1.1 Date: Sun, 11 Nov 2012 05:16:02 GMT
GET /rubicon_sync?publisher_user_id=6075bc540ebff4bb2ee0d50809cda9fc3c2608b1&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 Host: pixel.invitemedia.com GET /rubicon_sync?publisher_user_id=6075bc540ebff4bb2ee0d50809cda9fc3c2608b1&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 200 OK Content-Type: text/html Date: Sun, 11 Nov 2012 05:16:03 GMT Set-Cookie: uid=354c7ce1-0d13-46d6-8291-ec987cb1ba8e;Path=/;Domain=invitemedia.com;Expires=Mon, 11-Nov-2013 05:16:03 GMT impressions=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT clicks=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT segments=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT io_frequency=;Path=/;Domain=invitemedia.com;Expires=Thu, 01-Jan-1970 00:00:01 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="OTI DSP COR ADMo TAIo PSAo PSDo CONo OUR SAMo OTRo STP UNI PUR COM NAV INT DEM STA PRE LOC" Cache-Control: no-cache Content-Length: 221 Connection: close Server: Jetty(7.3.1.v20110307)
GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353042963&publisher_dsp_id=2101&external_user_id=354c7ce1-0d13-46d6-8291-ec987cb1ba8e HTTP/1.1 Host: tap.rubiconproject.com GET /oz/feeds/invite-media-rtb/tokens/?Expiration=1353042963&publisher_dsp_id=2101&external_user_id=354c7ce1-0d13-46d6-8291-ec987cb1ba8e HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=6075bc540ebff4bb2ee0d50809cda9fc3c2608b1&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%266286%3D1%265671%3D1%267206%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953; put_2081=NC-00000002692474940; put_1197=4246302156551326762; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352610962^1352610962; cd=false; au=H9DPN711-9SJT-10.250.151.242; dq=1\|1\|0\|0; lm="11 Nov 2012 05:16:03 GMT"	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:03 GMT Server: TRP Apache-Coyote/1.1 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Location: http://pixel.rubiconproject.com/tap.php?v=5852&nid=2101&put=354c7ce1-0d13-46d6-8291-ec987cb1ba8e Content-Length: 0 Cache-Control: private Set-Cookie: cd=false; Domain=.rubiconproject.com; Expires=Mon, 11-Nov-2013 05:16:03 GMT; Path=/ dq=2\|2\|0\|0; Expires=Mon, 11-Nov-2013 05:16:03 GMT; Path=/ put_2101=""; Domain=.rubiconproject.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ lm="11 Nov 2012 05:16:03 GMT"; Version=1; Domain=.rubiconproject.com; Max-Age=31536000; Path=/ SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Keep-Alive: timeout=5, max=93 Connection: Keep-Alive
GET /tap.php?v=5852&nid=2101&put=354c7ce1-0d13-46d6-8291-ec987cb1ba8e HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=5852&nid=2101&put=354c7ce1-0d13-46d6-8291-ec987cb1ba8e HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://pixel.invitemedia.com/rubicon_sync?publisher_user_id=6075bc540ebff4bb2ee0d50809cda9fc3c2608b1&publisher_dsp_id=2101&publisher_call_type=iframe&publisher_redirecturl=http://tap.rubiconproject.com/oz/feeds/invite-media-rtb/tokens/ Cookie: rpb=14240%3D1%266286%3D1%265671%3D1%267206%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%265671%3D25077%2C0%2C1%2C%2C%267206%3D25077%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953; put_2081=NC-00000002692474940; put_1197=4246302156551326762; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352610962^1352610962; cd=false; au=H9DPN711-9SJT-10.250.151.242; lm="11 Nov 2012 05:16:03 GMT"	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:16:04 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%266286%3D1%265671%3D1%267206%3D1%265852%3D1; expires=Tue, 11-Dec-2012 05:16:04 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%265671%3D25077%2C0%2C1%2C%2C%267206%3D25077%2C0%2C1%2C%2C%265852%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:16:04 GMT; path=/; domain=.pixel.rubiconproject.com put_2101=354c7ce1-0d13-46d6-8291-ec987cb1ba8e; expires=Tue, 11-Dec-2012 05:16:04 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9209 Connection: Keep-Alive
GET /do-association?return=ctxweb&can=fffffffffffffff6 HTTP/1.1 Host: matcher-cwb.bidder7.mookie1.com GET /do-association?return=ctxweb&can=fffffffffffffff6 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4611686278532310230; mdata=1\|4611686278532310230\|1352610959	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:05 GMT Server: Apache/2.2.3 (Red Hat) Location: http://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI0NzgmdGw9MTI5NjAw&piggybackCookie=uid:4611686278532310230&r=http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6 Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 0 Keep-Alive: timeout=1, max=997 Connection: Keep-Alive
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI0NzgmdGw9MTI5NjAw&piggybackCookie=uid:4611686278532310230&r=http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6 HTTP/1.1 Host: image2.pubmatic.com GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI0NzgmdGw9MTI5NjAw&piggybackCookie=uid:4611686278532310230&r=http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no	HTTP/1.1 302 Found Content-Type: text/html; charset=iso-8859-1 Date: Sun, 11 Nov 2012 05:16:05 GMT Server: Apache/2.2.4 (Unix) DAV/2 mod_ssl/2.2.4 OpenSSL/0.9.7a mod_fastcgi/2.4.2 Set-Cookie: KRTBCOOKIE_262=4781-uid:4611686278532310230; domain=pubmatic.com; expires=Tue, 11-Nov-2014 05:16:05 GMT; path=/ PUBRETARGET=2478_1360386965; domain=pubmatic.com; expires=Sat, 09-Feb-2013 05:16:05 GMT; path=/ Location: http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic&can=ffffffffffffffe6 Content-Length: 413 Connection: close
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: QpUXNDPC4a/ZS9XMuzc2WDBWEZ8S2oHPsfImau8uouU= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31443666 Expires: Sun, 10 Nov 2013 03:37:11 GMT Date: Sun, 11 Nov 2012 05:16:05 GMT Connection: keep-alive
GET /connect/xd_arbiter.php?version=17 HTTP/1.1 Host: s-static.ak.facebook.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Encoding: gzip X-FB-Debug: JS4qOSg1Dl3AgVtg3MyBP4whcr8SZapA/Vud9cBlDwY= Content-Length: 9847 Vary: Accept-Encoding Cache-Control: public, max-age=31443576 Expires: Sun, 10 Nov 2013 03:35:41 GMT Date: Sun, 11 Nov 2012 05:16:05 GMT Connection: keep-alive
GET /do-association?return=pubmatic&can=ffffffffffffffe6 HTTP/1.1 Host: matcher-pbm.bidder7.mookie1.com GET /do-association?return=pubmatic&can=ffffffffffffffe6 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: id=4611686278532310230; mdata=1\|4611686278532310230\|1352610959	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:16:05 GMT Server: Apache/2.2.3 (Red Hat) Cache-Control: no-cache,no-store,private Pragma: no-cache Expires: Fri, 30 Oct 1998 14:19:41 GMT P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml" Content-Length: 43 Keep-Alive: timeout=1, max=930 Connection: Keep-Alive
GET /tap.php?v=7751&nid=2249&expires=30&put=CAESEOQbgGCszNKKg2Z3HuFXD_0&google_cver=1 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=7751&nid=2249&expires=30&put=CAESEOQbgGCszNKKg2Z3HuFXD_0&google_cver=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%266286%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk15=0; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; rdk2=0; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:16:08 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%266286%3D1%267751%3D1; expires=Tue, 11-Dec-2012 05:16:08 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%267751%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:16:08 GMT; path=/; domain=.pixel.rubiconproject.com put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0; expires=Tue, 11-Dec-2012 05:16:08 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9976 Connection: Keep-Alive
GET /images/buttons/btn_facebook_connect.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 2315 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:16:09 GMT Connection: keep-alive
GET /images/buttons/btn_facebook_allowemail.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT Accept-Ranges: bytes Content-Length: 941 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:16:09 GMT Connection: keep-alive
GET /images/icons/dropdown-arrow-left-white.png HTTP/1.1 Host: cdn.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT Accept-Ranges: bytes Content-Length: 123 Server: MediaFire Cache-Control: max-age=2592000 Date: Sun, 11 Nov 2012 05:16:09 GMT Connection: keep-alive
GET /redirect?ex=11&cookie=2 HTTP/1.1 Host: cm.netseer.com GET /redirect?ex=11&cookie=2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: netseer_v3_vi=H4sIAAAAAAAAADOyKi0uMk5LSkpKS0wxNU4yNLGwNLAyNDY1MjM0sDQzNjY1AABEFUE-IwAAAA	HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:05 GMT Location: http://pixel.rubiconproject.com/tap.php?v=6073&nid=2100&expires=30&put=usr3fbbbfad53b14890 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Server: Apache-Coyote/1.1 Set-Cookie: netseer_v3_vi=H4sIAAAAAAAAADOyKi0uMk5LSkpKS0wxNU4yNLGwNLAyNDY1MjM0sDQzNjY10DE0tHKNCHEN8nP0QciYGRpaAADTzop2PQAAAA; Domain=.netseer.com; Expires=Tue, 11-Nov-2014 05:16:06 GMT; Path=/ Content-Length: 0 Connection: keep-alive
GET /tap.php?v=6073&nid=2100&expires=30&put=usr3fbbbfad53b14890 HTTP/1.1 Host: pixel.rubiconproject.com GET /tap.php?v=6073&nid=2100&expires=30&put=usr3fbbbfad53b14890 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no Cookie: rpb=14240%3D1%266286%3D1%267751%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%267751%3D25077%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbfcb509f348650cba8fe19a909^1^1352610950^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; ses15=3346^2; put_2271=0VJ-ocLMubr9mqiWb7HvmO3ukp4; put_2132=DD700851E3DE06BFBD76815CAF3B46EF; csi15=3338758.js^1^1352610953^1352610953; ses2=3346^1; csi2=3347941.js^1^1352610953^1352610953; put_2081=NC-00000002692474940; put_1197=4246302156551326762; rdk9=0; ses9=3346^1; csi9=3348063.js^1^1352610962^1352610962; cd=false; au=H9DPN711-9SJT-10.250.151.242; lm="11 Nov 2012 05:16:03 GMT"; put_2101=354c7ce1-0d13-46d6-8291-ec987cb1ba8e; put_2249=CAESEOQbgGCszNKKg2Z3HuFXD_0	HTTP/1.1 200 OK Content-Type: image/gif Date: Sun, 11 Nov 2012 05:16:09 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.3.3 P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Set-Cookie: rpb=14240%3D1%266286%3D1%267751%3D1%266073%3D1; expires=Tue, 11-Dec-2012 05:16:09 GMT; path=/; domain=.rubiconproject.com rpx=14240%3D24447%2C0%2C1%2C%2C%266286%3D25077%2C0%2C1%2C%2C%267751%3D25077%2C0%2C1%2C%2C%266073%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:16:09 GMT; path=/; domain=.pixel.rubiconproject.com put_2100=usr3fbbbfad53b14890; expires=Tue, 11-Dec-2012 05:16:09 GMT; path=/; domain=.rubiconproject.com Content-Length: 49 Keep-Alive: timeout=30, max=9569 Connection: Keep-Alive
POST / HTTP/1.1 Host: ocsp.verisign.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Content-Length: 115 Content-Type: application/ocsp-request	HTTP/1.0 200 Ok Content-Type: application/ocsp-response Last-Modified: Fri, 09 Nov 2012 00:41:57 GMT Expires: Fri, 16 Nov 2012 00:41:57 GMT Content-Transfer-Encoding: binary Content-Length: 1814 Cache-Control: max-age=415547, public, no-transform, must-revalidate Date: Sun, 11 Nov 2012 05:16:10 GMT nncoection: close Connection: Keep-Alive
GET /dialog/oauth?client_id=124578887583575&response_type=token%2Csigned_request%2Ccode&display=none&domain=www.mediafire.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Dfde484aa01812a%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff2f573ea4eb2392%26domain%3Dwww.mediafire.com%26relation%3Dparent&sdk=joey HTTP/1.1 Host: www.facebook.com GET /dialog/oauth?client_id=124578887583575&response_type=token%2Csigned_request%2Ccode&display=none&domain=www.mediafire.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter.php%3Fversion%3D17%23cb%3Dfde484aa01812a%26origin%3Dhttp%253A%252F%252Fwww.mediafire.com%252Ff2f573ea4eb2392%26domain%3Dwww.mediafire.com%26relation%3Dparent&sdk=joey HTTP/1.1 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/?4p5wab4oqodaj44	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Location: http://static.ak.facebook.com/connect/xd_arbiter.php?version=17#cb=fde484aa01812a&origin=http%3A%2F%2Fwww.mediafire.com%2Ff2f573ea4eb2392&domain=www.mediafire.com&relation=parent&error=unknown_user Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-FB-Debug: flRasaKKgkTLHpI8F1y0h7o0roSEumu22uD2tu4Orv4= Date: Sun, 11 Nov 2012 05:16:10 GMT Connection: keep-alive Content-Length: 0
GET /civscz3kzdpg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe HTTP/1.1 Host: 205.196.120.227 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	HTTP/1.1 302 Found HTTP/1.1 302 Found Location: http://www.mediafire.com/?4p5wab4oqodaj44 Connection: Close
GET /templates/linkto/%EF%BF%BD%07 HTTP/1.1 Host: www.mediafire.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=58503 Cookie: ukey=z821x6fu43r2l9f4ams5h935cmd4xw2r; __utma=213136648.1391577247.1352610952.1352610952.1352610952.1; __utmb=213136648.1.10.1352610952; __utmc=213136648; __utmz=213136648.1352610952.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none)	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Nov 2012 05:16:03 GMT Cache-Control: no-cache, must-revalidate Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 8028 Connection: close Server: MediaFire