GET /css/mfv3_85677.php?ver=nonssl HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175

HTTP/1.1 200 OK

Content-Type: text/css

Pragma: public
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 37605
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 05:27:59 GMT
Connection: keep-alive

GET /?4p5wab4oqodaj44 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Sun, 11 Nov 2012 05:27:59 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Expires: 0
Set-Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175; expires=Sun, 12-Oct-2014 05:27:59 GMT; path=/; domain=.mediafire.com; httponly
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17013
Connection: close
Server: MediaFire

GET /images/favicon/download.ico HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175

HTTP/1.1 200 OK

Content-Type: image/vnd.microsoft.icon

Date: Sun, 11 Nov 2012 05:27:59 GMT
Last-Modified: Thu, 25 Oct 2012 21:59:32 GMT
Accept-Ranges: bytes
Content-Length: 1150
Connection: close
Server: MediaFire

GET /images/icons/ajax-loader-grey_round.gif HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175

HTTP/1.1 200 OK

Content-Type: image/gif

Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT
Accept-Ranges: bytes
Content-Length: 1775
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 05:27:59 GMT
Connection: keep-alive

GET /images/buttons/btn_facebook_connect.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175

HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT
Accept-Ranges: bytes
Content-Length: 2315
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 05:27:59 GMT
Connection: keep-alive

GET /images/buttons/btn_facebook_allowemail.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175

HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Tue, 05 Jun 2012 20:08:37 GMT
Accept-Ranges: bytes
Content-Length: 941
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 05:27:59 GMT
Connection: keep-alive

GET /images/icons/information_darkblue.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175

HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Tue, 05 Jun 2012 20:08:55 GMT
Accept-Ranges: bytes
Content-Length: 722
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 05:27:59 GMT
Connection: keep-alive

GET /images/backgrounds/download/rockmelt/rockmelt_dl_btn.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175

HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Tue, 05 Jun 2012 20:08:44 GMT
Accept-Ranges: bytes
Content-Length: 7653
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 05:27:59 GMT
Connection: keep-alive

GET /images/icons/icon-sprite-16-v3.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175

HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Tue, 02 Oct 2012 17:01:27 GMT
Accept-Ranges: bytes
Content-Length: 61715
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 05:27:59 GMT
Connection: keep-alive

GET /recaptcha/api/challenge?k=6LextQUAAAAAALlQv0DSHOYxqF3DftRZxA5yebEe HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK

HTTP/1.1 200 OK

Content-Type: text/javascript

Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Date: Sun, 11 Nov 2012 05:28:00 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 448
Server: GSE

GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=1839354411&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=291052347&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.678116362.1352611680.1352611680.1352611680.1%3B%2B__utmz%3D213136648.1352611680.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1

Host: www.google-analytics.com

GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=1839354411&utmhn=www.mediafire.com&utme=8(UserType)9(free)&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=KMPlayerPortable_3.4.0.59_azo.exe&utmhid=291052347&utmr=-&utmp=%2F%3F4p5wab4oqodaj44&utmac=UA-829541-1&utmcc=__utma%3D213136648.678116362.1352611680.1352611680.1352611680.1%3B%2B__utmz%3D213136648.1352611680.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=qQ~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44

HTTP/1.1 200 OK

Content-Type: image/gif

Date: Fri, 09 Nov 2012 20:56:08 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 117112
Server: GFE/2.0

GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1

Host: p.twitter.com

GET /f.gif?screen_name=MediaFire&show_count=true&show_screen_name=false&twttr_variant=2.0&twttr_referrer=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44&twttr_widget=0&twttr_hask=0&twttr_li=0&twttr_pid= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://platform.twitter.com/widgets/follow_button.html?screen_name=MediaFire&show_count=true&show_screen_name=false

HTTP/1.1 200 OK

Content-Type: image/gif

Etag: "377d257f2d2e294916143c069141c1c5:1328738114"
Last-Modified: Wed, 08 Feb 2012 21:55:14 GMT
Accept-Ranges: bytes
Content-Length: 43
Cache-Control: no-cache
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Date: Sun, 11 Nov 2012 05:28:00 GMT
Connection: keep-alive

GET /js/bust_out.js HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175

HTTP/1.1 200 OK

Content-Type: text/javascript

Date: Sun, 11 Nov 2012 05:28:00 GMT
Last-Modified: Thu, 31 May 2012 19:49:34 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Tue, 11 Dec 2012 05:28:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 57
Connection: close
Server: MediaFire

POST / HTTP/1.1

Host: ocsp.godaddy.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 106
Content-Type: application/ocsp-request

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sun, 11 Nov 2012 05:28:00 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=18242, public, no-transform, must-revalidate
Last-Modified: Sun, 11 Nov 2012 04:48:03 GMT
Expires: Sun, 11 Nov 2012 10:48:03 GMT
Etag: "bb5b989a88c5fa9b2f1a6ff76cf76088e831fb64"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1923
Connection: close

GET /images/ad-loader.gif HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175; __utma=213136648.678116362.1352611680.1352611680.1352611680.1; __utmb=213136648.1.10.1352611680; __utmc=213136648; __utmz=213136648.1352611680.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)

HTTP/1.1 200 OK

Content-Type: image/gif

Last-Modified: Tue, 05 Jun 2012 20:09:03 GMT
Accept-Ranges: bytes
Content-Length: 1786
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 05:28:00 GMT
Connection: keep-alive

GET /recaptcha/api/img/red/refresh.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK

HTTP/1.1 200 OK

Content-Type: image/gif

Expires: Sun, 11 Nov 2012 06:16:08 GMT
Date: Sun, 11 Nov 2012 05:16:08 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 974
Server: GSE
Age: 712
Cache-Control: public, max-age=3600

GET /images/backgrounds/footer/icn_footer_blog.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175; __utma=213136648.678116362.1352611680.1352611680.1352611680.1; __utmb=213136648.1.10.1352611680; __utmc=213136648; __utmz=213136648.1352611680.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)

HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT
Accept-Ranges: bytes
Content-Length: 171
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 05:28:00 GMT
Connection: keep-alive

GET /images/backgrounds/footer/icn_footer_gp.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175; __utma=213136648.678116362.1352611680.1352611680.1352611680.1; __utmb=213136648.1.10.1352611680; __utmc=213136648; __utmz=213136648.1352611680.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)

HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Wed, 29 Aug 2012 21:02:04 GMT
Accept-Ranges: bytes
Content-Length: 312
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 05:28:00 GMT
Connection: keep-alive

GET /images/backgrounds/footer/icn_footer_fb.png HTTP/1.1

Host: cdn.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdn.mediafire.com/css/mfv4_85677.php?ver=nonssl&date=2012-11-10
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175; __utma=213136648.678116362.1352611680.1352611680.1352611680.1; __utmb=213136648.1.10.1352611680; __utmc=213136648; __utmz=213136648.1352611680.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)

HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Thu, 19 Jul 2012 19:02:09 GMT
Accept-Ranges: bytes
Content-Length: 514
Server: MediaFire
Cache-Control: max-age=2592000
Date: Sun, 11 Nov 2012 05:28:00 GMT
Connection: keep-alive

GET /templates/linkto/default-729x91-default.php?r=53811 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175; __utma=213136648.678116362.1352611680.1352611680.1352611680.1; __utmb=213136648.1.10.1352611680; __utmc=213136648; __utmz=213136648.1352611680.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)

HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Sun, 11 Nov 2012 05:28:00 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 666
Connection: close
Server: MediaFire

GET /templates/linkto/default-337x281-default2.php?r=19273 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175; __utma=213136648.678116362.1352611680.1352611680.1352611680.1; __utmb=213136648.1.10.1352611680; __utmc=213136648; __utmz=213136648.1352611680.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)

HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Sun, 11 Nov 2012 05:28:00 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 787
Connection: close
Server: MediaFire

GET /recaptcha/api/img/red/help.gif HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK

HTTP/1.1 200 OK

Content-Type: image/gif

Expires: Sun, 11 Nov 2012 06:05:36 GMT
Date: Sun, 11 Nov 2012 05:05:36 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 367
Server: GSE
Age: 1344
Cache-Control: public, max-age=3600

GET /templates/linkto/default-161x601-default.php?r=44891 HTTP/1.1

Host: www.mediafire.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: ukey=egzrifqvwcz6v6os01tq5rhl7ccuu175; __utma=213136648.678116362.1352611680.1352611680.1352611680.1; __utmb=213136648.1.10.1352611680; __utmc=213136648; __utmz=213136648.1352611680.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)

HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Date: Sun, 11 Nov 2012 05:28:01 GMT
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 733
Connection: close
Server: MediaFire

GET /recaptcha/api/img/red/sprite.png HTTP/1.1

Host: www.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44
Cookie: PREF=ID=18d07d2c5ecbbb08:U=205ee10a10512bfa:FF=0:TM=1350344350:LM=1350344627:S=oVTvNjgbzbFNBNUF; NID=64=UOjfkeau7k9dzmFvAsFwVqmD4s7g_bdUMaEnGOlKRSTKCit3R_G5xg2kMKTOgRf2IL0DzvimBbfFpj1mIHK6cKNk76wCsEyOlULvzyFq8aklSyHHGXGPdMpqcZCr8LfK

HTTP/1.1 200 OK

Content-Type: image/png

Expires: Sun, 11 Nov 2012 05:29:57 GMT
Date: Sun, 11 Nov 2012 04:29:57 GMT
Last-Modified: Wed, 17 Oct 2012 23:19:53 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 4679
Server: GSE
Age: 3484
Cache-Control: public, max-age=3600

GET /ad/3196.js HTTP/1.1

Host: ads.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=25124
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0

HTTP/1.1 200 OK

Content-Type: text/javascript

Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.3
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3551
Cneonction: close
Cache-Control: max-age=86400
Expires: Mon, 12 Nov 2012 05:28:02 GMT
Date: Sun, 11 Nov 2012 05:28:02 GMT
Connection: keep-alive

GET /connect/xd_arbiter.php?version=17 HTTP/1.1

Host: static.ak.facebook.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/?4p5wab4oqodaj44

HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip
X-FB-Debug: QpUXNDPC4a/ZS9XMuzc2WDBWEZ8S2oHPsfImau8uouU=
Content-Length: 9847
Vary: Accept-Encoding
Cache-Control: public, max-age=31442949
Expires: Sun, 10 Nov 2013 03:37:11 GMT
Date: Sun, 11 Nov 2012 05:28:02 GMT
Connection: keep-alive

GET /a/3196/3346/9685-2.js?cb=0.4091916301431646&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

Host: optimized-by.rubiconproject.com

GET /a/3196/3346/9685-2.js?cb=0.4091916301431646&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=53811
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0

HTTP/1.1 200 OK

Content-Type: text/javascript

Date: Sun, 11 Nov 2012 05:28:02 GMT
Server: RAS/1.3 (Unix)
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: ruid=592db406509f376250cba8fe336c27^1^1352611682^1355524350; expires=Sat, 09-Feb-2013 05:28:02 GMT; max-age=7776000; path=/; domain=.rubiconproject.com;
rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com;
rdk=3196/3346; expires=Sun, 11-Nov-2012 06:28:02 GMT; max-age=60; path=/; domain=.rubiconproject.com
rdk2=0; expires=Sun, 11-Nov-2012 06:28:02 GMT; max-age=10; path=/; domain=.rubiconproject.com
ses2=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=95517; path=/; domain=.rubiconproject.com
csi2=3204661.js^1^1352611682^1352611682; expires=Sun, 18-Nov-2012 05:28:02 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=51
Connection: Keep-Alive
Transfer-Encoding: chunked

GET /a/3196/3346/27309-15.js?cb=0.7972207089902882&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

Host: optimized-by.rubiconproject.com

GET /a/3196/3346/27309-15.js?cb=0.7972207089902882&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=19273
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0

HTTP/1.1 200 OK

Content-Type: text/javascript

Date: Sun, 11 Nov 2012 05:28:02 GMT
Server: RAS/1.3 (Unix)
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: ruid=592dc3b3509f376250cba8fe413fa8^1^1352611682^1355524350; expires=Sat, 09-Feb-2013 05:28:02 GMT; max-age=7776000; path=/; domain=.rubiconproject.com;
rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com;
rdk=3196/3346; expires=Sun, 11-Nov-2012 06:28:02 GMT; max-age=60; path=/; domain=.rubiconproject.com
rdk15=0; expires=Sun, 11-Nov-2012 06:28:02 GMT; max-age=10; path=/; domain=.rubiconproject.com
ses15=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=95517; path=/; domain=.rubiconproject.com
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=76
Connection: Keep-Alive
Transfer-Encoding: chunked

GET /a/3196/3346/9685-9.js?cb=0.3534118803725437&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

Host: optimized-by.rubiconproject.com

GET /a/3196/3346/9685-9.js?cb=0.3534118803725437&tk_st=1&tk_sf=1&p_screen_res=1176x885&p_pos=atf&rp_s=c&rf=http%3A//www.mediafire.com/%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=44891
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0

HTTP/1.1 200 OK

Content-Type: text/javascript

Date: Sun, 11 Nov 2012 05:28:02 GMT
Server: RAS/1.3 (Unix)
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: ruid=592dbbd9509f376250cba8fe319b9e^1^1352611682^1355524350; expires=Sat, 09-Feb-2013 05:28:02 GMT; max-age=7776000; path=/; domain=.rubiconproject.com;
rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; path=/; domain=.rubiconproject.com;
rdk=3196/3346; expires=Sun, 11-Nov-2012 06:28:02 GMT; max-age=60; path=/; domain=.rubiconproject.com
rdk9=0; expires=Sun, 11-Nov-2012 06:28:02 GMT; max-age=10; path=/; domain=.rubiconproject.com
ses9=3346^1; expires=Mon, 12-Nov-2012 00:59:59 GMT; max-age=95517; path=/; domain=.rubiconproject.com
csi9=3165520.js^1^1352611682^1352611682; expires=Sun, 18-Nov-2012 05:28:02 GMT; max-age=604800; path=/; domain=.rubiconproject.com;
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Keep-Alive: timeout=5, max=21
Connection: Keep-Alive
Transfer-Encoding: chunked

GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1

Host: tap2-cdn.rubiconproject.com

GET /partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=25124
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592db7f3509f376250cba8fe1842ce^1^1352611682^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352611682^1352611682; rdk15=0; ses15=3346^1

HTTP/1.1 200 OK

Content-Type: text/html; charset=UTF-8

Server: TRP Apache-Coyote/1.1
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Last-Modified: Sat, 10 Nov 2012 19:40:01 GMT
Content-Encoding: gzip
Content-Length: 5080
Cache-Control: max-age=600
Expires: Sun, 11 Nov 2012 05:38:02 GMT
Date: Sun, 11 Nov 2012 05:28:02 GMT
Connection: keep-alive
Vary: Accept-Encoding

GET /rubicon/px/aid:ad0fe8aa50158162fa8caff310c18655a097c812;c:7A04E12E6E4E1123;s:6bdb00c88686993b;cid:33664;ts:1352611682505 HTTP/1.1

Host: 92.61.254.228

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=19273

HTTP/1.1 200 OK

Content-Type: image/gif

Server: Apache-Coyote/1.1
Cache-Control: max-age=0,no-cache,no-store
Pragma: no-cache
Expires: Tue, 11 Oct 1977 12:34:56 GMT
Connection: close
Content-Length: 807
Date: Sun, 11 Nov 2012 05:28:02 GMT

GET /pixel/p-01nD5uD1pGDW2.gif HTTP/1.1

Host: pixel.quantserve.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=25124

HTTP/1.1 200 OK

Content-Type: image/gif

Connection: close
Set-Cookie: mc=509f3762-aee98-29afa-67ccd; expires=Tue, 13-May-2014 05:28:02 GMT; path=/; domain=.quantserve.com
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
Cache-Control: private, no-cache, no-store, proxy-revalidate
Pragma: no-cache
Expires: Fri, 04 Aug 1978 12:00:00 GMT
Content-Length: 35
Date: Sun, 11 Nov 2012 05:28:02 GMT
Server: QS

GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1

Host: ib.adnxs.com

GET /ttj?id=743542&size=728x90&referrer=http://www.mediafire.com/?4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=53811
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG7]PCxrx)0s]#%2L_'x%SEV/hnJip8Ep.I(G*axlrk5.$WN_]Dl5M7G(nDS'6pnU

HTTP/1.1 200 OK

Content-Type: text/javascript

Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 05:28:02 GMT; domain=.adnxs.com; HttpOnly
sess=1; path=/; expires=Mon, 12-Nov-2012 05:28:02 GMT; domain=.adnxs.com; HttpOnly
icu=ChIIlroHEAoYASABKAEw4u78hAUQ4u78hAUYAA..; path=/; expires=Sat, 09-Feb-2013 05:28:02 GMT; domain=.adnxs.com; HttpOnly
anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-*8R1TX_/h9oD*qpI#FdgHS0R!o)0VpiAg1-=; path=/; expires=Sat, 09-Feb-2013 05:28:02 GMT; domain=.adnxs.com; HttpOnly
Date: Sun, 11 Nov 2012 05:28:02 GMT
Content-Length: 1349

GET /3900/3859/boxing-pans_300x250.-19DAAB3.gif HTTP/1.1

Host: dspads.sitescout.netdna-cdn.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=25124

HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sun, 11 Nov 2012 05:28:02 GMT
Content-Length: 148194
Connection: keep-alive
Etag: W/"148194-1349288539000"
Last-Modified: Wed, 03 Oct 2012 18:22:19 GMT
Server: NetDNA-cache/2.2
X-Cache: HIT
Accept-Ranges: bytes

GET /dmp/pixelSync?network=Rubicon HTTP/1.1

Host: pixel.sitescout.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no

HTTP/1.1 204 No Content

HTTP/1.1 204 No Content

Server: Apache-Coyote/1.1
Date: Sun, 11 Nov 2012 05:28:02 GMT

GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1

Host: fpdownload2.macromedia.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

HTTP/1.1 200 OK

Content-Type: text/xml

Server: Apache
Last-Modified: Wed, 31 Oct 2012 21:22:10 GMT
Etag: "87de33-256-4cd617ed12480"
Accept-Ranges: bytes
Content-Length: 598
Date: Sun, 11 Nov 2012 05:28:03 GMT
Connection: keep-alive

GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352611682881&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D25124&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com

GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352611682881&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D25124&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=25124

HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily

Content-Length: 0
Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352611682881&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D25124&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44
Date: Sun, 11 Nov 2012 05:28:03 GMT
Connection: keep-alive
Set-Cookie: UID=4ce36d1-195.159.219.8-1352611683; expires=Sat, 01-Nov-2014 05:28:03 GMT; path=/; domain=.scorecardresearch.com
UIDR=1352611683; expires=Sat, 01-Nov-2014 05:28:03 GMT; path=/; domain=.scorecardresearch.com
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate

GET /erb HTTP/1.1

Host: px.owneriq.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no

HTTP/1.1 302 Moved Temporarily

Content-Type: text/html

Server: Apache/2.2.3 (CentOS)
Content-Length: 153
Location: http://px.owneriq.net/fr/epx.gif
X-Powered-By: PHP/5.2.17
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Vary: Accept-Encoding
Cache-Control: max-age=74670
Date: Sun, 11 Nov 2012 05:28:03 GMT
Connection: keep-alive

GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352611682962&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D19273&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com

GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352611682962&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D19273&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default2.php?r=19273

HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily

Content-Length: 0
Location: http://b.scorecardresearch.com/b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352611682962&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default2.php%3Fr%3D19273&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44
Date: Sun, 11 Nov 2012 05:28:03 GMT
Connection: keep-alive
Set-Cookie: UID=4ce36da-195.159.219.8-1352611683; expires=Sat, 01-Nov-2014 05:28:03 GMT; path=/; domain=.scorecardresearch.com
UIDR=1352611683; expires=Sat, 01-Nov-2014 05:28:03 GMT; path=/; domain=.scorecardresearch.com
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate

GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352611682881&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D25124&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com

GET /b2?c1=8&c2=6135404&c3=26&c4=3346&c10=3228674&ns__t=1352611682881&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-337x281-default.php%3Fr%3D25124&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-337x281-default.php?r=25124
Cookie: UID=4ce36d1-195.159.219.8-1352611683; UIDR=1352611683

HTTP/1.1 204 No Content

HTTP/1.1 204 No Content

Content-Length: 0
Date: Sun, 11 Nov 2012 05:28:03 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate

GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352611683042&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D53811&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com

GET /b?c1=8&c2=6035951&c3=122134&ns__t=1352611683042&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D53811&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=53811

HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily

Content-Length: 0
Location: http://b.scorecardresearch.com/b2?c1=8&c2=6035951&c3=122134&ns__t=1352611683042&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-729x91-default.php%3Fr%3D53811&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44
Date: Sun, 11 Nov 2012 05:28:03 GMT
Connection: keep-alive
Set-Cookie: UID=4ce36db-195.159.219.8-1352611683; expires=Sat, 01-Nov-2014 05:28:03 GMT; path=/; domain=.scorecardresearch.com
UIDR=1352611683; expires=Sat, 01-Nov-2014 05:28:03 GMT; path=/; domain=.scorecardresearch.com
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate

GET /getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30 HTTP/1.1

Host: ib.adnxs.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-*8R1TX_/h9oD*qpI#FdgHS0R!o)0VpiAg1-=; sess=1; icu=ChIIlroHEAoYASABKAEw4u78hAUQ4u78hAUYAA..

HTTP/1.1 302 Moved

Content-Type: text/html; charset=ISO-8859-1

Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 05:28:03 GMT; domain=.adnxs.com; HttpOnly
sess=1; path=/; expires=Mon, 12-Nov-2012 05:28:03 GMT; domain=.adnxs.com; HttpOnly
Location: http://pixel.rubiconproject.com/tap.php?v=4894&nid=1986&put=5858721859426781856&expires=30
Date: Sun, 11 Nov 2012 05:28:03 GMT
Content-Length: 0

GET /iaction/adoapn_AppNexusDemoActionTag_1 HTTP/1.1

Host: view.atdmt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-729x91-default.php?r=53811
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA

HTTP/1.1 200 OK

Content-Type: text/html

Cache-Control: no-store
Content-Encoding: gzip
Expires: 0
Vary: Accept-Encoding
Date: Sun, 11 Nov 2012 05:28:03 GMT
Connection: close
Content-Length: 381

GET /partner/agent/rubicon/channels.js?cb=oz_onPixelsLoaded HTTP/1.1

Host: tap.rubiconproject.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: rpb=14240%3D1; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd9509f376250cba8fe319b9e^1^1352611682^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352611682^1352611682; rdk15=0; ses15=3346^1; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352611682^1352611682

HTTP/1.1 200 OK

Content-Type: text/javascript;charset=UTF-8

Date: Sun, 11 Nov 2012 05:28:03 GMT
Server: TRP Apache-Coyote/1.1
Cache-Control: no-store, no-cache, must-revalidate, private
Content-Length: 535
Set-Cookie: SERVERID=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Keep-Alive: timeout=5, max=133
Connection: Keep-Alive

GET /fr/epx.gif HTTP/1.1

Host: px.owneriq.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no

HTTP/1.1 200 OK

Content-Type: image/gif

Server: Apache/2.2.3 (CentOS)
Content-Length: 43
X-Powered-By: PHP/5.2.17
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Cache-Control: max-age=81468
Expires: Mon, 12 Nov 2012 04:05:51 GMT
Date: Sun, 11 Nov 2012 05:28:03 GMT
Connection: keep-alive

GET /pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14 HTTP/1.1

Host: cm.g.doubleclick.net

GET /pixel?google_nid=everest&google_cm&google_sc&ev_rs=1&url=/1/gr%3furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42

HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8

Location: http://pixel2368.everesttech.net/2368/m?cookieid=&ev_rs=1&url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&google_cver=1
Date: Sun, 11 Nov 2012 05:28:03 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: Cookie Matcher
Content-Length: 470
X-XSS-Protection: 1; mode=block

GET /rc.aspx HTTP/1.1

Host: um.eqads.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no

HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8

Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Expires: Sat, 6 May 1995 12:00:00 GMT
Last-Modified: Sun, 11 Nov 2012 00:28:03 GMT
Location: http://pixel.rubiconproject.com/tap.php?v=11598&nid=2494&put=44cce06264c94b51b5abb1abcee401a0&expires=90
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
Set-Cookie: EQUser=UID=44cce062-64c9-4b51-b5ab-b1abcee401a0; domain=.eqads.com; expires=Mon, 11-Feb-2013 05:28:03 GMT; path=/
X-Powered-By: ASP.NET
P3P: CP="NOI DSP COR NID"
Date: Sun, 11 Nov 2012 05:28:03 GMT
Content-Length: 233

GET /do-association?rbc HTTP/1.1

Host: matcher-rbc.bidder7.mookie1.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no

HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8

Date: Sun, 11 Nov 2012 05:28:03 GMT
Server: Apache/2.2.3 (Red Hat)
Set-Cookie: id=4611827003271285241; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 05:28:03 GMT
mdata=1|4611827003271285241|1352611683; path=/; domain=.mookie1.com; expires=Fri, 06-Dec-2013 05:28:03 GMT
Location: /do-association-set?rbc
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml"
Content-Length: 0
Keep-Alive: timeout=1, max=880
Connection: Keep-Alive

GET /tap.php?v=4894&nid=1986&put=5858721859426781856&expires=30 HTTP/1.1

Host: pixel.rubiconproject.com

GET /tap.php?v=4894&nid=1986&put=5858721859426781856&expires=30 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd9509f376250cba8fe319b9e^1^1352611682^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352611682^1352611682; rdk15=0; ses15=3346^1; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352611682^1352611682

HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sun, 11 Nov 2012 05:28:04 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rpb=14240%3D1%264894%3D1; expires=Tue, 11-Dec-2012 05:28:04 GMT; path=/; domain=.rubiconproject.com
rpx=14240%3D24447%2C0%2C1%2C%2C%264894%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:28:04 GMT; path=/; domain=.pixel.rubiconproject.com
put_1986=5858721859426781856; expires=Tue, 11-Dec-2012 05:28:04 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9914
Connection: Keep-Alive

GET /di.php?v=2372|0||2373||2374|0||&r=3761|0,3169,3578,3577,2110,2195,2196,2197,2579,2198,4134,3734,2199,2364,2362,2363,2200,3810,2111,2494,2201,3513,2202,2496,2202,2496,2203,2204,2189,2112,2497,2205,2355,2495,5838,3811,3512,2109,3812,2239,2190,2206,2113,2206,2113,4552,2765,6184,2240,4105,4193,2372,2373,2374,2375, HTTP/1.1

Host: pixel.rubiconproject.com

GET /di.php?v=2372|0||2373||2374|0||&r=3761|0,3169,3578,3577,2110,2195,2196,2197,2579,2198,4134,3734,2199,2364,2362,2363,2200,3810,2111,2494,2201,3513,2202,2496,2202,2496,2203,2204,2189,2112,2497,2205,2355,2495,5838,3811,3512,2109,3812,2239,2190,2206,2113,2206,2113,4552,2765,6184,2240,4105,4193,2372,2373,2374,2375, HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd9509f376250cba8fe319b9e^1^1352611682^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352611682^1352611682; rdk15=0; ses15=3346^1; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352611682^1352611682

HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sun, 11 Nov 2012 05:28:04 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rpb=14240%3D1%262373%3D1; expires=Fri, 10-May-2013 05:28:04 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9887
Connection: Keep-Alive

GET /2368/m?cookieid=&ev_rs=1&url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&google_cver=1 HTTP/1.1

Host: pixel2368.everesttech.net

GET /2368/m?cookieid=&ev_rs=1&url=/1/gr%3Furl=http%253a//pixel.rubiconproject.com/tap.php%253fv%253d11782%257c1%257c14%2526nid%253d2181%2526put%253d__EFGCK__%2526expires%253d14&google_gid=CAESEHb10AvLIOUdvYC_4Xf0C8w&google_cver=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: everest_session_v2=UJ83YwAADHVVQcVl; everest_g_v2=g_surferid~UJ83YwAADHVVQcVl

HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1

Date: Sun, 11 Nov 2012 05:28:04 GMT
Server: Apache
Set-Cookie: gglck=CAESEHb10AvLIOUdvYC_4Xf0C8w; path=/; domain=.everesttech.net; expires=Tue, 11-Dec-2012 05:28:04 GMT
everest_session_v2=UJ83YwAADHVVQcVl; path=/; domain=.everesttech.net
everest_g_v2=g_surferid~UJ83YwAADHVVQcVl; path=/; domain=.everesttech.net; expires=Mon, 06-Oct-2014 16:08:04 GMT
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: http://pixel.rubiconproject.com/tap.php?v=11782|1|14&nid=2181&put=CAESEHb10AvLIOUdvYC_4Xf0C8w&expires=14
Content-Length: 300
Keep-Alive: timeout=15, max=999675
Connection: Keep-Alive

GET /pixel?google_nid=themig&google_cm&google_sc&can=ffffffffffffffff&v2 HTTP/1.1

Host: cm.g.doubleclick.net

GET /pixel?google_nid=themig&google_cm&google_sc&can=ffffffffffffffff&v2 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: id=223ae1776901005b||t=1350343758|et=730|cs=002213fd480aa30e9cef2f5d42

HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8

Location: http://matcher.bidder7.mookie1.com/google?id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1
Date: Sun, 11 Nov 2012 05:28:04 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: Cookie Matcher
Content-Length: 336
X-XSS-Protection: 1; mode=block

GET /google?id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 HTTP/1.1

Host: matcher.bidder7.mookie1.com

GET /google?id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: id=4611827003271285241; mdata=1|4611827003271285241|1352611683

HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8

Date: Sun, 11 Nov 2012 05:28:04 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://matcher.bidder8.mookie1.com/google?zap-redir&id=&can=ffffffffffffffff&v2=&google_gid=CAESEMF0ThPavEWBSIZnTeqVNs8&google_cver=1
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml"
Content-Length: 0
Keep-Alive: timeout=1, max=893
Connection: Keep-Alive

GET /getuid?http://matcher-apx.bidder7.mookie1.com/appnexus?can=fffffffffffffffe%26adnxs_uid=$UID HTTP/1.1

Host: ib.adnxs.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-*8R1TX_/h9oD*qpI#FdgHS0R!o)0VpiAg1-=; sess=1; icu=ChIIlroHEAoYASABKAEw4u78hAUQ4u78hAUYAA..

HTTP/1.1 302 Moved

Content-Type: text/html; charset=ISO-8859-1

Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 05:28:05 GMT; domain=.adnxs.com; HttpOnly
sess=1; path=/; expires=Mon, 12-Nov-2012 05:28:05 GMT; domain=.adnxs.com; HttpOnly
Location: http://matcher-apx.bidder7.mookie1.com/appnexus?can=fffffffffffffffe&adnxs_uid=5858721859426781856
Date: Sun, 11 Nov 2012 05:28:05 GMT
Content-Length: 0

GET /appnexus?zap-redir&can=fffffffffffffffe&adnxs_uid=5858721859426781856 HTTP/1.1

Host: matcher.bidder8.mookie1.com

GET /appnexus?zap-redir&can=fffffffffffffffe&adnxs_uid=5858721859426781856 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: id=4611827003271285241; mdata=1|4611827003271285241|1352611683

HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8

Date: Sun, 11 Nov 2012 05:28:06 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://bh.contextweb.com/bh/rtset?do=add&pid=536088&ev=4611827003271285241&rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=fffffffffffffff6
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml"
Content-Length: 0
Keep-Alive: timeout=1, max=986
Connection: Keep-Alive

GET /bh/rtset?do=add&pid=536088&ev=4611827003271285241&rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=fffffffffffffff6 HTTP/1.1

Host: bh.contextweb.com

GET /bh/rtset?do=add&pid=536088&ev=4611827003271285241&rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=fffffffffffffff6 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no

HTTP/1.1 302 Moved Temporarily

Content-Type: text/html;charset=ISO-8859-1

Cache-Control: private, max-age=0, no-cache, no-store
Content-Language: en-US
CW-Server: ip-10-195-35-223
Date: Sun, 11 Nov 2012 05:28:06 GMT
Expires: -1
Location: http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb&can=fffffffffffffff6
P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
Server: GlassFish v3
Set-Cookie: V=PRQ8DoFfq5J8; Domain=.contextweb.com; Expires=Wed, 06-Nov-2013 05:28:06 GMT; Path=/
pb_rtb_ev=2-536088.4611827003271285241.0.0.1352611686608; Domain=.contextweb.com; Expires=Mon, 11-Nov-2013 05:28:06 GMT; Path=/
Content-Length: 242
Connection: keep-alive

GET /tap.php?v=12224&nid=2530&put=9148197784017056044&expires=365 HTTP/1.1

Host: pixel.rubiconproject.com

GET /tap.php?v=12224&nid=2530&put=9148197784017056044&expires=365 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: rpb=14240%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd9509f376250cba8fe319b9e^1^1352611682^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352611682^1352611682; rdk15=0; ses15=3346^1; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352611682^1352611682

HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sun, 11 Nov 2012 05:28:06 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rpb=14240%3D1%2612224%3D1; expires=Tue, 11-Dec-2012 05:28:06 GMT; path=/; domain=.rubiconproject.com
rpx=14240%3D24447%2C0%2C1%2C%2C%2612224%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:28:06 GMT; path=/; domain=.pixel.rubiconproject.com
put_2530=9148197784017056044; expires=Mon, 11-Nov-2013 05:28:06 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9862
Connection: Keep-Alive

GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352611687197&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D44891&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

Host: b.scorecardresearch.com

GET /b?c1=8&c2=6135404&c3=26&c4=3346&c10=3176583&ns__t=1352611687197&ns_c=UTF-8&c8=&c7=http%3A%2F%2Fwww.mediafire.com%2Ftemplates%2Flinkto%2Fdefault-161x601-default.php%3Fr%3D44891&c9=http%3A%2F%2Fwww.mediafire.com%2F%3F4p5wab4oqodaj44 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=44891
Cookie: UID=4ce36dc-195.159.219.8-1352611683; UIDR=1352611683

HTTP/1.1 204 No Content

HTTP/1.1 204 No Content

Content-Length: 0
Date: Sun, 11 Nov 2012 05:28:07 GMT
Connection: keep-alive
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, no-store, proxy-revalidate

GET /cached/creatives/203392/Kone-Pure_Banner_160x600_clicktag.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d12887%26subpoolid%3d0%26campaignid%3d82398%26creativeid%3d203392%26url%3d HTTP/1.1

Host: cdne.cpmstar.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.mediafire.com/templates/linkto/default-161x601-default.php?r=44891

HTTP/1.1 200 OK

Content-Type: application/x-shockwave-flash

Accept-Ranges: bytes
Cache-Control: public
Content-Disposition: inline;filename=203392_Kone-Pure_Banner_160x600_clicktag.swf
Date: Sun, 11 Nov 2012 05:28:07 GMT
Expires: Mon, 12 Nov 2012 05:28:08 GMT
Last-Modified: Sat, 10 Nov 2012 07:15:58 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA"
Server: ECAcc (arn/46A7)
Via: 1.1 ID-0001544140306215 uproxy-4
X-AspNet-Version: 2.0.50727
X-Cache: HIT
Content-Length: 66961

GET /pull_sync?ul_cb=1&pid=rubicon HTTP/1.1

Host: www.wtp101.com

GET /pull_sync?ul_cb=1&pid=rubicon HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: tuuid=36d38a53-c3d8-478c-8207-429b8fcbff8f

HTTP/1.1 302 Moved Temporarily

Content-Type: text/html; charset=UTF-8

Set-Cookie: tuuid=36d38a53-c3d8-478c-8207-429b8fcbff8f; path=/; expires=Tue, 11-Nov-2014 05:28:07 GMT; domain=.wtp101.com
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Location: http://pixel.rubiconproject.com/tap.php?v=5328&nid=2025&put=36d38a53-c3d8-478c-8207-429b8fcbff8f&expires=730
Cache-Control: no-cache, no-store, must-revalidate
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
Content-Length: 0
Date: Sun, 11 Nov 2012 05:28:07 GMT

GET /tap.php?v=5328&nid=2025&put=36d38a53-c3d8-478c-8207-429b8fcbff8f&expires=730 HTTP/1.1

Host: pixel.rubiconproject.com

GET /tap.php?v=5328&nid=2025&put=36d38a53-c3d8-478c-8207-429b8fcbff8f&expires=730 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: rpb=14240%3D1%2612224%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%2612224%3D25077%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd9509f376250cba8fe319b9e^1^1352611682^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352611682^1352611682; rdk15=0; ses15=3346^1; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352611682^1352611682; put_1430=4f23850b-2d86-4d2b-967c-6e2b44b7a3a7; put_1986=5858721859426781856; put_2494=44cce06264c94b51b5abb1abcee401a0; put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; put_1185=4501792861255415045; put_2530=9148197784017056044

HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sun, 11 Nov 2012 05:28:07 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rpb=14240%3D1%2612224%3D1%265328%3D1; expires=Tue, 11-Dec-2012 05:28:07 GMT; path=/; domain=.rubiconproject.com
rpx=14240%3D24447%2C0%2C1%2C%2C%2612224%3D25077%2C0%2C1%2C%2C%265328%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:28:07 GMT; path=/; domain=.pixel.rubiconproject.com
put_2025=36d38a53-c3d8-478c-8207-429b8fcbff8f; expires=Tue, 11-Nov-2014 05:28:07 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=8873
Connection: Keep-Alive

GET /do-association?return=ctxweb&can=fffffffffffffff6 HTTP/1.1

Host: matcher-cwb.bidder7.mookie1.com

GET /do-association?return=ctxweb&can=fffffffffffffff6 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: id=4611827003271285241; mdata=1|4611827003271285241|1352611683

HTTP/1.1 302 Found

Content-Type: text/html; charset=UTF-8

Date: Sun, 11 Nov 2012 05:28:09 GMT
Server: Apache/2.2.3 (Red Hat)
Location: http://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI0NzgmdGw9MTI5NjAw&piggybackCookie=uid:4611827003271285241&r=http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6
Cache-Control: no-cache,no-store,private
Pragma: no-cache
Expires: Fri, 30 Oct 1998 14:19:41 GMT
P3P: CP="NON NID PSAa PSDa OUR IND UNI COM NAV STA",policyref="/w3c/p3p.xml"
Content-Length: 0
Keep-Alive: timeout=1, max=929
Connection: Keep-Alive

GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI0NzgmdGw9MTI5NjAw&piggybackCookie=uid:4611827003271285241&r=http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6 HTTP/1.1

Host: image2.pubmatic.com

GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI0NzgmdGw9MTI5NjAw&piggybackCookie=uid:4611827003271285241&r=http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no

HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1

Date: Sun, 11 Nov 2012 05:28:10 GMT
Server: Apache/2.2.4 (Unix) DAV/2 mod_ssl/2.2.4 OpenSSL/0.9.8e-fips-rhel5 mod_fastcgi/2.4.2
Set-Cookie: KRTBCOOKIE_262=4781-uid:4611827003271285241; domain=pubmatic.com; expires=Tue, 11-Nov-2014 05:28:10 GMT; path=/
PUBRETARGET=2478_1360387690; domain=pubmatic.com; expires=Sat, 09-Feb-2013 05:28:10 GMT; path=/
Location: http://matcher-pbm.bidder7.mookie1.com/do-association?return=pubmatic%26can=ffffffffffffffe6
Content-Length: 422
Connection: close

GET /tap.php?v=5157&nid=2021&put=509f376ad7a956093f0d3530 HTTP/1.1

Host: pixel.rubiconproject.com

GET /tap.php?v=5157&nid=2021&put=509f376ad7a956093f0d3530 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: rpb=14240%3D1%2612224%3D1%266073%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%2612224%3D25077%2C0%2C1%2C%2C%266073%3D25077%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd9509f376250cba8fe319b9e^1^1352611682^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352611682^1352611682; rdk15=0; ses15=3346^1; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352611682^1352611682; put_1430=4f23850b-2d86-4d2b-967c-6e2b44b7a3a7; put_1986=5858721859426781856; put_2494=44cce06264c94b51b5abb1abcee401a0; put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; put_1185=4501792861255415045; put_2530=9148197784017056044; put_2025=36d38a53-c3d8-478c-8207-429b8fcbff8f; put_2100=usr3fe6c6b4baa94795

HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sun, 11 Nov 2012 05:28:10 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rpb=14240%3D1%2612224%3D1%266073%3D1%265157%3D1; expires=Tue, 11-Dec-2012 05:28:10 GMT; path=/; domain=.rubiconproject.com
rpx=14240%3D24447%2C0%2C1%2C%2C%2612224%3D25077%2C0%2C1%2C%2C%266073%3D25077%2C0%2C1%2C%2C%265157%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:28:10 GMT; path=/; domain=.pixel.rubiconproject.com
put_2021=509f376ad7a956093f0d3530; expires=Tue, 11-Dec-2012 05:28:10 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=9047
Connection: Keep-Alive

GET /bh/rtset?do=add&pid=536088&ev=4611827003271285241&rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=ffffffffffffffff HTTP/1.1

Host: bh.contextweb.com

GET /bh/rtset?do=add&pid=536088&ev=4611827003271285241&rurl=http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb%26can=ffffffffffffffff HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: V=PRQ8DoFfq5J8; pb_rtb_ev=2-536088.4611827003271285241.0.0.1352611686608

HTTP/1.1 302 Moved Temporarily

Content-Type: text/html;charset=ISO-8859-1

Cache-Control: private, max-age=0, no-cache, no-store
Content-Language: en-US
CW-Server: ip-10-78-187-217
Date: Sun, 11 Nov 2012 05:28:10 GMT
Expires: -1
Location: http://matcher-cwb.bidder7.mookie1.com/do-association?return=ctxweb&can=ffffffffffffffff
P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
Server: GlassFish v3
Set-Cookie: V=PRQ8DoFfq5J8; Domain=.contextweb.com; Expires=Wed, 06-Nov-2013 05:28:11 GMT; Path=/
pb_rtb_ev=2-536088.4611827003271285241.0.0.1352611691133; Domain=.contextweb.com; Expires=Mon, 11-Nov-2013 05:28:11 GMT; Path=/
Content-Length: 242
Connection: keep-alive

GET /tap.php?v=7259&nid=2211&put=4611827003271285241&expires=1 HTTP/1.1

Host: pixel.rubiconproject.com

GET /tap.php?v=7259&nid=2211&put=4611827003271285241&expires=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://tap2-cdn.rubiconproject.com/partner/scripts/rubicon/emily.html?rtb_ext=1&pc=3196/3346&geo=eu&co=no
Cookie: rpb=14240%3D1%2612224%3D1%266073%3D1%265157%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%2612224%3D25077%2C0%2C1%2C%2C%266073%3D25077%2C0%2C1%2C%2C%265157%3D25077%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd9509f376250cba8fe319b9e^1^1352611682^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; rdk2=0; ses2=3346^1; csi2=3204661.js^1^1352611682^1352611682; rdk15=0; ses15=3346^1; rdk9=0; ses9=3346^1; csi9=3165520.js^1^1352611682^1352611682; put_1430=4f23850b-2d86-4d2b-967c-6e2b44b7a3a7; put_1986=5858721859426781856; put_2494=44cce06264c94b51b5abb1abcee401a0; put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; put_1185=4501792861255415045; put_2530=9148197784017056044; put_2025=36d38a53-c3d8-478c-8207-429b8fcbff8f; put_2100=usr3fe6c6b4baa94795; put_2021=509f376ad7a956093f0d3530

HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sun, 11 Nov 2012 05:28:11 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rpb=14240%3D1%2612224%3D1%266073%3D1%265157%3D1%267259%3D1; expires=Tue, 11-Dec-2012 05:28:11 GMT; path=/; domain=.rubiconproject.com
rpx=14240%3D24447%2C0%2C1%2C%2C%2612224%3D25077%2C0%2C1%2C%2C%266073%3D25077%2C0%2C1%2C%2C%265157%3D25077%2C0%2C1%2C%2C%267259%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:28:11 GMT; path=/; domain=.pixel.rubiconproject.com
put_2211=4611827003271285241; expires=Mon, 12-Nov-2012 05:28:11 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=8834
Connection: Keep-Alive

GET /tap.php?v=4210&nid=1523&expires=10&put=8392183a-ce3e-47d2-8ae8-9eaa6621c498 HTTP/1.1

Host: pixel.rubiconproject.com

GET /tap.php?v=4210&nid=1523&expires=10&put=8392183a-ce3e-47d2-8ae8-9eaa6621c498 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: rpb=14240%3D1%2612224%3D1%266073%3D1%265157%3D1%267259%3D1; rpx=14240%3D24447%2C0%2C1%2C%2C%2612224%3D25077%2C0%2C1%2C%2C%266073%3D25077%2C0%2C1%2C%2C%265157%3D25077%2C0%2C1%2C%2C%267259%3D25077%2C0%2C1%2C%2C; put_2676=paebqcWa9Kg4ukszB6hDMjPkTESS5L7Q0; ruid=592dbbd9509f376250cba8fe319b9e^1^1352611682^1355524350; rsid=CMuaRCv5pJNDF6DvZ1ICzq5oY7KOhR5ysPrTF3TgwSdTMNyQUnH5IIEPHOE+m84ysrYgoXFgoXPJHI4vGO0+PKtEzZ46Pj6Jasez7MjyEe1TDw==; rdk=3196/3346; ses2=3346^1; csi2=3204661.js^1^1352611682^1352611682; ses15=3346^1; ses9=3346^1; csi9=3165520.js^1^1352611682^1352611682; put_1430=4f23850b-2d86-4d2b-967c-6e2b44b7a3a7; put_1986=5858721859426781856; put_2494=44cce06264c94b51b5abb1abcee401a0; put_2181=CAESEHb10AvLIOUdvYC_4Xf0C8w; put_1185=4501792861255415045; put_2530=9148197784017056044; put_2025=36d38a53-c3d8-478c-8207-429b8fcbff8f; put_2100=usr3fe6c6b4baa94795; put_2021=509f376ad7a956093f0d3530; put_2211=4611827003271285241

HTTP/1.1 200 OK

Content-Type: image/gif

Date: Sun, 11 Nov 2012 05:28:13 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rpb=14240%3D1%2612224%3D1%266073%3D1%265157%3D1%267259%3D1%264210%3D1; expires=Tue, 11-Dec-2012 05:28:13 GMT; path=/; domain=.rubiconproject.com
rpx=14240%3D24447%2C0%2C1%2C%2C%2612224%3D25077%2C0%2C1%2C%2C%266073%3D25077%2C0%2C1%2C%2C%265157%3D25077%2C0%2C1%2C%2C%267259%3D25077%2C0%2C1%2C%2C%264210%3D25077%2C0%2C1%2C%2C; expires=Tue, 11-Dec-2012 05:28:13 GMT; path=/; domain=.pixel.rubiconproject.com
put_1523=8392183a-ce3e-47d2-8ae8-9eaa6621c498; expires=Wed, 21-Nov-2012 05:28:13 GMT; path=/; domain=.rubiconproject.com
Content-Length: 49
Keep-Alive: timeout=30, max=8802
Connection: Keep-Alive

GET /setuid?entity=17&code=8392183a-ce3e-47d2-8ae8-9eaa6621c498 HTTP/1.1

Host: ib.adnxs.com

GET /setuid?entity=17&code=8392183a-ce3e-47d2-8ae8-9eaa6621c498 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: uuid2=5858721859426781856; anj=Kfu=8fG3x=Cxrx)0s]#%2L_'x%SEV/hnKu94FV-*8R1TX_/h9oD*qpI#FdgHS0R!o)0VpiAg1-=; sess=1; icu=ChIIlroHEAoYASABKAEw4u78hAUQ4u78hAUYAA..

HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Set-Cookie: uuid2=5858721859426781856; path=/; expires=Sat, 09-Feb-2013 05:28:13 GMT; domain=.adnxs.com; HttpOnly
sess=1; path=/; expires=Mon, 12-Nov-2012 05:28:13 GMT; domain=.adnxs.com; HttpOnly
anj=Kfu=8fG68%Cxrx)0s]#%2L_'x%SEV/hnJPh4FV-*8R1TX_/h9oD*qpI#Fdh+7@te5Q)#:$I%l2M!4n9gm_-[Z; path=/; expires=Sat, 09-Feb-2013 05:28:13 GMT; domain=.adnxs.com; HttpOnly
Content-Length: 43
Date: Sun, 11 Nov 2012 05:28:13 GMT

GET /adscores/g.pixel?sid=9232829800 HTTP/1.1

Host: adadvisor.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html

HTTP/1.1 302 Moved Temporarily

HTTP/1.1 302 Moved Temporarily

Date: Sun,  11 Nov 2012 05:28:13 GMT
Connection: close
Server: AAWebServer
P3P: policyref="http://www.adadvisor.net/w3c/p3p.xml",CP="NOI NID"
Content-Length: 0
Location: http://i.w55c.net/d.gif?t=4&ei=targus&id=7c5d7c864bda4aeaafe2ae21fc29867b&t.score=000&t.zip=&t.in1.age=&t.in1.gender=&t.in1.timestamp=&t.in2.age=&t.in2.gender=&t.in2.timestamp=

GET /adserver/vdi/830697?r=http%3A%2F%2Fi.w55c.net%2Fm.gif%3Fid%3D8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33%26ei%3DADBRITE%26cver%3D1%26euid%3D&d=8392183a-ce3e-47d2-8ae8-9eaa6621c498 HTTP/1.1

Host: ads.adbrite.com

GET /adserver/vdi/830697?r=http%3A%2F%2Fi.w55c.net%2Fm.gif%3Fid%3D8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33%26ei%3DADBRITE%26cver%3D1%26euid%3D&d=8392183a-ce3e-47d2-8ae8-9eaa6621c498 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html

HTTP/1.1 301 Moved Permanently

HTTP/1.1 301 Moved Permanently

Accept-Ranges: none
Cache-Control: no-cache, no-store, must-revalidate
Date: Sun, 11 Nov 2012 05:28:13 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Location: http://i.w55c.net/m.gif?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&ei=ADBRITE&cver=1&euid=MTY4MzYyMTczeDAuOTA0IDEzNTI2MTE2OTN4LTExMzU0MjI2NjA
P3P: policyref="http://files.adbrite.com/w3c/p3p.xml",CP="NOI PSA PSD OUR IND UNI NAV DEM STA OTC"
Server: XPEHb/1.2
Set-Cookie: Apache="168362173x0.904+1352611693x-1135422660"; path=/; domain=.adbrite.com; expires=Sat, 06-Nov-2032 05:28:13 GMT
rb2=CjUKBjgzMDY5NxjQrse2wgEiJDgzOTIxODNhLWNlM2UtNDdkMi04YWU4LTllYWE2NjIxYzQ5OBAB; path=/; domain=.adbrite.com; expires=Sat, 09-Feb-2013 05:28:13 GMT
Content-Length: 0

GET /fr/u.php?p=441981302501808&m=8392183a-ce3e-47d2-8ae8-9eaa6621c498 HTTP/1.1

Host: www.facebook.com

GET /fr/u.php?p=441981302501808&m=8392183a-ce3e-47d2-8ae8-9eaa6621c498 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html

HTTP/1.1 302 Found

Content-Type: text/html; charset=utf-8

Cache-Control: public, max-age=0
Date: Sat, 10 Nov 2012 21:28:13 PST
Expires: Sat, 10 Nov 2012 21:28:13 PST
Location: http://i.w55c.net/rs?id=d777fecd6cb849b4bab0bfe71d57747a&t=product&name=FBX_NotMatched
Pragma: public
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-FB-Debug: dd+Hss/UQT8gGEmow4MjnX5DAtY4FMKqQvo5xh926zk=
Connection: keep-alive
Content-Length: 0

GET /360787.gif?partner_uid=8392183a-ce3e-47d2-8ae8-9eaa6621c498 HTTP/1.1

Host: idsync.rlcdn.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html

HTTP/1.1 302 Found

HTTP/1.1 302 Found

Cache-Control: no-cache, no-store, no-cache, no-store
Date: Sun, 11 Nov 2012 05:28:13 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://idsync.rlcdn.com/360787.gif?redirect=1&rl=72b6c94279fc98638636f0f282df53416faffafad81481c47bf36610712a32555228938b27be44f2f886e0c959d65286815e976a1799d4dd
P3P: CP: "NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE", CP: "NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE"
Set-Cookie: ck1=ck1;Domain=.rlcdn.com;Expires=Fri, 10-May-2013 05:28:09 GMT
Content-Length: 0
Connection: keep-alive

GET /e/dataxu_sync.xgi?na_exid=8392183a-ce3e-47d2-8ae8-9eaa6621c498 HTTP/1.1

Host: e.nexac.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html

HTTP/1.1 302 Found

Content-Type: text/html

Expires: Wed Sep 15 09:14:42 MDT 2010
Pragma: no-cache
P3P: policyref="http://www.nextaction.net/P3P/PolicyReferences.xml", CP="NOI DSP COR NID CURa ADMa DEVa TAIo PSAo PSDo HISa OUR DELa SAMo UNRo OTRo BUS UNI PUR COM NAV INT DEM STA PRE"
Set-Cookie: na_tc=Y; expires=Sat, 30-Nov-2013 22:00:00 GMT; domain=.nexac.com; path=/
Location: http://e.nexac.com/e/xrefid.xgi?na_exid=8392183a-ce3e-47d2-8ae8-9eaa6621c498&na_pid=2460
Content-Length: 0
Date: Sun, 11 Nov 2012 05:28:14 GMT
Server: lighttpd/1.4.31

GET /rum?cm_dsp_id=47&expiration=30&external_user_id=8392183a-ce3e-47d2-8ae8-9eaa6621c498 HTTP/1.1

Host: r.casalemedia.com

GET /rum?cm_dsp_id=47&expiration=30&external_user_id=8392183a-ce3e-47d2-8ae8-9eaa6621c498 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html

HTTP/1.1 200 OK

Content-Type: image/gif

Server: Apache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Expires: Sun, 11 Nov 2012 05:28:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 11 Nov 2012 05:28:14 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: CMID=c4slv63LtdAAAHsIc6IAAABe;domain=casalemedia.com;path=/;expires=Mon, 11 Nov 2013 05:28:14 GMT
CMPS=066;domain=casalemedia.com;path=/;expires=Sat, 09 Feb 2013 05:28:14 GMT
CMPP=013;domain=casalemedia.com;path=/;expires=Sat, 09 Feb 2013 05:28:14 GMT
CMRUM2=2f0000001e8392183a-ce3e-47d2-8ae8-9eaa6621c498;domain=casalemedia.com;path=/;expires=Mon, 11 Nov 2013 05:28:14 GMT
CMST=UJ83blCfN24A;domain=casalemedia.com;path=/;expires=Mon, 12 Nov 2012 05:28:14 GMT
CMSC=UJ83bg**;domain=casalemedia.com;path=/;
CMDD=;domain=casalemedia.com;path=/;expires=Mon, 12 Nov 2012 05:28:14 GMT

GET /s/1x1.gif?id=2g2vzVAguJwV%2B%2B7c4ibN%2Bc6cwnE%3D HTTP/1.1

Host: pix.bit.ly

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: _1056=1

HTTP/1.1 200 OK

Content-Type: image/gif

Cache-Control: public
Date: Sun, 11 Nov 2012 05:28:14 GMT
Etag: "69a45cc1c6776232fc42b5f36986a69da596d501"
Last-Modified: Sat, 28 Jul 2012 03:10:45 GMT
Server: nginx
Content-Length: 52
Connection: keep-alive

GET /pixel.gif/8392183a-ce3e-47d2-8ae8-9eaa6621c498 HTTP/1.1

Host: dx3723.tinyurl.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html

HTTP/1.1 200 OK

Content-Type: image/gif

Accept-Ranges: bytes
Etag: "851148392"
Last-Modified: Tue, 12 Jul 2011 17:09:05 GMT
Content-Length: 43
Connection: close
Date: Sun, 11 Nov 2012 05:28:14 GMT
Server: TinyURL/1.6

GET /red/usync?pid=5&puid=8392183a-ce3e-47d2-8ae8-9eaa6621c498 HTTP/1.1

Host: su.addthis.com

GET /red/usync?pid=5&puid=8392183a-ce3e-47d2-8ae8-9eaa6621c498 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html

HTTP/1.1 200 OK

Content-Type: image/png

Server: Apache-Coyote/1.1
Set-Cookie: di=%7B%225%22%3A%228392183a-ce3e-47d2-8ae8-9eaa6621c498%22%7D..; Domain=.addthis.com; Expires=Tue, 11-Nov-2014 05:28:14 GMT; Path=/
uid=509f376edbc89ec7; Domain=.addthis.com; Expires=Tue, 11-Nov-2014 05:28:14 GMT; Path=/
P3P: policyref="/w3c/p3p.xml", CP="NON ADM OUR DEV IND COM STA"
Content-Length: 67
Date: Sun, 11 Nov 2012 05:28:14 GMT
Connection: close

GET /e/xrefid.xgi?na_exid=8392183a-ce3e-47d2-8ae8-9eaa6621c498&na_pid=2460 HTTP/1.1

Host: e.nexac.com

GET /e/xrefid.xgi?na_exid=8392183a-ce3e-47d2-8ae8-9eaa6621c498&na_pid=2460 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cti.w55c.net/ct/rubicon-cms2.html
Cookie: na_tc=Y

HTTP/1.1 200 OK

Content-Type: image/gif

Expires: Wed Sep 15 09:14:42 MDT 2010
Pragma: no-cache
P3P: policyref="http://www.nextaction.net/P3P/PolicyReferences.xml", CP="NOI DSP COR NID CURa ADMa DEVa TAIo PSAo PSDo HISa OUR DELa SAMo UNRo OTRo BUS UNI PUR COM NAV INT DEM STA PRE"
Set-Cookie: na_tc=Y; expires=Sat, 30-Nov-2013 22:00:00 GMT; domain=.nexac.com; path=/
X-Powered-By: Jigawatts
Content-Length: 43
Date: Sun, 11 Nov 2012 05:28:14 GMT
Server: lighttpd/1.4.31

GET /afcioc15o0sg/4p5wab4oqodaj44/KMPlayerPortable_3.4.0.59_azo.exe HTTP/1.1

Host: 199.91.152.35

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

HTTP/1.1 302 Found

HTTP/1.1 302 Found

Location: http://www.mediafire.com/?4p5wab4oqodaj44
Connection: Close

GET /images/pixel.gif HTTP/1.1

Host: spe.atdmt.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1
Cookie: AA002=1350344862-22301988; MUID=28A467A70F8D6B9C1F16645D0C8D6BFA